$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138104.roa File: AS138104.roa (raw, json) Hash identifier: y1gsztGmY7/MQIXyhI8TBTdhUJbS6WqjQjYDFywdQIQ= Subject key identifier: C8:25:82:2E:D6:26:CD:46:F3:A8:CB:66:32:AF:B9:4A:65:F3:4C:B2 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 57009C01E5BB45022F7683988A05722BB1216EB6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138104.roa Signing time: Fri 25 Oct 2024 03:40:26 +0000 ROA not before: Fri 25 Oct 2024 03:35:26 +0000 ROA not after: Fri 24 Oct 2025 03:40:26 +0000 asID: 138104 IP address blocks: 103.125.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:00:9c:01:e5:bb:45:02:2f:76:83:98:8a:05:72:2b:b1:21:6e:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Oct 25 03:35:26 2024 GMT Not After : Oct 24 03:40:26 2025 GMT Subject: CN=C825822ED626CD46F3A8CB6632AFB94A65F34CB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a2:e9:cf:32:3d:34:68:7f:04:19:0b:9e:ad: aa:c6:1c:84:f2:76:16:33:4e:cf:e3:15:cc:12:11: 4b:7a:e7:87:f2:29:79:0c:48:1f:51:a2:18:9f:b8: bf:07:5f:d8:61:21:12:d8:e4:6b:54:f9:70:2a:dd: fa:a6:49:71:4f:ec:74:5c:e2:3e:9d:95:ca:a7:d8: 47:83:e9:ec:ac:8c:fa:b7:73:12:9a:e1:ce:b3:a7: dd:89:b6:6d:56:7b:13:7d:e3:39:57:de:21:c4:0b: db:43:b1:25:b1:ee:60:8f:62:d7:a0:1d:b2:ae:75: b4:ab:ea:91:35:a2:8f:e7:fe:fb:3a:53:cd:97:11: f4:24:c1:1d:9f:7f:37:22:54:ee:33:16:a1:9d:4e: 06:40:22:27:cb:a7:f1:bc:df:96:69:1f:7b:83:b4: 11:2e:85:b3:d2:aa:63:95:ce:5b:df:43:00:0f:7b: 62:09:2b:70:01:61:a1:69:a6:64:f3:f8:73:f9:99: b5:60:7f:61:05:30:14:06:83:f6:01:8b:c2:83:2f: 6d:48:8d:e7:b9:e2:06:de:96:f3:3d:77:0a:97:c5: 1c:d3:ad:cd:c1:30:76:18:ca:c8:cd:a8:6e:ec:27: cc:ab:10:34:05:e0:be:42:0a:74:0e:cb:76:6d:55: 1a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:25:82:2E:D6:26:CD:46:F3:A8:CB:66:32:AF:B9:4A:65:F3:4C:B2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138104.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.125.223.0/24 Signature Algorithm: sha256WithRSAEncryption 86:d3:5a:96:0f:04:ae:17:8e:0b:68:ff:30:01:90:d6:0e:a5: 33:50:a1:39:83:d7:c4:d1:2e:69:d1:a0:86:73:7c:cb:d9:b0: 29:7d:09:32:ca:ab:57:08:f4:2a:e6:f2:2f:f3:59:10:b2:d8: a1:94:8a:3e:45:2e:a3:a4:b2:9d:19:ab:1b:6a:a6:4c:f4:53: 6a:27:ae:88:1c:ef:e5:64:1e:cf:69:83:de:75:34:cc:a6:f2: e6:5b:20:2a:38:f9:e9:df:e1:4d:6b:33:a1:02:51:cb:6e:8a: c2:69:7c:08:06:a1:95:d2:12:12:b8:16:4b:a7:1d:74:96:c7: 42:c8:96:16:0e:b1:c6:99:8c:37:1b:92:0f:7e:0e:b6:85:4a: df:65:d5:d4:7b:a8:1e:9d:fa:7c:9b:7f:98:fb:f9:4a:7e:66: 75:ab:0a:24:d4:fe:5f:bf:3c:99:d3:08:3b:7f:81:06:9d:24: 34:ea:04:fd:f5:93:7a:68:1a:1c:a4:92:ba:79:4b:fb:ee:83: d4:24:56:40:a1:b3:e7:f9:a0:35:c8:c5:89:56:22:90:5e:bb: 1d:ae:ff:45:d4:24:5e:4c:88:88:66:22:97:4d:9d:5e:67:1f: cf:06:d8:e9:c5:ae:07:76:45:03:b9:9f:ab:78:c4:13:28:04: 27:45:2a:65 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUVwCcAeW7RQIvdoOYigVyK7EhbrYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAyNTAzMzUyNloX DTI1MTAyNDAzNDAyNlowMzExMC8GA1UEAxMoQzgyNTgyMkVENjI2Q0Q0NkYzQThD QjY2MzJBRkI5NEE2NUYzNENCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWi6c8yPTRofwQZC56tqsYchPJ2FjNOz+MVzBIRS3rnh/IpeQxIH1GiGJ+4 vwdf2GEhEtjka1T5cCrd+qZJcU/sdFziPp2VyqfYR4Pp7KyM+rdzEprhzrOn3Ym2 bVZ7E33jOVfeIcQL20OxJbHuYI9i16Adsq51tKvqkTWij+f++zpTzZcR9CTBHZ9/ NyJU7jMWoZ1OBkAiJ8un8bzflmkfe4O0ES6Fs9KqY5XOW99DAA97YgkrcAFhoWmm ZPP4c/mZtWB/YQUwFAaD9gGLwoMvbUiN57niBt6W8z13CpfFHNOtzcEwdhjKyM2o buwnzKsQNAXgvkIKdA7Ldm1VGnECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTIJYIu 1ibNRvOoy2Yyr7lKZfNMsjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODEwNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGd93zANBgkqhkiG9w0BAQsFAAOCAQEAhtNalg8ErheOC2j/MAGQ 1g6lM1ChOYPXxNEuadGghnN8y9mwKX0JMsqrVwj0KubyL/NZELLYoZSKPkUuo6Sy nRmrG2qmTPRTaieuiBzv5WQez2mD3nU0zKby5lsgKjj56d/hTWszoQJRy26Kwml8 CAahldISErgWS6cddJbHQsiWFg6xxpmMNxuSD34OtoVK32XV1HuoHp36fJt/mPv5 Sn5mdasKJNT+X788mdMIO3+BBp0kNOoE/fWTemgaHKSSunlL++6D1CRWQKGz5/mg NcjFiVYikF67Ha7/RdQkXkyIiGYil02dXmcfzwbY6cWuB3ZFA7mfq3jEEygEJ0Uq ZQ== -----END CERTIFICATE-----Generated at Sun Feb 16 21:09:00 2025 by rpki-client