$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142324.roa File: AS142324.roa (raw, json) Hash identifier: /twEnomkTOKnNtJvM3q/t99bvNez2xmA8Q9n7awPoY8= Subject key identifier: E0:B7:8E:0D:DF:C8:46:4B:BC:F7:8F:59:6E:01:41:95:6B:9F:23:BD Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3B05BC41703BA1137665CF00AAE1754AD397F72D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142324.roa Signing time: Tue 16 Jan 2024 03:42:52 +0000 ROA not before: Tue 16 Jan 2024 03:37:52 +0000 ROA not after: Tue 14 Jan 2025 03:42:52 +0000 asID: 142324 IP address blocks: 103.168.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:05:bc:41:70:3b:a1:13:76:65:cf:00:aa:e1:75:4a:d3:97:f7:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 16 03:37:52 2024 GMT Not After : Jan 14 03:42:52 2025 GMT Subject: CN=E0B78E0DDFC8464BBCF78F596E0141956B9F23BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:eb:89:8b:b5:e2:30:10:0e:68:38:86:05:d4: ce:99:f9:07:17:66:2e:60:f7:15:23:af:0a:c9:b1: 84:5b:57:76:47:44:d6:aa:36:60:73:75:d1:d0:a9: 59:d9:f7:f2:ac:5d:b2:6b:ef:6c:bc:5c:8a:c0:40: 81:a7:55:7d:40:60:5c:2d:b3:17:0d:62:14:ab:96: 46:13:b6:ab:5b:f2:ce:59:55:72:6e:0f:60:92:59: 72:b2:03:68:a0:75:64:30:cd:ee:d1:d5:a2:40:5c: 91:6d:ef:39:d2:9d:ad:83:02:a7:53:55:d7:24:73: d1:94:bc:8a:f3:a4:4e:cd:ab:7a:86:db:5e:f8:81: 43:a4:14:76:1b:a7:b0:ee:13:b7:ef:da:78:b3:f5: 1b:4f:11:ca:17:03:d5:e3:53:f9:e2:d9:70:f6:b1: a4:b0:0e:33:25:34:a8:b4:81:ec:8a:24:ce:cd:b4: 9c:bf:36:f8:cb:f8:a8:dd:b3:9d:0f:06:6e:d7:69: d1:a5:7b:bd:1f:2f:46:01:f4:bf:a5:e2:04:9a:c6: ec:19:6d:ca:87:d3:73:d4:55:86:4e:0d:29:67:cd: 29:6b:4a:39:87:91:89:8c:27:60:bf:1e:8a:e7:cc: 96:32:64:6f:a7:06:d0:c8:f0:43:df:3b:21:e5:ea: 44:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B7:8E:0D:DF:C8:46:4B:BC:F7:8F:59:6E:01:41:95:6B:9F:23:BD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142324.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.191.0/24 Signature Algorithm: sha256WithRSAEncryption 87:41:8a:d0:ce:87:72:4f:9b:74:16:75:e4:41:07:09:fa:3a: a4:4d:06:f3:58:bb:4a:d9:ad:d6:1f:d3:39:a9:af:08:09:63: 8e:39:a0:1b:bb:20:bf:4a:a5:08:ed:9e:0e:64:db:b7:6f:12: e2:25:fe:50:80:22:7c:0c:8e:b8:96:3b:07:ab:28:cf:a7:ca: ad:8d:82:78:35:e1:48:56:72:38:8d:d0:46:ea:40:91:37:d9: 81:79:04:0c:27:e8:76:7c:f0:a7:fc:17:b3:9e:e2:94:3c:1e: a2:1d:31:7d:ba:67:e9:38:19:5e:21:91:b0:3c:4e:09:66:f0: 19:be:4a:81:6b:0d:51:0e:d7:23:ff:ed:80:23:42:aa:b2:24: 37:a6:23:b6:b2:9d:01:07:02:2d:b8:58:e4:16:cc:65:f4:3c: f3:3a:55:0d:e1:6c:ff:ba:54:c2:9f:30:d1:39:da:d7:7a:60: 55:4f:81:2b:cb:14:37:f4:6c:3f:23:4c:d9:5c:41:df:f7:ae: 2b:37:2a:d8:18:b3:01:96:66:c5:d9:77:cb:f8:3b:55:e7:97: 6c:01:d8:87:6d:1e:8d:c2:98:5c:2b:be:3e:10:22:06:96:d2: c7:cc:bc:d0:2d:16:1c:7e:51:89:33:e7:13:7d:ed:4a:c8:5b: 14:d5:67:4a -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUOwW8QXA7oRN2Zc8AquF1StOX9y0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDExNjAzMzc1MloX DTI1MDExNDAzNDI1MlowMzExMC8GA1UEAxMoRTBCNzhFMERERkM4NDY0QkJDRjc4 RjU5NkUwMTQxOTU2QjlGMjNCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHriYu14jAQDmg4hgXUzpn5BxdmLmD3FSOvCsmxhFtXdkdE1qo2YHN10dCp Wdn38qxdsmvvbLxcisBAgadVfUBgXC2zFw1iFKuWRhO2q1vyzllVcm4PYJJZcrID aKB1ZDDN7tHVokBckW3vOdKdrYMCp1NV1yRz0ZS8ivOkTs2reobbXviBQ6QUdhun sO4Tt+/aeLP1G08RyhcD1eNT+eLZcPaxpLAOMyU0qLSB7Iokzs20nL82+Mv4qN2z nQ8Gbtdp0aV7vR8vRgH0v6XiBJrG7BltyofTc9RVhk4NKWfNKWtKOYeRiYwnYL8e iufMljJkb6cG0MjwQ987IeXqRGsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTgt44N 38hGS7z3j1luAUGVa58jvTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjMyNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeovzANBgkqhkiG9w0BAQsFAAOCAQEAh0GK0M6Hck+bdBZ15EEH Cfo6pE0G81i7Stmt1h/TOamvCAljjjmgG7sgv0qlCO2eDmTbt28S4iX+UIAifAyO uJY7B6soz6fKrY2CeDXhSFZyOI3QRupAkTfZgXkEDCfodnzwp/wXs57ilDweoh0x fbpn6TgZXiGRsDxOCWbwGb5KgWsNUQ7XI//tgCNCqrIkN6YjtrKdAQcCLbhY5BbM ZfQ88zpVDeFs/7pUwp8w0Tna13pgVU+BK8sUN/RsPyNM2VxB3/euKzcq2BizAZZm xdl3y/g7VeeXbAHYh20ejcKYXCu+PhAiBpbSx8y80C0WHH5RiTPnE33tSshbFNVn Sg== -----END CERTIFICATE-----Generated at Wed May 8 09:50:38 2024 by rpki-client on console-fra.rpki-client.org