$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147161.roa File: AS147161.roa (raw, json) Hash identifier: ctHkkRsX8YXeXJ617fS4tksQ7ctefksYkTU9ga04v58= Subject key identifier: 73:F2:E1:F3:C7:54:22:7B:DD:E2:21:1D:F8:21:17:83:CB:89:EE:45 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 62D1F824BC4E0C4D54706D509D136A9D76D1DA5C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147161.roa Signing time: Thu 08 Feb 2024 03:00:00 +0000 ROA not before: Thu 08 Feb 2024 02:55:00 +0000 ROA not after: Thu 06 Feb 2025 03:00:00 +0000 asID: 147161 IP address blocks: 103.177.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:d1:f8:24:bc:4e:0c:4d:54:70:6d:50:9d:13:6a:9d:76:d1:da:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 8 02:55:00 2024 GMT Not After : Feb 6 03:00:00 2025 GMT Subject: CN=73F2E1F3C754227BDDE2211DF8211783CB89EE45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:23:39:e6:45:06:5b:ca:e1:80:88:31:63:d0: e1:9d:21:d9:f6:91:ce:37:71:75:a8:f9:4a:b8:ec: 69:e2:a4:dc:8e:76:a4:84:d7:7a:27:99:98:b0:9d: 3d:25:f9:3c:1a:22:c1:ef:25:81:9b:1e:bf:7b:3c: c8:b5:71:e3:1d:ad:d7:63:02:cb:65:5c:28:34:39: ac:8b:15:f3:48:a0:c8:c2:dd:d7:5b:ce:09:cc:e1: 55:c3:5e:87:7e:4b:1d:6b:0a:f7:37:f3:73:a3:97: a5:58:f2:92:db:28:b5:84:f0:16:b8:77:36:76:d0: c2:2e:f8:42:d9:79:d4:df:8e:7e:10:17:51:97:ba: bb:d8:f1:8f:9a:79:13:06:2a:08:43:db:ff:fb:90: 6e:89:3b:6b:65:89:26:c0:81:92:40:dc:81:c3:07: 9f:47:df:6a:e1:ac:df:ae:e0:d4:c8:ef:87:2e:3e: da:2c:36:37:ed:72:6d:ef:35:cf:ee:e7:d3:35:88: 82:ed:4c:42:6f:f6:a8:e1:35:1f:8e:7a:e4:6e:79: af:7d:00:e2:52:b9:0c:61:49:a7:b0:6f:11:f5:5f: 78:66:34:b8:f0:a5:d6:b2:46:60:af:8a:c6:82:ec: 6f:27:d2:fd:33:c3:59:31:fb:eb:22:49:09:43:4a: a7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F2:E1:F3:C7:54:22:7B:DD:E2:21:1D:F8:21:17:83:CB:89:EE:45 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147161.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.212.0/24 Signature Algorithm: sha256WithRSAEncryption 92:e9:7a:1e:35:61:81:fd:fb:da:f0:d0:31:3c:f9:e8:db:74: 09:31:61:6f:d4:87:9f:e0:ae:17:8b:40:94:fe:1d:76:f3:12: af:66:7b:01:bc:50:65:b3:e6:8a:a4:73:61:47:72:cd:5a:7f: 5f:33:64:e0:9d:8f:b7:47:17:2d:0f:fe:66:88:2d:04:a9:fb: a6:74:d4:75:bf:f4:25:2e:56:b3:1d:5c:95:c9:72:d9:ff:e3: f4:4f:3b:50:53:fe:c3:00:d3:2e:ff:ca:16:f8:a0:7b:4c:48: 4c:85:54:da:8b:ae:07:c4:03:f2:1e:ee:a6:db:28:e5:e3:b8: da:79:0b:4e:de:6f:39:01:9e:7a:5f:74:47:23:71:34:48:ff: 61:4e:00:42:18:65:90:a6:ba:9a:1e:19:7d:d2:37:28:26:c8: 41:a1:54:e9:d8:26:cd:88:d9:4b:3c:e9:58:46:d3:a1:02:43: 29:6f:91:4c:a1:34:d5:5c:5d:89:bb:cf:36:d0:7e:5a:28:34: ff:d6:00:17:87:6d:b4:cb:f0:97:38:e7:ba:69:75:fc:63:4e: 91:5d:42:81:55:bc:7b:04:1b:81:57:5e:41:06:81:09:79:03: 2c:b9:4d:d7:c5:e3:e5:3c:44:ab:5e:8d:e0:e9:b5:22:61:a9: 31:b8:40:23 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUYtH4JLxODE1UcG1QnRNqnXbR2lwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIwODAyNTUwMFoX DTI1MDIwNjAzMDAwMFowMzExMC8GA1UEAxMoNzNGMkUxRjNDNzU0MjI3QkRERTIy MTFERjgyMTE3ODNDQjg5RUU0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALIjOeZFBlvK4YCIMWPQ4Z0h2faRzjdxdaj5SrjsaeKk3I52pITXeieZmLCd PSX5PBoiwe8lgZsev3s8yLVx4x2t12MCy2VcKDQ5rIsV80igyMLd11vOCczhVcNe h35LHWsK9zfzc6OXpVjyktsotYTwFrh3NnbQwi74Qtl51N+OfhAXUZe6u9jxj5p5 EwYqCEPb//uQbok7a2WJJsCBkkDcgcMHn0ffauGs367g1Mjvhy4+2iw2N+1ybe81 z+7n0zWIgu1MQm/2qOE1H4565G55r30A4lK5DGFJp7BvEfVfeGY0uPCl1rJGYK+K xoLsbyfS/TPDWTH76yJJCUNKp00CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRz8uHz x1Qie93iIR34IReDy4nuRTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0NzE2MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGex1DANBgkqhkiG9w0BAQsFAAOCAQEAkul6HjVhgf372vDQMTz5 6Nt0CTFhb9SHn+CuF4tAlP4ddvMSr2Z7AbxQZbPmiqRzYUdyzVp/XzNk4J2Pt0cX LQ/+ZogtBKn7pnTUdb/0JS5Wsx1clcly2f/j9E87UFP+wwDTLv/KFvige0xITIVU 2ouuB8QD8h7uptso5eO42nkLTt5vOQGeel90RyNxNEj/YU4AQhhlkKa6mh4ZfdI3 KCbIQaFU6dgmzYjZSzzpWEbToQJDKW+RTKE01VxdibvPNtB+Wig0/9YAF4dttMvw lzjnuml1/GNOkV1CgVW8ewQbgVdeQQaBCXkDLLlN18Xj5TxEq16N4Om1ImGpMbhA Iw== -----END CERTIFICATE-----Generated at Thu May 9 00:29:15 2024 by rpki-client on console-ams.rpki-client.org