$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141916.roa File: AS141916.roa (raw, json) Hash identifier: G1taULANd/fqWVNzROMRJrpuMTbvg0ErnbJb02tfw1A= Subject key identifier: 71:98:B1:32:1F:99:E0:1F:15:04:B0:36:1D:8A:FD:9A:11:F9:B1:4C Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 12B236F17E8F064C7E216ADAED9ADADDBA98F833 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141916.roa Signing time: Tue 09 Jan 2024 04:00:10 +0000 ROA not before: Tue 09 Jan 2024 03:55:10 +0000 ROA not after: Tue 07 Jan 2025 04:00:10 +0000 asID: 141916 IP address blocks: 103.164.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 10:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:b2:36:f1:7e:8f:06:4c:7e:21:6a:da:ed:9a:da:dd:ba:98:f8:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:10 2024 GMT Not After : Jan 7 04:00:10 2025 GMT Subject: CN=7198B1321F99E01F1504B0361D8AFD9A11F9B14C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:eb:44:b6:c3:31:2e:1f:bb:82:73:d8:06:17: 8c:3a:cb:c4:cb:9a:57:22:40:89:6f:93:b9:b6:a4: 02:3d:15:3b:f5:f7:cc:50:7b:2b:6a:3b:cd:72:ce: e5:dc:b3:6b:e0:88:3f:3b:cd:06:a7:c4:2f:be:a1: 4e:69:f9:d2:5c:26:37:46:90:82:07:9b:48:78:b5: 7f:14:40:50:3e:db:ca:84:bb:a4:d5:f5:82:f7:0e: c7:ed:ab:d1:53:ed:90:18:78:e4:b4:8f:64:0d:8c: 09:66:75:7c:2c:67:d0:75:5c:b8:66:f4:75:4c:66: 55:7e:65:74:31:b4:a1:ab:6d:dd:a6:b9:e5:7c:2a: d4:a8:fa:1a:0a:ed:66:4f:92:97:ba:47:50:f5:ca: ec:0f:4a:03:b7:38:73:fc:b0:48:5d:90:34:9f:56: 25:00:b0:03:53:32:48:e4:03:54:6d:af:bf:8a:3e: 39:5d:f6:76:da:94:df:d0:ec:61:4c:78:4b:2b:f2: 7f:c6:20:c1:49:9a:b0:6d:b8:8d:5b:a1:46:80:48: 86:a6:34:13:c1:07:7f:86:c5:46:4f:28:ef:88:ed: 0a:46:aa:70:ef:16:99:fa:7b:fc:59:79:c8:ec:95: 36:40:29:39:e6:8b:15:9e:84:fa:17:16:b0:0f:a6: 35:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:98:B1:32:1F:99:E0:1F:15:04:B0:36:1D:8A:FD:9A:11:F9:B1:4C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141916.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.235.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:fa:3f:dc:b5:5c:0c:8d:49:ad:92:ae:78:84:04:2d:c1:9c: 6e:7a:80:c0:94:7c:3d:3d:b4:66:ae:35:65:58:e8:3e:33:08: ea:91:c4:fb:36:ad:11:a6:f6:88:90:77:c3:a2:28:ce:8f:f6: 57:11:b8:a1:cd:01:b8:2d:3f:54:df:5a:b6:31:66:88:b2:d1: 15:73:b1:d0:14:d6:8c:61:e0:4b:72:94:6e:8b:38:f5:c9:16: 34:20:b3:40:78:2f:0f:7d:5b:d5:67:02:8c:96:c0:c7:51:36: 93:29:0f:54:6e:ca:10:2b:f3:ce:de:b7:1b:67:63:7d:78:60: 87:a6:7c:26:db:71:82:f7:75:e9:e4:f5:18:0c:03:ff:35:fa: 93:cd:e2:28:5a:6c:b9:d1:9b:3a:46:dd:e2:10:1c:d0:4a:b5: 7c:b8:9c:99:0e:11:73:22:e6:49:49:70:64:c9:44:9f:fb:52: ec:4b:6a:18:31:fc:90:2f:62:45:60:25:39:d8:81:c8:bc:31: a1:90:f6:ea:0b:4b:4b:c9:8e:a8:40:ca:39:e1:c4:3d:cd:ef: 83:99:34:d8:30:31:be:1d:f0:3c:7c:45:56:6e:f3:95:ba:e0: 36:6f:b9:c0:94:a2:97:e0:d8:83:63:ee:3f:31:88:9e:26:7c: b7:25:cf:c7 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUErI28X6PBkx+IWra7Zra3bqY+DMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUxMFoX DTI1MDEwNzA0MDAxMFowMzExMC8GA1UEAxMoNzE5OEIxMzIxRjk5RTAxRjE1MDRC MDM2MUQ4QUZEOUExMUY5QjE0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALTrRLbDMS4fu4Jz2AYXjDrLxMuaVyJAiW+TubakAj0VO/X3zFB7K2o7zXLO 5dyza+CIPzvNBqfEL76hTmn50lwmN0aQggebSHi1fxRAUD7byoS7pNX1gvcOx+2r 0VPtkBh45LSPZA2MCWZ1fCxn0HVcuGb0dUxmVX5ldDG0oatt3aa55Xwq1Kj6Ggrt Zk+Sl7pHUPXK7A9KA7c4c/ywSF2QNJ9WJQCwA1MySOQDVG2vv4o+OV32dtqU39Ds YUx4Syvyf8YgwUmasG24jVuhRoBIhqY0E8EHf4bFRk8o74jtCkaqcO8Wmfp7/Fl5 yOyVNkApOeaLFZ6E+hcWsA+mNS0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRxmLEy H5ngHxUEsDYdiv2aEfmxTDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTkxNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGek6zANBgkqhkiG9w0BAQsFAAOCAQEAbvo/3LVcDI1JrZKueIQE LcGcbnqAwJR8PT20Zq41ZVjoPjMI6pHE+zatEab2iJB3w6Iozo/2VxG4oc0BuC0/ VN9atjFmiLLRFXOx0BTWjGHgS3KUbos49ckWNCCzQHgvD31b1WcCjJbAx1E2kykP VG7KECvzzt63G2djfXhgh6Z8Jttxgvd16eT1GAwD/zX6k83iKFpsudGbOkbd4hAc 0Eq1fLicmQ4RcyLmSUlwZMlEn/tS7EtqGDH8kC9iRWAlOdiByLwxoZD26gtLS8mO qEDKOeHEPc3vg5k02DAxvh3wPHxFVm7zlbrgNm+5wJSil+DYg2PuPzGIniZ8tyXP xw== -----END CERTIFICATE-----Generated at Mon May 6 01:47:00 2024 by rpki-client on console-fra.rpki-client.org