$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138121.roa File: AS138121.roa (raw, json) Hash identifier: mPKnVK/wOr+oVyV2J39yDTJLapt6ZyC6DbvISt2ablY= Subject key identifier: 8F:A8:7E:A1:54:5A:C6:79:DF:F5:84:3F:F8:9C:DB:CB:B7:19:70:0E Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 77EDC2DC5A569293385D9FE7F7CAC23D4D5F2CE4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138121.roa Signing time: Mon 24 Feb 2025 08:00:00 +0000 ROA not before: Mon 24 Feb 2025 07:55:00 +0000 ROA not after: Mon 23 Feb 2026 08:00:00 +0000 asID: 138121 IP address blocks: 103.91.12.0/23 maxlen: 24 103.133.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ed:c2:dc:5a:56:92:93:38:5d:9f:e7:f7:ca:c2:3d:4d:5f:2c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Feb 24 07:55:00 2025 GMT Not After : Feb 23 08:00:00 2026 GMT Subject: CN=8FA87EA1545AC679DFF5843FF89CDBCBB719700E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5d:62:4f:f5:cd:ae:6d:bb:b5:f9:5a:ec:d6: 1c:a2:9d:bb:09:fe:38:81:7c:be:a6:b1:af:06:e1: fd:fc:6a:6f:fe:69:0e:62:e1:24:89:d2:e6:8b:8c: 13:15:19:78:c8:b2:45:5a:32:2e:60:f2:10:2f:4a: ae:fd:50:08:4d:7d:9d:f8:33:90:e6:25:98:ef:8c: 1b:2a:f9:30:b8:42:47:0e:87:eb:ed:ae:53:02:bf: 47:af:28:0c:ff:ea:14:2b:e3:7c:eb:7b:f3:ab:d7: 4f:2e:97:3a:ad:30:f7:5a:2f:0f:b0:af:90:3d:d0: 35:b8:2a:da:b2:10:a7:4f:2d:84:96:d4:b1:63:e6: 00:d0:48:3e:bb:44:45:ac:f4:50:8d:42:96:22:1b: b1:f6:54:38:6b:69:c4:18:81:83:f5:e6:f9:42:0d: 2a:3a:1a:a7:ef:eb:e4:4f:bc:ae:4f:90:61:15:3d: 58:9c:08:a8:50:b5:04:35:50:32:c3:4a:4e:93:eb: 49:33:94:4f:a2:7d:6f:48:44:06:b9:1a:c8:92:b9: 27:a5:6a:8e:62:d0:07:66:04:f9:ca:35:a8:e4:18: 48:e2:02:42:d0:1d:38:18:82:f6:cb:5d:47:0d:29: ad:64:58:8e:a7:a7:49:9b:34:b3:bf:c4:4f:f8:7c: 64:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A8:7E:A1:54:5A:C6:79:DF:F5:84:3F:F8:9C:DB:CB:B7:19:70:0E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138121.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.91.12.0/23 103.133.148.0/22 Signature Algorithm: sha256WithRSAEncryption 12:6a:a5:c1:28:92:52:6f:cc:f9:f4:04:14:14:65:b5:24:3e: 5a:2e:f1:f2:6b:13:28:44:18:4c:5f:a6:cb:3a:cb:a3:b7:46: 24:97:ae:d2:97:ed:5b:85:55:08:98:f9:fc:f2:51:8e:18:9c: 93:e7:f7:a1:2b:50:01:46:8c:ee:26:20:c1:92:e9:09:a0:ef: c4:2e:8f:11:16:a6:21:42:c0:32:f8:05:40:10:16:69:95:1e: e9:8f:11:b3:5d:26:44:d8:aa:a2:39:e3:88:76:ec:78:52:3e: 35:d5:a7:e2:f4:ea:13:49:93:4f:b9:e0:83:f5:53:15:be:29: 07:7f:67:08:e4:e2:b7:03:0b:60:ad:f4:63:50:aa:54:4a:da: e7:58:25:b2:6e:e2:cf:f4:97:ad:f9:8d:88:4c:6e:77:32:ef: 56:be:fa:63:e9:61:cf:b5:01:8c:06:43:ae:53:b6:f3:e3:d2: 0d:b4:2b:d4:9d:a1:a8:1f:09:10:e6:db:3a:ba:c5:f9:86:ae: 16:f5:7a:a6:3a:9f:ae:09:4c:83:7f:50:2e:e4:29:0f:fe:f8: 6a:7c:61:17:f2:04:34:7d:1a:a4:32:3e:7f:97:c2:9f:01:29: 3d:d3:61:4a:b7:99:56:ba:25:05:5b:65:86:82:70:72:89:1d: 8f:5f:bf:d3 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUd+3C3FpWkpM4XZ/n98rCPU1fLOQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIyNDA3NTUwMFoX DTI2MDIyMzA4MDAwMFowMzExMC8GA1UEAxMoOEZBODdFQTE1NDVBQzY3OURGRjU4 NDNGRjg5Q0RCQ0JCNzE5NzAwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKxdYk/1za5tu7X5WuzWHKKduwn+OIF8vqaxrwbh/fxqb/5pDmLhJInS5ouM ExUZeMiyRVoyLmDyEC9Krv1QCE19nfgzkOYlmO+MGyr5MLhCRw6H6+2uUwK/R68o DP/qFCvjfOt786vXTy6XOq0w91ovD7CvkD3QNbgq2rIQp08thJbUsWPmANBIPrtE Raz0UI1CliIbsfZUOGtpxBiBg/Xm+UINKjoap+/r5E+8rk+QYRU9WJwIqFC1BDVQ MsNKTpPrSTOUT6J9b0hEBrkayJK5J6VqjmLQB2YE+co1qOQYSOICQtAdOBiC9std Rw0prWRYjqenSZs0s7/ET/h8ZGMCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBSPqH6h VFrGed/1hD/4nNvLtxlwDjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODEyMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAWdbDAMEAmeFlDANBgkqhkiG9w0BAQsFAAOCAQEAEmqlwSiSUm/M +fQEFBRltSQ+Wi7x8msTKEQYTF+myzrLo7dGJJeu0pftW4VVCJj5/PJRjhick+f3 oStQAUaM7iYgwZLpCaDvxC6PERamIULAMvgFQBAWaZUe6Y8Rs10mRNiqojnjiHbs eFI+NdWn4vTqE0mTT7ngg/VTFb4pB39nCOTitwMLYK30Y1CqVEra51glsm7iz/SX rfmNiExudzLvVr76Y+lhz7UBjAZDrlO28+PSDbQr1J2hqB8JEObbOrrF+YauFvV6 pjqfrglMg39QLuQpD/74anxhF/IENH0apDI+f5fCnwEpPdNhSreZVrolBVtlhoJw cokdj1+/0w== -----END CERTIFICATE-----Generated at Sat Apr 5 06:19:59 2025 by rpki-client