$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141600.roa File: AS141600.roa (raw, json) Hash identifier: Gfim1NsK3yPwOSAu9eBs6cCK1rXbuPomrzQbwkpsEGI= Subject key identifier: 92:78:58:EF:46:4A:13:59:F8:D0:DE:FF:AF:F9:E9:F2:24:BE:F6:08 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1400B8395F47C6BC6962936BF0898144DF813B37 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141600.roa Signing time: Thu 20 Mar 2025 07:00:00 +0000 ROA not before: Thu 20 Mar 2025 06:55:00 +0000 ROA not after: Thu 19 Mar 2026 07:00:00 +0000 asID: 141600 IP address blocks: 2001:df3:af40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:00:b8:39:5f:47:c6:bc:69:62:93:6b:f0:89:81:44:df:81:3b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 20 06:55:00 2025 GMT Not After : Mar 19 07:00:00 2026 GMT Subject: CN=927858EF464A1359F8D0DEFFAFF9E9F224BEF608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b2:69:ab:f5:54:85:4e:c1:9d:18:d0:56:a6: c5:b7:a2:f7:6d:68:cd:0d:8f:4a:0a:21:53:c5:dc: b7:22:ba:55:60:e8:32:d9:d8:3d:d8:a9:e9:bf:87: 33:77:db:71:43:e3:15:e3:3c:1f:21:bb:12:dd:f5: 15:4e:95:1b:58:42:74:8a:02:84:c4:bb:b7:c2:11: 2d:5b:5f:f1:53:6c:e8:08:88:2d:58:50:d3:3f:e5: 47:d3:d2:8c:a2:4f:27:a7:a9:28:58:4a:ea:17:10: 82:f9:70:a5:2c:25:52:6d:c5:2d:94:a4:90:4d:5c: 6d:fc:3f:03:dc:18:c5:11:32:ff:6b:9e:a1:c7:5a: 47:2f:93:88:0b:81:99:35:ee:e4:e7:04:74:27:5f: b4:18:4b:94:0a:45:e9:13:58:f9:65:2d:93:7b:64: 4a:ff:14:67:5c:b4:b3:ef:84:40:3c:fb:0c:ca:19: 71:93:9f:78:3a:dc:68:e9:c9:b8:1c:d4:6f:31:23: d3:00:b8:c9:70:38:02:3e:d0:5b:12:49:d0:9e:9b: a1:c9:a7:aa:c2:57:86:c8:60:3d:39:dd:5c:e1:98: a0:57:a0:04:6c:de:df:69:ce:13:95:53:80:f7:ae: 08:5b:2d:69:ec:e6:e4:89:16:b6:33:46:8a:6d:03: 14:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:78:58:EF:46:4A:13:59:F8:D0:DE:FF:AF:F9:E9:F2:24:BE:F6:08 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141600.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:af40::/48 Signature Algorithm: sha256WithRSAEncryption 6e:9c:56:eb:ad:8e:0c:34:43:17:32:70:52:45:e0:c2:48:96: 20:e2:78:eb:d2:b6:cd:3b:03:52:d8:c9:87:2d:f5:13:1b:cb: 08:3a:eb:95:1a:db:6b:04:a8:db:5e:d8:58:a7:26:f2:1f:f9: 24:79:a7:8b:62:a0:e3:96:d6:85:79:7a:6a:54:4e:5c:d9:e6: 67:ee:81:27:b8:e4:84:4b:e8:72:11:17:e6:72:0e:af:4c:b7: 78:52:ac:8a:0e:e8:cd:42:4f:a9:7c:2e:e8:dc:ff:a3:68:08: 55:45:21:87:59:78:74:f5:66:27:93:8b:da:ef:b2:a5:e5:65: d7:08:3a:6f:60:f0:5e:16:e1:35:9d:e3:09:71:4a:22:6d:4b: 31:80:29:f6:88:ef:c8:68:1a:38:f6:74:a7:ad:92:09:a2:80: 5f:4d:c1:15:51:36:d8:73:d8:44:25:b6:2b:fa:86:dd:f3:df: 31:2f:34:90:57:2c:04:a1:b3:71:eb:fd:98:71:38:36:16:8f: d8:34:d9:28:fc:72:de:74:8e:5f:c6:35:dc:be:1e:28:bb:a3: 08:34:ba:d2:54:78:f6:8e:b9:9f:a4:ee:32:63:e4:e7:38:af: dd:2b:3c:4c:da:53:4c:77:e8:38:fc:ec:d5:75:e9:ab:d4:a9: 7f:82:1b:d4 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUFAC4OV9HxrxpYpNr8ImBRN+BOzcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMyMDA2NTUwMFoX DTI2MDMxOTA3MDAwMFowMzExMC8GA1UEAxMoOTI3ODU4RUY0NjRBMTM1OUY4RDBE RUZGQUZGOUU5RjIyNEJFRjYwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANKyaav1VIVOwZ0Y0Famxbei921ozQ2PSgohU8XctyK6VWDoMtnYPdip6b+H M3fbcUPjFeM8HyG7Et31FU6VG1hCdIoChMS7t8IRLVtf8VNs6AiILVhQ0z/lR9PS jKJPJ6epKFhK6hcQgvlwpSwlUm3FLZSkkE1cbfw/A9wYxREy/2ueocdaRy+TiAuB mTXu5OcEdCdftBhLlApF6RNY+WUtk3tkSv8UZ1y0s++EQDz7DMoZcZOfeDrcaOnJ uBzUbzEj0wC4yXA4Aj7QWxJJ0J6bocmnqsJXhshgPTndXOGYoFegBGze32nOE5VT gPeuCFstaezm5IkWtjNGim0DFCMCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBSSeFjv RkoTWfjQ3v+v+enyJL72CDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTYwMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfOvQDANBgkqhkiG9w0BAQsFAAOCAQEAbpxW662ODDRDFzJw UkXgwkiWIOJ469K2zTsDUtjJhy31ExvLCDrrlRrbawSo217YWKcm8h/5JHmni2Kg 45bWhXl6alROXNnmZ+6BJ7jkhEvochEX5nIOr0y3eFKsig7ozUJPqXwu6Nz/o2gI VUUhh1l4dPVmJ5OL2u+ypeVl1wg6b2DwXhbhNZ3jCXFKIm1LMYAp9ojvyGgaOPZ0 p62SCaKAX03BFVE22HPYRCW2K/qG3fPfMS80kFcsBKGzcev9mHE4NhaP2DTZKPxy 3nSOX8Y13L4eKLujCDS60lR49o65n6TuMmPk5ziv3Ss8TNpTTHfoOPzs1XXpq9Sp f4Ib1A== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:18 2025 by rpki-client on console.sobornost.net