$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/AS139994.roa File: AS139994.roa (raw, json) Hash identifier: V1fHZHeyWM0yunBqcSWTYR9zxd5+dcGWhieykWfyO08= Subject key identifier: A7:67:47:91:62:D5:31:C7:9E:8B:2A:F5:9B:2D:8C:54:64:25:AF:5B Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Certificate serial: 54D345A657A30083DCC1684FC45DBD547393EBCD Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/AS139994.roa Signing time: Thu 17 Oct 2024 08:02:21 +0000 ROA not before: Thu 17 Oct 2024 07:57:21 +0000 ROA not after: Thu 16 Oct 2025 08:02:21 +0000 asID: 139994 IP address blocks: 140.213.1.0/24 maxlen: 24 140.213.3.0/24 maxlen: 24 140.213.8.0/24 maxlen: 24 140.213.10.0/24 maxlen: 24 140.213.12.0/24 maxlen: 24 140.213.94.0/24 maxlen: 24 140.213.95.0/24 maxlen: 24 140.213.118.0/24 maxlen: 24 140.213.186.0/24 maxlen: 24 140.213.187.0/24 maxlen: 24 140.213.188.0/24 maxlen: 24 140.213.190.0/24 maxlen: 24 140.213.192.0/24 maxlen: 24 140.213.193.0/24 maxlen: 24 140.213.194.0/24 maxlen: 24 140.213.195.0/24 maxlen: 24 140.213.196.0/24 maxlen: 24 140.213.197.0/24 maxlen: 24 140.213.198.0/24 maxlen: 24 140.213.199.0/24 maxlen: 24 140.213.200.0/24 maxlen: 24 140.213.201.0/24 maxlen: 24 140.213.202.0/24 maxlen: 24 140.213.203.0/24 maxlen: 24 140.213.210.0/24 maxlen: 24 140.213.211.0/24 maxlen: 24 140.213.212.0/24 maxlen: 24 140.213.213.0/24 maxlen: 24 140.213.214.0/24 maxlen: 24 140.213.215.0/24 maxlen: 24 140.213.216.0/24 maxlen: 24 140.213.217.0/24 maxlen: 24 140.213.234.0/24 maxlen: 24 140.213.235.0/24 maxlen: 24 140.213.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d3:45:a6:57:a3:00:83:dc:c1:68:4f:c4:5d:bd:54:73:93:eb:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Validity Not Before: Oct 17 07:57:21 2024 GMT Not After : Oct 16 08:02:21 2025 GMT Subject: CN=A767479162D531C79E8B2AF59B2D8C546425AF5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f8:17:ea:45:e8:f0:e5:71:de:8c:d6:ab:ba: 97:4c:7c:fd:b4:5f:60:9d:23:12:19:e6:6e:fe:e7: cf:08:96:d4:51:60:ad:6a:01:19:79:28:96:a3:6d: 75:18:14:f2:fd:2f:36:a1:50:58:46:66:16:8a:93: b9:fd:c6:a9:60:f4:7c:e8:f9:75:0c:d2:c8:55:73: ac:89:a5:40:ec:4c:c4:f4:93:02:a1:32:82:c5:e2: ad:a1:48:0c:f7:14:3a:a2:a0:ec:b7:f9:21:5e:68: f8:6e:4f:56:38:e0:26:d7:8a:72:fe:84:7c:ac:81: 09:78:60:c7:dd:7a:8c:30:d3:fc:c5:f1:6f:36:77: b2:8e:ae:96:59:3e:f0:20:bc:22:89:cd:72:19:a4: a8:c9:06:82:36:a1:bd:bb:9f:5c:c4:10:9e:04:59: ce:02:83:50:2d:c2:2f:f7:10:66:12:a5:f1:49:1e: 0b:54:a0:9c:a6:f4:0e:52:37:f7:6b:02:92:19:59: 81:0f:e2:29:41:92:dd:6b:0f:2b:18:a5:5a:18:b8: df:16:d1:5e:b4:6e:5e:68:f5:e8:e0:6b:4d:40:59: 03:3c:70:4e:e2:64:ab:28:72:62:f2:62:29:d5:b4: 74:05:db:db:e8:f1:67:d1:99:6b:bb:0b:62:c2:4c: 73:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:67:47:91:62:D5:31:C7:9E:8B:2A:F5:9B:2D:8C:54:64:25:AF:5B X509v3 Authority Key Identifier: keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/AS139994.