$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142305.roa File: AS142305.roa (raw, json) Hash identifier: /Z1HvJkAQ23bV9LK7KV4GjZCT+EbvoiYwKsWHdeMujE= Subject key identifier: 1D:59:95:AB:A4:EE:CE:2F:3F:A8:80:F7:0E:31:33:48:13:FA:5B:6F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5D22531B2818A91B1428C6403C8E5C000A369F33 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142305.roa Signing time: Tue 10 Dec 2024 05:00:17 +0000 ROA not before: Tue 10 Dec 2024 04:55:17 +0000 ROA not after: Tue 09 Dec 2025 05:00:17 +0000 asID: 142305 IP address blocks: 103.168.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:22:53:1b:28:18:a9:1b:14:28:c6:40:3c:8e:5c:00:0a:36:9f:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 10 04:55:17 2024 GMT Not After : Dec 9 05:00:17 2025 GMT Subject: CN=1D5995ABA4EECE2F3FA880F70E31334813FA5B6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e3:81:b4:76:65:54:13:c3:30:a4:4d:9d:c0: c4:5f:dc:d9:cb:e1:36:63:01:72:8b:cc:65:97:45: d7:80:a8:98:b7:8e:23:38:af:dd:ad:4d:35:ce:82: 20:12:e9:22:ec:a0:f1:1a:f7:a9:7c:89:58:13:05: cc:45:6a:9c:e1:25:da:42:90:12:b0:8b:40:53:de: f7:ed:87:c3:6b:f8:df:d0:6c:b3:19:a3:42:bb:9d: 0c:80:40:36:cf:24:63:91:11:48:dd:6c:cd:38:09: 28:ed:0e:56:8f:14:84:28:d4:be:b6:0f:34:07:7e: be:bb:00:ad:94:3f:1c:ba:cb:8e:14:6b:28:90:39: dc:21:99:d0:b3:32:24:10:72:f2:5e:cf:7e:57:0d: d0:1e:a6:2b:de:7c:6a:fe:65:38:af:79:9e:37:42: 9a:4c:cc:2f:df:eb:8d:96:df:f6:98:57:b7:b9:3e: 8c:fc:5e:ba:4a:ae:9d:45:b5:16:e0:24:21:e5:2d: 38:ba:b5:05:e3:69:0e:8d:c5:05:f0:b0:b4:e8:54: 6c:9c:1b:de:05:5c:df:ef:76:2a:45:e7:aa:6b:45: 91:38:32:27:f2:40:04:6f:ff:2c:37:e6:47:8c:69: e8:ef:dd:ff:b8:83:c8:1a:fa:b1:2c:72:9a:48:12: bb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:59:95:AB:A4:EE:CE:2F:3F:A8:80:F7:0E:31:33:48:13:FA:5B:6F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142305.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.26.0/23 Signature Algorithm: sha256WithRSAEncryption 22:67:e6:f0:51:23:16:5a:2f:97:91:6a:a6:21:20:da:1b:c9: 99:ce:47:c2:58:df:da:83:03:7d:59:9b:5d:73:fd:b7:f7:02: 8f:76:0c:c5:51:b9:48:45:ff:22:d5:22:d6:e2:4c:58:cb:31: ef:20:cb:2b:c7:85:dc:01:e0:07:fc:13:ec:c2:07:a7:ab:e9: a7:f1:d0:69:8a:63:e5:38:c0:c1:25:c6:67:2c:36:ac:90:3d: 2c:b2:1a:fb:5c:20:38:c4:aa:f8:02:48:f4:0f:96:17:3d:d7: 02:57:fa:a3:1e:94:7b:05:52:66:e0:4b:a8:4b:67:cb:55:4b: d6:ad:72:ed:43:59:3e:bc:b2:d3:58:bb:72:84:68:e3:37:74: 73:55:56:02:1f:49:68:b7:37:dc:53:cd:88:58:4f:0b:e5:cb: e1:06:d2:ff:7e:21:65:7f:48:47:71:88:32:7f:a9:ac:9f:c1: c3:30:7d:86:9a:68:8d:5d:78:84:33:91:d8:16:87:17:54:82: 9e:db:90:00:e0:17:11:2a:07:45:19:72:aa:94:85:c5:5c:c7: c1:62:b4:51:26:00:58:b7:11:09:2c:14:43:c9:28:90:71:03: 0e:d7:53:b0:b4:3b:b2:ba:1b:4e:83:48:2c:1b:09:d6:9a:d4: 3f:7c:9b:af -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUXSJTGygYqRsUKMZAPI5cAAo2nzMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUxN1oX DTI1MTIwOTA1MDAxN1owMzExMC8GA1UEAxMoMUQ1OTk1QUJBNEVFQ0UyRjNGQTg4 MEY3MEUzMTMzNDgxM0ZBNUI2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTjgbR2ZVQTwzCkTZ3AxF/c2cvhNmMBcovMZZdF14ComLeOIziv3a1NNc6C IBLpIuyg8Rr3qXyJWBMFzEVqnOEl2kKQErCLQFPe9+2Hw2v439BssxmjQrudDIBA Ns8kY5ERSN1szTgJKO0OVo8UhCjUvrYPNAd+vrsArZQ/HLrLjhRrKJA53CGZ0LMy JBBy8l7PflcN0B6mK958av5lOK95njdCmkzML9/rjZbf9phXt7k+jPxeukqunUW1 FuAkIeUtOLq1BeNpDo3FBfCwtOhUbJwb3gVc3+92KkXnqmtFkTgyJ/JABG//LDfm R4xp6O/d/7iDyBr6sSxymkgSu/ECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQdWZWr pO7OLz+ogPcOMTNIE/pbbzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjMwNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWeoGjANBgkqhkiG9w0BAQsFAAOCAQEAImfm8FEjFlovl5FqpiEg 2hvJmc5Hwljf2oMDfVmbXXP9t/cCj3YMxVG5SEX/ItUi1uJMWMsx7yDLK8eF3AHg B/wT7MIHp6vpp/HQaYpj5TjAwSXGZyw2rJA9LLIa+1wgOMSq+AJI9A+WFz3XAlf6 ox6UewVSZuBLqEtny1VL1q1y7UNZPryy01i7coRo4zd0c1VWAh9JaLc33FPNiFhP C+XL4QbS/34hZX9IR3GIMn+prJ/BwzB9hppojV14hDOR2BaHF1SCntuQAOAXESoH RRlyqpSFxVzHwWK0USYAWLcRCSwUQ8kokHEDDtdTsLQ7srobToNILBsJ1prUP3yb rw== -----END CERTIFICATE-----Generated at Sat Apr 5 06:24:07 2025 by rpki-client