$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142401.roa File: AS142401.roa (raw, json) Hash identifier: nc0h1mfn/80XqyXJt9Q0Ncajv7PGrFHN1b27meySo/U= Subject key identifier: 54:A5:B4:AA:77:A8:1E:2F:27:2F:CD:EA:8C:94:0D:33:BC:5B:F9:38 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3BD547BFD83C12B15A822B1240B4460B51D5EF46 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142401.roa Signing time: Fri 11 Oct 2024 09:00:00 +0000 ROA not before: Fri 11 Oct 2024 08:55:00 +0000 ROA not after: Fri 10 Oct 2025 09:00:00 +0000 asID: 142401 IP address blocks: 2001:df1:9840::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d5:47:bf:d8:3c:12:b1:5a:82:2b:12:40:b4:46:0b:51:d5:ef:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 11 08:55:00 2024 GMT Not After : Oct 10 09:00:00 2025 GMT Subject: CN=54A5B4AA77A81E2F272FCDEA8C940D33BC5BF938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e0:cd:31:98:8c:fa:6d:b0:ea:50:bd:1a:66: ce:cc:47:5f:67:16:6c:c5:fa:4f:ff:87:79:fb:39: 79:9a:4b:e2:dd:f6:50:41:19:3b:c5:a3:c5:f1:8b: c5:2d:39:d0:ab:58:f4:42:8d:bf:85:b2:74:b2:55: c6:8e:28:52:c0:13:8d:3a:5c:a4:a2:74:3a:bd:17: ad:d0:1a:c2:b2:b9:94:d8:fc:f8:dc:8f:06:76:c7: c0:16:d3:d2:8e:9e:18:60:05:bc:7b:c1:8d:0e:e0: 76:8e:04:e0:b5:6d:d5:8c:a1:c5:d4:03:b0:79:42: 73:a9:76:73:1b:7d:59:c3:1f:1f:c4:b3:90:05:bf: e7:04:da:d6:fa:e6:d9:46:82:3d:ae:16:80:83:2b: ad:73:63:7d:33:35:dd:77:f2:2d:25:0d:a6:ba:bb: a1:b0:1a:b5:d2:b7:42:37:be:c0:b6:b1:b3:70:56: 10:3f:53:7a:bd:a2:6f:b5:e7:80:5e:78:9c:92:0b: 81:e1:e5:d4:4b:6b:c4:90:0c:92:34:86:fc:c0:af: 0f:cd:6f:2a:58:58:41:73:31:f5:64:24:e0:af:89: ea:a2:ad:de:e1:e8:77:5b:ff:c6:ef:7a:15:b1:ef: c8:57:09:7b:bf:9f:2e:f5:36:16:d5:54:cb:40:98: 84:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A5:B4:AA:77:A8:1E:2F:27:2F:CD:EA:8C:94:0D:33:BC:5B:F9:38 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142401.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:9840::/48 Signature Algorithm: sha256WithRSAEncryption 16:54:46:d9:4d:20:59:c9:91:70:71:12:28:f6:db:44:52:2d: 7e:30:e2:5d:8f:13:a4:f0:b1:03:44:0f:71:27:f5:4a:98:f2: d3:a8:e4:3e:53:7a:70:7a:1c:0e:08:fd:59:8e:9d:8f:1f:ef: de:dd:47:07:93:b6:10:f0:a4:7f:16:e6:eb:b1:c1:98:9c:cf: df:96:e5:b7:de:ea:90:b4:93:0d:bf:aa:b3:2a:dd:34:60:01: 53:6b:0a:e1:e8:55:fb:8c:6d:d9:b7:64:91:97:8b:0a:df:8f: 84:da:f2:3f:e0:23:03:c9:b7:96:e8:3e:77:b1:c3:c6:a6:3a: 8b:0f:cd:02:5b:81:43:e1:83:ed:6b:7b:7b:5f:0c:3f:90:2f: aa:e2:64:24:d9:88:74:e5:56:48:b0:3e:dd:20:97:00:74:33: 5d:51:c9:5a:59:aa:41:e4:ab:e8:4d:9d:7a:1d:23:07:b8:ce: e5:c5:7e:ee:c5:c2:96:ba:00:bb:cd:6b:9e:59:fe:67:b3:1a: 58:2c:78:a2:92:f2:87:a1:bf:82:ad:49:9c:23:8d:e9:53:32: 63:a1:75:d2:97:c6:81:3c:d2:47:b7:0a:7e:85:44:38:a2:b2: 3d:2e:4f:a3:00:f5:14:6e:41:96:65:b7:16:52:58:d9:d7:02: 85:79:52:39 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUO9VHv9g8ErFagisSQLRGC1HV70YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAxMTA4NTUwMFoX DTI1MTAxMDA5MDAwMFowMzExMC8GA1UEAxMoNTRBNUI0QUE3N0E4MUUyRjI3MkZD REVBOEM5NDBEMzNCQzVCRjkzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALXgzTGYjPptsOpQvRpmzsxHX2cWbMX6T/+Hefs5eZpL4t32UEEZO8WjxfGL xS050KtY9EKNv4WydLJVxo4oUsATjTpcpKJ0Or0XrdAawrK5lNj8+NyPBnbHwBbT 0o6eGGAFvHvBjQ7gdo4E4LVt1YyhxdQDsHlCc6l2cxt9WcMfH8SzkAW/5wTa1vrm 2UaCPa4WgIMrrXNjfTM13XfyLSUNprq7obAatdK3Qje+wLaxs3BWED9Ter2ib7Xn gF54nJILgeHl1EtrxJAMkjSG/MCvD81vKlhYQXMx9WQk4K+J6qKt3uHod1v/xu96 FbHvyFcJe7+fLvU2FtVUy0CYhIMCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBRUpbSq d6geLycvzeqMlA0zvFv5ODAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjQwMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfGYQDANBgkqhkiG9w0BAQsFAAOCAQEAFlRG2U0gWcmRcHES KPbbRFItfjDiXY8TpPCxA0QPcSf1Spjy06jkPlN6cHocDgj9WY6djx/v3t1HB5O2 EPCkfxbm67HBmJzP35blt97qkLSTDb+qsyrdNGABU2sK4ehV+4xt2bdkkZeLCt+P hNryP+AjA8m3lug+d7HDxqY6iw/NAluBQ+GD7Wt7e18MP5AvquJkJNmIdOVWSLA+ 3SCXAHQzXVHJWlmqQeSr6E2deh0jB7jO5cV+7sXClroAu81rnln+Z7MaWCx4opLy h6G/gq1JnCON6VMyY6F10pfGgTzSR7cKfoVEOKKyPS5PowD1FG5BlmW3FlJY2dcC hXlSOQ== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:48 2024 by rpki-client on console-ams.rpki-client.org