$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142384.roa File: AS142384.roa (raw, json) Hash identifier: F7RJz+k9k0MTwUjKXd+2B3BBY0eZPjFVtJLY4oh6XE0= Subject key identifier: 29:57:45:90:1C:56:8B:3E:66:4F:80:C4:BB:68:8A:F7:0A:CA:3B:3F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2DDE5ED50171F7883AA41E9C5BAF4D053D5720B3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142384.roa Signing time: Wed 21 Jun 2023 23:55:55 +0000 ROA not before: Wed 21 Jun 2023 23:50:55 +0000 ROA not after: Wed 19 Jun 2024 23:55:55 +0000 asID: 142384 IP address blocks: 103.184.30.0/24 maxlen: 24 103.225.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:de:5e:d5:01:71:f7:88:3a:a4:1e:9c:5b:af:4d:05:3d:57:20:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 21 23:50:55 2023 GMT Not After : Jun 19 23:55:55 2024 GMT Subject: CN=295745901C568B3E664F80C4BB688AF70ACA3B3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:58:41:62:78:27:2d:2b:44:a7:5b:0b:dc:8a: a1:ea:33:c8:c6:57:d8:e7:22:ad:0b:36:85:59:d5: 2f:53:5e:36:49:3c:67:be:79:e8:2b:57:dc:86:50: ae:e8:6c:2b:8d:75:10:e8:50:52:0c:ca:20:fa:42: 70:75:87:d9:a6:6b:8d:55:85:38:9d:a5:e7:b7:97: cd:dd:d4:dc:dc:b6:66:ab:f2:bc:05:5c:59:4a:70: 16:c0:d5:25:c6:2a:0c:1a:62:4c:26:1a:b1:75:5b: 00:f7:f0:fc:3e:2e:a5:ad:03:2e:7d:cb:c2:1c:cb: 06:8f:c1:c4:9f:a0:25:fe:ad:a9:b4:bc:f2:82:79: 56:40:ac:a0:df:06:c1:90:33:fa:4e:10:90:58:29: 6d:2f:44:8d:44:71:ef:86:b4:69:20:47:9f:03:d1: 11:18:81:76:13:0b:09:b3:43:41:06:6e:6d:c6:a9: 4b:b6:4a:15:dd:df:df:36:3e:99:6e:fe:a7:2b:2f: f0:fb:f5:81:ec:7b:62:85:db:d3:65:1d:f6:e5:56: 62:56:44:b9:aa:08:78:64:9c:50:aa:ab:ba:e8:9a: 48:d8:c8:03:83:f5:c1:3d:1f:a4:89:c6:9b:27:7e: 5d:e5:a8:2c:1d:b1:d2:bf:17:cb:48:24:e9:cd:50: 8c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:57:45:90:1C:56:8B:3E:66:4F:80:C4:BB:68:8A:F7:0A:CA:3B:3F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142384.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.30.0/24 103.225.19.0/24 Signature Algorithm: sha256WithRSAEncryption 51:98:7d:9c:65:7a:13:72:c2:c4:9b:c7:ac:df:28:9a:22:b0: 63:9c:59:51:8f:27:71:09:5e:65:74:1d:d4:71:f8:04:74:34: ec:98:04:f9:4f:43:6b:cc:34:37:86:99:a9:47:94:7c:f5:74: b6:ea:af:b3:c0:83:df:f6:6c:10:1f:0b:2f:2b:30:9b:17:ef: 20:c5:72:3b:ad:fe:74:d7:12:90:ad:54:b8:ac:c1:3f:29:91: 62:c0:11:c5:98:8e:06:32:c3:63:2e:7f:e5:08:e2:36:0c:68: 9a:fa:ff:9a:8b:af:ad:2b:1e:4e:18:09:39:00:8e:0b:2e:66: 37:6e:5e:38:d9:26:0c:a0:c9:c3:33:41:29:fa:28:8f:0d:e0: f6:42:a1:d4:cc:1b:79:4d:4c:b7:be:ab:ce:a5:41:c1:56:d0: 06:66:dc:fc:e9:a7:6c:fc:16:0c:5c:a0:4e:0d:db:3a:0a:06: 91:f7:34:0f:6c:7c:06:9b:30:c4:5d:db:07:20:62:c6:04:80: de:3d:70:b3:30:37:37:29:15:e5:80:7e:55:c1:e7:8c:97:89: c4:84:18:37:f9:dc:ac:29:bb:b6:97:0c:85:89:b2:dc:99:97: 10:2f:33:50:b0:64:4e:15:00:76:08:4d:6e:67:60:17:e0:f4: 91:37:d2:9d -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIULd5e1QFx94g6pB6cW69NBT1XILMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYyMTIzNTA1NVoX DTI0MDYxOTIzNTU1NVowMzExMC8GA1UEAxMoMjk1NzQ1OTAxQzU2OEIzRTY2NEY4 MEM0QkI2ODhBRjcwQUNBM0IzRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANpYQWJ4Jy0rRKdbC9yKoeozyMZX2OcirQs2hVnVL1NeNkk8Z7556CtX3IZQ ruhsK411EOhQUgzKIPpCcHWH2aZrjVWFOJ2l57eXzd3U3Ny2ZqvyvAVcWUpwFsDV JcYqDBpiTCYasXVbAPfw/D4upa0DLn3LwhzLBo/BxJ+gJf6tqbS88oJ5VkCsoN8G wZAz+k4QkFgpbS9EjURx74a0aSBHnwPRERiBdhMLCbNDQQZubcapS7ZKFd3f3zY+ mW7+pysv8Pv1gex7YoXb02Ud9uVWYlZEuaoIeGScUKqruuiaSNjIA4P1wT0fpInG myd+XeWoLB2x0r8Xy0gk6c1QjOUCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBQpV0WQ HFaLPmZPgMS7aIr3Cso7PzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjM4NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAGe4HgMEAGfhEzANBgkqhkiG9w0BAQsFAAOCAQEAUZh9nGV6E3LC xJvHrN8omiKwY5xZUY8ncQleZXQd1HH4BHQ07JgE+U9Da8w0N4aZqUeUfPV0tuqv s8CD3/ZsEB8LLyswmxfvIMVyO63+dNcSkK1UuKzBPymRYsARxZiOBjLDYy5/5Qji Ngxomvr/mouvrSseThgJOQCOCy5mN25eONkmDKDJwzNBKfoojw3g9kKh1MwbeU1M t76rzqVBwVbQBmbc/OmnbPwWDFygTg3bOgoGkfc0D2x8BpswxF3bByBixgSA3j1w szA3NykV5YB+VcHnjJeJxIQYN/ncrCm7tpcMhYmy3JmXEC8zULBkThUAdghNbmdg F+D0kTfSnQ== -----END CERTIFICATE-----Generated at Wed May 8 17:45:22 2024 by rpki-client on console-ams.rpki-client.org