$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138069.roa File: AS138069.roa (raw, json) Hash identifier: X2lMHVzBtGXRqAZQQkzpDLuiJXBAlL6+NLeYyrJHNiA= Subject key identifier: 84:5D:37:A3:A7:46:81:B1:21:BE:86:CB:DF:A5:59:EC:02:40:39:43 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 713241FAC797861C1A96D3D28C0E4394B5C35FEB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138069.roa Signing time: Tue 10 Dec 2024 05:00:25 +0000 ROA not before: Tue 10 Dec 2024 04:55:25 +0000 ROA not after: Tue 09 Dec 2025 05:00:25 +0000 asID: 138069 IP address blocks: 103.123.16.0/22 maxlen: 24 2001:df6:bd00::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:32:41:fa:c7:97:86:1c:1a:96:d3:d2:8c:0e:43:94:b5:c3:5f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 10 04:55:25 2024 GMT Not After : Dec 9 05:00:25 2025 GMT Subject: CN=845D37A3A74681B121BE86CBDFA559EC02403943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d5:16:54:f8:95:63:f2:c9:d9:7a:9e:57:01: df:ab:99:3e:f9:f6:f6:66:62:b0:cf:e3:fc:00:be: fb:63:2e:42:06:69:af:b9:4e:3b:8f:6b:ed:df:06: d0:de:9d:ae:32:66:2f:a3:2c:bb:f8:f0:ec:48:4f: d6:2e:e1:b7:1b:70:88:51:d1:ef:3a:f9:6e:7c:3e: 15:ac:ee:b2:72:73:bf:dc:9d:e9:c9:d7:68:5b:ea: 97:53:32:19:4d:0f:4b:01:96:54:13:ab:9a:8d:dc: 4a:ba:1a:09:60:a3:c0:8b:a8:e7:83:38:b1:a0:9d: 8a:42:fc:38:69:6e:8d:9b:28:cb:db:66:53:52:fa: da:b4:59:8e:60:7a:29:d5:7c:9c:53:3d:75:46:0a: 3b:43:9a:73:cd:51:63:a1:7f:c4:15:52:86:f4:42: ad:6e:61:04:37:17:8e:ea:7a:5a:0d:6e:42:5b:be: 2e:a4:6c:4d:81:64:3b:fe:4c:a9:f5:6f:90:01:ae: 1e:1a:c9:4a:0d:db:d5:9a:0e:9a:1d:40:26:93:25: da:6a:b2:01:e4:5d:1c:04:e0:0c:7b:4c:4a:0a:df: a2:10:11:2b:2f:ce:ed:b6:8a:b2:01:e0:b6:5f:ea: dc:59:80:fe:bc:8b:c3:57:57:2e:f3:a2:f7:12:8b: 0c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5D:37:A3:A7:46:81:B1:21:BE:86:CB:DF:A5:59:EC:02:40:39:43 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138069.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.123.16.0/22 IPv6: 2001:df6:bd00::/48 Signature Algorithm: sha256WithRSAEncryption 39:49:d1:59:86:dd:30:b7:b5:0b:c2:1b:eb:07:99:89:bc:f9: d9:13:35:2f:f1:17:d8:46:6a:8c:49:02:72:13:12:0c:bb:a8: d3:cc:77:8e:91:9f:31:de:b6:35:0e:54:c2:e4:49:14:1c:e6: 99:41:ab:e0:cb:a2:1e:22:d7:ae:75:78:53:8f:60:e1:ad:11: 63:93:d6:c9:cf:e0:ca:d4:b3:00:b0:d6:c6:f4:56:c9:19:1f: 07:a0:a6:17:5f:e4:a4:b4:c2:9f:e7:74:36:78:e6:a4:84:4f: b7:f4:36:e7:f7:12:51:c3:1c:e5:20:e0:6f:65:b4:a2:6e:e9: 2b:c0:6c:58:12:73:c3:1f:fc:1c:10:2a:ef:89:48:af:1f:11: f1:10:9c:67:0a:b7:46:3a:88:4a:5a:55:06:fb:48:6b:73:6f: ae:cf:a9:78:71:c4:6a:08:6f:b6:58:5e:24:fb:e6:6e:0b:62: 4f:67:c9:2c:3b:39:eb:bb:55:ae:47:bd:ea:ec:e1:38:45:74: f8:98:7d:4e:54:d4:85:9a:a4:65:5c:8b:6b:af:72:84:ee:fa: a0:90:a1:c7:3d:08:0f:cc:c4:69:d2:41:dc:34:c4:87:10:a8: 7a:02:3e:b4:84:4a:6d:ef:fe:94:9f:39:e8:a8:44:0f:93:d1: d2:e0:e1:96 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUcTJB+seXhhwaltPSjA5DlLXDX+swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUyNVoX DTI1MTIwOTA1MDAyNVowMzExMC8GA1UEAxMoODQ1RDM3QTNBNzQ2ODFCMTIxQkU4 NkNCREZBNTU5RUMwMjQwMzk0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANjVFlT4lWPyydl6nlcB36uZPvn29mZisM/j/AC++2MuQgZpr7lOO49r7d8G 0N6drjJmL6Msu/jw7EhP1i7htxtwiFHR7zr5bnw+FazusnJzv9yd6cnXaFvql1My GU0PSwGWVBOrmo3cSroaCWCjwIuo54M4saCdikL8OGlujZsoy9tmU1L62rRZjmB6 KdV8nFM9dUYKO0Oac81RY6F/xBVShvRCrW5hBDcXjup6Wg1uQlu+LqRsTYFkO/5M qfVvkAGuHhrJSg3b1ZoOmh1AJpMl2mqyAeRdHATgDHtMSgrfohARKy/O7baKsgHg tl/q3FmA/ryLw1dXLvOi9xKLDIECAwEAAaOCAeEwggHdMB0GA1UdDgQWBBSEXTej p0aBsSG+hsvfpVnsAkA5QzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODA2OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAmd7EDAPBAIAAjAJAwcAIAEN9r0AMA0GCSqGSIb3DQEBCwUAA4IB AQA5SdFZht0wt7ULwhvrB5mJvPnZEzUv8RfYRmqMSQJyExIMu6jTzHeOkZ8x3rY1 DlTC5EkUHOaZQavgy6IeIteudXhTj2DhrRFjk9bJz+DK1LMAsNbG9FbJGR8HoKYX X+SktMKf53Q2eOakhE+39Dbn9xJRwxzlIOBvZbSibukrwGxYEnPDH/wcECrviUiv HxHxEJxnCrdGOohKWlUG+0hrc2+uz6l4ccRqCG+2WF4k++ZuC2JPZ8ksOznru1Wu R73q7OE4RXT4mH1OVNSFmqRlXItrr3KE7vqgkKHHPQgPzMRp0kHcNMSHEKh6Aj60 hEpt7/6UnznoqEQPk9HS4OGW -----END CERTIFICATE-----Generated at Sat Apr 5 06:19:56 2025 by rpki-client