$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141947.roa File: AS141947.roa (raw, json) Hash identifier: 2BEy+A5+X0V8WXrdaOPqWy2NTCZlBvLaeB4oic6jqUs= Subject key identifier: 8B:3A:99:AA:61:F1:81:12:06:7A:86:35:3E:97:15:AB:77:00:D4:61 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2554030513492B3950A45DFA26C95522A9E31282 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141947.roa Signing time: Wed 08 May 2024 04:00:00 +0000 ROA not before: Wed 08 May 2024 03:55:00 +0000 ROA not after: Wed 07 May 2025 04:00:00 +0000 asID: 141947 IP address blocks: 2001:df2:6c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:54:03:05:13:49:2b:39:50:a4:5d:fa:26:c9:55:22:a9:e3:12:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 8 03:55:00 2024 GMT Not After : May 7 04:00:00 2025 GMT Subject: CN=8B3A99AA61F18112067A86353E9715AB7700D461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e6:99:4e:ec:ce:6c:ac:f0:cb:20:5d:9f:d9: c7:e9:56:dc:ba:cb:e2:c2:a7:aa:9b:aa:b3:bb:03: 1e:cb:f3:3e:ab:ad:c2:bd:3d:43:88:60:d3:a6:37: aa:a9:fb:31:6e:1c:a8:a7:d1:f6:bd:f1:3e:cc:2a: 0a:e3:93:24:83:78:fa:6f:42:db:3b:14:db:f5:0a: 55:37:a0:e5:e9:8b:0c:95:22:5c:90:25:81:48:42: 69:b0:7a:90:d1:0a:84:fa:e3:f1:48:27:3f:4d:58: 6b:da:dc:33:e7:34:b5:8f:03:7b:ef:00:71:96:7d: be:e8:6d:0b:c5:a4:dc:76:8d:4a:3d:38:0f:49:df: 3c:af:c0:c8:18:5f:b4:20:2b:4d:a5:26:89:e3:42: 15:68:16:55:e3:34:cf:0e:1d:30:43:dd:03:02:86: 7f:fb:7b:74:98:b5:30:51:a2:2f:a8:df:88:be:5c: c4:21:6c:01:0f:e1:e2:36:b7:ce:29:b7:b0:0a:03: db:16:36:a6:44:7a:cb:26:47:26:57:18:7d:fb:6e: 44:f5:bc:a4:18:7d:57:06:a4:9f:ae:2e:18:9f:9e: 42:a7:32:a1:ba:5d:c2:03:28:f5:17:16:99:77:6a: f8:d8:48:c5:41:01:b0:92:da:61:98:aa:61:b3:f2: 8f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3A:99:AA:61:F1:81:12:06:7A:86:35:3E:97:15:AB:77:00:D4:61 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141947.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:6c0::/48 Signature Algorithm: sha256WithRSAEncryption 9b:cf:a8:f9:23:87:f0:c5:21:2d:91:c1:bb:24:7f:66:56:84: 22:0b:1d:8a:ec:2d:08:74:bf:cf:c6:46:65:08:f7:3b:51:59: d3:a6:4c:00:f9:9a:cd:cf:b2:b9:a9:53:24:2f:5e:80:08:a9: a9:6c:50:15:e5:52:5c:b3:99:55:cb:eb:88:96:2b:06:16:87: e3:d7:5b:24:23:6a:7e:d0:3f:4e:8f:ff:24:e4:74:1d:03:ed: 31:5f:27:23:f7:72:41:c1:fe:c8:d6:89:56:4b:58:e6:5f:c2: f9:85:48:1c:bc:d7:83:7b:03:2d:20:0b:a8:92:23:d6:8e:cc: 85:f6:6d:2f:79:1c:31:4b:2c:5c:a0:c6:b6:ce:43:55:fe:e6: d2:a2:3a:cd:ed:77:56:60:9e:cc:c7:26:8d:06:4f:5b:0b:0d: f5:81:98:75:01:9e:d6:24:54:60:02:b9:d1:d2:b6:97:dd:ca: 9e:f1:86:e1:92:3a:77:b9:c7:d3:77:f1:d5:26:e9:f1:f4:c2: a6:20:c6:bf:86:d7:74:b0:90:93:36:aa:6a:5b:ce:53:da:0f: da:15:f1:be:f9:df:81:4f:fd:7a:05:db:11:52:a5:14:84:ff: 1a:a7:70:22:39:6e:7f:84:5e:ab:ad:84:ed:5b:99:bf:b0:a3: ca:01:1b:0f -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUJVQDBRNJKzlQpF36JslVIqnjEoIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUwODAzNTUwMFoX DTI1MDUwNzA0MDAwMFowMzExMC8GA1UEAxMoOEIzQTk5QUE2MUYxODExMjA2N0E4 NjM1M0U5NzE1QUI3NzAwRDQ2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM7mmU7szmys8MsgXZ/Zx+lW3LrL4sKnqpuqs7sDHsvzPqutwr09Q4hg06Y3 qqn7MW4cqKfR9r3xPswqCuOTJIN4+m9C2zsU2/UKVTeg5emLDJUiXJAlgUhCabB6 kNEKhPrj8UgnP01Ya9rcM+c0tY8De+8AcZZ9vuhtC8Wk3HaNSj04D0nfPK/AyBhf tCArTaUmieNCFWgWVeM0zw4dMEPdAwKGf/t7dJi1MFGiL6jfiL5cxCFsAQ/h4ja3 zim3sAoD2xY2pkR6yyZHJlcYfftuRPW8pBh9Vwakn64uGJ+eQqcyobpdwgMo9RcW mXdq+NhIxUEBsJLaYZiqYbPyj1kCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBSLOpmq YfGBEgZ6hjU+lxWrdwDUYTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTk0Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfIGwDANBgkqhkiG9w0BAQsFAAOCAQEAm8+o+SOH8MUhLZHB uyR/ZlaEIgsdiuwtCHS/z8ZGZQj3O1FZ06ZMAPmazc+yualTJC9egAipqWxQFeVS XLOZVcvriJYrBhaH49dbJCNqftA/To//JOR0HQPtMV8nI/dyQcH+yNaJVktY5l/C +YVIHLzXg3sDLSALqJIj1o7MhfZtL3kcMUssXKDGts5DVf7m0qI6ze13VmCezMcm jQZPWwsN9YGYdQGe1iRUYAK50dK2l93KnvGG4ZI6d7nH03fx1Sbp8fTCpiDGv4bX dLCQkzaqalvOU9oP2hXxvvnfgU/9egXbEVKlFIT/GqdwIjluf4Req62E7VuZv7Cj ygEbDw== -----END CERTIFICATE-----Generated at Thu May 9 00:29:15 2024 by rpki-client on console-ams.rpki-client.org