$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS138077.roa File: AS138077.roa (raw, json) Hash identifier: 1NxAlkeY+/QaJzEyYpvAazrvQMhrTbHwvtMpM98UZHk= Subject key identifier: 2B:A0:90:C3:55:F3:0D:7D:61:65:4C:A3:0A:01:61:27:6F:CD:CD:E4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 40B70741147E17F0695658A74F53D49F725DFE39 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS138077.roa Signing time: Thu 06 Feb 2025 10:44:50 +0000 ROA not before: Thu 06 Feb 2025 10:39:50 +0000 ROA not after: Thu 05 Feb 2026 10:44:50 +0000 asID: 138077 IP address blocks: 157.66.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 09:19:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:b7:07:41:14:7e:17:f0:69:56:58:a7:4f:53:d4:9f:72:5d:fe:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Feb 6 10:39:50 2025 GMT Not After : Feb 5 10:44:50 2026 GMT Subject: CN=2BA090C355F30D7D61654CA30A0161276FCDCDE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5b:d4:6d:4f:fe:4a:26:a2:25:8d:6c:b9:41: a0:00:59:3a:b5:fc:66:7f:a4:68:cb:e3:02:92:5e: 34:3c:54:3b:8d:4c:3e:3a:39:27:dc:31:9b:4d:cf: 2d:36:65:81:2a:e6:78:45:1a:07:41:d8:fd:56:cd: 7e:42:0a:92:02:41:82:69:91:16:02:2b:10:6f:bc: 25:95:d4:1d:3b:a3:a0:e3:ea:15:15:8f:f1:64:c7: 96:9e:3e:13:69:8d:e5:bf:7b:68:50:43:eb:7b:fa: 42:68:7f:83:a4:62:79:db:35:be:45:7a:3b:d4:6b: 48:a8:0a:3c:9e:fb:f9:b0:47:8c:8a:ae:c3:f7:dd: 65:6f:2c:2d:1d:d7:0c:22:c1:f7:f7:33:2d:d2:98: 4f:26:48:95:86:a5:51:21:8e:91:1d:6b:e0:1a:29: 1f:9f:43:fb:6b:5b:59:44:fd:29:1b:06:25:9c:2d: 38:a3:b0:d1:c8:dc:9f:e5:c0:6c:96:d5:0b:99:42: c1:bf:ea:83:05:c3:1b:ce:f2:8b:7a:2d:41:c1:bd: 8f:93:4e:95:97:36:60:7a:75:ab:fa:4e:70:c9:90: 8b:7e:e6:14:37:07:9e:90:7b:16:3a:1d:d7:6f:62: d8:30:b0:9f:b8:98:6e:3d:e6:aa:dc:07:49:c4:b7: 31:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A0:90:C3:55:F3:0D:7D:61:65:4C:A3:0A:01:61:27:6F:CD:CD:E4 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS138077.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.188.0/23 Signature Algorithm: sha256WithRSAEncryption 07:43:e9:d9:65:22:a0:c4:97:c9:f5:96:10:93:57:0e:2c:00: 70:2c:d4:7b:87:fc:1f:fe:8b:a5:16:33:b5:62:70:6f:a1:e2: f0:8b:f2:21:ce:79:03:78:d5:80:02:d6:fd:d2:b1:2b:bc:9e: 00:b4:32:7f:44:b1:a9:91:f6:e9:fc:40:83:24:57:9e:5c:5c: 87:97:e0:d6:c5:4c:c1:58:ff:74:54:7f:f9:14:79:0e:40:ac: b3:78:a3:0b:40:62:5f:39:23:7f:2d:b2:df:f1:86:ea:af:32: 84:3c:dc:df:05:ca:26:f9:ce:29:42:a6:9b:a3:a4:41:21:2e: e9:24:e9:4f:44:55:29:29:6d:4e:27:6d:45:32:4a:c9:90:ad: 87:5b:9e:1b:16:fb:a1:4b:7d:dd:8a:d7:9e:3f:c2:d2:8a:eb: b2:b5:29:6c:1a:0f:05:07:72:36:80:79:ef:d6:16:4d:b3:e4: 23:f8:32:c9:66:e0:3b:02:2d:1c:61:73:19:87:e2:c5:16:6d: de:42:73:77:f2:12:ff:a6:22:27:b6:01:1a:45:18:95:4f:8d: da:f9:d6:96:f8:22:55:18:c8:b9:2c:56:1a:9b:d6:89:40:19: 38:f5:69:2f:24:6e:a4:37:67:19:73:22:05:ad:88:ec:ad:b7: 87:56:ad:d8 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUQLcHQRR+F/BpVlinT1PUn3Jd/jkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDIwNjEwMzk1MFoX DTI2MDIwNTEwNDQ1MFowMzExMC8GA1UEAxMoMkJBMDkwQzM1NUYzMEQ3RDYxNjU0 Q0EzMEEwMTYxMjc2RkNEQ0RFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOhb1G1P/komoiWNbLlBoABZOrX8Zn+kaMvjApJeNDxUO41MPjo5J9wxm03P LTZlgSrmeEUaB0HY/VbNfkIKkgJBgmmRFgIrEG+8JZXUHTujoOPqFRWP8WTHlp4+ E2mN5b97aFBD63v6Qmh/g6Rieds1vkV6O9RrSKgKPJ77+bBHjIquw/fdZW8sLR3X DCLB9/czLdKYTyZIlYalUSGOkR1r4BopH59D+2tbWUT9KRsGJZwtOKOw0cjcn+XA bJbVC5lCwb/qgwXDG87yi3otQcG9j5NOlZc2YHp1q/pOcMmQi37mFDcHnpB7Fjod 129i2DCwn7iYbj3mqtwHScS3MVUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQroJDD VfMNfWFlTKMKAWEnb83N5DAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzEzODA3Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZ1CvDANBgkqhkiG9w0BAQsFAAOCAQEAB0Pp2WUioMSXyfWWEJNX DiwAcCzUe4f8H/6LpRYztWJwb6Hi8IvyIc55A3jVgALW/dKxK7yeALQyf0SxqZH2 6fxAgyRXnlxch5fg1sVMwVj/dFR/+RR5DkCss3ijC0BiXzkjfy2y3/GG6q8yhDzc 3wXKJvnOKUKmm6OkQSEu6STpT0RVKSltTidtRTJKyZCth1ueGxb7oUt93YrXnj/C 0orrsrUpbBoPBQdyNoB579YWTbPkI/gyyWbgOwItHGFzGYfixRZt3kJzd/IS/6Yi J7YBGkUYlU+N2vnWlvgiVRjIuSxWGpvWiUAZOPVpLyRupDdnGXMiBa2I7K23h1at 2A== -----END CERTIFICATE-----Generated at Sat Apr 5 21:16:48 2025 by rpki-client