$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/AS139994.roa File: AS139994.roa (raw, json) Hash identifier: L7wp4RFZ7oh6RDS9DSqfg43M7IYUq9fPjo/4ZzorHJU= Subject key identifier: 14:7D:9A:1B:60:2C:7F:E5:44:E5:93:C3:0D:FE:12:55:C0:8E:41:A3 Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Certificate serial: 4AAB27D647022D4D9AC738D0B2FA77188A85D8DC Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/AS139994.roa Signing time: Thu 16 Nov 2023 08:00:51 +0000 ROA not before: Thu 16 Nov 2023 07:55:51 +0000 ROA not after: Thu 14 Nov 2024 08:00:51 +0000 asID: 139994 IP address blocks: 140.213.1.0/24 maxlen: 24 140.213.3.0/24 maxlen: 24 140.213.8.0/24 maxlen: 24 140.213.10.0/24 maxlen: 24 140.213.12.0/24 maxlen: 24 140.213.94.0/24 maxlen: 24 140.213.95.0/24 maxlen: 24 140.213.118.0/24 maxlen: 24 140.213.186.0/24 maxlen: 24 140.213.187.0/24 maxlen: 24 140.213.188.0/24 maxlen: 24 140.213.190.0/24 maxlen: 24 140.213.192.0/24 maxlen: 24 140.213.193.0/24 maxlen: 24 140.213.194.0/24 maxlen: 24 140.213.195.0/24 maxlen: 24 140.213.196.0/24 maxlen: 24 140.213.197.0/24 maxlen: 24 140.213.198.0/24 maxlen: 24 140.213.199.0/24 maxlen: 24 140.213.200.0/24 maxlen: 24 140.213.201.0/24 maxlen: 24 140.213.202.0/24 maxlen: 24 140.213.203.0/24 maxlen: 24 140.213.210.0/24 maxlen: 24 140.213.211.0/24 maxlen: 24 140.213.212.0/24 maxlen: 24 140.213.213.0/24 maxlen: 24 140.213.214.0/24 maxlen: 24 140.213.215.0/24 maxlen: 24 140.213.216.0/24 maxlen: 24 140.213.217.0/24 maxlen: 24 140.213.234.0/24 maxlen: 24 140.213.235.0/24 maxlen: 24 140.213.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 15:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ab:27:d6:47:02:2d:4d:9a:c7:38:d0:b2:fa:77:18:8a:85:d8:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Validity Not Before: Nov 16 07:55:51 2023 GMT Not After : Nov 14 08:00:51 2024 GMT Subject: CN=147D9A1B602C7FE544E593C30DFE1255C08E41A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:14:c8:1e:8f:be:a8:aa:21:c9:8b:1c:6d:03: e0:b2:32:29:ab:0c:a4:eb:f9:08:33:1d:1c:2a:3c: 6f:34:74:72:ee:58:83:d3:1b:07:dc:9e:39:45:ba: 1f:a6:eb:03:21:58:e8:3f:30:72:fc:0a:4a:fd:36: f1:2a:36:09:33:04:1f:e9:53:7a:12:2c:44:b7:b2: 96:34:55:b9:4a:b6:ac:f9:fc:90:fe:f5:c8:f9:3f: 65:72:ab:fe:ea:40:9a:aa:9a:77:eb:88:b3:1d:06: f2:74:50:a6:2e:1f:b3:1b:e5:ad:3f:35:62:a2:0c: 70:f6:cb:11:ea:ec:77:c7:fb:0f:78:1e:c6:64:20: df:0c:ef:33:b2:55:57:93:a2:03:f9:0b:d1:19:7c: 21:c6:0f:88:e4:8a:7d:b2:3e:a8:7b:7c:a3:0c:bb: 52:79:83:8d:6a:84:ee:15:24:4d:7a:5f:9c:a6:b4: 05:03:ef:29:7c:a8:37:3d:1a:81:9d:56:f1:20:62: ca:bc:72:c9:2b:53:96:db:23:62:51:c7:72:e7:b6: 42:13:a6:52:73:52:cf:b5:9f:53:67:76:0f:f2:26: 99:79:84:23:69:1a:b3:22:1b:72:1e:20:0f:8b:a8: 29:94:d6:16:75:0c:8c:e1:7f:7d:4a:ad:c1:9c:71: 69:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7D:9A:1B:60:2C:7F:E5:44:E5:93:C3:0D:FE:12:55:C0:8E:41:A3 X509v3 Authority Key Identifier: keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/AS139994.