$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142334.roa File: AS142334.roa (raw, json) Hash identifier: aFMWtZVtyPfNqyPEzBZL6Yqf04YNzfkCXKkaPJNcSkQ= Subject key identifier: 0D:37:90:05:FC:5A:8B:DA:63:FA:EA:4D:D1:5D:33:EF:47:D3:BE:8B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2F3B6B8B98E5556D126A63BD2651D1B02BDA39B7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142334.roa Signing time: Tue 09 Jan 2024 04:00:17 +0000 ROA not before: Tue 09 Jan 2024 03:55:17 +0000 ROA not after: Tue 07 Jan 2025 04:00:17 +0000 asID: 142334 IP address blocks: 103.168.245.0/24 maxlen: 24 2001:df6:e780::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 00:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:3b:6b:8b:98:e5:55:6d:12:6a:63:bd:26:51:d1:b0:2b:da:39:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:17 2024 GMT Not After : Jan 7 04:00:17 2025 GMT Subject: CN=0D379005FC5A8BDA63FAEA4DD15D33EF47D3BE8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7c:17:59:3c:79:ac:d0:28:8e:83:6a:d1:a6: c0:0f:df:c4:85:d7:79:5c:87:ef:f2:ab:9f:0e:00: ae:4a:f2:41:a7:29:ee:4a:72:50:f1:6d:09:8e:8e: 5b:73:c7:ca:f2:58:e6:a6:ef:05:9f:e6:af:72:d9: cf:47:3b:78:45:38:22:0a:39:61:e3:2a:ce:5a:48: 10:77:f5:d0:7a:7d:aa:18:99:73:1c:55:6f:c6:53: a7:33:71:e4:5c:a3:26:58:8b:21:a5:02:5c:b7:59: f4:29:57:03:f2:ac:df:eb:3d:45:e8:72:13:80:65: 9f:d2:94:06:f7:9c:00:06:84:be:d8:f4:e2:b4:1f: 6e:c5:d7:3d:4c:0c:90:6f:99:cc:b1:9c:c3:d9:4f: bc:bb:cb:a0:ac:27:cb:18:1e:e0:ea:3a:21:2e:37: a5:f3:ae:c9:e6:43:f5:da:b3:74:0c:ca:59:2b:ec: 75:ef:3c:bc:42:3e:19:8f:58:60:2c:1b:08:7f:19: 60:2c:9c:e7:7b:63:95:19:ea:1b:f4:93:c9:4b:9a: 4a:8c:1f:4b:32:f4:d7:2e:ab:d5:14:6d:f3:f1:b2: 33:68:d1:50:43:88:a3:8a:9d:cb:32:d5:0c:d7:14: 17:e9:dc:ac:c8:9a:0e:4c:ea:68:97:5f:63:6f:52: 2f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:37:90:05:FC:5A:8B:DA:63:FA:EA:4D:D1:5D:33:EF:47:D3:BE:8B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.245.0/24 IPv6: 2001:df6:e780::/48 Signature Algorithm: sha256WithRSAEncryption 03:62:72:70:f8:46:65:42:aa:34:03:13:ae:78:60:a7:49:a4: 0d:5d:67:3f:30:7d:c5:bc:54:a1:17:a7:04:aa:9b:b7:61:7e: dd:e8:76:46:c5:e7:b9:99:27:e9:a0:6a:48:ec:42:0d:e3:f9: cf:71:35:20:d7:9b:ac:0b:37:04:d2:a0:c4:e1:9e:b2:fd:70: 38:87:04:35:19:e8:6d:7f:3b:69:ad:2e:92:a0:7c:17:57:02: 98:3d:b8:8a:83:d8:7b:6a:96:d6:97:10:ea:d0:f3:15:f5:ee: ee:10:65:55:f1:4b:0c:b8:94:66:44:3d:6a:fb:62:06:88:d8: c4:49:40:5d:2d:cd:d0:1f:99:a3:9f:93:02:6e:98:4a:26:09: 98:38:56:fe:bd:11:1e:49:ed:9d:52:ec:6b:77:35:62:cc:14: f3:6a:6d:71:e6:13:c9:64:5b:ba:dd:62:c9:ea:a6:d4:8a:89: 4a:00:09:e3:43:cb:a3:40:d8:8c:10:5e:1e:24:c2:f5:b4:b4: f5:9f:59:c1:10:c2:81:a1:ef:ae:2e:3e:03:55:88:a4:1c:5a: cb:8d:05:26:e8:da:ce:7d:03:fc:b0:02:9d:f4:60:db:0d:2f: 8b:55:ea:49:31:36:26:a9:c8:d3:ef:ab:5c:66:fc:b3:32:15: cd:d5:c1:2c -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIULztri5jlVW0SamO9JlHRsCvaObcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUxN1oX DTI1MDEwNzA0MDAxN1owMzExMC8GA1UEAxMoMEQzNzkwMDVGQzVBOEJEQTYzRkFF QTRERDE1RDMzRUY0N0QzQkU4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL98F1k8eazQKI6DatGmwA/fxIXXeVyH7/Krnw4ArkryQacp7kpyUPFtCY6O W3PHyvJY5qbvBZ/mr3LZz0c7eEU4Igo5YeMqzlpIEHf10Hp9qhiZcxxVb8ZTpzNx 5FyjJliLIaUCXLdZ9ClXA/Ks3+s9RehyE4Bln9KUBvecAAaEvtj04rQfbsXXPUwM kG+ZzLGcw9lPvLvLoKwnyxge4Oo6IS43pfOuyeZD9dqzdAzKWSvsde88vEI+GY9Y YCwbCH8ZYCyc53tjlRnqG/STyUuaSowfSzL01y6r1RRt8/GyM2jRUEOIo4qdyzLV DNcUF+ncrMiaDkzqaJdfY29SL20CAwEAAaOCAeEwggHdMB0GA1UdDgQWBBQNN5AF /FqL2mP66k3RXTPvR9O+izAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjMzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAGeo9TAPBAIAAjAJAwcAIAEN9ueAMA0GCSqGSIb3DQEBCwUAA4IB AQADYnJw+EZlQqo0AxOueGCnSaQNXWc/MH3FvFShF6cEqpu3YX7d6HZGxee5mSfp oGpI7EIN4/nPcTUg15usCzcE0qDE4Z6y/XA4hwQ1GehtfztprS6SoHwXVwKYPbiK g9h7apbWlxDq0PMV9e7uEGVV8UsMuJRmRD1q+2IGiNjESUBdLc3QH5mjn5MCbphK JgmYOFb+vREeSe2dUuxrdzVizBTzam1x5hPJZFu63WLJ6qbUiolKAAnjQ8ujQNiM EF4eJML1tLT1n1nBEMKBoe+uLj4DVYikHFrLjQUm6NrOfQP8sAKd9GDbDS+LVepJ MTYmqcjT76tcZvyzMhXN1cEs -----END CERTIFICATE-----Generated at Thu May 2 17:16:30 2024 by rpki-client on console-ams.rpki-client.org