$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141646.roa File: AS141646.roa (raw, json) Hash identifier: rRmdYBHUwrvCwF4tTJe0eg4UqAgoJp8YuzKW/2wL2OM= Subject key identifier: F7:BC:34:88:A0:F2:45:2D:9F:77:3C:E0:A9:D3:B4:8D:04:52:B4:E4 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 44F2679216FCBF391A835A7F024E0682DEB4E1E2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141646.roa Signing time: Mon 06 Jan 2025 08:47:05 +0000 ROA not before: Mon 06 Jan 2025 08:42:05 +0000 ROA not after: Mon 05 Jan 2026 08:47:05 +0000 asID: 141646 IP address blocks: 103.162.72.0/24 maxlen: 24 103.234.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f2:67:92:16:fc:bf:39:1a:83:5a:7f:02:4e:06:82:de:b4:e1:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 6 08:42:05 2025 GMT Not After : Jan 5 08:47:05 2026 GMT Subject: CN=F7BC3488A0F2452D9F773CE0A9D3B48D0452B4E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ba:13:a2:85:94:09:42:0e:8e:42:f4:93:2b: bc:e4:22:16:83:ab:b5:27:82:3d:8b:18:ff:17:7c: 54:00:67:6d:b9:c3:ea:bd:df:f3:30:ed:75:ca:a6: d8:6f:59:17:6d:c9:d2:16:61:22:9d:3a:3f:f6:7f: 1d:fa:2b:e2:60:0c:59:0f:b9:6a:91:8e:1e:ae:e9: e7:c9:b7:90:fa:ea:97:99:6d:e9:66:7b:cc:f5:62: c4:76:0c:46:38:d8:cf:00:08:3d:4c:eb:2c:29:5e: d6:88:f9:be:9e:75:c4:33:54:59:cd:94:82:cb:72: 7e:d4:22:14:ea:11:c3:6c:8d:07:45:56:27:3e:a1: 9c:4f:d3:6e:ed:f5:97:1f:16:c3:ef:3d:35:cc:cb: 7c:44:39:52:af:69:e2:39:53:ba:17:a2:c9:e1:59: 21:47:e9:63:71:bb:85:7a:db:a5:44:59:92:c5:51: 93:05:73:06:2b:e4:e4:ff:97:3a:91:cd:b9:27:42: bc:3a:84:a6:cd:6d:db:38:2c:a9:34:64:66:3e:c8: cd:55:75:cf:2d:8e:1d:c3:17:9f:fc:28:1c:f8:17: 31:4f:ef:65:35:c8:14:9f:57:43:22:d0:e1:75:1f: a4:ca:8d:a8:fe:26:e3:96:d6:50:25:57:e6:1f:8e: e2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:BC:34:88:A0:F2:45:2D:9F:77:3C:E0:A9:D3:B4:8D:04:52:B4:E4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141646.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.72.0/24 103.234.95.0/24 Signature Algorithm: sha256WithRSAEncryption 56:57:ad:2d:95:cd:e7:4d:1c:4c:51:7f:72:fe:35:83:91:8f: 2f:37:ea:52:e3:94:d9:84:50:0e:c8:c6:7e:52:0c:78:99:c8: de:1a:4d:53:8f:ef:6d:9d:6f:d3:a2:91:6b:5e:14:8a:29:d0: 9f:fb:33:f9:a2:cf:00:f5:22:cf:e1:a0:cf:5b:e9:a5:d0:b1: 51:c8:0a:49:fb:fd:92:66:03:05:ea:1c:9b:04:18:f3:fa:71: 7c:b5:bd:b5:a0:99:b4:34:cd:29:c4:7e:aa:7d:cd:a1:3f:9d: f5:54:7a:dc:e0:c5:b1:80:14:1b:66:19:56:bb:e7:c7:41:16: 77:7e:21:48:ef:2b:1c:ef:19:0c:6e:ee:9e:94:13:6c:c0:12: 8a:38:93:23:4c:fc:fa:7a:98:88:4f:19:fb:5d:23:6e:38:05: 6b:1f:5e:c7:23:9c:e9:85:1a:5f:de:65:45:49:8d:62:63:32: 25:24:e5:fb:a7:af:ee:2b:51:51:01:f3:80:6f:f2:88:19:ae: f3:0f:b3:dd:88:9b:c9:37:5e:8c:16:81:a3:57:48:73:88:53: 91:fa:ad:e3:70:71:98:9a:fb:f1:bf:0c:ed:ac:fa:75:72:f9: 8b:33:09:2f:12:c9:d4:8b:68:12:0e:39:5f:29:37:61:b1:f1: bb:90:cc:d2 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIURPJnkhb8vzkag1p/Ak4Ggt604eIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEwNjA4NDIwNVoX DTI2MDEwNTA4NDcwNVowMzExMC8GA1UEAxMoRjdCQzM0ODhBMEYyNDUyRDlGNzcz Q0UwQTlEM0I0OEQwNDUyQjRFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM66E6KFlAlCDo5C9JMrvOQiFoOrtSeCPYsY/xd8VABnbbnD6r3f8zDtdcqm 2G9ZF23J0hZhIp06P/Z/Hfor4mAMWQ+5apGOHq7p58m3kPrql5lt6WZ7zPVixHYM RjjYzwAIPUzrLCle1oj5vp51xDNUWc2UgstyftQiFOoRw2yNB0VWJz6hnE/Tbu31 lx8Ww+89NczLfEQ5Uq9p4jlTuheiyeFZIUfpY3G7hXrbpURZksVRkwVzBivk5P+X OpHNuSdCvDqEps1t2zgsqTRkZj7IzVV1zy2OHcMXn/woHPgXMU/vZTXIFJ9XQyLQ 4XUfpMqNqP4m45bWUCVX5h+O4mMCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBT3vDSI oPJFLZ93POCp07SNBFK05DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTY0Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAGeiSAMEAGfqXzANBgkqhkiG9w0BAQsFAAOCAQEAVletLZXN500c TFF/cv41g5GPLzfqUuOU2YRQDsjGflIMeJnI3hpNU4/vbZ1v06KRa14UiinQn/sz +aLPAPUiz+Ggz1vppdCxUcgKSfv9kmYDBeocmwQY8/pxfLW9taCZtDTNKcR+qn3N oT+d9VR63ODFsYAUG2YZVrvnx0EWd34hSO8rHO8ZDG7unpQTbMASijiTI0z8+nqY iE8Z+10jbjgFax9exyOc6YUaX95lRUmNYmMyJSTl+6ev7itRUQHzgG/yiBmu8w+z 3YibyTdejBaBo1dIc4hTkfqt43BxmJr78b8M7az6dXL5izMJLxLJ1ItoEg45Xyk3 YbHxu5DM0g== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:18 2025 by rpki-client on console.sobornost.net