$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141919.roa File: AS141919.roa (raw, json) Hash identifier: zlyPo91OkPStfQqamZJlLDuf+bJCtx44gYBKv4SAhhE= Subject key identifier: D2:E3:F3:8D:70:8D:17:31:F4:BB:A4:EA:13:71:2C:D6:98:FA:23:AC Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1C0D7219CC54722A8E78D3CD8C7E89DC1D81ABA6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141919.roa Signing time: Tue 09 Jan 2024 04:00:02 +0000 ROA not before: Tue 09 Jan 2024 03:55:02 +0000 ROA not after: Tue 07 Jan 2025 04:00:02 +0000 asID: 141919 IP address blocks: 103.165.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 05:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:0d:72:19:cc:54:72:2a:8e:78:d3:cd:8c:7e:89:dc:1d:81:ab:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:02 2024 GMT Not After : Jan 7 04:00:02 2025 GMT Subject: CN=D2E3F38D708D1731F4BBA4EA13712CD698FA23AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f7:02:2e:7f:16:e9:15:1f:62:aa:d4:ac:dd: a2:9b:db:ee:47:b0:33:7e:75:fe:60:f2:2d:41:9d: ac:ca:f8:5e:d9:d8:35:9f:89:a6:fb:11:eb:f0:f0: 80:3f:35:78:6e:86:be:e5:04:41:c7:7b:c1:2d:f0: 05:7c:49:b2:b4:d5:ae:fa:19:c0:b2:24:29:68:57: b1:3d:9d:3f:61:cd:12:fc:38:55:a6:10:7e:3b:49: 81:ac:b1:d3:52:6f:9c:25:25:43:df:1d:30:d1:0a: 6f:ab:02:19:59:03:34:fa:db:8c:93:48:e5:62:7e: 28:e1:59:cf:60:69:1a:3a:f8:16:42:0f:6d:39:3c: eb:e1:84:cd:54:41:b9:00:e5:fa:54:8e:c6:24:5d: 71:09:b7:ab:f5:7d:23:ab:a7:59:7e:7c:27:55:74: cb:83:4f:0e:7c:a3:ab:57:3f:e7:d2:32:25:e1:e7: 4a:a8:ad:62:05:7b:c0:88:45:a3:c3:00:48:06:dd: db:30:95:dd:10:60:2f:af:24:68:3d:90:c7:39:87: 19:b3:32:82:e3:a3:c9:65:78:c4:68:ef:1f:ca:14: 67:11:34:52:b1:55:03:bc:5c:eb:10:7c:34:b8:8d: 72:60:af:4a:6a:fe:2c:00:a7:40:11:ee:48:6a:6d: 5a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E3:F3:8D:70:8D:17:31:F4:BB:A4:EA:13:71:2C:D6:98:FA:23:AC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141919.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.165.153.0/24 Signature Algorithm: sha256WithRSAEncryption 76:88:88:7e:a4:10:4d:b9:0d:11:71:ad:60:91:d0:5d:37:73: 80:b9:d2:f2:47:d3:c9:52:2a:72:59:ca:e6:10:72:14:04:16: 1c:bc:c0:ba:a5:50:ae:11:b9:99:5d:2e:9f:f8:0b:90:8d:d3: 3a:b8:1d:f8:56:ff:db:ac:03:4f:2d:e4:d9:42:13:a0:13:e3: 3d:35:a9:b8:d3:e4:c0:4e:c2:3e:b6:49:38:43:ce:8c:d1:af: 5b:52:79:00:87:25:03:01:ab:36:aa:24:ef:19:9a:12:5a:23: 08:6c:1e:ab:69:e8:38:92:eb:24:a8:09:fe:26:c1:38:af:c3: 46:4a:6b:2f:58:50:c6:86:2e:42:ef:4a:57:9d:b6:b9:5b:56: 16:2d:3f:bb:06:0f:71:8e:e8:cb:60:52:60:0e:f6:84:11:61: 18:8e:90:47:3c:e3:97:37:a6:93:eb:99:96:c6:ca:dd:70:c4: fe:65:da:b8:ac:2b:d3:95:97:ce:00:dd:1f:03:93:1b:57:d8: c7:52:12:1b:d4:24:e7:7d:14:a5:dd:e3:b0:b6:bc:64:ac:01: 78:86:91:1e:00:d5:c1:7e:92:72:c3:1b:08:44:bc:62:e0:32: 66:e2:ea:a7:19:01:fd:48:38:79:39:52:5d:31:82:09:01:36: 9e:45:73:80 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUHA1yGcxUciqOeNPNjH6J3B2Bq6YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUwMloX DTI1MDEwNzA0MDAwMlowMzExMC8GA1UEAxMoRDJFM0YzOEQ3MDhEMTczMUY0QkJB NEVBMTM3MTJDRDY5OEZBMjNBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMv3Ai5/FukVH2Kq1Kzdopvb7kewM351/mDyLUGdrMr4XtnYNZ+JpvsR6/Dw gD81eG6GvuUEQcd7wS3wBXxJsrTVrvoZwLIkKWhXsT2dP2HNEvw4VaYQfjtJgayx 01JvnCUlQ98dMNEKb6sCGVkDNPrbjJNI5WJ+KOFZz2BpGjr4FkIPbTk86+GEzVRB uQDl+lSOxiRdcQm3q/V9I6unWX58J1V0y4NPDnyjq1c/59IyJeHnSqitYgV7wIhF o8MASAbd2zCV3RBgL68kaD2QxzmHGbMyguOjyWV4xGjvH8oUZxE0UrFVA7xc6xB8 NLiNcmCvSmr+LACnQBHuSGptWpMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTS4/ON cI0XMfS7pOoTcSzWmPojrDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTkxOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGelmTANBgkqhkiG9w0BAQsFAAOCAQEAdoiIfqQQTbkNEXGtYJHQ XTdzgLnS8kfTyVIqclnK5hByFAQWHLzAuqVQrhG5mV0un/gLkI3TOrgd+Fb/26wD Ty3k2UIToBPjPTWpuNPkwE7CPrZJOEPOjNGvW1J5AIclAwGrNqok7xmaElojCGwe q2noOJLrJKgJ/ibBOK/DRkprL1hQxoYuQu9KV522uVtWFi0/uwYPcY7oy2BSYA72 hBFhGI6QRzzjlzemk+uZlsbK3XDE/mXauKwr05WXzgDdHwOTG1fYx1ISG9Qk530U pd3jsLa8ZKwBeIaRHgDVwX6ScsMbCES8YuAyZuLqpxkB/Ug4eTlSXTGCCQE2nkVz gA== -----END CERTIFICATE-----Generated at Thu May 2 23:02:01 2024 by rpki-client on console-fra.rpki-client.org