$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141902.roa File: AS141902.roa (raw, json) Hash identifier: fUMePxkmS6//KLvPgVIpIAvl8hZTD0Qk89z7vkWBIxI= Subject key identifier: 1F:56:FB:7A:46:99:52:07:62:C0:62:33:15:CF:06:60:2C:F6:05:30 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 72F43F32A194850D1F464475C04038D0145C651A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141902.roa Signing time: Tue 10 Dec 2024 05:00:18 +0000 ROA not before: Tue 10 Dec 2024 04:55:18 +0000 ROA not after: Tue 09 Dec 2025 05:00:18 +0000 asID: 141902 IP address blocks: 103.163.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f4:3f:32:a1:94:85:0d:1f:46:44:75:c0:40:38:d0:14:5c:65:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 04:55:18 2024 GMT Not After : Dec 9 05:00:18 2025 GMT Subject: CN=1F56FB7A4699520762C0623315CF06602CF60530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ed:56:3f:f0:96:d4:85:aa:41:53:21:d2:93: 13:41:49:74:48:53:1b:fa:76:ec:0a:04:81:80:9f: 05:7a:25:69:cd:75:27:c8:b5:58:ae:0d:32:84:80: fc:b5:af:46:70:a0:91:5a:77:e4:c7:9e:e7:fc:02: 51:f3:fb:6d:ea:fb:43:b2:b7:d5:f7:1e:dc:c8:f6: 61:6f:c7:69:3b:62:56:a4:03:09:29:44:d7:4d:3f: 3f:f1:af:78:f0:4b:d9:cd:f1:78:ac:d3:21:cd:97: b3:a2:67:b6:7a:06:95:c3:a2:9f:83:11:d2:b5:88: 76:46:18:eb:c6:c9:93:69:a2:02:a0:b5:70:3a:30: c7:1c:19:49:bb:97:92:9b:dd:a9:f8:b7:99:f7:80: 67:41:cd:66:7d:7a:85:0a:43:77:f2:89:fb:c2:31: ce:fb:69:db:b2:c6:1e:2f:97:2a:71:36:9f:bd:a0: 28:fa:f4:82:f8:6d:32:ae:3a:26:24:cc:b5:31:98: c0:e6:50:44:61:8c:a6:3e:a9:7d:c7:27:48:a6:d4: c9:6a:8e:92:3b:89:88:e0:b0:15:11:7c:02:e2:3b: 54:8f:dd:54:5b:5f:6a:d9:e9:7f:39:69:dc:44:e4: 3c:5e:ae:fb:07:95:93:77:e1:af:56:28:c9:fe:9b: b8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:56:FB:7A:46:99:52:07:62:C0:62:33:15:CF:06:60:2C:F6:05:30 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141902.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.163.134.0/23 Signature Algorithm: sha256WithRSAEncryption 41:08:ea:92:41:a3:2f:38:ed:d4:95:14:f9:2c:c9:94:32:c2: ed:7a:f2:5e:be:d9:2f:70:ce:a1:39:30:aa:5c:46:5d:5f:99: a4:57:da:d1:e6:2a:7e:c3:49:9f:44:db:43:b9:22:31:8b:fe: b6:28:6c:fb:f8:bb:53:2f:db:35:d1:05:56:14:5d:32:48:51: 7b:92:cd:5c:f2:29:32:7d:fd:4d:41:86:24:70:be:59:75:91: 85:74:ce:ec:ec:01:8d:03:17:f8:5c:a2:56:ad:ab:3a:27:6a: 5d:30:aa:62:1d:58:dd:fd:1e:20:8c:76:3d:4f:df:e4:33:4e: e4:0d:1b:a2:cd:4b:97:9a:ac:7a:a4:da:e6:cf:c3:a2:8f:11: 38:16:9a:42:79:93:56:32:71:41:18:e5:97:ae:78:76:ea:a7: d3:9e:20:01:01:4f:e7:d9:56:0d:4a:ab:96:03:02:f4:a8:38: 78:0d:e7:9a:c0:21:9a:5b:c8:a4:3a:3c:d9:cb:e1:4e:c7:f2: 25:d9:20:76:86:b4:79:e1:83:dc:46:65:ab:a7:12:4a:48:5f: cc:d9:63:8d:90:f0:d4:20:ef:03:c1:46:71:74:a8:07:ed:7f: 17:71:1b:19:40:84:4d:9f:47:5d:d0:66:00:f4:e9:66:39:47: 99:f6:0c:23 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUcvQ/MqGUhQ0fRkR1wEA40BRcZRowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUxOFoX DTI1MTIwOTA1MDAxOFowMzExMC8GA1UEAxMoMUY1NkZCN0E0Njk5NTIwNzYyQzA2 MjMzMTVDRjA2NjAyQ0Y2MDUzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPTtVj/wltSFqkFTIdKTE0FJdEhTG/p27AoEgYCfBXolac11J8i1WK4NMoSA /LWvRnCgkVp35Mee5/wCUfP7ber7Q7K31fce3Mj2YW/HaTtiVqQDCSlE100/P/Gv ePBL2c3xeKzTIc2Xs6JntnoGlcOin4MR0rWIdkYY68bJk2miAqC1cDowxxwZSbuX kpvdqfi3mfeAZ0HNZn16hQpDd/KJ+8Ixzvtp27LGHi+XKnE2n72gKPr0gvhtMq46 JiTMtTGYwOZQRGGMpj6pfccnSKbUyWqOkjuJiOCwFRF8AuI7VI/dVFtfatnpfzlp 3ETkPF6u+weVk3fhr1Yoyf6buK0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQfVvt6 RplSB2LAYjMVzwZgLPYFMDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTkwMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWejhjANBgkqhkiG9w0BAQsFAAOCAQEAQQjqkkGjLzjt1JUU+SzJ lDLC7XryXr7ZL3DOoTkwqlxGXV+ZpFfa0eYqfsNJn0TbQ7kiMYv+tihs+/i7Uy/b NdEFVhRdMkhRe5LNXPIpMn39TUGGJHC+WXWRhXTO7OwBjQMX+FyiVq2rOidqXTCq Yh1Y3f0eIIx2PU/f5DNO5A0bos1Ll5qseqTa5s/Doo8ROBaaQnmTVjJxQRjll654 duqn054gAQFP59lWDUqrlgMC9Kg4eA3nmsAhmlvIpDo82cvhTsfyJdkgdoa0eeGD 3EZlq6cSSkhfzNljjZDw1CDvA8FGcXSoB+1/F3EbGUCETZ9HXdBmAPTpZjlHmfYM Iw== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:18 2025 by rpki-client on console.sobornost.net