$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142384.roa File: AS142384.roa (raw, json) Hash identifier: LdMGsBy3eAD37r0W43nnfvzS0a2twUlqLRePuw7WF8I= Subject key identifier: FE:46:97:48:5D:C2:7A:61:FF:F1:44:A1:64:23:6F:2F:F9:A5:14:90 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 40F44D5BF9EF6099859A1C824D27D540DE5F7942 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142384.roa Signing time: Thu 23 May 2024 00:00:00 +0000 ROA not before: Wed 22 May 2024 23:55:00 +0000 ROA not after: Thu 22 May 2025 00:00:00 +0000 asID: 142384 IP address blocks: 103.184.30.0/24 maxlen: 24 103.225.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f4:4d:5b:f9:ef:60:99:85:9a:1c:82:4d:27:d5:40:de:5f:79:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 22 23:55:00 2024 GMT Not After : May 22 00:00:00 2025 GMT Subject: CN=FE4697485DC27A61FFF144A164236F2FF9A51490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:47:fb:67:1f:c2:a4:8c:b6:0a:32:84:71:02: 7b:71:e1:6b:89:fa:71:96:c7:c9:0c:4b:07:22:d1: 3e:b8:58:ca:79:dd:a9:dc:e7:62:e7:06:ad:96:3f: 8b:26:f6:5c:50:96:4f:92:d1:76:dd:a0:0f:91:ad: 3a:e1:76:d4:05:bc:4e:23:24:ef:8e:bb:40:3e:39: fb:bf:4e:bd:6e:4b:ca:21:80:93:c8:4c:94:8f:4a: d8:7d:e9:28:fc:c6:90:3f:d4:de:b3:15:37:8b:dd: 19:63:32:3a:d1:04:fd:b9:1c:15:da:98:4c:79:59: c4:95:56:f7:7e:1b:00:4e:73:fd:d6:8f:eb:27:0a: dc:8f:b2:1b:ac:5d:f5:a4:8c:9c:dc:58:f4:55:5f: 29:82:53:ad:c1:26:17:2c:2c:ba:66:d1:cc:84:7b: 57:0c:6a:4b:93:9a:92:17:fe:c9:6a:da:b3:a8:12: 68:fd:3b:89:39:45:3d:08:f5:86:d0:b4:8e:6a:86: 16:de:86:5c:f1:0c:f8:92:ff:94:4d:53:67:b5:1c: 0d:95:9f:bf:12:8d:61:89:6f:25:46:34:0b:35:eb: ff:a4:b9:d2:e0:8d:aa:37:18:6b:b9:7c:82:81:83: 59:53:d1:f6:63:f8:f5:96:3a:b9:44:9e:d2:24:07: 55:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:46:97:48:5D:C2:7A:61:FF:F1:44:A1:64:23:6F:2F:F9:A5:14:90 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142384.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.30.0/24 103.225.19.0/24 Signature Algorithm: sha256WithRSAEncryption 16:cc:be:c2:af:a9:9b:10:92:5c:63:64:c0:99:a3:b9:2e:90: 13:a5:01:07:6f:62:0e:a1:83:29:f4:b5:39:21:ea:e8:a7:9d: 5a:70:a6:55:6f:c2:9b:fb:99:49:c9:f2:bd:65:82:0f:12:e2: ef:37:1b:34:18:fd:a5:59:21:ba:92:35:96:1b:5a:92:c1:da: 84:8f:52:b5:29:28:f9:31:12:00:89:b2:29:14:95:e8:9e:af: 4a:b4:aa:8a:f1:66:58:6f:58:24:04:4c:00:5c:c7:71:6b:07: 4b:36:88:dc:c4:4c:5d:54:7f:9a:e4:59:43:f9:12:f1:28:59: 6b:61:6d:41:b4:2f:dd:59:40:c3:a8:1c:5c:fa:ae:9f:0a:24: 2f:06:c4:ff:92:ef:53:3b:c8:89:59:fb:74:13:a9:19:4f:27: e4:b9:e9:bc:e4:3d:35:3b:10:42:f5:04:0d:01:7c:11:9e:7d: 0d:72:59:64:51:9d:e4:f6:0b:a5:57:c4:e1:99:70:1c:30:a3: 77:d3:f2:db:f9:fa:37:15:73:5c:63:f4:22:69:9d:1c:96:c4: 9d:ee:57:b4:21:ac:f2:5b:2a:33:77:16:1e:a0:57:37:be:ed: 8f:29:c9:a3:e7:36:e4:60:2f:53:70:6a:60:d8:da:c0:9e:a9: 30:0a:28:2c -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUQPRNW/nvYJmFmhyCTSfVQN5feUIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUyMjIzNTUwMFoX DTI1MDUyMjAwMDAwMFowMzExMC8GA1UEAxMoRkU0Njk3NDg1REMyN0E2MUZGRjE0 NEExNjQyMzZGMkZGOUE1MTQ5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMtH+2cfwqSMtgoyhHECe3Hha4n6cZbHyQxLByLRPrhYynndqdznYucGrZY/ iyb2XFCWT5LRdt2gD5GtOuF21AW8TiMk7467QD45+79OvW5LyiGAk8hMlI9K2H3p KPzGkD/U3rMVN4vdGWMyOtEE/bkcFdqYTHlZxJVW934bAE5z/daP6ycK3I+yG6xd 9aSMnNxY9FVfKYJTrcEmFywsumbRzIR7VwxqS5Oakhf+yWras6gSaP07iTlFPQj1 htC0jmqGFt6GXPEM+JL/lE1TZ7UcDZWfvxKNYYlvJUY0CzXr/6S50uCNqjcYa7l8 goGDWVPR9mP49ZY6uUSe0iQHVbcCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBT+RpdI XcJ6Yf/xRKFkI28v+aUUkDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjM4NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAGe4HgMEAGfhEzANBgkqhkiG9w0BAQsFAAOCAQEAFsy+wq+pmxCS XGNkwJmjuS6QE6UBB29iDqGDKfS1OSHq6KedWnCmVW/Cm/uZScnyvWWCDxLi7zcb NBj9pVkhupI1lhtaksHahI9StSko+TESAImyKRSV6J6vSrSqivFmWG9YJARMAFzH cWsHSzaI3MRMXVR/muRZQ/kS8ShZa2FtQbQv3VlAw6gcXPqunwokLwbE/5LvUzvI iVn7dBOpGU8n5LnpvOQ9NTsQQvUEDQF8EZ59DXJZZFGd5PYLpVfE4ZlwHDCjd9Py 2/n6NxVzXGP0ImmdHJbEne5XtCGs8lsqM3cWHqBXN77tjynJo+c25GAvU3BqYNja wJ6pMAooLA== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:26 2024 by rpki-client on console-fra.rpki-client.org