$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142315.roa File: AS142315.roa (raw, json) Hash identifier: qn8Ix3qrvwlVyTxqSqAgmz0sQ1DtQ7mqiv9wrejZ/XM= Subject key identifier: 4C:8C:5C:DA:EA:04:92:D1:99:67:FD:CF:91:8A:1F:61:61:2A:4F:7C Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 191323FD091FA80329D0E52896215DE14BF7196D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142315.roa Signing time: Mon 15 Apr 2024 04:00:00 +0000 ROA not before: Mon 15 Apr 2024 03:55:00 +0000 ROA not after: Mon 14 Apr 2025 04:00:00 +0000 asID: 142315 IP address blocks: 103.225.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:13:23:fd:09:1f:a8:03:29:d0:e5:28:96:21:5d:e1:4b:f7:19:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 15 03:55:00 2024 GMT Not After : Apr 14 04:00:00 2025 GMT Subject: CN=4C8C5CDAEA0492D19967FDCF918A1F61612A4F7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a5:ba:03:2b:29:8f:d0:5c:9f:5c:43:a4:f8: 92:57:0a:f7:ea:e8:13:20:4f:20:c4:b4:8e:4f:5b: 2d:55:6c:6f:fd:00:9e:a6:df:22:da:88:3b:fc:e8: 00:70:e8:5f:fa:cc:2a:55:99:54:e1:c5:73:c4:e7: c6:be:44:26:29:24:11:a1:36:55:46:9a:00:ef:40: 36:2b:c7:2b:82:de:5e:2a:00:3e:75:35:19:0f:5d: b5:85:ea:90:d1:7b:8c:60:8d:60:32:a7:2f:33:c3: 0d:fa:5a:85:5d:b3:27:2d:65:4c:73:8b:18:12:bd: cb:6c:ff:e9:19:d4:78:2e:21:a5:33:7e:af:02:aa: 1a:a3:6e:3b:5f:c6:74:57:fc:2e:59:0b:c3:a5:8d: 17:cf:e3:b0:74:8f:ad:82:f5:6a:7e:88:44:1e:29: 6f:9b:40:05:c3:99:f1:43:e5:4b:25:5e:c6:a8:e6: 37:e9:72:7f:da:f5:99:23:df:b3:3d:f9:c3:17:7b: ef:e6:0a:95:1c:5b:16:0f:16:3b:f0:ce:c3:14:7d: fb:d9:92:bd:f6:4a:52:4d:48:09:44:ef:d2:83:75: 22:3d:4f:0c:d0:37:e5:7c:cf:b9:30:e5:5c:fc:ce: 8b:db:03:c4:28:22:f0:8e:3a:eb:8e:77:d7:bd:b8: e6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8C:5C:DA:EA:04:92:D1:99:67:FD:CF:91:8A:1F:61:61:2A:4F:7C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142315.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.225.46.0/24 Signature Algorithm: sha256WithRSAEncryption 41:1d:0b:ec:2e:5d:c5:8e:0d:3c:ea:8b:cd:eb:d7:ab:b6:74: 00:f1:ce:83:6c:d4:b4:ef:84:91:d0:a1:ed:b3:e3:6d:05:55: 4c:10:b0:74:12:98:1e:73:5a:d5:35:11:36:ac:b8:44:da:75: 2b:0c:09:1e:e2:3a:8c:8b:30:71:f7:c1:50:c3:3b:46:6e:ad: 40:a0:ae:fa:8a:41:5e:66:1a:f3:e5:6c:95:98:e3:95:e1:ec: f0:fb:49:2b:d4:51:4f:c9:10:75:5c:3e:92:3f:36:22:e2:bf: f2:6a:f8:b0:df:a2:4e:2b:e4:4a:1d:f3:a3:9c:5c:d3:0e:ab: 58:05:b2:4a:f3:75:52:56:0f:0d:f3:3a:89:7b:db:e7:35:3e: d0:0f:01:47:c1:f5:d6:24:70:05:98:fc:81:c9:20:da:e6:ac: f8:52:8b:47:4d:64:4a:a0:68:01:d6:72:59:81:fb:07:f0:0c: 0e:2d:d1:ad:a8:98:ee:38:8b:b2:76:1c:53:68:79:fa:b8:45: 59:27:ca:8b:52:0e:7e:12:1f:24:57:c1:11:a4:8e:2c:3d:b4: 7d:c6:32:7c:af:c5:c7:01:a6:8c:3a:ee:d9:8c:64:3d:d7:4b: e5:82:5f:ba:28:85:21:7f:5e:fe:0f:63:c0:06:64:6c:f8:32: da:a7:d5:42 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUGRMj/QkfqAMp0OUoliFd4Uv3GW0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQxNTAzNTUwMFoX DTI1MDQxNDA0MDAwMFowMzExMC8GA1UEAxMoNEM4QzVDREFFQTA0OTJEMTk5NjdG RENGOTE4QTFGNjE2MTJBNEY3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANulugMrKY/QXJ9cQ6T4klcK9+roEyBPIMS0jk9bLVVsb/0AnqbfItqIO/zo AHDoX/rMKlWZVOHFc8Tnxr5EJikkEaE2VUaaAO9ANivHK4LeXioAPnU1GQ9dtYXq kNF7jGCNYDKnLzPDDfpahV2zJy1lTHOLGBK9y2z/6RnUeC4hpTN+rwKqGqNuO1/G dFf8LlkLw6WNF8/jsHSPrYL1an6IRB4pb5tABcOZ8UPlSyVexqjmN+lyf9r1mSPf sz35wxd77+YKlRxbFg8WO/DOwxR9+9mSvfZKUk1ICUTv0oN1Ij1PDNA35XzPuTDl XPzOi9sDxCgi8I46645317245l0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRMjFza 6gSS0Zln/c+Rih9hYSpPfDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjMxNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfhLjANBgkqhkiG9w0BAQsFAAOCAQEAQR0L7C5dxY4NPOqLzevX q7Z0APHOg2zUtO+EkdCh7bPjbQVVTBCwdBKYHnNa1TURNqy4RNp1KwwJHuI6jIsw cffBUMM7Rm6tQKCu+opBXmYa8+VslZjjleHs8PtJK9RRT8kQdVw+kj82IuK/8mr4 sN+iTivkSh3zo5xc0w6rWAWySvN1UlYPDfM6iXvb5zU+0A8BR8H11iRwBZj8gckg 2uas+FKLR01kSqBoAdZyWYH7B/AMDi3RraiY7jiLsnYcU2h5+rhFWSfKi1IOfhIf JFfBEaSOLD20fcYyfK/FxwGmjDru2YxkPddL5YJfuiiFIX9e/g9jwAZkbPgy2qfV Qg== -----END CERTIFICATE-----Generated at Wed May 8 21:02:22 2024 by rpki-client on console-fra.rpki-client.org