$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141922.roa File: AS141922.roa (raw, json) Hash identifier: b0kN6jm0XWN46JAqY8CW09L5u8u9bf30Vb9wDDvUtXI= Subject key identifier: 5B:E6:42:79:18:B7:ED:DC:75:9A:67:EA:A5:A8:F6:E3:26:D4:8E:6C Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3E4D80109CECCB89509A3BDC510E111A342F289E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141922.roa Signing time: Wed 28 Feb 2024 07:23:53 +0000 ROA not before: Wed 28 Feb 2024 07:18:53 +0000 ROA not after: Wed 26 Feb 2025 07:23:53 +0000 asID: 141922 IP address blocks: 103.165.150.0/23 maxlen: 24 180.94.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 10:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:4d:80:10:9c:ec:cb:89:50:9a:3b:dc:51:0e:11:1a:34:2f:28:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 28 07:18:53 2024 GMT Not After : Feb 26 07:23:53 2025 GMT Subject: CN=5BE6427918B7EDDC759A67EAA5A8F6E326D48E6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4f:dc:93:92:e9:b3:1c:d4:8c:c2:86:e0:aa: 8d:01:81:6b:68:30:e5:b2:a4:85:ad:a5:45:ec:de: 85:c3:db:4a:7b:01:81:7e:c7:f0:ad:4f:c6:fe:44: bc:ea:92:73:0a:7e:c5:9f:79:37:5e:d0:91:9d:5d: d2:87:31:40:64:cb:04:4c:eb:4e:48:6c:da:db:ad: b3:89:74:51:83:95:72:01:d1:74:fd:31:f9:86:5e: 3e:78:54:54:b3:47:a3:51:bf:b0:d9:3f:05:dd:a6: fe:14:7b:89:d4:c8:07:00:a1:ab:9b:ae:00:aa:1e: 16:5e:3c:51:be:b0:ed:2e:62:a6:5a:35:00:45:8d: 96:4a:d1:c0:2e:6c:bf:9e:14:e7:05:b7:4a:2f:a8: ba:c7:1b:42:fd:97:b2:d3:1a:da:63:5d:ac:a8:0a: 3f:7e:1f:42:a4:43:8f:72:01:d7:b4:49:53:36:4d: 1f:30:37:2f:47:62:64:fb:a2:1f:e6:c9:89:9d:1f: e2:27:7d:ad:94:42:46:68:d5:35:77:bd:93:df:dd: e1:98:76:f4:6f:bc:44:a2:31:49:05:d7:4d:0f:93: 79:3b:60:4e:7d:ee:6d:b1:1b:cc:e6:97:6e:1f:7e: 56:48:12:e1:57:d1:aa:91:25:a6:d2:71:89:a8:11: ef:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E6:42:79:18:B7:ED:DC:75:9A:67:EA:A5:A8:F6:E3:26:D4:8E:6C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141922.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.165.150.0/23 180.94.12.0/23 Signature Algorithm: sha256WithRSAEncryption 53:52:a0:dc:24:16:fe:4b:7c:2a:ee:e2:71:6b:c2:1f:9e:51: 53:c6:5a:3e:45:6a:9d:1e:36:0b:9a:37:01:bb:ef:9e:1e:e4: dd:a8:75:b7:92:cb:c3:b0:e9:dc:8c:27:e8:50:d8:4a:83:b4: 4c:a6:fc:c0:c9:a2:e7:31:c2:32:14:bb:60:2c:6d:8b:74:71: 37:c9:7c:d9:2e:46:b9:bb:c8:a1:25:9a:38:e7:c8:e4:6d:40: 21:7a:d4:b9:1e:e0:e7:d0:96:af:c7:9e:63:8e:18:10:bd:1b: 98:d4:64:00:7b:32:c1:36:40:5d:c5:57:e1:2e:b0:db:89:cb: 46:cf:3f:d2:b6:90:ef:76:c1:d5:ca:89:23:34:ed:5f:15:6f: eb:53:39:93:07:5f:c8:9a:1c:a5:fe:10:9e:9c:7c:7e:e5:41: 1e:6f:4b:13:c9:f8:9b:a2:37:b5:17:59:71:33:96:4b:62:07: 9c:ea:bf:78:10:c8:f4:a4:c8:a4:ae:0b:78:7d:21:34:b3:1a: b0:74:51:56:36:a3:e4:dc:0d:0c:b1:0c:91:ac:fd:62:7d:50: 12:2d:4a:84:5b:5e:c4:0a:69:7e:5c:c3:5c:61:63:d2:c5:15: ce:83:da:16:f2:6d:62:0e:6c:91:63:d1:9b:10:06:b6:fd:a3: 72:64:03:89 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUPk2AEJzsy4lQmjvcUQ4RGjQvKJ4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIyODA3MTg1M1oX DTI1MDIyNjA3MjM1M1owMzExMC8GA1UEAxMoNUJFNjQyNzkxOEI3RUREQzc1OUE2 N0VBQTVBOEY2RTMyNkQ0OEU2QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJlP3JOS6bMc1IzChuCqjQGBa2gw5bKkha2lRezehcPbSnsBgX7H8K1Pxv5E vOqScwp+xZ95N17QkZ1d0ocxQGTLBEzrTkhs2tuts4l0UYOVcgHRdP0x+YZePnhU VLNHo1G/sNk/Bd2m/hR7idTIBwChq5uuAKoeFl48Ub6w7S5iplo1AEWNlkrRwC5s v54U5wW3Si+ouscbQv2XstMa2mNdrKgKP34fQqRDj3IB17RJUzZNHzA3L0diZPui H+bJiZ0f4id9rZRCRmjVNXe9k9/d4Zh29G+8RKIxSQXXTQ+TeTtgTn3ubbEbzOaX bh9+VkgS4VfRqpElptJxiagR730CAwEAAaOCAdYwggHSMB0GA1UdDgQWBBRb5kJ5 GLft3HWaZ+qlqPbjJtSObDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTkyMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAWellgMEAbReDDANBgkqhkiG9w0BAQsFAAOCAQEAU1Kg3CQW/kt8 Ku7icWvCH55RU8ZaPkVqnR42C5o3Abvvnh7k3ah1t5LLw7Dp3Iwn6FDYSoO0TKb8 wMmi5zHCMhS7YCxti3RxN8l82S5GubvIoSWaOOfI5G1AIXrUuR7g59CWr8eeY44Y EL0bmNRkAHsywTZAXcVX4S6w24nLRs8/0raQ73bB1cqJIzTtXxVv61M5kwdfyJoc pf4Qnpx8fuVBHm9LE8n4m6I3tRdZcTOWS2IHnOq/eBDI9KTIpK4LeH0hNLMasHRR Vjaj5NwNDLEMkaz9Yn1QEi1KhFtexAppflzDXGFj0sUVzoPaFvJtYg5skWPRmxAG tv2jcmQDiQ== -----END CERTIFICATE-----Generated at Tue May 7 09:40:58 2024 by rpki-client on console-fra.rpki-client.org