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.213.1.0/24 140.213.3.0/24 140.213.8.0/24 140.213.10.0/24 140.213.12.0/24 140.213.94.0/23 140.213.118.0/24 140.213.186.0-140.213.188.255 140.213.190.0/24 140.213.192.0-140.213.203.255 140.213.210.0-140.213.217.255 140.213.234.0-140.213.236.255 Signature Algorithm: sha256WithRSAEncryption a9:73:3f:35:76:97:0e:fe:2c:35:08:52:e4:43:9e:65:42:91: 32:3f:b0:fc:45:b0:fc:c8:09:ae:7c:13:4a:64:99:39:a7:d9: 1d:ea:71:b4:25:c7:24:97:d2:79:c7:98:2a:82:5a:e9:4a:dd: d0:c7:03:b5:fe:47:eb:6b:ea:16:c7:02:c4:b4:55:15:e4:eb: f1:29:8f:c1:a9:1f:e1:18:49:ea:92:f3:5b:c4:5f:9b:46:af: 5b:60:af:b3:84:c7:07:4a:05:81:94:be:82:cc:bb:69:72:b9: 59:0a:c2:93:3c:08:e6:53:37:0f:6c:d8:e0:da:2d:69:0d:c9: 71:a7:60:a7:cb:83:1e:eb:3a:5a:37:24:e6:96:75:98:ad:4e: ba:bc:f9:3b:97:82:f7:5c:9d:61:e6:85:1b:68:df:80:75:28: 30:c6:cd:73:88:51:61:a0:76:5c:03:eb:cf:da:25:f4:89:d2: 9c:2f:e6:0d:fe:b0:c0:ef:51:bf:8d:ae:71:38:6c:47:9d:e2: c0:cf:cd:5d:e0:13:c9:07:f4:13:8a:b1:6c:f6:db:f3:52:ca: 57:6f:46:64:b5:88:66:ba:30:20:e4:0f:6c:f8:7d:6f:aa:5f: 01:01:f9:a7:80:2f:7e:c0:cb:d6:52:d4:c4:f4:97:67:f7:64: 4e:a5:0d:1e -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUSqsn1kcCLU2axzjQsvp3GIqF2NwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG QzY2MEExQjAeFw0yMzExMTYwNzU1NTFaFw0yNDExMTQwODAwNTFaMDMxMTAvBgNV BAMTKDE0N0Q5QTFCNjAyQzdGRTU0NEU1OTNDMzBERkUxMjU1QzA4RTQxQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCFMgej76oqiHJixxtA+CyMimr DKTr+QgzHRwqPG80dHLuWIPTGwfcnjlFuh+m6wMhWOg/MHL8Ckr9NvEqNgkzBB/p U3oSLES3spY0VblKtqz5/JD+9cj5P2Vyq/7qQJqqmnfriLMdBvJ0UKYuH7Mb5a0/ NWKiDHD2yxHq7HfH+w94HsZkIN8M7zOyVVeTogP5C9EZfCHGD4jkin2yPqh7fKMM u1J5g41qhO4VJE16X5ymtAUD7yl8qDc9GoGdVvEgYsq8cskrU5bbI2JRx3LntkIT plJzUs+1n1Nndg/yJpl5hCNpGrMiG3IeIA+LqCmU1hZ1DIzhf31KrcGccWmbAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUFH2aG2Asf+VE5ZPDDf4SVcCOQaMwHwYDVR0j BBgwFoAUELq3kH2VOg1f3rXCDJ8pvPxmChswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8xMEJBQjc5MDdE OTUzQTBENUZERUI1QzIwQzlGMjlCQ0ZDNjYwQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNGQzY2 MEExQi5jZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jl cG8tcnBraS5pZG5pYy5uZXQvcmVwby80YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04 ZDdlN2ZjMmMyMjcvMS9BUzEzOTk5NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjCBgQYIKwYBBQUHAQcBAf8EcjBwMG4EAgABMGgDBACM1QEDBACM1QMDBACM 1QgDBACM1QoDBACM1QwDBAGM1V4DBACM1XYwDAMEAYzVugMEAIzVvAMEAIzVvjAM AwQGjNXAAwQCjNXIMAwDBAGM1dIDBAGM1dgwDAMEAYzV6gMEAIzV7DANBgkqhkiG 9w0BAQsFAAOCAQEAqXM/NXaXDv4sNQhS5EOeZUKRMj+w/EWw/MgJrnwTSmSZOafZ HepxtCXHJJfSeceYKoJa6Urd0McDtf5H62vqFscCxLRVFeTr8SmPwakf4RhJ6pLz W8Rfm0avW2Cvs4THB0oFgZS+gsy7aXK5WQrCkzwI5lM3D2zY4NotaQ3Jcadgp8uD Hus6Wjck5pZ1mK1Ourz5O5eC91ydYeaFG2jfgHUoMMbNc4hRYaB2XAPrz9ol9InS nC/mDf6wwO9Rv42ucThsR53iwM/NXeATyQf0E4qxbPbb81LKV29GZLWIZrowIOQP bPh9b6pfAQH5p4AvfsDL1lLUxPSXZ/dkTqUNHg== -----END CERTIFICATE-----Generated at Tue Apr 30 03:30:49 2024 by rpki-client on console-fra.rpki-client.org