$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142360.roa File: AS142360.roa (raw, json) Hash identifier: lgJjL24CeSbCKFIiH7zghHOHt7yiR1XjePTqLEi7GP4= Subject key identifier: 06:B1:F7:CA:6F:61:B5:E8:E1:EB:E0:C9:E6:25:31:F4:37:B6:AA:50 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 47EB3ABA91FD09C8B95676C4FD159E650E1C3952 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142360.roa Signing time: Tue 10 Oct 2023 07:01:58 +0000 ROA not before: Tue 10 Oct 2023 06:56:58 +0000 ROA not after: Tue 08 Oct 2024 07:01:58 +0000 asID: 142360 IP address blocks: 43.240.227.0/24 maxlen: 24 103.85.54.0/23 maxlen: 24 103.248.216.0/24 maxlen: 24 2401:2620::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:eb:3a:ba:91:fd:09:c8:b9:56:76:c4:fd:15:9e:65:0e:1c:39:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 10 06:56:58 2023 GMT Not After : Oct 8 07:01:58 2024 GMT Subject: CN=06B1F7CA6F61B5E8E1EBE0C9E62531F437B6AA50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:af:3d:12:03:96:4e:d7:be:be:86:9d:88:43: c7:d7:2b:2e:80:38:e7:63:e7:e8:f1:4f:80:8b:52: 18:5b:58:5c:8a:c4:9b:f0:10:6a:97:bb:b8:d9:43: 5f:6e:ae:9e:17:e6:48:5c:b3:42:3f:6d:87:ef:b1: 90:41:49:f4:d4:66:b3:91:08:7f:51:c5:c3:83:a7: 01:c6:8b:97:7e:ab:dc:f5:35:ff:c3:26:96:cc:9d: 18:80:e0:a7:e5:e4:41:40:18:6f:72:73:5e:96:ee: 3f:f9:5a:f6:02:c0:24:45:5b:44:c6:dc:ec:2a:a3: 46:9d:66:b6:8a:cf:5a:a1:fd:f1:51:0f:32:69:94: f9:59:69:2d:bd:32:90:fb:cd:5f:3b:d4:b4:8c:03: 0c:d0:06:f3:93:c9:3c:33:54:47:2b:cc:24:4b:0e: 0a:8f:95:cc:39:dc:7c:61:51:01:f7:42:59:7b:9d: 50:a8:fc:11:a6:73:15:9d:57:ea:e8:92:77:40:3d: 43:4a:8e:07:8d:52:b2:23:d2:62:29:62:df:79:87: 9a:a5:71:ef:dd:31:9b:10:e0:22:d0:f8:8b:90:2a: fc:87:e2:bb:ed:63:64:94:44:c2:bd:4b:74:6b:30: 9c:b6:0d:44:da:b9:5c:9c:fe:71:66:b0:3b:22:44: 4a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B1:F7:CA:6F:61:B5:E8:E1:EB:E0:C9:E6:25:31:F4:37:B6:AA:50 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142360.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.227.0/24 103.85.54.0/23 103.248.216.0/24 IPv6: 2401:2620::/32 Signature Algorithm: sha256WithRSAEncryption 4f:56:e2:fc:f3:b3:89:21:2a:e6:09:09:85:a9:e4:89:49:6a: 0e:58:14:e4:4c:b6:37:22:32:e4:58:d6:87:cf:b3:91:d5:82: e9:0d:e6:56:f2:42:54:1e:7e:bf:92:9a:24:16:ce:f4:ce:c3: f0:14:55:10:36:f9:b1:37:5a:80:8c:c1:a0:01:eb:01:b6:ec: 35:21:23:c1:a8:33:4b:16:c9:01:ef:da:50:2b:ad:45:12:37: 39:47:62:e2:2a:17:92:1b:fb:5a:4f:f6:a1:8d:80:ce:c9:a1: 13:3d:33:c0:17:e6:4e:e3:a7:73:e4:65:00:32:b4:2b:ed:ff: e5:18:0b:6b:e0:24:2c:c9:bb:f0:00:5f:33:f9:40:4b:8e:c5: e2:c9:1f:02:1b:23:b6:88:6a:ca:6f:dd:2b:52:28:27:2e:f2: 08:f7:28:ea:aa:a2:a0:ce:31:d2:ff:b6:26:4a:5f:7f:01:6d: 4d:e7:30:ce:ef:33:d9:35:3f:32:20:84:77:7d:a8:fb:33:b5: 2a:c0:b3:c1:b5:be:0d:fb:1a:81:6b:8b:70:2a:19:45:46:e8: 31:18:5a:a0:09:c4:ec:22:e6:2e:bc:43:41:d1:48:6b:9c:0f: 55:4e:3f:b5:88:39:07:e5:e8:f0:cc:83:c2:f8:70:54:72:55: 74:60:71:49 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgIUR+s6upH9Cci5VnbE/RWeZQ4cOVIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAxMDA2NTY1OFoX DTI0MTAwODA3MDE1OFowMzExMC8GA1UEAxMoMDZCMUY3Q0E2RjYxQjVFOEUxRUJF MEM5RTYyNTMxRjQzN0I2QUE1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOGvPRIDlk7Xvr6GnYhDx9crLoA452Pn6PFPgItSGFtYXIrEm/AQape7uNlD X26unhfmSFyzQj9th++xkEFJ9NRms5EIf1HFw4OnAcaLl36r3PU1/8MmlsydGIDg p+XkQUAYb3JzXpbuP/la9gLAJEVbRMbc7CqjRp1mtorPWqH98VEPMmmU+VlpLb0y kPvNXzvUtIwDDNAG85PJPDNURyvMJEsOCo+VzDncfGFRAfdCWXudUKj8EaZzFZ1X 6uiSd0A9Q0qOB41SsiPSYili33mHmqVx790xmxDgItD4i5Aq/Ifiu+1jZJREwr1L dGswnLYNRNq5XJz+cWawOyJESl8CAwEAAaOCAeswggHnMB0GA1UdDgQWBBQGsffK b2G16OHr4MnmJTH0N7aqUDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjM2MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB/wQrMCkw GAQCAAEwEgMEACvw4wMEAWdVNgMEAGf42DANBAIAAjAHAwUAJAEmIDANBgkqhkiG 9w0BAQsFAAOCAQEAT1bi/POziSEq5gkJhankiUlqDlgU5Ey2NyIy5FjWh8+zkdWC 6Q3mVvJCVB5+v5KaJBbO9M7D8BRVEDb5sTdagIzBoAHrAbbsNSEjwagzSxbJAe/a UCutRRI3OUdi4ioXkhv7Wk/2oY2AzsmhEz0zwBfmTuOnc+RlADK0K+3/5RgLa+Ak LMm78ABfM/lAS47F4skfAhsjtohqym/dK1IoJy7yCPco6qqioM4x0v+2JkpffwFt Tecwzu8z2TU/MiCEd32o+zO1KsCzwbW+DfsagWuLcCoZRUboMRhaoAnE7CLmLrxD QdFIa5wPVU4/tYg5B+Xo8MyDwvhwVHJVdGBxSQ== -----END CERTIFICATE-----Generated at Wed May 8 21:02:22 2024 by rpki-client on console-fra.rpki-client.org