$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142374.roa File: AS142374.roa (raw, json) Hash identifier: Sx5kDHlVKjoxiycRjkQLk1vwo/hIet6idjV9Gv7rHdQ= Subject key identifier: 4A:86:5C:C6:3E:D8:E2:56:9D:43:EA:1D:6F:1E:B0:C5:40:3F:2B:8B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 706EBB30793A88C6BA1594BF9D824FFD294F48A1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142374.roa Signing time: Tue 09 Jul 2024 05:02:12 +0000 ROA not before: Tue 09 Jul 2024 04:57:12 +0000 ROA not after: Tue 08 Jul 2025 05:02:12 +0000 asID: 142374 IP address blocks: 2400:a060::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:6e:bb:30:79:3a:88:c6:ba:15:94:bf:9d:82:4f:fd:29:4f:48:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jul 9 04:57:12 2024 GMT Not After : Jul 8 05:02:12 2025 GMT Subject: CN=4A865CC63ED8E2569D43EA1D6F1EB0C5403F2B8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0d:f7:a2:c4:1b:b2:d2:88:aa:a7:18:df:34: e9:32:d0:99:57:e3:8f:48:ec:8b:1b:47:0e:9f:16: 69:a7:54:03:f3:fe:22:1e:dc:e7:cd:c8:73:f7:0e: 82:b9:a7:1c:74:ae:25:44:51:c0:08:29:71:31:42: 17:e7:3a:05:c7:7c:1c:3b:77:30:11:2d:27:07:67: 19:ed:35:5d:66:63:b8:f9:85:66:db:20:50:31:03: fc:8c:18:03:38:c6:53:a4:2f:4b:dc:fd:a9:8f:f1: 47:c1:b3:94:17:e7:f0:69:35:5d:db:af:95:73:47: 91:b7:35:0a:8f:2b:f1:c6:1b:e5:04:ce:98:2a:79: 50:18:f8:4d:81:e8:70:ee:e3:ea:0f:d1:63:b6:cd: 3d:9d:5a:73:c5:65:ba:68:54:0f:9b:31:f9:60:e8: cf:6a:1e:b2:e4:64:ac:08:61:6e:5b:65:cf:72:c8: 81:ab:94:1f:88:ae:76:b8:49:31:f8:8e:97:1d:26: 87:a0:e1:bc:26:7d:04:0b:43:1a:44:16:f6:de:ff: a2:65:98:6f:de:6b:6f:2d:ac:e6:99:2f:b9:02:77: 04:5a:d2:7e:94:d7:60:d2:a0:94:e8:e6:e4:49:c3: dc:9e:cd:48:98:70:22:3d:5b:47:c4:d5:83:ee:0e: c4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:86:5C:C6:3E:D8:E2:56:9D:43:EA:1D:6F:1E:B0:C5:40:3F:2B:8B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142374.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:a060::/32 Signature Algorithm: sha256WithRSAEncryption 0c:79:7e:50:a7:46:ed:aa:d5:59:a1:33:8d:07:e8:7a:c3:bd: a5:2c:79:29:c2:ec:85:1f:7c:df:8b:27:58:7e:c7:74:87:23: 7d:35:91:3e:50:76:98:43:76:09:d6:8d:21:8e:16:80:8b:a0: f5:e7:e2:13:58:45:01:bf:ce:fe:c9:80:06:45:6e:6e:51:fd: c9:98:f1:13:5c:33:b7:87:73:cb:5d:7f:81:f3:65:bd:7a:09: 29:d0:83:4f:ef:0b:cd:ec:41:49:03:d2:d8:79:21:b5:dd:21: a7:71:87:1e:03:e3:ce:60:90:2c:01:e3:80:f6:87:dd:48:f9: 2c:7e:59:c9:42:b6:9c:7b:e6:e1:05:e3:6c:b4:3f:3d:c5:14: 4a:0b:be:02:e7:55:1a:83:d5:97:a3:b8:26:85:9b:62:b6:96: ac:84:cf:10:b5:3c:f6:1a:d7:29:45:07:f8:94:bf:56:f3:0b: 89:34:a5:fe:92:c6:06:d2:95:9f:0a:83:1c:77:eb:e9:0e:3b: e6:7f:9d:bb:98:3f:a4:da:83:1a:50:2e:cb:d6:c2:3c:ed:44: a1:07:95:df:d8:a1:52:1b:6f:94:42:e8:65:9e:85:c7:ab:ac: de:ff:06:5b:6f:ce:13:31:12:47:dc:64:36:74:da:6e:23:2c: 47:68:34:b5 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUcG67MHk6iMa6FZS/nYJP/SlPSKEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwOTA0NTcxMloX DTI1MDcwODA1MDIxMlowMzExMC8GA1UEAxMoNEE4NjVDQzYzRUQ4RTI1NjlENDNF QTFENkYxRUIwQzU0MDNGMkI4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALwN96LEG7LSiKqnGN806TLQmVfjj0jsixtHDp8WaadUA/P+Ih7c583Ic/cO grmnHHSuJURRwAgpcTFCF+c6Bcd8HDt3MBEtJwdnGe01XWZjuPmFZtsgUDED/IwY AzjGU6QvS9z9qY/xR8GzlBfn8Gk1XduvlXNHkbc1Co8r8cYb5QTOmCp5UBj4TYHo cO7j6g/RY7bNPZ1ac8VlumhUD5sx+WDoz2oesuRkrAhhbltlz3LIgauUH4iudrhJ MfiOlx0mh6DhvCZ9BAtDGkQW9t7/omWYb95rby2s5pkvuQJ3BFrSfpTXYNKglOjm 5EnD3J7NSJhwIj1bR8TVg+4OxGUCAwEAAaOCAdEwggHNMB0GA1UdDgQWBBRKhlzG PtjiVp1D6h1vHrDFQD8rizAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjM3NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQAoGAwDQYJKoZIhvcNAQELBQADggEBAAx5flCnRu2q1VmhM40H 6HrDvaUseSnC7IUffN+LJ1h+x3SHI301kT5QdphDdgnWjSGOFoCLoPXn4hNYRQG/ zv7JgAZFbm5R/cmY8RNcM7eHc8tdf4HzZb16CSnQg0/vC83sQUkD0th5IbXdIadx hx4D485gkCwB44D2h91I+Sx+WclCtpx75uEF42y0Pz3FFEoLvgLnVRqD1ZejuCaF m2K2lqyEzxC1PPYa1ylFB/iUv1bzC4k0pf6SxgbSlZ8Kgxx36+kOO+Z/nbuYP6Ta gxpQLsvWwjztRKEHld/YoVIbb5RC6GWehcerrN7/BltvzhMxEkfcZDZ02m4jLEdo NLU= -----END CERTIFICATE-----Generated at Sun Feb 16 20:57:19 2025 by rpki-client