$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142331.roa File: AS142331.roa (raw, json) Hash identifier: HcNGL/n/n91mulVwIXE5g88YkD2nVUi9LrcxDRPXksk= Subject key identifier: BA:67:BA:F3:55:51:BC:FB:64:1A:16:1B:F6:B6:39:68:EE:2E:06:7D Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1D3B8BD4F0E758E8C29D3624FD6CF27DD6C0A713 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142331.roa Signing time: Thu 28 Nov 2024 05:00:00 +0000 ROA not before: Thu 28 Nov 2024 04:55:00 +0000 ROA not after: Thu 27 Nov 2025 05:00:00 +0000 asID: 142331 IP address blocks: 113.192.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:3b:8b:d4:f0:e7:58:e8:c2:9d:36:24:fd:6c:f2:7d:d6:c0:a7:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 28 04:55:00 2024 GMT Not After : Nov 27 05:00:00 2025 GMT Subject: CN=BA67BAF35551BCFB641A161BF6B63968EE2E067D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:48:d6:3d:5c:26:d5:28:63:cc:6e:f4:1e:ab: 0c:ba:4b:ca:ef:f8:ee:1f:ad:e9:53:40:cf:73:89: 4d:5e:fc:b4:c7:a8:4b:4e:d8:f9:2f:d9:24:02:f9: 30:cc:c3:53:a3:4f:7f:f4:04:e1:06:02:5c:ea:ff: 31:3a:9e:f3:84:6b:e8:33:b6:d1:bb:86:df:b4:1d: 1a:a3:3a:7d:91:8b:66:4e:3d:3e:79:ce:9f:1a:3d: 77:bd:57:f7:23:48:da:b7:f5:e3:f4:dc:5e:f4:5c: 30:ce:5f:5d:b0:4f:4a:63:13:4a:53:fd:3b:ae:ed: 72:90:aa:ba:18:39:80:6c:6a:6c:fd:18:62:45:2f: 3d:a3:96:5c:8a:01:6f:6e:a7:31:a1:17:91:9e:29: 6b:8a:9c:bd:ab:ff:fd:db:78:f7:35:6d:40:bf:65: 4f:f5:2b:06:30:ce:30:42:69:fa:d4:23:e0:91:0a: ea:08:31:ae:6b:6c:dd:5d:95:32:ae:85:7a:5d:a6: 42:ec:04:c0:18:34:38:cd:c6:ff:90:e5:55:d0:74: f8:8f:ac:af:ab:0e:eb:87:46:78:82:fc:1a:58:95: 74:d1:6d:09:37:83:42:8a:b3:90:c1:d5:bc:2c:dc: 1f:c5:2e:80:00:12:ab:e3:22:84:80:77:94:c9:ec: a1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:67:BA:F3:55:51:BC:FB:64:1A:16:1B:F6:B6:39:68:EE:2E:06:7D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 113.192.3.0/24 Signature Algorithm: sha256WithRSAEncryption 18:36:cc:c6:a5:2e:58:48:1b:af:76:1c:9b:7c:e0:c4:7c:e5: 70:37:03:81:3d:16:34:c7:c4:88:d8:ad:19:80:e1:b2:f4:0a: dd:83:10:a8:42:cc:28:d7:af:47:b8:db:10:1d:bb:00:85:f8: 89:6e:1f:41:8b:79:33:a1:4b:49:29:f0:f9:d7:56:db:46:15: 4d:da:af:af:5f:16:6b:8c:1a:10:d9:71:de:d0:3f:1c:af:e6: a9:64:0d:90:44:00:0a:c1:17:dc:99:b3:a2:ba:28:b4:0b:b4: 47:3f:6a:da:32:b4:0d:9f:e5:4f:da:74:89:90:51:9e:0f:41: 87:43:90:14:da:78:fb:87:27:e8:c2:f2:c3:0b:cf:67:4c:da: c7:27:a3:67:47:3e:85:01:91:f8:54:80:48:2a:b6:0a:1c:07: a1:8b:4b:c3:5d:53:12:0b:e6:0d:50:4b:ed:40:2a:32:36:11: 08:21:42:07:8c:20:97:90:b6:aa:5b:b9:65:c6:4e:13:bb:4f: c3:f9:2a:2f:50:a3:e4:3d:63:1a:a7:02:fd:56:de:26:b3:41: 50:ed:85:a6:8a:79:2f:68:67:71:9a:c9:2b:18:99:26:a6:a9: fd:82:08:fb:c8:f1:67:67:22:b5:7a:1c:61:a9:6b:38:9f:1d: e6:6e:7e:d0 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUHTuL1PDnWOjCnTYk/WzyfdbApxMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTEyODA0NTUwMFoX DTI1MTEyNzA1MDAwMFowMzExMC8GA1UEAxMoQkE2N0JBRjM1NTUxQkNGQjY0MUEx NjFCRjZCNjM5NjhFRTJFMDY3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJRI1j1cJtUoY8xu9B6rDLpLyu/47h+t6VNAz3OJTV78tMeoS07Y+S/ZJAL5 MMzDU6NPf/QE4QYCXOr/MTqe84Rr6DO20buG37QdGqM6fZGLZk49PnnOnxo9d71X 9yNI2rf14/TcXvRcMM5fXbBPSmMTSlP9O67tcpCquhg5gGxqbP0YYkUvPaOWXIoB b26nMaEXkZ4pa4qcvav//dt49zVtQL9lT/UrBjDOMEJp+tQj4JEK6ggxrmts3V2V Mq6Fel2mQuwEwBg0OM3G/5DlVdB0+I+sr6sO64dGeIL8GliVdNFtCTeDQoqzkMHV vCzcH8UugAASq+MihIB3lMnsofcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBS6Z7rz VVG8+2QaFhv2tjlo7i4GfTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjMzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHHAAzANBgkqhkiG9w0BAQsFAAOCAQEAGDbMxqUuWEgbr3Ycm3zg xHzlcDcDgT0WNMfEiNitGYDhsvQK3YMQqELMKNevR7jbEB27AIX4iW4fQYt5M6FL SSnw+ddW20YVTdqvr18Wa4waENlx3tA/HK/mqWQNkEQACsEX3JmzorootAu0Rz9q 2jK0DZ/lT9p0iZBRng9Bh0OQFNp4+4cn6MLywwvPZ0zaxyejZ0c+hQGR+FSASCq2 ChwHoYtLw11TEgvmDVBL7UAqMjYRCCFCB4wgl5C2qlu5ZcZOE7tPw/kqL1Cj5D1j GqcC/VbeJrNBUO2Fpop5L2hncZrJKxiZJqap/YII+8jxZ2citXocYalrOJ8d5m5+ 0A== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:19 2025 by rpki-client on console.sobornost.net