$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142376.roa File: AS142376.roa (raw, json) Hash identifier: Wi7z2cqRGklV/2iVkiCN9B4JrRuVOYb/Qa6wghn5Up0= Subject key identifier: 80:05:C3:8D:2D:4E:5E:0A:71:A8:40:90:A7:EA:B7:9B:68:C7:7E:57 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5B7BBCACCB5AAE53972E66D32966BE6C1BBF2E60 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142376.roa Signing time: Mon 29 Jul 2024 10:00:00 +0000 ROA not before: Mon 29 Jul 2024 09:55:00 +0000 ROA not after: Mon 28 Jul 2025 10:00:00 +0000 asID: 142376 IP address blocks: 103.187.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:7b:bc:ac:cb:5a:ae:53:97:2e:66:d3:29:66:be:6c:1b:bf:2e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jul 29 09:55:00 2024 GMT Not After : Jul 28 10:00:00 2025 GMT Subject: CN=8005C38D2D4E5E0A71A84090A7EAB79B68C77E57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9c:02:19:0d:fd:eb:38:17:03:b6:df:b8:13: ac:81:85:34:74:aa:e9:09:ca:6c:ff:b5:09:af:03: ab:39:72:fd:3b:1d:7f:4f:9b:fa:c3:28:97:b1:3e: 7b:88:90:30:c4:00:85:f7:50:b1:52:d5:d6:db:56: 1a:32:61:f1:f2:03:90:db:10:78:73:c8:0e:d7:56: 43:3c:30:f4:3e:0d:e1:6c:38:d3:de:33:18:9e:73: 23:fb:43:3e:80:e7:43:ef:97:21:03:b0:59:f1:f0: 1c:33:c8:31:c4:9d:82:3c:ae:bf:ad:86:1d:31:af: 06:4f:32:49:62:c8:e7:18:a3:cf:90:a3:ce:db:7a: 89:4d:97:49:d0:f8:7c:06:ed:18:5a:40:cc:47:dc: 3b:04:32:0a:7d:44:c7:26:76:6c:71:07:ad:3b:00: 60:4e:4e:84:4f:0a:9c:f1:0c:e4:42:d2:8e:14:cd: d1:2d:52:9c:5d:51:0c:bd:cc:dc:c7:b0:d6:04:f8: b0:45:21:57:01:4b:48:bd:ad:57:ad:b9:0f:f0:80: dc:d3:b0:c0:2e:23:c7:a7:39:d4:28:5c:2d:c7:9a: 00:fe:30:0f:3e:96:1f:54:b7:15:b8:0a:9d:fb:8c: c7:0c:97:76:ed:10:1b:f0:27:ea:73:fb:5d:aa:3a: 60:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:05:C3:8D:2D:4E:5E:0A:71:A8:40:90:A7:EA:B7:9B:68:C7:7E:57 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142376.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.187.106.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:77:44:f0:fa:ad:8f:d0:a4:b9:40:d2:db:9d:f4:42:de:85: c1:4b:34:74:24:61:7d:dd:12:0a:a4:0f:9d:f5:24:72:6f:23: 60:6b:70:43:f4:ff:f7:49:06:16:ee:66:57:27:91:a2:f6:33: 65:e1:dc:78:78:aa:df:59:82:24:b2:92:96:db:13:dc:e0:0a: 02:e7:33:10:fd:cc:6b:69:af:14:03:5c:5b:7b:a4:66:96:eb: 2c:a9:be:e7:88:0d:e1:f2:bb:1c:1e:63:64:52:43:9e:e5:99: 3d:5d:91:d2:08:de:0d:29:f1:c4:28:dc:9f:05:7c:ad:7d:3c: 46:e6:65:41:42:65:1b:f3:1f:01:91:7f:c3:d9:ad:02:13:57: 5f:8f:c4:45:b1:01:57:3a:74:80:76:a2:e9:8d:f3:4f:44:31: df:a9:1b:f5:28:34:d7:5d:27:0c:9f:bb:5e:87:6b:94:35:3e: b5:b5:43:96:09:10:e0:5a:5f:e1:b2:85:40:0e:7f:93:c9:a6: b2:39:9c:d1:64:1b:7d:d1:b6:87:40:c7:17:1e:46:a3:56:b2: d9:98:41:9e:84:39:35:e7:f7:ee:9d:55:d5:1c:a6:8a:5f:b8: 71:af:cb:ce:12:22:31:3e:d8:87:b6:71:8b:7d:80:17:c9:d5: 93:fb:83:58 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUW3u8rMtarlOXLmbTKWa+bBu/LmAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcyOTA5NTUwMFoX DTI1MDcyODEwMDAwMFowMzExMC8GA1UEAxMoODAwNUMzOEQyRDRFNUUwQTcxQTg0 MDkwQTdFQUI3OUI2OEM3N0U1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANycAhkN/es4FwO237gTrIGFNHSq6QnKbP+1Ca8Dqzly/Tsdf0+b+sMol7E+ e4iQMMQAhfdQsVLV1ttWGjJh8fIDkNsQeHPIDtdWQzww9D4N4Ww4094zGJ5zI/tD PoDnQ++XIQOwWfHwHDPIMcSdgjyuv62GHTGvBk8ySWLI5xijz5Cjztt6iU2XSdD4 fAbtGFpAzEfcOwQyCn1ExyZ2bHEHrTsAYE5OhE8KnPEM5ELSjhTN0S1SnF1RDL3M 3Mew1gT4sEUhVwFLSL2tV625D/CA3NOwwC4jx6c51ChcLceaAP4wDz6WH1S3FbgK nfuMxwyXdu0QG/An6nP7Xao6YKECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSABcON LU5eCnGoQJCn6rebaMd+VzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjM3Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGe7ajANBgkqhkiG9w0BAQsFAAOCAQEAe3dE8Pqtj9CkuUDS2530 Qt6FwUs0dCRhfd0SCqQPnfUkcm8jYGtwQ/T/90kGFu5mVyeRovYzZeHceHiq31mC JLKSltsT3OAKAuczEP3Ma2mvFANcW3ukZpbrLKm+54gN4fK7HB5jZFJDnuWZPV2R 0gjeDSnxxCjcnwV8rX08RuZlQUJlG/MfAZF/w9mtAhNXX4/ERbEBVzp0gHai6Y3z T0Qx36kb9Sg0110nDJ+7XodrlDU+tbVDlgkQ4Fpf4bKFQA5/k8mmsjmc0WQbfdG2 h0DHFx5Go1ay2ZhBnoQ5Nef37p1V1Rymil+4ca/LzhIiMT7Yh7Zxi32AF8nVk/uD WA== -----END CERTIFICATE-----Generated at Sun Feb 16 20:59:12 2025 by rpki-client