$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142324.roa File: AS142324.roa (raw, json) Hash identifier: E9Bg+6xeUe2J8jU1xg7DrC6Ztq6s4/hq55MY2vzKzbQ= Subject key identifier: EF:A9:9A:05:5E:CB:63:9F:2F:95:3D:BA:83:48:70:24:94:29:5C:D4 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1056D8FBC96ABC714656843E60D4D168B6CA3573 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142324.roa Signing time: Tue 17 Dec 2024 04:00:00 +0000 ROA not before: Tue 17 Dec 2024 03:55:00 +0000 ROA not after: Tue 16 Dec 2025 04:00:00 +0000 asID: 142324 IP address blocks: 103.168.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:56:d8:fb:c9:6a:bc:71:46:56:84:3e:60:d4:d1:68:b6:ca:35:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 17 03:55:00 2024 GMT Not After : Dec 16 04:00:00 2025 GMT Subject: CN=EFA99A055ECB639F2F953DBA8348702494295CD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:04:0f:0e:c5:11:40:9b:3f:ac:f6:85:d8:e1: d7:54:64:0f:9c:5f:8e:13:69:4a:6b:58:55:85:a3: 21:d4:10:25:43:91:1b:36:8c:45:91:24:25:93:70: d0:a0:41:a4:34:73:a2:ab:5a:2f:e8:2c:05:16:13: 16:79:c0:7a:59:95:98:f7:7f:c8:8e:be:ff:fa:60: a1:9d:d1:31:25:23:fe:66:3e:d2:56:91:64:a6:f0: 05:62:4b:4c:24:97:f2:dc:ca:d8:92:7b:c7:ae:20: d0:f4:d4:fd:03:49:a9:94:d5:0b:ba:a1:26:f6:cd: 71:ef:67:bd:c6:e7:18:7f:de:e4:c5:56:c3:10:4c: ae:89:9b:8c:90:37:34:3f:e1:d4:c0:54:bc:07:6a: ba:11:20:c7:d2:8f:09:ac:3a:63:8c:2e:62:16:3a: a5:a4:fe:f5:56:c8:07:e5:8d:d7:23:63:c3:ed:cb: d1:e0:94:c7:35:88:a2:35:40:91:b5:61:4d:4b:ae: 6e:fb:41:7b:31:71:a0:49:00:58:d1:94:03:f9:ef: cd:0c:6a:81:e8:37:fd:72:f2:93:57:ec:cc:96:f3: 93:2d:68:40:91:2f:cc:ed:c3:d4:e8:fb:2f:fb:99: 5b:de:e2:64:4a:70:a6:5a:d6:fd:ef:15:ad:9f:ba: 13:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A9:9A:05:5E:CB:63:9F:2F:95:3D:BA:83:48:70:24:94:29:5C:D4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142324.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.191.0/24 Signature Algorithm: sha256WithRSAEncryption 95:b2:1c:b4:e8:7c:33:a9:4d:a0:ce:11:4a:e0:ad:7e:4b:a2: 05:c4:e1:2f:8e:69:57:c2:7e:1f:da:ac:0b:7c:dd:5e:f5:37: 35:7a:5f:c9:d4:2f:eb:f3:04:e8:a2:af:52:c2:e9:25:90:f7: eb:8e:38:a2:5a:b6:10:55:8b:4e:b2:7d:d9:66:0b:18:be:1f: 35:23:5f:e5:9c:ce:68:c8:59:36:54:2c:e7:23:d2:7b:77:e1: 33:ef:1e:5c:75:68:e5:15:98:63:e8:06:00:02:9d:e8:87:76: c3:e2:7c:9b:87:87:8a:65:fe:c9:7d:fb:c4:82:33:cf:5c:58: 22:70:f5:79:f1:6f:5a:6d:cd:f2:0e:3f:18:dd:bf:32:87:bc: 95:c7:13:cb:a4:1f:e6:85:0e:a5:3e:73:25:ef:12:0c:b1:f5: 6f:e1:bd:9a:4c:40:ea:ee:b0:0b:a7:2f:ef:7f:e2:0f:e9:d9: cf:9e:00:df:56:f2:f7:a4:98:d3:8e:d6:f7:cf:36:e2:12:4e: 23:1c:26:00:22:9c:ac:6d:7e:00:0d:d0:17:a2:6e:07:c0:67: e3:f7:01:24:57:46:e3:c3:da:0a:2a:17:05:aa:cf:3b:ba:19: a1:9b:fb:5b:b0:18:d6:8c:1c:6f:e0:48:94:e7:69:07:e7:f7: b3:38:ca:d6 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUEFbY+8lqvHFGVoQ+YNTRaLbKNXMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxNzAzNTUwMFoX DTI1MTIxNjA0MDAwMFowMzExMC8GA1UEAxMoRUZBOTlBMDU1RUNCNjM5RjJGOTUz REJBODM0ODcwMjQ5NDI5NUNENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALIEDw7FEUCbP6z2hdjh11RkD5xfjhNpSmtYVYWjIdQQJUORGzaMRZEkJZNw 0KBBpDRzoqtaL+gsBRYTFnnAelmVmPd/yI6+//pgoZ3RMSUj/mY+0laRZKbwBWJL TCSX8tzK2JJ7x64g0PTU/QNJqZTVC7qhJvbNce9nvcbnGH/e5MVWwxBMrombjJA3 ND/h1MBUvAdquhEgx9KPCaw6Y4wuYhY6paT+9VbIB+WN1yNjw+3L0eCUxzWIojVA kbVhTUuubvtBezFxoEkAWNGUA/nvzQxqgeg3/XLyk1fszJbzky1oQJEvzO3D1Oj7 L/uZW97iZEpwplrW/e8VrZ+6EwkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTvqZoF Xstjny+VPbqDSHAklClc1DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjMyNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeovzANBgkqhkiG9w0BAQsFAAOCAQEAlbIctOh8M6lNoM4RSuCt fkuiBcThL45pV8J+H9qsC3zdXvU3NXpfydQv6/ME6KKvUsLpJZD36444olq2EFWL TrJ92WYLGL4fNSNf5ZzOaMhZNlQs5yPSe3fhM+8eXHVo5RWYY+gGAAKd6Id2w+J8 m4eHimX+yX37xIIzz1xYInD1efFvWm3N8g4/GN2/Moe8lccTy6Qf5oUOpT5zJe8S DLH1b+G9mkxA6u6wC6cv73/iD+nZz54A31by96SY047W98824hJOIxwmACKcrG1+ AA3QF6JuB8Bn4/cBJFdG48PaCioXBarPO7oZoZv7W7AY1owcb+BIlOdpB+f3szjK 1g== -----END CERTIFICATE-----Generated at Sat Apr 5 06:22:54 2025 by rpki-client