$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142325.roa File: AS142325.roa (raw, json) Hash identifier: 70DC8FsX353cll6WePEefg8Ur3ytciN+T16b2UXQLRM= Subject key identifier: 6D:24:8D:66:30:94:40:A9:E4:E4:3C:E6:FE:73:A3:80:56:E9:93:33 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3B8F8DB3C8BAC04C8EC7F8682B5C66F7DA8CB51E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142325.roa Signing time: Wed 05 Mar 2025 09:00:00 +0000 ROA not before: Wed 05 Mar 2025 08:55:00 +0000 ROA not after: Wed 04 Mar 2026 09:00:00 +0000 asID: 142325 IP address blocks: 2001:df1:34c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:8f:8d:b3:c8:ba:c0:4c:8e:c7:f8:68:2b:5c:66:f7:da:8c:b5:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Mar 5 08:55:00 2025 GMT Not After : Mar 4 09:00:00 2026 GMT Subject: CN=6D248D66309440A9E4E43CE6FE73A38056E99333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d6:27:52:8d:93:9f:02:e9:ee:ce:fa:7c:16: a7:e6:46:06:32:8e:5e:f8:45:e1:5a:08:4e:0d:1b: aa:60:6a:49:a8:18:85:09:d5:a2:eb:0b:a6:45:c5: 50:c7:db:93:06:96:ce:a5:4c:0a:bd:08:dd:ca:4b: 46:ba:b3:41:8d:18:3e:71:f2:b9:3f:6d:3d:23:ee: 8a:8e:93:b8:ed:1b:83:28:db:4c:78:26:3c:1f:63: 3c:e4:92:39:be:28:33:c0:ce:93:fc:01:ba:f6:88: 8a:2b:b8:2e:ab:c3:72:1e:37:b0:d9:40:90:f0:17: 19:79:ff:6f:b7:ea:e7:04:16:99:d5:0b:f4:a7:64: 65:bb:de:12:23:b0:e0:f6:91:b3:ed:ca:9b:53:95: 8a:c5:99:f1:8c:02:33:90:26:20:9d:ab:b5:43:fc: a3:32:7c:c1:a5:e9:26:31:b3:81:40:d2:83:a8:23: 6f:ed:39:91:88:5e:6c:2f:32:b3:93:3f:ff:6b:d0: 7c:f8:ec:64:e3:cc:8e:06:50:d9:a9:93:ef:eb:14: d8:d2:99:78:e4:64:2a:ad:3e:0d:43:34:45:58:84: 19:11:cc:89:82:e6:63:9f:80:8f:c0:73:87:aa:59: fa:40:dc:ee:f6:08:89:a5:55:af:89:65:17:21:cf: 42:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:24:8D:66:30:94:40:A9:E4:E4:3C:E6:FE:73:A3:80:56:E9:93:33 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142325.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:34c0::/48 Signature Algorithm: sha256WithRSAEncryption 5e:ff:04:b4:a1:ed:0a:73:51:f6:03:fd:a9:7f:01:04:95:4f: 41:2a:92:fb:f7:95:55:81:6d:b4:bb:9b:c7:7d:79:6c:7d:db: 88:72:d6:f3:fe:a2:ef:95:62:f8:4d:46:b9:8e:ea:ca:11:ca: 00:67:11:cc:99:99:10:ee:47:f6:69:51:d3:3b:50:d2:48:c5: 98:b0:ca:8f:c9:78:11:ef:d3:0e:cf:0a:df:a7:90:4a:33:38: 0b:81:8f:b2:dc:aa:95:07:c5:d5:dc:5b:de:c5:42:67:32:9b: cc:8c:eb:03:3d:63:7f:7d:0c:93:97:7e:af:3b:8a:7e:9c:4a: a4:5c:b4:3b:05:47:4a:bd:5f:7b:f8:cb:ed:cc:f7:42:dd:06: ed:d9:88:72:4c:4b:50:22:a7:3e:0f:d3:5f:43:be:72:2e:f6: 94:3a:cb:97:11:9f:af:c8:5f:04:71:9a:7a:35:82:c6:e4:0c: f3:a0:1e:91:44:e8:2b:c0:66:16:5f:39:cf:7d:d9:c3:7e:45: cf:3b:4d:04:5c:00:c6:64:46:3d:e1:95:7d:8b:3f:72:e6:34: 40:a1:cb:ea:86:d2:c5:2f:e4:9d:55:cc:01:e7:cb:ff:64:b0: a3:a9:75:91:a9:06:dd:c6:07:3e:78:ea:31:97:8c:9b:ce:11: d6:e3:72:ed -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUO4+Ns8i6wEyOx/hoK1xm99qMtR4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMwNTA4NTUwMFoX DTI2MDMwNDA5MDAwMFowMzExMC8GA1UEAxMoNkQyNDhENjYzMDk0NDBBOUU0RTQz Q0U2RkU3M0EzODA1NkU5OTMzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKjWJ1KNk58C6e7O+nwWp+ZGBjKOXvhF4VoITg0bqmBqSagYhQnVousLpkXF UMfbkwaWzqVMCr0I3cpLRrqzQY0YPnHyuT9tPSPuio6TuO0bgyjbTHgmPB9jPOSS Ob4oM8DOk/wBuvaIiiu4LqvDch43sNlAkPAXGXn/b7fq5wQWmdUL9KdkZbveEiOw 4PaRs+3Km1OVisWZ8YwCM5AmIJ2rtUP8ozJ8waXpJjGzgUDSg6gjb+05kYhebC8y s5M//2vQfPjsZOPMjgZQ2amT7+sU2NKZeORkKq0+DUM0RViEGRHMiYLmY5+Aj8Bz h6pZ+kDc7vYIiaVVr4llFyHPQrcCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBRtJI1m MJRAqeTkPOb+c6OAVumTMzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjMyNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfE0wDANBgkqhkiG9w0BAQsFAAOCAQEAXv8EtKHtCnNR9gP9 qX8BBJVPQSqS+/eVVYFttLubx315bH3biHLW8/6i75Vi+E1GuY7qyhHKAGcRzJmZ EO5H9mlR0ztQ0kjFmLDKj8l4Ee/TDs8K36eQSjM4C4GPstyqlQfF1dxb3sVCZzKb zIzrAz1jf30Mk5d+rzuKfpxKpFy0OwVHSr1fe/jL7cz3Qt0G7dmIckxLUCKnPg/T X0O+ci72lDrLlxGfr8hfBHGaejWCxuQM86AekUToK8BmFl85z33Zw35FzztNBFwA xmRGPeGVfYs/cuY0QKHL6obSxS/knVXMAefL/2Swo6l1kakG3cYHPnjqMZeMm84R 1uNy7Q== -----END CERTIFICATE-----Generated at Sat Apr 5 06:22:13 2025 by rpki-client