$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139974.roa File: AS139974.roa (raw, json) Hash identifier: amosVhhp0OTNXvHQ9eHbjbDAjsqn44vRi6z1jWrLe+c= Subject key identifier: E0:AA:71:95:77:27:9D:AE:57:41:CB:8B:A7:6A:34:52:8F:0B:4F:5D Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2570A1D6A6345684CEB1650351C4B4F3173FA19A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139974.roa Signing time: Tue 09 Jan 2024 04:00:25 +0000 ROA not before: Tue 09 Jan 2024 03:55:25 +0000 ROA not after: Tue 07 Jan 2025 04:00:25 +0000 asID: 139974 IP address blocks: 103.147.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 01:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:70:a1:d6:a6:34:56:84:ce:b1:65:03:51:c4:b4:f3:17:3f:a1:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:25 2024 GMT Not After : Jan 7 04:00:25 2025 GMT Subject: CN=E0AA719577279DAE5741CB8BA76A34528F0B4F5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d1:0c:56:f4:83:39:61:de:bb:b4:3c:ca:15: ed:6c:15:cc:a3:37:37:40:e8:b3:e4:62:c7:36:52: 3d:9b:6b:6f:df:d6:72:5b:1e:bb:2d:63:be:26:01: 8f:c5:e5:d8:87:be:6b:ad:7a:c6:ac:07:a6:aa:8b: dd:44:8d:59:70:5b:e4:74:a1:6a:6a:fa:05:2a:c7: 28:41:81:68:68:8e:79:65:91:fc:77:9d:1b:55:92: b0:b4:5e:fa:50:9c:f5:ae:ab:e1:93:60:fc:c7:a9: 38:32:32:1b:2c:e5:59:67:c8:7b:e2:f2:f8:a3:4c: ee:1d:3e:0c:0b:4c:ac:93:ca:0d:0a:f5:6e:5f:72: a2:72:b5:51:8f:f2:0e:b3:36:80:5b:2e:82:31:62: 12:cf:a6:8e:80:59:ef:48:b9:5a:32:7c:3d:6b:b5: 7a:8b:be:73:9d:6b:06:48:6e:6b:e9:7b:b7:99:bd: aa:6a:92:b1:9b:39:45:84:1c:84:ee:d5:a0:b1:66: 72:49:72:e3:3b:a3:38:f3:e8:8d:4a:bd:9e:da:0c: 30:62:a2:36:1d:04:0e:67:30:c9:6c:93:85:be:6a: b0:6e:af:b1:fe:d4:d4:9b:2f:05:5b:85:39:07:66: 03:a3:61:1e:6c:84:5b:3a:80:8e:a6:52:b5:90:7c: b6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AA:71:95:77:27:9D:AE:57:41:CB:8B:A7:6A:34:52:8F:0B:4F:5D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139974.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.251.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:d3:b2:24:eb:97:32:bf:94:d7:9d:a2:fd:b4:1f:dc:8d:e1: 96:ec:d1:10:84:05:6f:7d:25:0b:75:32:f1:3d:57:19:fa:62: 3c:ec:48:9e:d4:38:28:ee:fc:9b:02:bd:9c:35:32:80:cd:85: d0:0e:f6:e6:d5:39:e9:95:e3:56:e3:68:e7:a1:03:c6:1f:f4: dc:50:45:b3:65:78:d2:05:5f:ad:db:f5:51:89:c5:60:50:05: be:bb:2f:45:ca:99:56:41:81:3b:e6:cf:9c:37:66:1e:bc:28: 78:02:71:96:a8:ea:be:c6:fa:38:4c:04:bd:28:2d:7d:09:2a: fb:3a:7a:88:4d:d3:c5:e0:af:3c:c4:9a:76:93:25:48:78:96: 6c:65:3d:bc:a4:10:4a:b4:98:fc:c5:b0:6c:46:bb:46:57:10: d6:02:e4:f9:23:c5:ab:c8:2d:55:21:e9:ab:ef:0c:b5:1b:07: 63:e1:31:2f:7d:01:25:20:1d:a8:80:26:81:f3:58:1e:d0:08: df:46:ea:f8:29:31:f7:2a:2c:9a:1d:58:45:f3:47:85:ae:b5: 17:6c:c8:bb:f1:8e:a5:73:f8:59:c6:06:a5:f1:fc:55:2c:26: 99:ab:22:74:01:94:2a:54:78:25:d8:5d:b0:67:29:8f:0a:66: 5c:02:ef:97 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUJXCh1qY0VoTOsWUDUcS08xc/oZowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUyNVoX DTI1MDEwNzA0MDAyNVowMzExMC8GA1UEAxMoRTBBQTcxOTU3NzI3OURBRTU3NDFD QjhCQTc2QTM0NTI4RjBCNEY1RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANXRDFb0gzlh3ru0PMoV7WwVzKM3N0Dos+RixzZSPZtrb9/Wclseuy1jviYB j8Xl2Ie+a616xqwHpqqL3USNWXBb5HShamr6BSrHKEGBaGiOeWWR/HedG1WSsLRe +lCc9a6r4ZNg/MepODIyGyzlWWfIe+Ly+KNM7h0+DAtMrJPKDQr1bl9yonK1UY/y DrM2gFsugjFiEs+mjoBZ70i5WjJ8PWu1eou+c51rBkhua+l7t5m9qmqSsZs5RYQc hO7VoLFmckly4zujOPPojUq9ntoMMGKiNh0EDmcwyWyThb5qsG6vsf7U1JsvBVuF OQdmA6NhHmyEWzqAjqZStZB8tn0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTgqnGV dyedrldBy4unajRSjwtPXTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTk3NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeT+zANBgkqhkiG9w0BAQsFAAOCAQEAjdOyJOuXMr+U152i/bQf 3I3hluzREIQFb30lC3Uy8T1XGfpiPOxIntQ4KO78mwK9nDUygM2F0A725tU56ZXj VuNo56EDxh/03FBFs2V40gVfrdv1UYnFYFAFvrsvRcqZVkGBO+bPnDdmHrwoeAJx lqjqvsb6OEwEvSgtfQkq+zp6iE3TxeCvPMSadpMlSHiWbGU9vKQQSrSY/MWwbEa7 RlcQ1gLk+SPFq8gtVSHpq+8MtRsHY+ExL30BJSAdqIAmgfNYHtAI30bq+Ckx9yos mh1YRfNHha61F2zIu/GOpXP4WcYGpfH8VSwmmasidAGUKlR4JdhdsGcpjwpmXALv lw== -----END CERTIFICATE-----Generated at Sat Apr 27 20:19:59 2024 by rpki-client on console-ams.rpki-client.org