$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138069.roa File: AS138069.roa (raw, json) Hash identifier: oh3SQDK8Qnj6f6wFqd2rBX1zMV3VVmImZ5HXpL7eh0Q= Subject key identifier: 61:AD:D7:17:A6:43:5E:68:FA:C4:9F:DC:E2:6A:07:CB:FF:84:47:4A Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 66D6FBB89407295971CA219721706158EB4BF772 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138069.roa Signing time: Tue 09 Jan 2024 04:00:29 +0000 ROA not before: Tue 09 Jan 2024 03:55:29 +0000 ROA not after: Tue 07 Jan 2025 04:00:29 +0000 asID: 138069 IP address blocks: 103.123.16.0/22 maxlen: 24 2001:df6:bd00::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 12:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d6:fb:b8:94:07:29:59:71:ca:21:97:21:70:61:58:eb:4b:f7:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:29 2024 GMT Not After : Jan 7 04:00:29 2025 GMT Subject: CN=61ADD717A6435E68FAC49FDCE26A07CBFF84474A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f6:ad:ad:ec:09:60:48:bb:23:a9:dd:2d:d2: f5:f4:f4:f7:ec:d9:dd:e1:7e:7e:93:89:92:55:f2: b8:ee:97:53:33:f3:4e:48:82:6c:09:9a:39:be:10: 1d:b7:8f:65:d9:50:2e:0c:6c:2c:43:c1:e3:a7:d1: 1f:4a:04:be:e2:61:e6:b5:68:a9:26:69:25:e5:ac: 6e:21:78:f8:5b:73:4e:e5:ec:23:30:b0:7e:f7:12: a6:00:c9:80:9a:0d:88:4d:38:4e:a4:1a:7a:c7:8b: 69:a5:88:2f:c0:5c:eb:13:d9:3b:12:87:55:65:91: f5:6f:6a:54:78:f8:ac:0b:54:47:c4:27:2d:b7:2d: 3c:53:52:58:61:75:02:0c:7b:2d:69:00:5e:76:6e: f1:d4:ca:8b:0a:b0:6e:3b:61:2c:ed:2c:5e:72:0e: 35:bb:11:89:50:08:17:c0:89:d3:fe:71:81:70:5d: e6:82:18:80:ec:49:d4:be:91:bd:d9:e2:64:19:9f: 47:89:76:48:0b:1d:f5:26:16:49:0a:19:fa:0f:ba: 4c:0b:57:ff:62:47:6e:58:32:15:dc:18:80:98:93: 8f:9f:69:97:04:cd:39:e3:0b:e7:43:13:76:36:cc: c1:20:33:f1:b4:d6:c7:c9:a5:b6:b8:15:fe:d4:33: b1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AD:D7:17:A6:43:5E:68:FA:C4:9F:DC:E2:6A:07:CB:FF:84:47:4A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138069.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.123.16.0/22 IPv6: 2001:df6:bd00::/48 Signature Algorithm: sha256WithRSAEncryption 8e:42:b1:e2:7a:d0:02:79:50:b3:87:95:a0:55:67:26:45:78: 81:df:98:ac:78:d6:02:dc:ac:3c:3c:c3:01:e8:a8:01:e4:40: 54:be:da:b7:96:ea:90:8a:79:62:19:55:04:c6:68:67:b4:17: b7:ea:94:ee:b6:7c:96:78:68:21:03:9f:bf:4e:7b:7b:fe:a8: 82:89:a0:d9:89:6e:cf:1a:5f:32:59:7a:b6:6a:ea:4c:37:9e: 24:72:33:36:e6:f5:49:5e:d7:fb:d3:cd:40:5d:1b:7b:94:6e: f0:8b:45:a5:52:1a:bd:3e:d8:0b:e7:36:9e:f1:5c:01:35:20: 6c:40:ec:24:77:79:92:db:1b:db:30:f1:be:b5:de:b8:ec:9d: c2:83:eb:19:13:b1:e3:e7:c4:78:00:51:bd:e5:2d:a3:48:5a: f7:4f:66:82:76:75:35:65:00:3c:f4:56:f0:60:f9:2a:87:bc: d2:04:57:7e:c5:b5:f3:c2:73:b8:a4:3c:61:70:57:9e:d9:6b: 4a:47:05:11:0a:1c:75:d5:4a:63:72:2a:5e:a9:2f:e1:e0:71: 19:b9:04:1b:83:ab:42:d2:57:bb:5f:c6:df:63:88:ae:37:b7: fe:af:7d:29:dd:00:02:14:1b:10:c8:84:e0:01:b3:f8:6f:87: 49:3d:a1:7f -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUZtb7uJQHKVlxyiGXIXBhWOtL93IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUyOVoX DTI1MDEwNzA0MDAyOVowMzExMC8GA1UEAxMoNjFBREQ3MTdBNjQzNUU2OEZBQzQ5 RkRDRTI2QTA3Q0JGRjg0NDc0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALb2ra3sCWBIuyOp3S3S9fT09+zZ3eF+fpOJklXyuO6XUzPzTkiCbAmaOb4Q HbePZdlQLgxsLEPB46fRH0oEvuJh5rVoqSZpJeWsbiF4+FtzTuXsIzCwfvcSpgDJ gJoNiE04TqQaeseLaaWIL8Bc6xPZOxKHVWWR9W9qVHj4rAtUR8QnLbctPFNSWGF1 Agx7LWkAXnZu8dTKiwqwbjthLO0sXnIONbsRiVAIF8CJ0/5xgXBd5oIYgOxJ1L6R vdniZBmfR4l2SAsd9SYWSQoZ+g+6TAtX/2JHblgyFdwYgJiTj59plwTNOeML50MT djbMwSAz8bTWx8mltrgV/tQzsTsCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBRhrdcX pkNeaPrEn9ziagfL/4RHSjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODA2OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAmd7EDAPBAIAAjAJAwcAIAEN9r0AMA0GCSqGSIb3DQEBCwUAA4IB AQCOQrHietACeVCzh5WgVWcmRXiB35iseNYC3Kw8PMMB6KgB5EBUvtq3luqQinli GVUExmhntBe36pTutnyWeGghA5+/Tnt7/qiCiaDZiW7PGl8yWXq2aupMN54kcjM2 5vVJXtf7081AXRt7lG7wi0WlUhq9PtgL5zae8VwBNSBsQOwkd3mS2xvbMPG+td64 7J3Cg+sZE7Hj58R4AFG95S2jSFr3T2aCdnU1ZQA89FbwYPkqh7zSBFd+xbXzwnO4 pDxhcFee2WtKRwURChx11UpjcipeqS/h4HEZuQQbg6tC0le7X8bfY4iuN7f+r30p 3QACFBsQyITgAbP4b4dJPaF/ -----END CERTIFICATE-----Generated at Wed May 1 07:54:36 2024 by rpki-client on console-fra.rpki-client.org