$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141976.roa File: AS141976.roa (raw, json) Hash identifier: gOSZB/N6xxUrTJWViDeUD6MLnUpkLFT/5aussYYY7bU= Subject key identifier: BD:A1:E2:B2:9B:C7:F3:A2:3B:46:48:12:94:A2:8D:D1:A2:3D:DC:D1 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2BAF163AFF0C71E43ED602364AD6C7B4F775C50B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141976.roa Signing time: Tue 09 Jan 2024 04:00:07 +0000 ROA not before: Tue 09 Jan 2024 03:55:07 +0000 ROA not after: Tue 07 Jan 2025 04:00:07 +0000 asID: 141976 IP address blocks: 103.167.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:af:16:3a:ff:0c:71:e4:3e:d6:02:36:4a:d6:c7:b4:f7:75:c5:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:07 2024 GMT Not After : Jan 7 04:00:07 2025 GMT Subject: CN=BDA1E2B29BC7F3A23B46481294A28DD1A23DDCD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:cd:21:30:40:5e:f9:2e:28:3d:3a:ac:31:cb: 88:91:61:ce:63:c9:62:96:d6:7a:b1:70:fb:cf:1b: dd:d2:61:df:43:64:d1:d6:cd:64:ea:2b:09:6f:21: 4c:00:e7:c9:22:66:39:27:68:34:6b:1f:11:69:16: 76:51:5a:2a:75:06:d1:be:6d:d0:ce:77:d5:b7:c5: 32:5d:cf:38:d8:db:d3:62:16:47:f8:f5:95:fc:63: 7f:57:93:e2:06:84:85:bc:05:7a:58:88:e5:ff:43: 17:8a:d3:06:1e:61:71:76:ba:2a:39:67:4b:89:33: 23:9e:78:ea:95:ed:fb:0c:6f:7d:28:22:0e:f1:56: 41:96:bc:f3:77:0b:c0:8d:4c:62:b2:8a:f8:64:fd: 70:5f:bd:53:dc:b7:34:b9:53:36:e0:4b:30:8d:b7: c0:96:31:3c:c8:bd:f7:89:ca:4e:22:a1:9d:d8:c4: bc:4e:dc:ce:3f:c4:39:d0:81:2b:ec:a1:fd:68:e2: d6:96:7a:99:69:af:0a:8b:16:99:b5:d6:5b:36:28: 97:29:47:55:fe:e2:a8:38:92:cb:45:a1:28:9d:d6: 71:93:0d:ea:39:19:7b:70:d0:c1:61:8a:65:d7:a5: 02:ed:9d:8e:ca:64:d0:58:0a:cb:e7:50:f4:fe:92: 81:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A1:E2:B2:9B:C7:F3:A2:3B:46:48:12:94:A2:8D:D1:A2:3D:DC:D1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141976.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.114.0/24 Signature Algorithm: sha256WithRSAEncryption 64:93:1f:37:99:b1:ce:f3:96:e6:dd:c1:d7:ad:0f:c1:81:8e: 64:10:f6:dc:67:77:67:7b:db:93:5d:5b:be:c6:3c:8e:6b:bc: 42:df:f9:3e:b4:19:1a:e4:c0:aa:22:68:f2:05:4e:25:0d:81: cd:2e:b7:d6:19:04:e0:43:71:ee:7b:af:36:38:e5:1f:1b:02: 93:1d:f8:b2:45:c4:19:60:1a:a2:c4:36:db:4c:e9:bd:8a:30: a7:f8:f0:c8:7c:08:51:a9:64:00:fd:48:8e:c5:8e:da:3a:0b: 9c:f2:a7:06:33:53:dc:93:3b:80:63:97:62:c5:4d:75:5d:68: 3d:a0:01:8c:03:a8:fe:98:97:d8:73:45:09:3b:5b:db:63:49: f4:8d:5b:6c:c5:cf:a3:28:7c:22:c1:46:71:10:ea:3c:c8:8c: 31:27:15:17:fe:5d:ce:57:49:b4:e9:51:5e:93:bf:cd:96:c7: 65:07:e2:a0:52:d6:04:d8:7b:dd:83:3b:13:be:80:25:72:ca: 18:2b:b3:0c:6c:9d:36:a4:d4:7e:73:44:98:7a:ac:b0:86:d5: 88:c7:97:fc:cc:e6:64:64:a7:31:3c:dc:7f:c2:a7:18:e1:85: 2a:5c:6e:b3:e4:ba:ed:9b:ef:ab:4b:3d:2c:70:7e:af:2c:43: 6c:47:7d:b2 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUK68WOv8MceQ+1gI2StbHtPd1xQswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUwN1oX DTI1MDEwNzA0MDAwN1owMzExMC8GA1UEAxMoQkRBMUUyQjI5QkM3RjNBMjNCNDY0 ODEyOTRBMjhERDFBMjNERENEMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPLNITBAXvkuKD06rDHLiJFhzmPJYpbWerFw+88b3dJh30Nk0dbNZOorCW8h TADnySJmOSdoNGsfEWkWdlFaKnUG0b5t0M531bfFMl3PONjb02IWR/j1lfxjf1eT 4gaEhbwFeliI5f9DF4rTBh5hcXa6KjlnS4kzI5546pXt+wxvfSgiDvFWQZa883cL wI1MYrKK+GT9cF+9U9y3NLlTNuBLMI23wJYxPMi994nKTiKhndjEvE7czj/EOdCB K+yh/Wji1pZ6mWmvCosWmbXWWzYolylHVf7iqDiSy0WhKJ3WcZMN6jkZe3DQwWGK ZdelAu2djspk0FgKy+dQ9P6SgcMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBS9oeKy m8fzojtGSBKUoo3Roj3c0TAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTk3Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGencjANBgkqhkiG9w0BAQsFAAOCAQEAZJMfN5mxzvOW5t3B160P wYGOZBD23Gd3Z3vbk11bvsY8jmu8Qt/5PrQZGuTAqiJo8gVOJQ2BzS631hkE4ENx 7nuvNjjlHxsCkx34skXEGWAaosQ220zpvYowp/jwyHwIUalkAP1IjsWO2joLnPKn BjNT3JM7gGOXYsVNdV1oPaABjAOo/piX2HNFCTtb22NJ9I1bbMXPoyh8IsFGcRDq PMiMMScVF/5dzldJtOlRXpO/zZbHZQfioFLWBNh73YM7E76AJXLKGCuzDGydNqTU fnNEmHqssIbViMeX/MzmZGSnMTzcf8KnGOGFKlxus+S67Zvvq0s9LHB+ryxDbEd9 sg== -----END CERTIFICATE-----Generated at Wed May 8 05:33:21 2024 by rpki-client on console-ams.rpki-client.org