$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142377.roa File: AS142377.roa (raw, json) Hash identifier: u+Rl/Tc3zxIJohMuL+mvHVyEIlSVwKcKDQA7wfH5UYI= Subject key identifier: 8A:2F:AF:0E:D8:7F:FD:43:6F:47:38:9D:C4:B8:52:46:7F:0E:62:22 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 75DE047673A5930A4EA60495F07F0D55F93C7E6E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142377.roa Signing time: Mon 03 Jun 2024 07:00:00 +0000 ROA not before: Mon 03 Jun 2024 06:55:00 +0000 ROA not after: Mon 02 Jun 2025 07:00:00 +0000 asID: 142377 IP address blocks: 2001:df2:78c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:de:04:76:73:a5:93:0a:4e:a6:04:95:f0:7f:0d:55:f9:3c:7e:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 06:55:00 2024 GMT Not After : Jun 2 07:00:00 2025 GMT Subject: CN=8A2FAF0ED87FFD436F47389DC4B852467F0E6222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3b:b0:91:ff:6a:7f:02:fd:c1:8b:36:e7:cb: 1e:05:30:0a:cb:2d:66:28:98:2f:de:dc:d4:60:c1: 42:c5:9e:09:b5:ef:24:d3:c9:38:44:af:ec:3a:5d: 73:43:9a:91:d5:e4:ba:36:a7:92:89:3f:8c:dc:ff: 9a:f4:31:e9:ad:46:16:11:22:97:c9:62:f0:84:02: 7e:0c:ed:a6:42:4b:b5:94:6a:76:4e:55:c9:90:18: 30:79:38:c4:4f:da:a2:8b:c2:5f:68:65:26:ae:d0: 59:fa:d7:1f:33:f4:d9:0e:1f:c9:06:d1:ee:44:96: f7:d6:87:08:1a:de:34:14:25:19:15:06:90:30:5a: eb:2f:24:d4:75:cd:1b:23:5c:0f:a2:7f:50:75:1a: 4f:a0:bc:ae:58:57:29:83:64:e3:4e:62:54:c7:e6: ff:9d:23:23:29:eb:11:53:50:79:94:39:c6:be:01: 4b:c4:60:1f:e5:73:41:9a:4f:03:d1:97:f1:25:9c: 71:62:2f:e1:dc:21:2d:35:96:b1:8b:37:b4:96:aa: 2c:d1:99:1a:5e:2d:99:9b:e0:cf:48:db:3b:95:ba: 41:d4:27:a1:f5:ff:a6:b8:ca:c5:3b:64:70:59:0f: 1e:e7:e2:30:c6:62:38:58:02:2f:6e:2b:45:32:24: 27:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2F:AF:0E:D8:7F:FD:43:6F:47:38:9D:C4:B8:52:46:7F:0E:62:22 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142377.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:78c0::/48 Signature Algorithm: sha256WithRSAEncryption 06:7b:5b:97:b4:ca:92:17:7d:36:78:15:9e:cb:65:a0:af:1c: 73:29:7c:cc:da:c9:5b:e5:6b:16:47:e1:9b:3b:f5:5d:01:6b: 65:e4:28:cc:e2:12:0c:47:6b:a1:34:ee:29:bb:88:4b:c4:80: 50:d1:6f:81:dd:96:a7:d7:9c:8b:79:5e:59:35:4b:82:62:8f: cc:a5:78:a8:86:a3:cc:08:44:65:5f:60:92:a7:42:51:dd:b0: 63:ba:0b:c1:66:2a:fc:05:89:ab:9a:8a:d9:74:ae:b7:b4:52: 62:79:a8:52:5a:bd:b7:2c:0a:7f:0f:0d:cd:61:9a:5e:66:84: 5c:74:ce:42:96:5a:8e:02:51:e7:40:ee:04:99:84:d3:11:61: 7b:d9:34:66:82:ba:f2:55:4b:fa:56:2c:b7:85:7a:de:04:5c: 37:23:4f:06:02:fa:4f:6d:50:f9:76:dd:fa:77:57:5e:32:c4: 21:82:11:26:d4:94:9a:74:76:07:e6:84:71:c6:31:3a:2c:0a: b9:e3:00:05:81:2c:5a:e7:0c:12:8e:84:72:cc:79:4a:2e:fa: 01:46:49:24:a0:45:a8:d8:ac:b6:a1:30:4b:46:8c:b7:fe:43: cb:2f:25:93:67:39:5f:95:3b:01:84:64:b5:cf:f1:86:eb:01: e8:83:d9:b6 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUdd4EdnOlkwpOpgSV8H8NVfk8fm4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDYwMzA2NTUwMFoX DTI1MDYwMjA3MDAwMFowMzExMC8GA1UEAxMoOEEyRkFGMEVEODdGRkQ0MzZGNDcz ODlEQzRCODUyNDY3RjBFNjIyMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKg7sJH/an8C/cGLNufLHgUwCsstZiiYL97c1GDBQsWeCbXvJNPJOESv7Dpd c0OakdXkujankok/jNz/mvQx6a1GFhEil8li8IQCfgztpkJLtZRqdk5VyZAYMHk4 xE/aoovCX2hlJq7QWfrXHzP02Q4fyQbR7kSW99aHCBreNBQlGRUGkDBa6y8k1HXN GyNcD6J/UHUaT6C8rlhXKYNk405iVMfm/50jIynrEVNQeZQ5xr4BS8RgH+VzQZpP A9GX8SWccWIv4dwhLTWWsYs3tJaqLNGZGl4tmZvgz0jbO5W6QdQnofX/prjKxTtk cFkPHufiMMZiOFgCL24rRTIkJ18CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBSKL68O 2H/9Q29HOJ3EuFJGfw5iIjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjM3Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfJ4wDANBgkqhkiG9w0BAQsFAAOCAQEABntbl7TKkhd9NngV nstloK8ccyl8zNrJW+VrFkfhmzv1XQFrZeQozOISDEdroTTuKbuIS8SAUNFvgd2W p9eci3leWTVLgmKPzKV4qIajzAhEZV9gkqdCUd2wY7oLwWYq/AWJq5qK2XSut7RS YnmoUlq9tywKfw8NzWGaXmaEXHTOQpZajgJR50DuBJmE0xFhe9k0ZoK68lVL+lYs t4V63gRcNyNPBgL6T21Q+Xbd+ndXXjLEIYIRJtSUmnR2B+aEccYxOiwKueMABYEs WucMEo6Ecsx5Si76AUZJJKBFqNistqEwS0aMt/5Dyy8lk2c5X5U7AYRktc/xhusB 6IPZtg== -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:28 2024 by rpki-client on console-ams.rpki-client.org