$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142348.roa File: AS142348.roa (raw, json) Hash identifier: xppa/dvncrmyKKYSZf16zAE5HFMaj432obfsb1R9kVg= Subject key identifier: 5F:16:16:1C:64:BA:3E:79:9A:19:83:34:DC:EC:91:67:A8:9B:45:62 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2636BFA7EA7A0CE9BEA3B86CC6A5B04FF6C51734 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142348.roa Signing time: Tue 09 Jan 2024 04:00:28 +0000 ROA not before: Tue 09 Jan 2024 03:55:28 +0000 ROA not after: Tue 07 Jan 2025 04:00:28 +0000 asID: 142348 IP address blocks: 2001:df0:3140::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:36:bf:a7:ea:7a:0c:e9:be:a3:b8:6c:c6:a5:b0:4f:f6:c5:17:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:28 2024 GMT Not After : Jan 7 04:00:28 2025 GMT Subject: CN=5F16161C64BA3E799A198334DCEC9167A89B4562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f3:62:76:cd:ee:74:dd:94:25:84:31:7d:88: 64:b1:e4:59:ae:7a:6d:b9:fd:9f:a3:06:83:c7:22: 8b:54:47:8e:82:a4:d9:7f:68:10:7d:5b:bb:38:fe: 94:4b:01:3f:4f:bc:28:5b:2a:22:9d:5d:32:fb:b0: cc:e4:f2:6c:7b:18:36:fe:de:36:5e:da:71:07:69: 9c:3f:c9:a1:bb:50:bd:34:cf:c3:9e:c9:58:95:87: c5:f3:50:e4:23:08:77:ec:6e:ed:9a:d8:49:09:40: b9:a3:b5:54:ac:81:0d:96:3a:b3:17:76:f9:27:f7: 94:0a:74:49:5f:73:4a:c8:43:2a:c6:48:56:c7:82: 46:81:fe:12:e8:54:9b:d7:23:90:d4:a7:91:44:80: a8:94:84:56:77:04:3a:e9:12:b2:b4:0c:33:1b:24: 18:f1:2a:e4:0f:7e:41:93:93:4a:d6:26:21:fd:23: 54:b5:ad:8f:87:9a:4f:2f:2d:6d:99:63:72:9a:9f: 18:9b:e2:ff:69:19:aa:86:d8:a8:00:4d:cf:f4:e3: 61:9b:74:91:6b:fc:33:d7:a9:cc:67:3b:c8:51:35: c6:86:f7:b4:f5:ef:da:62:f8:30:90:e3:07:9b:68: ad:6e:9d:52:a0:4f:93:a9:c9:4b:d2:10:0b:4e:6f: 4a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:16:16:1C:64:BA:3E:79:9A:19:83:34:DC:EC:91:67:A8:9B:45:62 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142348.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:3140::/48 Signature Algorithm: sha256WithRSAEncryption 63:23:52:66:f8:7d:c3:df:21:f0:d7:39:af:15:be:c4:e4:b0: 6c:ee:36:8a:24:90:a8:a7:88:08:8e:d6:1d:7b:e1:61:e5:52: 66:c7:5b:d0:0a:11:52:97:60:7e:34:e9:f4:35:35:4a:c9:06: 37:11:b7:ed:11:fb:52:07:4d:e9:d9:a1:a3:24:97:b1:7d:50: 0f:b8:4d:b7:85:1a:4d:00:3b:33:e4:3f:27:b4:aa:f7:85:8b: 69:f0:1c:94:ac:42:04:ef:0d:8f:0a:ea:87:bd:1f:3a:08:9e: a4:c5:04:c2:59:45:13:b8:55:67:c3:e2:cd:79:b1:6e:90:3e: 67:78:40:16:d0:50:b7:54:ab:c5:f6:69:f8:2a:27:d5:8d:eb: 4a:a8:0b:5b:a9:f0:94:f9:4c:17:42:8c:35:69:ee:38:98:41: 7f:2f:6c:fc:59:4c:94:e4:f2:16:cd:08:a7:45:0f:04:7e:6c: cc:f0:93:8b:95:67:d6:97:00:b6:d2:71:2d:88:cf:0f:a8:d8: b9:22:9e:10:1e:e0:2b:e2:4e:5a:c8:1e:e8:2f:26:13:af:c5: b6:2a:65:8f:26:05:c0:b7:de:8d:16:65:11:40:8e:bf:42:bb: 52:86:5f:eb:3e:b8:b6:fe:48:4d:8f:19:61:54:42:5b:d2:5e: 67:53:d9:cd -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUJja/p+p6DOm+o7hsxqWwT/bFFzQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUyOFoX DTI1MDEwNzA0MDAyOFowMzExMC8GA1UEAxMoNUYxNjE2MUM2NEJBM0U3OTlBMTk4 MzM0RENFQzkxNjdBODlCNDU2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK7zYnbN7nTdlCWEMX2IZLHkWa56bbn9n6MGg8cii1RHjoKk2X9oEH1buzj+ lEsBP0+8KFsqIp1dMvuwzOTybHsYNv7eNl7acQdpnD/JobtQvTTPw57JWJWHxfNQ 5CMId+xu7ZrYSQlAuaO1VKyBDZY6sxd2+Sf3lAp0SV9zSshDKsZIVseCRoH+EuhU m9cjkNSnkUSAqJSEVncEOukSsrQMMxskGPEq5A9+QZOTStYmIf0jVLWtj4eaTy8t bZljcpqfGJvi/2kZqobYqABNz/TjYZt0kWv8M9epzGc7yFE1xob3tPXv2mL4MJDj B5torW6dUqBPk6nJS9IQC05vSgsCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBRfFhYc ZLo+eZoZgzTc7JFnqJtFYjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjM0OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfAxQDANBgkqhkiG9w0BAQsFAAOCAQEAYyNSZvh9w98h8Nc5 rxW+xOSwbO42iiSQqKeICI7WHXvhYeVSZsdb0AoRUpdgfjTp9DU1SskGNxG37RH7 UgdN6dmhoySXsX1QD7hNt4UaTQA7M+Q/J7Sq94WLafAclKxCBO8Njwrqh70fOgie pMUEwllFE7hVZ8PizXmxbpA+Z3hAFtBQt1SrxfZp+Con1Y3rSqgLW6nwlPlMF0KM NWnuOJhBfy9s/FlMlOTyFs0Ip0UPBH5szPCTi5Vn1pcAttJxLYjPD6jYuSKeEB7g K+JOWsge6C8mE6/FtipljyYFwLfejRZlEUCOv0K7UoZf6z64tv5ITY8ZYVRCW9Je Z1PZzQ== -----END CERTIFICATE-----Generated at Wed May 8 15:17:43 2024 by rpki-client on console-fra.rpki-client.org