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.213.1.0/24 140.213.3.0/24 140.213.8.0/24 140.213.10.0/24 140.213.12.0/24 140.213.94.0/23 140.213.118.0/24 140.213.186.0-140.213.188.255 140.213.190.0/24 140.213.192.0-140.213.203.255 140.213.210.0-140.213.217.255 140.213.234.0-140.213.236.255 Signature Algorithm: sha256WithRSAEncryption 17:cb:3f:41:81:38:3d:58:25:74:13:26:dd:0b:f4:e7:77:b1: 19:2d:08:b7:31:24:f8:6b:fe:e2:86:b7:b1:e3:c9:6d:bf:04: a4:b4:19:25:cc:d4:d9:d2:e5:74:38:97:d4:86:aa:46:8e:45: 24:5e:a8:98:98:50:45:e5:ee:dc:f0:42:f2:6e:9b:c1:1d:71: f7:61:d2:c0:60:b5:25:a1:1c:7c:ef:73:b3:c0:2c:89:f7:21: f5:f2:94:8f:d8:98:5a:39:e7:46:1b:23:de:bd:1d:ae:3e:16: 34:61:a1:a9:11:f6:3e:a7:1a:90:0a:1d:d4:8b:53:16:58:07: ba:0e:e7:24:3d:0f:e9:3e:15:a9:c7:82:5c:40:d5:0d:ed:92: e8:63:60:f1:18:1d:af:2c:5b:47:d4:89:ea:19:ab:ec:53:7e: 89:ea:93:0f:bd:58:28:f9:7a:88:99:ef:1b:18:73:d2:cf:ca: eb:d1:c2:10:d2:45:74:6a:1c:40:fc:2f:de:17:6e:5b:ab:28: ab:18:0f:e1:eb:45:23:80:34:72:97:aa:70:40:52:44:39:2f: 76:8a:48:f4:4f:38:01:04:ce:42:88:56:d2:e8:d5:40:87:ac: 22:8a:17:f2:8a:87:4c:3b:03:c2:d2:f6:fd:67:37:f5:75:57: fe:90:02:41 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUVNNFplejAIPcwWhPxF29VHOT680wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG QzY2MEExQjAeFw0yNDEwMTcwNzU3MjFaFw0yNTEwMTYwODAyMjFaMDMxMTAvBgNV BAMTKEE3Njc0NzkxNjJENTMxQzc5RThCMkFGNTlCMkQ4QzU0NjQyNUFGNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU+BfqRejw5XHejNarupdMfP20 X2CdIxIZ5m7+588IltRRYK1qARl5KJajbXUYFPL9LzahUFhGZhaKk7n9xqlg9Hzo +XUM0shVc6yJpUDsTMT0kwKhMoLF4q2hSAz3FDqioOy3+SFeaPhuT1Y44CbXinL+ hHysgQl4YMfdeoww0/zF8W82d7KOrpZZPvAgvCKJzXIZpKjJBoI2ob27n1zEEJ4E Wc4Cg1Atwi/3EGYSpfFJHgtUoJym9A5SN/drApIZWYEP4ilBkt1rDysYpVoYuN8W 0V60bl5o9ejga01AWQM8cE7iZKsocmLyYinVtHQF29vo8WfRmWu7C2LCTHM3AgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUp2dHkWLVMceeiyr1my2MVGQlr1swHwYDVR0j BBgwFoAUELq3kH2VOg1f3rXCDJ8pvPxmChswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8xMEJBQjc5MDdE OTUzQTBENUZERUI1QzIwQzlGMjlCQ0ZDNjYwQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNGQzY2 MEExQi5jZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jl cG8tcnBraS5pZG5pYy5uZXQvcmVwby80YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04 ZDdlN2ZjMmMyMjcvMS9BUzEzOTk5NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjCBgQYIKwYBBQUHAQcBAf8EcjBwMG4EAgABMGgDBACM1QEDBACM1QMDBACM 1QgDBACM1QoDBACM1QwDBAGM1V4DBACM1XYwDAMEAYzVugMEAIzVvAMEAIzVvjAM AwQGjNXAAwQCjNXIMAwDBAGM1dIDBAGM1dgwDAMEAYzV6gMEAIzV7DANBgkqhkiG 9w0BAQsFAAOCAQEAF8s/QYE4PVgldBMm3Qv053exGS0ItzEk+Gv+4oa3sePJbb8E pLQZJczU2dLldDiX1IaqRo5FJF6omJhQReXu3PBC8m6bwR1x92HSwGC1JaEcfO9z s8Asifch9fKUj9iYWjnnRhsj3r0drj4WNGGhqRH2PqcakAod1ItTFlgHug7nJD0P 6T4VqceCXEDVDe2S6GNg8RgdryxbR9SJ6hmr7FN+ieqTD71YKPl6iJnvGxhz0s/K 69HCENJFdGocQPwv3hduW6soqxgP4etFI4A0cpeqcEBSRDkvdopI9E84AQTOQohW 0ujVQIesIooX8oqHTDsDwtL2/Wc39XVX/pACQQ== -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org