$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142374.roa File: AS142374.roa (raw, json) Hash identifier: /b2TrYjAg/nxXKlh+ckqsLbnu7jBtdWrr+Uh23IoYHg= Subject key identifier: 61:DD:F6:E5:A2:A7:B6:59:3A:0F:E9:C7:46:7A:08:AF:8E:B5:E7:82 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4C6662D4DE8FAE5588ABE962A458718A9F2DAD8E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142374.roa Signing time: Tue 08 Aug 2023 05:00:00 +0000 ROA not before: Tue 08 Aug 2023 04:55:00 +0000 ROA not after: Tue 06 Aug 2024 05:00:00 +0000 asID: 142374 IP address blocks: 2400:a060::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:66:62:d4:de:8f:ae:55:88:ab:e9:62:a4:58:71:8a:9f:2d:ad:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 8 04:55:00 2023 GMT Not After : Aug 6 05:00:00 2024 GMT Subject: CN=61DDF6E5A2A7B6593A0FE9C7467A08AF8EB5E782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1c:77:71:8d:e3:32:85:7a:7d:95:15:f7:fd: 0e:27:ff:37:63:4a:38:dc:e2:81:b2:9d:f5:e5:4b: f6:f1:f5:f0:bc:a8:ed:b5:df:66:fa:42:f1:c7:cf: c6:ae:e9:fa:43:b2:e2:6a:f4:78:c3:cf:55:05:fe: 0a:59:b4:18:66:ae:b9:de:83:be:ad:bf:00:33:6a: 8c:21:32:75:9f:60:ab:d5:e5:1c:b6:3e:da:54:bc: 5f:41:f9:a2:db:11:f2:e9:2c:64:a6:b5:58:00:c4: bb:ce:44:53:05:29:69:64:28:32:75:00:c2:a5:e5: 9f:e1:a5:d6:80:83:72:e6:65:8a:43:74:25:e5:a9: 30:af:ad:cd:cf:e9:00:7c:ce:02:58:86:c1:3a:47: ca:98:f9:28:3c:2e:e4:60:63:36:73:4e:7b:91:3b: 7e:c1:f6:7a:c0:12:84:5b:10:47:89:c3:8e:ec:13: b5:2f:40:e5:77:a2:bd:0c:ea:04:9a:31:48:a0:7c: 56:10:11:ea:3b:29:86:2c:eb:07:5c:70:15:c1:33: 17:df:ef:e0:f2:1b:c2:e4:9b:83:a3:2c:d3:92:06: 3c:35:5f:85:d3:8b:d2:d3:35:ce:19:08:f5:3e:8a: ab:89:f5:58:2a:0f:d2:af:cb:2b:f2:68:df:ae:bd: eb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DD:F6:E5:A2:A7:B6:59:3A:0F:E9:C7:46:7A:08:AF:8E:B5:E7:82 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142374.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:a060::/32 Signature Algorithm: sha256WithRSAEncryption 53:58:6f:ec:3c:cc:13:5c:a6:42:36:d7:70:c8:15:26:81:c7: 44:96:5a:c2:cc:df:df:b1:c4:49:54:23:01:42:19:fd:e9:f6: 8d:9d:3e:aa:b7:0f:13:4c:3e:9e:62:c8:07:a7:97:eb:ba:cc: 0d:09:20:45:6d:81:65:8d:49:4a:67:b2:db:72:90:85:f5:47: f3:b6:cc:c1:8a:7b:68:61:c1:76:ee:9d:e2:81:5d:68:42:24: cf:a6:8f:cb:aa:e3:56:83:4b:3e:04:ac:33:42:18:c6:94:88: b4:de:a9:74:bf:e9:f7:5c:87:fc:68:65:ae:ac:e2:82:e1:38: aa:68:ff:f9:5c:8e:34:53:17:23:21:de:0a:87:fe:56:dd:04: a3:c5:cf:96:fa:ab:4c:b0:31:f2:61:99:79:e7:a1:16:db:fd: 09:28:42:ce:ea:3e:aa:1b:11:8e:7c:28:ea:e5:b3:d1:46:e3: c3:93:a4:72:0e:d9:fc:82:1f:3c:6c:84:42:4e:f1:ab:d7:d8: 92:22:85:50:f3:ed:fd:54:4d:ce:60:23:1f:d1:52:a2:73:8d: 22:6c:cd:26:ee:56:bf:f1:7b:e6:f6:94:24:33:9b:da:71:16: 92:9e:c4:7a:33:fc:ce:c1:b0:ec:43:6e:24:9a:d2:55:0e:4f: e4:31:66:e1 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUTGZi1N6PrlWIq+lipFhxip8trY4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgwODA0NTUwMFoX DTI0MDgwNjA1MDAwMFowMzExMC8GA1UEAxMoNjFEREY2RTVBMkE3QjY1OTNBMEZF OUM3NDY3QTA4QUY4RUI1RTc4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANQcd3GN4zKFen2VFff9Dif/N2NKONzigbKd9eVL9vH18Lyo7bXfZvpC8cfP xq7p+kOy4mr0eMPPVQX+Clm0GGauud6Dvq2/ADNqjCEydZ9gq9XlHLY+2lS8X0H5 otsR8uksZKa1WADEu85EUwUpaWQoMnUAwqXln+Gl1oCDcuZlikN0JeWpMK+tzc/p AHzOAliGwTpHypj5KDwu5GBjNnNOe5E7fsH2esAShFsQR4nDjuwTtS9A5XeivQzq BJoxSKB8VhAR6jsphizrB1xwFcEzF9/v4PIbwuSbg6Ms05IGPDVfhdOL0tM1zhkI 9T6Kq4n1WCoP0q/LK/Jo366962UCAwEAAaOCAdEwggHNMB0GA1UdDgQWBBRh3fbl oqe2WToP6cdGegivjrXngjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjM3NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQAoGAwDQYJKoZIhvcNAQELBQADggEBAFNYb+w8zBNcpkI213DI FSaBx0SWWsLM39+xxElUIwFCGf3p9o2dPqq3DxNMPp5iyAenl+u6zA0JIEVtgWWN SUpnsttykIX1R/O2zMGKe2hhwXbuneKBXWhCJM+mj8uq41aDSz4ErDNCGMaUiLTe qXS/6fdch/xoZa6s4oLhOKpo//lcjjRTFyMh3gqH/lbdBKPFz5b6q0ywMfJhmXnn oRbb/QkoQs7qPqobEY58KOrls9FG48OTpHIO2fyCHzxshEJO8avX2JIihVDz7f1U Tc5gIx/RUqJzjSJszSbuVr/xe+b2lCQzm9pxFpKexHoz/M7BsOxDbiSa0lUOT+Qx ZuE= -----END CERTIFICATE-----Generated at Wed May 8 17:45:22 2024 by rpki-client on console-ams.rpki-client.org