$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142307.roa File: AS142307.roa (raw, json) Hash identifier: scDmzSuLM/NuEBUL3mQ5EOqqodvOTbVNuup12Ze2Ruw= Subject key identifier: 7B:7E:97:18:23:67:11:9E:B4:84:F1:F7:23:34:8C:E5:3E:6E:8E:48 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 68E08590F227450B7D92116714880C4090E0497A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142307.roa Signing time: Tue 09 Jan 2024 04:00:22 +0000 ROA not before: Tue 09 Jan 2024 03:55:22 +0000 ROA not after: Tue 07 Jan 2025 04:00:22 +0000 asID: 142307 IP address blocks: 103.168.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 15:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e0:85:90:f2:27:45:0b:7d:92:11:67:14:88:0c:40:90:e0:49:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:22 2024 GMT Not After : Jan 7 04:00:22 2025 GMT Subject: CN=7B7E97182367119EB484F1F723348CE53E6E8E48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c3:bf:d5:aa:d2:78:a9:68:d0:83:7e:c2:e2: 1a:fb:0c:b1:78:c1:0f:e1:2b:95:6b:04:cf:ec:25: 48:86:6a:50:84:ae:32:da:3a:c3:ac:72:8d:b6:5a: a9:30:17:6a:3f:a0:33:f1:b0:af:e8:a6:9f:16:0c: 1a:3f:a6:2c:0f:46:0e:03:82:55:bb:7b:34:e3:88: 1f:35:28:84:d3:58:90:6d:91:97:c5:53:ad:05:75: fc:99:27:ce:08:90:f7:95:87:46:83:a3:b3:39:aa: 06:dd:80:36:0c:82:31:7f:f6:25:5a:a5:19:df:5c: 2a:13:69:01:33:26:13:3a:8e:a2:d0:ae:fa:92:a5: c2:c1:d5:b9:07:80:bb:0f:0d:db:1b:2f:25:d3:38: 22:8d:ad:13:16:4d:01:f3:6c:e2:34:87:b0:94:3a: fe:91:2a:a1:7e:6c:cf:fa:90:31:1a:ac:d9:cd:b0: 97:b8:28:e6:78:ff:d7:23:a6:6a:57:94:97:1e:20: 89:04:59:fb:dd:45:65:3c:c3:c0:c6:ba:08:bd:61: bd:d5:15:22:f9:64:13:dd:bc:36:b8:84:0d:6d:5d: 6d:3d:3b:46:96:31:cd:07:c9:bf:b9:55:c6:56:91: 14:1d:e9:4c:73:ff:61:ae:ff:88:4b:be:4f:c6:d3: 5b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7E:97:18:23:67:11:9E:B4:84:F1:F7:23:34:8C:E5:3E:6E:8E:48 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142307.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.44.0/24 Signature Algorithm: sha256WithRSAEncryption 06:14:03:68:a0:21:6e:8b:cf:fd:29:ba:40:7a:43:07:72:4e: fe:bc:9f:66:3b:27:1d:99:08:64:6a:94:1d:97:d4:d6:f4:78: 6e:5d:33:83:ac:71:16:0f:99:17:eb:c7:b4:86:8a:00:34:2e: f6:a4:36:fb:91:5e:a3:21:98:94:44:73:af:f2:0c:1e:38:37: 58:b8:f7:e1:98:24:60:2c:86:07:b7:10:4a:02:30:ea:c5:7f: 7d:99:5e:39:e8:ac:f7:62:ad:34:31:81:09:4f:00:3e:01:05: 45:6d:74:9d:1b:56:83:67:68:1d:bf:ba:cf:fb:ab:67:b5:ea: 95:ed:2f:6b:1d:8f:16:51:82:5f:9d:39:9b:c3:44:d8:56:c5: 80:93:67:f9:1d:43:2d:5b:4e:69:03:19:96:6e:b3:da:37:2a: 70:1a:8f:3a:ec:7a:09:ef:2b:f4:af:ce:36:22:d0:71:c1:bd: f6:7b:cc:a7:6d:83:29:d3:36:47:f7:af:ea:d8:2d:2b:38:01: f5:bc:48:33:5d:27:8d:9d:2c:9e:81:b2:e7:6c:52:c7:80:53: 0d:88:46:00:d4:a3:cf:e4:b8:79:5f:2c:64:72:56:a7:01:37: db:cd:72:fa:69:f9:a5:9e:c2:f4:76:81:d5:7c:26:bd:4f:d3: e7:02:a2:3c -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUaOCFkPInRQt9khFnFIgMQJDgSXowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUyMloX DTI1MDEwNzA0MDAyMlowMzExMC8GA1UEAxMoN0I3RTk3MTgyMzY3MTE5RUI0ODRG MUY3MjMzNDhDRTUzRTZFOEU0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzDv9Wq0nipaNCDfsLiGvsMsXjBD+ErlWsEz+wlSIZqUISuMto6w6xyjbZa qTAXaj+gM/Gwr+imnxYMGj+mLA9GDgOCVbt7NOOIHzUohNNYkG2Rl8VTrQV1/Jkn zgiQ95WHRoOjszmqBt2ANgyCMX/2JVqlGd9cKhNpATMmEzqOotCu+pKlwsHVuQeA uw8N2xsvJdM4Io2tExZNAfNs4jSHsJQ6/pEqoX5sz/qQMRqs2c2wl7go5nj/1yOm aleUlx4giQRZ+91FZTzDwMa6CL1hvdUVIvlkE928NriEDW1dbT07RpYxzQfJv7lV xlaRFB3pTHP/Ya7/iEu+T8bTWyMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBR7fpcY I2cRnrSE8fcjNIzlPm6OSDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjMwNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeoLDANBgkqhkiG9w0BAQsFAAOCAQEABhQDaKAhbovP/Sm6QHpD B3JO/ryfZjsnHZkIZGqUHZfU1vR4bl0zg6xxFg+ZF+vHtIaKADQu9qQ2+5FeoyGY lERzr/IMHjg3WLj34ZgkYCyGB7cQSgIw6sV/fZleOeis92KtNDGBCU8APgEFRW10 nRtWg2doHb+6z/urZ7Xqle0vax2PFlGCX505m8NE2FbFgJNn+R1DLVtOaQMZlm6z 2jcqcBqPOux6Ce8r9K/ONiLQccG99nvMp22DKdM2R/ev6tgtKzgB9bxIM10njZ0s noGy52xSx4BTDYhGANSjz+S4eV8sZHJWpwE3281y+mn5pZ7C9HaB1XwmvU/T5wKi PA== -----END CERTIFICATE-----Generated at Wed May 1 13:24:06 2024 by rpki-client on console-ams.rpki-client.org