$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138093.roa File: AS138093.roa (raw, json) Hash identifier: GpjUwBbRHRWcfLIQ5CrMz73lCf5vZScfWoCNLNdWFeQ= Subject key identifier: 47:AE:38:10:0A:AA:82:28:0E:9C:C1:49:F2:58:87:60:88:9D:9B:74 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 48EB80F08B8B83ACBFEF11F609912BA474C28044 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138093.roa Signing time: Tue 09 Jan 2024 04:00:27 +0000 ROA not before: Tue 09 Jan 2024 03:55:27 +0000 ROA not after: Tue 07 Jan 2025 04:00:27 +0000 asID: 138093 IP address blocks: 103.160.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 22:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:eb:80:f0:8b:8b:83:ac:bf:ef:11:f6:09:91:2b:a4:74:c2:80:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:27 2024 GMT Not After : Jan 7 04:00:27 2025 GMT Subject: CN=47AE38100AAA82280E9CC149F2588760889D9B74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6e:83:56:f0:a2:13:c1:b3:84:91:2d:0a:5c: 8a:24:68:29:d2:ed:a9:d3:a2:75:85:b3:24:29:9b: 99:a2:64:3b:a9:61:2f:9e:da:c3:e6:41:5b:f7:7b: 07:ce:3b:2f:b9:03:f9:ce:0e:0e:da:bf:ff:a0:a2: 49:ec:04:ff:71:60:50:5c:58:0f:77:8f:69:29:ea: 57:d8:10:0a:07:76:1f:17:9b:ae:ad:28:10:ac:c6: 66:1c:8b:ce:0f:34:8b:98:f2:8e:14:95:2d:31:0a: c6:be:83:e9:7c:77:4e:4a:7e:97:c1:50:4d:66:67: 69:70:0a:33:d6:85:e7:5a:dc:4c:51:74:fb:52:de: bd:87:d6:d2:77:24:d8:9c:d7:79:f3:32:63:57:e9: ec:8e:75:52:50:d4:e1:5e:57:ae:20:6d:5b:02:2c: d5:7c:7b:8d:04:ed:28:eb:0b:06:ad:c5:bd:80:d8: 3f:87:8a:0f:af:ab:8f:be:62:f5:ff:fb:c7:03:12: 49:8c:6e:c2:f5:b4:ee:3d:0a:54:39:55:6b:b7:19: de:5b:12:11:9e:e7:f9:66:9f:51:0e:32:d3:4e:87: aa:be:03:0c:4b:60:bc:cc:42:38:fb:1f:92:5c:56: 03:ee:23:dd:3e:7f:1f:bd:fe:bf:c2:7a:08:a4:6b: ae:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AE:38:10:0A:AA:82:28:0E:9C:C1:49:F2:58:87:60:88:9D:9B:74 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138093.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.150.0/23 Signature Algorithm: sha256WithRSAEncryption 97:f9:41:a7:fb:79:4f:4d:28:be:3e:45:29:d6:63:26:0d:d1: df:3e:b4:4e:8c:d7:3b:c7:06:77:0d:cc:db:39:a0:cc:f8:ed: e8:2f:54:c9:bd:81:e3:54:e5:13:47:10:ab:75:19:d4:fe:a8: 8e:01:bf:68:c6:49:83:4d:a6:b8:a1:b3:ae:44:85:b5:66:bc: 2c:db:8b:fc:5f:e4:fb:70:ee:22:c4:5f:75:27:0a:ce:25:67: b9:3b:bc:8c:55:7d:fd:79:e0:14:67:99:ae:fb:2b:ea:c0:35: 24:0f:77:54:eb:c2:ce:11:bd:bb:51:de:5c:bf:e5:9d:2c:5e: bb:7c:97:12:10:ae:19:6e:d2:64:ac:7d:10:76:78:6a:d1:c2: 65:79:4e:2f:18:b2:f3:15:48:56:64:a3:76:73:af:ab:a6:42: fa:ec:d7:9b:e6:1d:f9:24:f6:0c:88:6f:03:a6:5b:3a:35:29: 75:f9:1d:39:b1:9c:a0:50:bf:23:c8:87:a1:f2:a4:d2:b9:18: a7:b2:85:c7:fa:a7:93:3d:2e:28:bf:f4:a7:a4:ea:41:3a:a3: 89:70:95:65:96:7e:45:a7:cf:6f:c1:5d:2b:b6:67:14:47:bb: fd:3f:d1:df:79:76:c8:8f:74:41:ad:36:85:fc:a0:19:da:4a: 4b:91:1c:4b -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUSOuA8IuLg6y/7xH2CZErpHTCgEQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUyN1oX DTI1MDEwNzA0MDAyN1owMzExMC8GA1UEAxMoNDdBRTM4MTAwQUFBODIyODBFOUND MTQ5RjI1ODg3NjA4ODlEOUI3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALhug1bwohPBs4SRLQpciiRoKdLtqdOidYWzJCmbmaJkO6lhL57aw+ZBW/d7 B847L7kD+c4ODtq//6CiSewE/3FgUFxYD3ePaSnqV9gQCgd2Hxebrq0oEKzGZhyL zg80i5jyjhSVLTEKxr6D6Xx3Tkp+l8FQTWZnaXAKM9aF51rcTFF0+1LevYfW0nck 2JzXefMyY1fp7I51UlDU4V5XriBtWwIs1Xx7jQTtKOsLBq3FvYDYP4eKD6+rj75i 9f/7xwMSSYxuwvW07j0KVDlVa7cZ3lsSEZ7n+WafUQ4y006Hqr4DDEtgvMxCOPsf klxWA+4j3T5/H73+v8J6CKRrrlcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRHrjgQ CqqCKA6cwUnyWIdgiJ2bdDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODA5My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWegljANBgkqhkiG9w0BAQsFAAOCAQEAl/lBp/t5T00ovj5FKdZj Jg3R3z60TozXO8cGdw3M2zmgzPjt6C9Uyb2B41TlE0cQq3UZ1P6ojgG/aMZJg02m uKGzrkSFtWa8LNuL/F/k+3DuIsRfdScKziVnuTu8jFV9/XngFGeZrvsr6sA1JA93 VOvCzhG9u1HeXL/lnSxeu3yXEhCuGW7SZKx9EHZ4atHCZXlOLxiy8xVIVmSjdnOv q6ZC+uzXm+Yd+ST2DIhvA6ZbOjUpdfkdObGcoFC/I8iHofKk0rkYp7KFx/qnkz0u KL/0p6TqQTqjiXCVZZZ+RafPb8FdK7ZnFEe7/T/R33l2yI90Qa02hfygGdpKS5Ec Sw== -----END CERTIFICATE-----Generated at Wed May 1 22:50:32 2024 by rpki-client on console-ams.rpki-client.org