$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142329.roa File: AS142329.roa (raw, json) Hash identifier: N6XjgzSH8ymUx4V9qMpf9n/o6HzpbbBdWqZYITXxGQI= Subject key identifier: 87:DD:48:07:B3:9B:AB:B2:F2:5E:68:29:23:46:9B:DA:15:05:F0:A6 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2A1493DEDAD3976F401AC5F40ECE094E63911322 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142329.roa Signing time: Tue 09 Jan 2024 04:00:11 +0000 ROA not before: Tue 09 Jan 2024 03:55:11 +0000 ROA not after: Tue 07 Jan 2025 04:00:11 +0000 asID: 142329 IP address blocks: 103.168.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:14:93:de:da:d3:97:6f:40:1a:c5:f4:0e:ce:09:4e:63:91:13:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:11 2024 GMT Not After : Jan 7 04:00:11 2025 GMT Subject: CN=87DD4807B39BABB2F25E682923469BDA1505F0A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a8:06:e3:77:48:3d:29:d3:de:b8:96:89:55: 10:e0:32:7e:de:e1:47:31:22:18:c2:d8:67:85:21: 69:95:ce:bd:66:ac:3d:3d:bc:b5:a4:ca:09:77:7b: 5b:d2:c9:b7:d6:1a:4c:4d:4e:9a:62:67:91:26:bb: ac:a4:ad:8a:02:3e:fe:b7:d8:c7:dd:02:37:84:b9: 68:4d:c3:04:6a:c9:64:74:7a:0e:a6:d1:cc:70:60: 15:a6:0b:90:a5:5a:37:cc:21:bc:92:f3:ae:77:98: 57:ad:2e:f7:8c:ef:15:18:6c:53:7a:12:0c:38:79: 96:a0:1d:4d:a7:2b:2d:11:69:5b:fa:66:9e:23:90: 0f:38:ff:04:54:a1:f7:3c:6a:2f:91:4d:3e:ec:7c: b8:9b:c8:db:4c:71:b3:7c:c2:3c:90:e4:18:ef:fe: ca:88:f7:24:bf:e8:41:ab:07:bc:e9:5d:a8:01:6c: 5c:3f:8e:39:82:3c:f7:15:12:50:b1:b8:dc:5f:02: 95:4d:13:5d:d4:71:5a:ec:46:da:e7:6b:4d:e9:a5: e2:9e:1d:c0:c2:a0:99:f5:3c:28:89:01:01:78:67: c9:74:07:01:35:34:59:c8:86:3d:d8:0f:77:57:8a: ca:8f:d0:3c:ba:e0:66:d1:11:55:f4:ed:64:bb:c8: 14:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DD:48:07:B3:9B:AB:B2:F2:5E:68:29:23:46:9B:DA:15:05:F0:A6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142329.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.21.0/24 Signature Algorithm: sha256WithRSAEncryption 85:53:c4:25:53:c9:38:2d:d9:91:d2:30:09:bb:c2:01:9f:18: 46:82:27:23:a9:53:ce:c1:43:b8:5d:fa:2d:8b:e7:34:08:1e: 8f:36:c3:73:47:9f:32:ac:bb:13:58:ee:69:a8:18:7f:f8:35: 96:05:df:74:06:ea:b8:38:ea:bf:db:17:06:e3:8c:84:78:c7: 5a:dc:24:4d:d7:cd:ee:f1:98:c9:c9:84:cf:2a:c4:e0:cc:56: 35:30:69:35:a7:03:a7:15:3c:36:41:ab:d5:34:5d:8e:ba:85: 0d:68:29:15:25:d4:ee:a0:6a:c6:a5:5b:b7:e3:93:e9:c0:1a: c3:af:91:0b:07:a8:c0:e6:f2:cb:f0:80:cb:f3:39:55:50:9b: 2d:3c:4b:2d:a0:06:f3:ae:2c:08:f9:99:f0:a1:05:24:95:8d: 0a:30:cd:ca:0e:92:c2:5d:db:1a:e4:1f:05:9e:df:d4:e8:76: 22:54:a9:ae:68:0f:c5:b5:69:0f:08:e6:97:cb:8b:91:86:30: aa:9a:57:df:f4:9e:e4:47:79:6c:5b:b1:25:c2:d0:6a:62:c1: b6:6d:fa:74:8a:57:f4:14:13:c6:0f:d6:b2:42:8c:c9:90:0f: e8:d9:f2:fd:f7:2d:74:68:83:5e:75:71:f1:ca:87:07:57:de: ab:5b:bc:e7 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUKhST3trTl29AGsX0Ds4JTmOREyIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUxMVoX DTI1MDEwNzA0MDAxMVowMzExMC8GA1UEAxMoODdERDQ4MDdCMzlCQUJCMkYyNUU2 ODI5MjM0NjlCREExNTA1RjBBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMioBuN3SD0p0964lolVEOAyft7hRzEiGMLYZ4UhaZXOvWasPT28taTKCXd7 W9LJt9YaTE1OmmJnkSa7rKStigI+/rfYx90CN4S5aE3DBGrJZHR6DqbRzHBgFaYL kKVaN8whvJLzrneYV60u94zvFRhsU3oSDDh5lqAdTacrLRFpW/pmniOQDzj/BFSh 9zxqL5FNPux8uJvI20xxs3zCPJDkGO/+yoj3JL/oQasHvOldqAFsXD+OOYI89xUS ULG43F8ClU0TXdRxWuxG2udrTeml4p4dwMKgmfU8KIkBAXhnyXQHATU0WciGPdgP d1eKyo/QPLrgZtERVfTtZLvIFGECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSH3UgH s5ursvJeaCkjRpvaFQXwpjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjMyOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeoFTANBgkqhkiG9w0BAQsFAAOCAQEAhVPEJVPJOC3ZkdIwCbvC AZ8YRoInI6lTzsFDuF36LYvnNAgejzbDc0efMqy7E1juaagYf/g1lgXfdAbquDjq v9sXBuOMhHjHWtwkTdfN7vGYycmEzyrE4MxWNTBpNacDpxU8NkGr1TRdjrqFDWgp FSXU7qBqxqVbt+OT6cAaw6+RCweowObyy/CAy/M5VVCbLTxLLaAG864sCPmZ8KEF JJWNCjDNyg6Swl3bGuQfBZ7f1Oh2IlSprmgPxbVpDwjml8uLkYYwqppX3/Se5Ed5 bFuxJcLQamLBtm36dIpX9BQTxg/WskKMyZAP6Nny/fctdGiDXnVx8cqHB1feq1u8 5w== -----END CERTIFICATE-----Generated at Fri May 3 03:08:30 2024 by rpki-client on console-ams.rpki-client.org