$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142360.roa File: AS142360.roa (raw, json) Hash identifier: xgCeQo1UgSExfhvDbzt9WuG7Et0XebidLmk6yiHv9Qo= Subject key identifier: D9:31:81:5F:39:F0:D5:2F:25:A3:F1:7A:16:29:56:0A:E2:E6:99:74 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3CBBAB086537E6214000D157FB7585682129F416 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142360.roa Signing time: Tue 10 Sep 2024 08:00:00 +0000 ROA not before: Tue 10 Sep 2024 07:55:00 +0000 ROA not after: Tue 09 Sep 2025 08:00:00 +0000 asID: 142360 IP address blocks: 43.240.227.0/24 maxlen: 24 103.85.54.0/23 maxlen: 24 103.248.216.0/24 maxlen: 24 2401:2620::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:bb:ab:08:65:37:e6:21:40:00:d1:57:fb:75:85:68:21:29:f4:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 10 07:55:00 2024 GMT Not After : Sep 9 08:00:00 2025 GMT Subject: CN=D931815F39F0D52F25A3F17A1629560AE2E69974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:21:d8:62:de:49:7e:0e:11:19:1a:19:f1:2d: 6f:ba:ec:c3:59:81:7c:a5:e2:4e:35:36:3f:d8:14: 41:5b:83:87:97:02:a6:e3:e2:c4:46:26:d6:74:b8: 3a:74:42:08:a6:57:8c:cc:35:3c:63:e8:c2:dd:b7: 14:5d:7f:47:0e:22:81:e7:97:45:54:2b:57:1c:bb: 85:f2:90:0b:0c:07:d3:e7:41:30:9f:1f:7b:d8:ce: 1e:b8:91:46:75:00:27:83:3a:29:13:0d:9c:65:22: b9:9e:1e:db:2e:c6:bf:f5:4f:ac:56:f3:1f:bf:c5: 17:1b:a9:4c:c1:0b:ac:30:f2:8c:49:b1:64:37:c8: ab:60:ed:2f:f1:a1:79:9a:51:ca:08:22:88:50:ea: ab:b5:8d:2f:87:5a:80:1d:e7:a0:49:6c:fb:ff:09: dd:73:5c:67:b6:c4:0f:56:ed:41:5f:ca:fd:f5:2f: 29:fe:dc:35:48:65:8f:1a:d6:a6:ba:3d:b3:79:af: 5c:dc:8c:b9:57:af:16:cb:ea:83:ca:68:04:80:8d: ab:fb:52:33:d9:c2:fa:85:75:cd:98:fa:8c:6d:2a: 2c:6f:4d:5c:06:7d:1a:00:65:0f:72:22:8d:0a:bd: 06:0d:f1:3e:93:75:d4:02:9b:f9:20:47:bd:09:43: 98:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:31:81:5F:39:F0:D5:2F:25:A3:F1:7A:16:29:56:0A:E2:E6:99:74 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142360.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.227.0/24 103.85.54.0/23 103.248.216.0/24 IPv6: 2401:2620::/32 Signature Algorithm: sha256WithRSAEncryption 7e:26:0a:f4:3a:74:81:5c:62:25:77:c1:51:69:b8:bd:eb:64: 7d:39:76:80:83:67:5c:8f:5f:62:b8:94:f8:ea:44:3a:e9:a2: ec:a3:08:4a:5e:10:17:d6:59:f5:e7:4d:a1:ee:c9:b8:f2:17: 74:a8:39:a1:8e:11:51:e0:e8:cc:a6:64:95:1d:0f:ba:fd:56: 64:e3:34:24:5e:20:c4:5e:b7:78:b5:f8:23:78:86:d7:71:3c: 27:9f:1d:50:38:91:8e:fc:e2:ee:6c:e2:80:12:fb:6b:99:ae: 1f:8b:d7:de:f7:8e:08:2e:01:6e:88:18:d4:c3:74:80:5a:b8: bf:6b:4d:7e:92:fa:aa:2d:73:f6:b5:16:9e:e6:d8:f0:1f:37: 86:ca:91:d7:d1:50:7d:2b:ea:2a:d0:4f:1d:87:ee:a1:ed:71: 45:f7:1e:a4:a9:d6:28:f3:ee:17:b1:3e:c5:5f:f4:5a:63:bf: ce:25:df:30:a1:a4:b1:0c:2f:23:80:50:af:89:5f:54:9b:b2: f9:83:f2:5e:f0:ad:eb:a2:e1:c6:34:2e:c9:95:57:04:9c:b6: 39:37:82:3e:d7:93:5f:37:56:2b:2e:55:6d:50:20:ae:0a:a1: da:3b:1d:98:70:e7:7b:78:7d:b0:34:f4:dd:23:2c:aa:1d:c5: 81:c3:62:9a -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgIUPLurCGU35iFAANFX+3WFaCEp9BYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkxMDA3NTUwMFoX DTI1MDkwOTA4MDAwMFowMzExMC8GA1UEAxMoRDkzMTgxNUYzOUYwRDUyRjI1QTNG MTdBMTYyOTU2MEFFMkU2OTk3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANAh2GLeSX4OERkaGfEtb7rsw1mBfKXiTjU2P9gUQVuDh5cCpuPixEYm1nS4 OnRCCKZXjMw1PGPowt23FF1/Rw4igeeXRVQrVxy7hfKQCwwH0+dBMJ8fe9jOHriR RnUAJ4M6KRMNnGUiuZ4e2y7Gv/VPrFbzH7/FFxupTMELrDDyjEmxZDfIq2DtL/Gh eZpRyggiiFDqq7WNL4dagB3noEls+/8J3XNcZ7bED1btQV/K/fUvKf7cNUhljxrW pro9s3mvXNyMuVevFsvqg8poBICNq/tSM9nC+oV1zZj6jG0qLG9NXAZ9GgBlD3Ii jQq9Bg3xPpN11AKb+SBHvQlDmKkCAwEAAaOCAeswggHnMB0GA1UdDgQWBBTZMYFf OfDVLyWj8XoWKVYK4uaZdDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjM2MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB/wQrMCkw GAQCAAEwEgMEACvw4wMEAWdVNgMEAGf42DANBAIAAjAHAwUAJAEmIDANBgkqhkiG 9w0BAQsFAAOCAQEAfiYK9Dp0gVxiJXfBUWm4vetkfTl2gINnXI9fYriU+OpEOumi 7KMISl4QF9ZZ9edNoe7JuPIXdKg5oY4RUeDozKZklR0Puv1WZOM0JF4gxF63eLX4 I3iG13E8J58dUDiRjvzi7mzigBL7a5muH4vX3veOCC4BbogY1MN0gFq4v2tNfpL6 qi1z9rUWnubY8B83hsqR19FQfSvqKtBPHYfuoe1xRfcepKnWKPPuF7E+xV/0WmO/ ziXfMKGksQwvI4BQr4lfVJuy+YPyXvCt66LhxjQuyZVXBJy2OTeCPteTXzdWKy5V bVAgrgqh2jsdmHDne3h9sDT03SMsqh3FgcNimg== -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:28 2024 by rpki-client on console-ams.rpki-client.org