$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141944.roa File: AS141944.roa (raw, json) Hash identifier: 9i3+ymb7vcO3tvD49OQmsuFk40Oc1EpDNLiwbByW3ls= Subject key identifier: DB:DE:4E:A4:81:81:BF:C7:90:22:EB:48:3C:2D:D1:D2:32:8E:84:53 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 748CDFE895615C27C1F487B9E125A6D5904B0042 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141944.roa Signing time: Tue 09 Jan 2024 04:00:24 +0000 ROA not before: Tue 09 Jan 2024 03:55:24 +0000 ROA not after: Tue 07 Jan 2025 04:00:24 +0000 asID: 141944 IP address blocks: 103.166.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 20:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:8c:df:e8:95:61:5c:27:c1:f4:87:b9:e1:25:a6:d5:90:4b:00:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:24 2024 GMT Not After : Jan 7 04:00:24 2025 GMT Subject: CN=DBDE4EA48181BFC79022EB483C2DD1D2328E8453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e6:ce:82:73:1c:bb:cf:52:ee:ca:71:7b:f7: 6f:0a:f0:c0:48:cb:24:35:d0:78:a8:70:14:4e:b7: 1e:d7:41:27:89:f5:3f:d3:b4:4b:9a:19:c8:f0:06: b9:c0:83:b5:5d:55:44:93:47:d6:f5:33:6d:b1:db: 97:e3:ce:56:33:65:8a:98:71:44:0b:89:b7:ca:76: fa:26:cc:41:41:d5:dd:d9:51:d7:05:37:c7:6c:20: 90:b1:34:a5:6a:be:ca:6e:9c:fa:e8:49:e4:ae:90: db:e3:bc:a1:a8:d0:d5:56:75:37:e5:71:c5:fc:73: 43:a8:2d:56:9f:06:5b:a2:27:e6:a5:57:7c:c2:47: cf:bf:52:14:6b:bd:4e:f8:ef:b4:b8:2d:97:bd:50: 17:f2:3a:77:2b:6c:65:c2:a1:00:11:03:c4:63:54: 4b:04:d7:03:23:af:9c:d6:76:d5:3f:cc:c9:4d:23: ae:a1:8a:43:8a:25:32:34:34:1d:46:31:05:2a:ec: 80:9d:cd:4f:ee:7e:c1:4d:16:2c:6d:a1:5d:61:3e: db:eb:b3:01:1e:4d:20:68:c6:33:7c:51:b3:e4:76: ad:c4:6c:b6:2d:39:0f:21:2e:c3:b8:c3:44:b7:e0: 16:33:7f:7a:f2:0b:08:46:3c:57:60:86:4c:23:a1: a4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:DE:4E:A4:81:81:BF:C7:90:22:EB:48:3C:2D:D1:D2:32:8E:84:53 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141944.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.134.0/24 Signature Algorithm: sha256WithRSAEncryption 28:87:13:91:be:84:45:00:11:30:06:32:76:5a:de:80:dd:2b: 44:c7:a1:b6:04:9a:78:17:4b:de:ad:8e:ae:89:fc:cd:a7:16: 4b:70:95:93:1d:cd:a0:b5:a4:f8:b8:08:64:16:0c:e2:99:c8: 04:c4:1c:8a:5b:38:37:25:a4:a7:51:cd:6c:d2:de:a0:e4:e5: b1:60:23:88:58:84:be:e8:73:c5:48:7a:77:08:94:eb:3f:01: cc:39:a0:68:59:31:e4:bc:f7:87:f3:b4:ab:66:c2:7e:c6:7a: b8:2a:1e:52:94:d1:52:a9:bc:2a:2f:ae:c3:1f:23:1f:be:94: 5e:75:a3:b8:1e:b7:ee:43:94:88:59:77:94:10:b1:af:45:af: 37:29:49:91:43:1a:6f:68:06:8e:43:72:83:21:dc:1c:5b:29: 01:8b:7e:ee:6f:6d:41:f6:60:d0:97:33:43:47:2c:67:59:3c: 02:47:93:6f:9e:6d:76:e2:8c:28:7b:cb:07:e4:29:25:71:65: 0f:4d:24:13:bb:e3:2a:c8:b1:a6:15:da:2e:d1:09:64:7c:e1: 98:b8:52:90:ef:ba:31:36:cb:e5:c8:1d:88:58:0b:f1:ff:08: 62:27:b0:b5:51:ca:7b:46:ff:6a:f6:eb:f1:c3:06:4d:93:97: ce:13:41:3f -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUdIzf6JVhXCfB9Ie54SWm1ZBLAEIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUyNFoX DTI1MDEwNzA0MDAyNFowMzExMC8GA1UEAxMoREJERTRFQTQ4MTgxQkZDNzkwMjJF QjQ4M0MyREQxRDIzMjhFODQ1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALXmzoJzHLvPUu7KcXv3bwrwwEjLJDXQeKhwFE63HtdBJ4n1P9O0S5oZyPAG ucCDtV1VRJNH1vUzbbHbl+POVjNliphxRAuJt8p2+ibMQUHV3dlR1wU3x2wgkLE0 pWq+ym6c+uhJ5K6Q2+O8oajQ1VZ1N+VxxfxzQ6gtVp8GW6In5qVXfMJHz79SFGu9 TvjvtLgtl71QF/I6dytsZcKhABEDxGNUSwTXAyOvnNZ21T/MyU0jrqGKQ4olMjQ0 HUYxBSrsgJ3NT+5+wU0WLG2hXWE+2+uzAR5NIGjGM3xRs+R2rcRsti05DyEuw7jD RLfgFjN/evILCEY8V2CGTCOhpNMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTb3k6k gYG/x5Ai60g8LdHSMo6EUzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTk0NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGemhjANBgkqhkiG9w0BAQsFAAOCAQEAKIcTkb6ERQARMAYydlre gN0rRMehtgSaeBdL3q2Oron8zacWS3CVkx3NoLWk+LgIZBYM4pnIBMQcils4NyWk p1HNbNLeoOTlsWAjiFiEvuhzxUh6dwiU6z8BzDmgaFkx5Lz3h/O0q2bCfsZ6uCoe UpTRUqm8Ki+uwx8jH76UXnWjuB637kOUiFl3lBCxr0WvNylJkUMab2gGjkNygyHc HFspAYt+7m9tQfZg0JczQ0csZ1k8AkeTb55tduKMKHvLB+QpJXFlD00kE7vjKsix phXaLtEJZHzhmLhSkO+6MTbL5cgdiFgL8f8IYiewtVHKe0b/avbr8cMGTZOXzhNB Pw== -----END CERTIFICATE-----Generated at Sat Apr 27 13:32:32 2024 by rpki-client on console-ams.rpki-client.org