$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142377.roa File: AS142377.roa (raw, json) Hash identifier: oRXzWAJ/DrgtDAUNOSCX9PHHwU+mibZ+K+u/CN7jTvg= Subject key identifier: 51:9C:1C:95:F5:A8:31:E9:F8:0E:A8:29:F3:A7:6F:8A:FF:F6:28:3F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 443A2C58C9A1F3E5656EAE01F149433529416A8B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142377.roa Signing time: Mon 03 Jul 2023 06:13:59 +0000 ROA not before: Mon 03 Jul 2023 06:08:59 +0000 ROA not after: Mon 01 Jul 2024 06:13:59 +0000 asID: 142377 IP address blocks: 2001:df2:78c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:3a:2c:58:c9:a1:f3:e5:65:6e:ae:01:f1:49:43:35:29:41:6a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 3 06:08:59 2023 GMT Not After : Jul 1 06:13:59 2024 GMT Subject: CN=519C1C95F5A831E9F80EA829F3A76F8AFFF6283F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3b:a8:a2:6d:2d:75:5b:2c:c1:b8:f6:61:ad: 59:b6:19:1e:d6:b0:eb:40:8a:c8:9e:fd:ad:9b:7b: 5f:a8:db:7f:a8:f7:a3:6e:26:ab:7c:1b:26:2a:40: 1c:b1:d0:41:c2:5b:c4:4e:4c:a3:36:a9:6c:84:9c: 7b:1c:23:8d:4b:f4:f8:76:2a:ad:17:72:d6:85:c2: 1b:88:dd:34:02:88:8a:63:b1:71:74:d4:b1:c4:b3: 67:4f:5f:37:5d:c5:18:a3:c2:f3:97:39:b0:62:92: 74:5a:03:fa:84:83:f4:ed:12:60:40:e6:ac:46:24: a5:46:be:f1:57:f8:5f:11:eb:8b:b9:be:6e:cf:8a: 12:f4:4c:c9:2d:4c:62:c2:b9:07:31:68:fc:ca:27: b9:6d:48:b9:de:2a:7c:50:07:20:30:92:5d:85:e1: 69:58:6d:d5:b2:7c:cd:ee:96:d8:ab:a8:6a:e0:3e: 16:76:99:62:55:e9:73:60:1f:01:f5:6f:83:ab:2d: 11:fe:6e:4b:06:a3:61:e8:00:c8:7d:60:51:67:45: 88:6c:4b:89:78:b2:ba:06:97:36:92:e8:75:54:b5: 97:0a:28:7b:84:ca:0a:55:62:46:72:5f:63:d2:04: 45:ba:62:bd:e3:f4:68:ac:2b:dc:4c:14:69:72:11: 2c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9C:1C:95:F5:A8:31:E9:F8:0E:A8:29:F3:A7:6F:8A:FF:F6:28:3F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142377.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:78c0::/48 Signature Algorithm: sha256WithRSAEncryption 75:53:a6:14:35:bf:56:73:cf:b1:93:5e:a5:f8:a4:7e:e7:5e: 62:29:7e:25:2a:f1:25:cf:7e:bd:33:69:45:52:73:e8:90:20: 7e:86:21:f8:00:57:7d:f6:36:fd:df:af:95:a8:6f:54:a3:e4: d4:6d:c6:da:2b:96:30:a4:27:4e:6c:df:21:7e:ee:2c:2f:eb: 79:de:cf:ba:b9:f9:64:72:f3:44:06:02:98:a9:fa:f2:47:c5: 37:20:31:0e:3b:23:93:ee:78:69:d3:38:ad:4e:26:8a:7b:6f: ea:38:fa:c2:43:88:58:0b:b7:fa:16:84:f8:1b:6f:6d:94:d3: b6:bf:96:70:46:8f:53:11:f4:74:fb:7f:6a:43:fe:52:c2:25: 41:6e:0d:cc:76:42:60:c8:17:40:c7:b6:d5:e6:2a:63:ed:bf: 01:0b:9b:69:4d:9b:e7:4b:57:cd:b1:89:92:a4:b2:8f:1e:ea: 4c:1a:47:b5:df:a0:4a:e3:59:47:29:01:f0:5e:b0:b2:ca:fe: e4:60:d5:1b:a5:03:6b:f5:c2:86:7e:ac:ba:8f:0c:ea:cc:61: e3:25:8a:d0:1f:dd:84:df:02:f2:e5:6e:09:55:2e:62:64:24: 00:12:ef:e3:25:5c:52:5b:5c:cd:f2:df:bd:69:55:52:10:9a: 1c:df:7b:b5 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIURDosWMmh8+Vlbq4B8UlDNSlBaoswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDcwMzA2MDg1OVoX DTI0MDcwMTA2MTM1OVowMzExMC8GA1UEAxMoNTE5QzFDOTVGNUE4MzFFOUY4MEVB ODI5RjNBNzZGOEFGRkY2MjgzRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL07qKJtLXVbLMG49mGtWbYZHtaw60CKyJ79rZt7X6jbf6j3o24mq3wbJipA HLHQQcJbxE5MozapbIScexwjjUv0+HYqrRdy1oXCG4jdNAKIimOxcXTUscSzZ09f N13FGKPC85c5sGKSdFoD+oSD9O0SYEDmrEYkpUa+8Vf4XxHri7m+bs+KEvRMyS1M YsK5BzFo/MonuW1Iud4qfFAHIDCSXYXhaVht1bJ8ze6W2KuoauA+FnaZYlXpc2Af AfVvg6stEf5uSwajYegAyH1gUWdFiGxLiXiyugaXNpLodVS1lwooe4TKClViRnJf Y9IERbpiveP0aKwr3EwUaXIRLCUCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBRRnByV 9agx6fgOqCnzp2+K//YoPzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjM3Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfJ4wDANBgkqhkiG9w0BAQsFAAOCAQEAdVOmFDW/VnPPsZNe pfikfudeYil+JSrxJc9+vTNpRVJz6JAgfoYh+ABXffY2/d+vlahvVKPk1G3G2iuW MKQnTmzfIX7uLC/red7Purn5ZHLzRAYCmKn68kfFNyAxDjsjk+54adM4rU4mintv 6jj6wkOIWAu3+haE+BtvbZTTtr+WcEaPUxH0dPt/akP+UsIlQW4NzHZCYMgXQMe2 1eYqY+2/AQubaU2b50tXzbGJkqSyjx7qTBpHtd+gSuNZRykB8F6wssr+5GDVG6UD a/XChn6suo8M6sxh4yWK0B/dhN8C8uVuCVUuYmQkABLv4yVcUltczfLfvWlVUhCa HN97tQ== -----END CERTIFICATE-----Generated at Tue May 7 16:42:40 2024 by rpki-client on console-ams.rpki-client.org