$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142334.roa File: AS142334.roa (raw, json) Hash identifier: f+dGYlFIJe3GhhN1jSgfW0j/dYgACLwCoIgqwsX+YlA= Subject key identifier: 31:DA:59:68:7D:F2:40:9E:80:99:40:39:2C:D7:37:EE:8B:13:DB:E4 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7606205F640F6833C13BC84D8133332B1CF32802 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142334.roa Signing time: Tue 10 Dec 2024 05:00:13 +0000 ROA not before: Tue 10 Dec 2024 04:55:13 +0000 ROA not after: Tue 09 Dec 2025 05:00:13 +0000 asID: 142334 IP address blocks: 103.168.245.0/24 maxlen: 24 2001:df6:e780::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:06:20:5f:64:0f:68:33:c1:3b:c8:4d:81:33:33:2b:1c:f3:28:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 10 04:55:13 2024 GMT Not After : Dec 9 05:00:13 2025 GMT Subject: CN=31DA59687DF2409E809940392CD737EE8B13DBE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:02:0a:52:73:1e:59:1d:cc:a4:d9:68:fc:3c: 86:5b:52:32:0b:e6:ae:ca:e0:63:67:98:ff:e8:c9: 4d:77:e5:4c:68:d0:62:71:20:e0:e7:10:ed:57:19: 63:e3:d0:ba:00:08:25:a5:2c:9e:9c:e8:18:2e:a6: 96:25:17:7c:3f:c7:22:57:2b:7a:ec:26:44:d2:69: b0:da:fc:87:2b:e8:a8:19:82:8d:01:16:ac:3d:6e: 6b:81:b4:76:58:58:42:5a:34:91:17:16:6b:7e:71: 97:05:95:7f:2b:80:f3:e5:58:7b:c5:c7:23:99:96: 7e:19:9c:01:c5:ef:57:ba:78:5f:c7:ea:f3:d7:8d: 14:50:8b:4d:f2:00:8f:21:c5:a0:6c:da:b8:4b:93: 2e:fc:31:cb:08:5a:16:e2:c9:0d:53:0a:24:c0:06: da:9b:8f:b4:1b:80:ef:29:7b:09:1d:95:bf:65:51: ed:8f:b7:ff:b3:da:4d:ab:52:f3:5b:22:6f:0c:92: d7:ec:73:4a:e8:46:20:51:fb:5d:8e:56:9a:80:3c: 62:c0:04:8f:e6:00:df:75:1f:57:14:dc:4c:d4:0f: f4:92:26:ac:6f:30:3a:07:b5:03:0a:e1:60:6a:77: ef:57:99:d4:0a:d3:b0:0b:1b:6e:ef:90:56:08:77: 63:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DA:59:68:7D:F2:40:9E:80:99:40:39:2C:D7:37:EE:8B:13:DB:E4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.245.0/24 IPv6: 2001:df6:e780::/48 Signature Algorithm: sha256WithRSAEncryption 1a:5b:61:44:5f:16:5d:0b:a2:ac:15:da:46:17:54:52:f8:55: de:a3:49:c2:20:86:98:16:9d:92:67:bf:72:dc:22:80:8e:da: ae:13:85:57:ce:a9:b3:94:b9:bd:df:7c:c9:d6:70:38:bf:84: 77:fc:c3:46:0e:b7:69:1a:12:a3:3f:d7:25:23:3b:69:0e:a4: 88:20:a3:73:75:fc:46:d6:24:ec:4c:67:ee:48:f9:0f:39:5e: d4:15:0f:5e:4e:f0:60:07:f9:66:32:5e:e9:e6:a4:5e:d1:ed: f1:b0:b8:48:0a:60:b6:49:18:b9:ea:11:5d:36:f2:22:dd:c5: ac:e5:63:ea:8f:03:13:49:91:d9:50:2a:69:6e:c1:26:41:ca: d4:06:4f:8f:e0:39:b3:21:af:b9:13:f8:e1:82:5c:f7:43:4c: 9e:d7:68:c9:93:c1:ea:63:26:84:ae:96:76:f8:14:6b:b5:7c: 29:95:3a:d6:06:4f:33:c6:49:18:47:95:56:d9:39:06:70:52: 07:d3:78:05:c3:aa:bd:f1:77:de:e6:bb:97:42:09:c0:2f:a0: b4:22:93:a9:9f:d7:bc:ff:10:4a:82:76:32:10:41:32:69:1c: 6d:eb:1e:14:b7:3e:b7:29:75:33:ad:23:41:a8:c1:e3:31:fa: 2b:c8:f3:3c -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUdgYgX2QPaDPBO8hNgTMzKxzzKAIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUxM1oX DTI1MTIwOTA1MDAxM1owMzExMC8GA1UEAxMoMzFEQTU5Njg3REYyNDA5RTgwOTk0 MDM5MkNENzM3RUU4QjEzREJFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANoCClJzHlkdzKTZaPw8hltSMgvmrsrgY2eY/+jJTXflTGjQYnEg4OcQ7VcZ Y+PQugAIJaUsnpzoGC6mliUXfD/HIlcreuwmRNJpsNr8hyvoqBmCjQEWrD1ua4G0 dlhYQlo0kRcWa35xlwWVfyuA8+VYe8XHI5mWfhmcAcXvV7p4X8fq89eNFFCLTfIA jyHFoGzauEuTLvwxywhaFuLJDVMKJMAG2puPtBuA7yl7CR2Vv2VR7Y+3/7PaTatS 81sibwyS1+xzSuhGIFH7XY5WmoA8YsAEj+YA33UfVxTcTNQP9JImrG8wOge1Awrh YGp371eZ1ArTsAsbbu+QVgh3Y80CAwEAAaOCAeEwggHdMB0GA1UdDgQWBBQx2llo ffJAnoCZQDks1zfuixPb5DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjMzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAGeo9TAPBAIAAjAJAwcAIAEN9ueAMA0GCSqGSIb3DQEBCwUAA4IB AQAaW2FEXxZdC6KsFdpGF1RS+FXeo0nCIIaYFp2SZ79y3CKAjtquE4VXzqmzlLm9 33zJ1nA4v4R3/MNGDrdpGhKjP9clIztpDqSIIKNzdfxG1iTsTGfuSPkPOV7UFQ9e TvBgB/lmMl7p5qRe0e3xsLhICmC2SRi56hFdNvIi3cWs5WPqjwMTSZHZUCppbsEm QcrUBk+P4DmzIa+5E/jhglz3Q0ye12jJk8HqYyaErpZ2+BRrtXwplTrWBk8zxkkY R5VW2TkGcFIH03gFw6q98Xfe5ruXQgnAL6C0IpOpn9e8/xBKgnYyEEEyaRxt6x4U tz63KXUzrSNBqMHjMforyPM8 -----END CERTIFICATE-----Generated at Sat Apr 5 06:20:02 2025 by rpki-client