$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141976.roa File: AS141976.roa (raw, json) Hash identifier: yxAjs3lRwphtp+W0X1UIwRRsDJ3bfg8iKe3uIq3WLvo= Subject key identifier: 9D:D5:20:6B:0A:A5:99:68:63:AA:07:AB:5F:19:7F:DB:4E:34:43:BE Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 307EAA880095EC2030140AC577C50D85B364E721 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141976.roa Signing time: Tue 10 Dec 2024 05:00:05 +0000 ROA not before: Tue 10 Dec 2024 04:55:05 +0000 ROA not after: Tue 09 Dec 2025 05:00:05 +0000 asID: 141976 IP address blocks: 103.167.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:7e:aa:88:00:95:ec:20:30:14:0a:c5:77:c5:0d:85:b3:64:e7:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 10 04:55:05 2024 GMT Not After : Dec 9 05:00:05 2025 GMT Subject: CN=9DD5206B0AA5996863AA07AB5F197FDB4E3443BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:01:57:2e:da:65:1d:86:b6:ec:6e:50:61:a6: 3d:31:6e:3f:b4:77:49:ab:cb:65:d4:10:f4:7c:fe: 33:00:98:78:fa:42:a6:1d:2f:1c:69:06:c9:42:af: 4c:48:91:8f:4b:a8:6a:e9:54:54:e2:b0:f0:c0:67: 85:6d:5c:c3:25:51:f4:c2:13:46:5c:c7:1e:e5:48: 70:9b:65:c3:6e:68:b6:6c:0f:f9:92:72:18:9e:8a: e5:aa:ef:9a:50:ad:61:ac:51:3f:ea:62:98:64:6d: 18:88:9e:e6:e5:7d:5d:fb:1a:6a:ee:65:5c:fb:ba: fe:35:f8:ba:95:88:32:75:d9:5d:5b:16:8f:13:d0: bf:5c:12:a5:e6:40:05:20:f0:a5:91:61:95:d5:28: 42:6b:b0:bf:ae:be:2c:45:65:2e:da:83:6c:64:bf: e3:12:d0:e2:9f:3b:b4:56:ab:86:68:96:ea:94:79: cd:ac:3c:bd:c4:8a:49:ba:b9:71:e9:00:b6:6a:ef: 65:44:9e:42:a7:b3:e9:ea:43:af:62:66:ad:7b:28: 4c:23:92:74:13:39:af:f5:c3:95:57:84:c7:be:96: 98:77:1c:ef:3b:5e:f2:25:3c:ce:3d:89:17:c3:cc: 0d:19:b4:30:72:a9:5a:d4:cc:be:a9:4e:17:d8:10: c4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D5:20:6B:0A:A5:99:68:63:AA:07:AB:5F:19:7F:DB:4E:34:43:BE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141976.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.114.0/24 Signature Algorithm: sha256WithRSAEncryption 69:e1:07:b6:4e:65:b6:2a:12:ce:06:00:40:97:a7:16:90:1e: 8a:6d:d9:10:9a:48:46:24:2f:e9:71:65:23:22:bf:f0:7f:05: a6:7d:42:07:be:1c:a7:3e:c5:31:d7:ba:3f:b1:16:a5:fd:6f: 0b:d4:bb:ce:a2:4e:77:70:a0:83:f0:fd:aa:2c:0d:d4:11:8f: 9c:a8:8e:dd:90:38:a6:3d:8c:f8:11:61:73:38:bb:1e:78:a4: e1:ee:f8:71:1d:48:21:7a:1f:fc:1c:e2:94:ca:23:68:e7:2d: f9:7f:60:32:31:a7:0d:3e:89:f6:f9:e2:29:34:ce:0b:bc:4e: 7b:4c:18:cb:14:17:9e:3b:25:96:10:5a:5b:76:ae:80:a5:01: 81:f3:24:ea:29:c7:d4:79:4c:56:db:14:dc:1c:04:9b:28:5c: 28:b1:e0:0b:e0:d3:b6:1c:55:af:51:e9:49:c8:74:14:5f:ee: ef:b8:a8:88:51:8b:91:b8:42:fa:86:ed:d7:fc:e5:1a:3d:e1: 0f:d3:2e:ef:53:79:e5:ca:d0:4e:2c:85:fb:f5:4a:99:9a:fc: 3e:e2:68:2c:8b:17:b0:54:34:6b:ff:d6:d0:bf:d0:ba:37:9d: 2b:97:d2:21:03:c1:fa:ed:9d:b6:ff:65:b9:50:7c:f4:70:a3: 68:ad:7e:8c -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUMH6qiACV7CAwFArFd8UNhbNk5yEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUwNVoX DTI1MTIwOTA1MDAwNVowMzExMC8GA1UEAxMoOURENTIwNkIwQUE1OTk2ODYzQUEw N0FCNUYxOTdGREI0RTM0NDNCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANYBVy7aZR2GtuxuUGGmPTFuP7R3SavLZdQQ9Hz+MwCYePpCph0vHGkGyUKv TEiRj0uoaulUVOKw8MBnhW1cwyVR9MITRlzHHuVIcJtlw25otmwP+ZJyGJ6K5arv mlCtYaxRP+pimGRtGIie5uV9Xfsaau5lXPu6/jX4upWIMnXZXVsWjxPQv1wSpeZA BSDwpZFhldUoQmuwv66+LEVlLtqDbGS/4xLQ4p87tFarhmiW6pR5zaw8vcSKSbq5 cekAtmrvZUSeQqez6epDr2JmrXsoTCOSdBM5r/XDlVeEx76WmHcc7zte8iU8zj2J F8PMDRm0MHKpWtTMvqlOF9gQxJ8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSd1SBr CqWZaGOqB6tfGX/bTjRDvjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTk3Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGencjANBgkqhkiG9w0BAQsFAAOCAQEAaeEHtk5ltioSzgYAQJen FpAeim3ZEJpIRiQv6XFlIyK/8H8Fpn1CB74cpz7FMde6P7EWpf1vC9S7zqJOd3Cg g/D9qiwN1BGPnKiO3ZA4pj2M+BFhczi7Hnik4e74cR1IIXof/BzilMojaOct+X9g MjGnDT6J9vniKTTOC7xOe0wYyxQXnjsllhBaW3augKUBgfMk6inH1HlMVtsU3BwE myhcKLHgC+DTthxVr1HpSch0FF/u77ioiFGLkbhC+obt1/zlGj3hD9Mu71N55crQ TiyF+/VKmZr8PuJoLIsXsFQ0a//W0L/QujedK5fSIQPB+u2dtv9luVB89HCjaK1+ jA== -----END CERTIFICATE-----Generated at Sun Feb 16 20:47:28 2025 by rpki-client