$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147129.roa File: AS147129.roa (raw, json) Hash identifier: 5u4+WD7eEz0D/Ea2htXJwrH7OWudvAv0Yr1Ei6+aDQU= Subject key identifier: F0:01:59:59:D1:10:27:0D:78:5D:F5:B6:1C:19:47:15:13:63:98:9E Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1A43534A31DACC70EEED554A76CA70E454ED5D38 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147129.roa Signing time: Tue 09 Jan 2024 04:00:24 +0000 ROA not before: Tue 09 Jan 2024 03:55:24 +0000 ROA not after: Tue 07 Jan 2025 04:00:24 +0000 asID: 147129 IP address blocks: 103.176.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:43:53:4a:31:da:cc:70:ee:ed:55:4a:76:ca:70:e4:54:ed:5d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:24 2024 GMT Not After : Jan 7 04:00:24 2025 GMT Subject: CN=F0015959D110270D785DF5B61C1947151363989E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c3:91:fb:eb:52:ca:f8:a2:2a:a6:fc:f6:69: f4:4a:7a:c7:ac:f7:6b:fc:65:61:e2:81:9f:44:86: 83:a2:61:30:d6:9e:43:1a:69:1e:82:99:af:ec:a1: 80:f8:da:fc:5b:bf:8d:eb:c4:4f:36:7b:53:54:2f: 92:17:c9:c2:f8:90:6e:c1:36:ea:91:dc:1e:13:62: f4:bb:1e:35:02:df:6b:73:5c:86:d0:63:a6:b0:8d: 52:f5:04:7d:65:f7:76:ce:a6:2d:09:e6:4c:76:02: ab:a4:06:34:e5:08:d9:9a:22:b6:2b:3f:3c:f5:22: af:2e:f8:8b:46:f3:1a:a2:c9:e6:0e:ac:70:85:d5: 89:fa:92:2e:d0:01:8f:21:77:68:17:bf:ad:02:f9: df:0c:f6:95:a1:13:59:77:3f:c5:77:14:9d:68:a4: 40:f6:21:a9:d5:ff:a9:5c:89:61:94:cb:8d:90:a2: c9:74:9a:9a:dd:59:45:68:9a:b8:7d:d9:64:8e:60: 73:2a:46:e1:92:78:c2:12:26:e9:e5:55:5b:90:a8: e2:6c:6f:7f:e7:20:9e:6a:29:bf:6c:f8:2f:13:c8: 45:aa:6f:83:f2:64:f7:a2:5c:7c:33:a0:dc:e7:e6: 6f:f0:94:b4:be:be:9a:f7:8b:31:9b:01:0c:81:67: b3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:01:59:59:D1:10:27:0D:78:5D:F5:B6:1C:19:47:15:13:63:98:9E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147129.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.176.69.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:20:1c:56:d0:e1:74:82:94:b2:97:4e:8c:94:4d:8f:6c:58: 81:01:3c:78:9e:2b:33:7d:b7:5a:91:56:d1:4e:f0:08:c6:15: 83:48:d0:a7:83:cd:1e:8e:51:4f:33:0d:4b:6c:0c:b7:3e:54: 06:5d:02:0a:ff:b4:aa:09:91:03:ad:9d:c9:89:c2:96:c5:eb: d4:a4:e9:d1:bb:62:bf:66:50:38:e6:d2:26:67:84:39:96:28: a8:8c:cd:5e:9d:00:aa:3c:83:19:ac:f1:de:ff:53:cb:c4:d1: 01:c2:73:73:9a:8e:04:a7:86:84:ee:82:bc:9d:0b:b5:47:d9: 47:d8:55:1c:14:8b:e9:19:ce:e5:0a:31:85:fa:ca:f8:4b:3a: 39:0d:85:7a:9e:54:ff:dc:3b:e3:56:53:b6:bc:55:df:b9:e6: 79:cc:6f:6d:2f:ba:ac:39:85:a9:1e:41:db:0a:84:86:60:53: 87:33:64:03:be:e3:ac:d0:c7:bd:ba:f4:5b:89:7e:b8:6e:fe: 50:7e:37:be:46:ea:13:9f:af:62:f5:69:5c:0b:28:c2:d6:4c: 0f:2a:e5:ba:08:37:9d:7d:5e:85:0c:d6:b0:9b:57:36:05:bc: ce:dc:57:74:91:d0:37:48:4e:36:b6:e5:80:e6:17:2e:a4:0d: 3c:21:4a:9e -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUGkNTSjHazHDu7VVKdspw5FTtXTgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUyNFoX DTI1MDEwNzA0MDAyNFowMzExMC8GA1UEAxMoRjAwMTU5NTlEMTEwMjcwRDc4NURG NUI2MUMxOTQ3MTUxMzYzOTg5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMLDkfvrUsr4oiqm/PZp9Ep6x6z3a/xlYeKBn0SGg6JhMNaeQxppHoKZr+yh gPja/Fu/jevETzZ7U1QvkhfJwviQbsE26pHcHhNi9LseNQLfa3NchtBjprCNUvUE fWX3ds6mLQnmTHYCq6QGNOUI2Zoitis/PPUiry74i0bzGqLJ5g6scIXVifqSLtAB jyF3aBe/rQL53wz2laETWXc/xXcUnWikQPYhqdX/qVyJYZTLjZCiyXSamt1ZRWia uH3ZZI5gcypG4ZJ4whIm6eVVW5Co4mxvf+cgnmopv2z4LxPIRapvg/Jk96JcfDOg 3Ofmb/CUtL6+mveLMZsBDIFnsyUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTwAVlZ 0RAnDXhd9bYcGUcVE2OYnjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0NzEyOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGewRTANBgkqhkiG9w0BAQsFAAOCAQEADyAcVtDhdIKUspdOjJRN j2xYgQE8eJ4rM323WpFW0U7wCMYVg0jQp4PNHo5RTzMNS2wMtz5UBl0CCv+0qgmR A62dyYnClsXr1KTp0btiv2ZQOObSJmeEOZYoqIzNXp0AqjyDGazx3v9Ty8TRAcJz c5qOBKeGhO6CvJ0LtUfZR9hVHBSL6RnO5QoxhfrK+Es6OQ2Fep5U/9w741ZTtrxV 37nmecxvbS+6rDmFqR5B2wqEhmBThzNkA77jrNDHvbr0W4l+uG7+UH43vkbqE5+v YvVpXAsowtZMDyrlugg3nX1ehQzWsJtXNgW8ztxXdJHQN0hONrblgOYXLqQNPCFK ng== -----END CERTIFICATE-----Generated at Wed May 8 21:02:23 2024 by rpki-client on console-fra.rpki-client.org