$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138128.roa File: AS138128.roa (raw, json) Hash identifier: Pdp1kIC1v0zIb3Zpc5A7LjkctlgtV5KngpPVt6zf7fQ= Subject key identifier: 4C:D1:36:D4:C1:0B:22:BC:12:44:ED:ED:39:EB:ED:CF:30:E2:DF:2F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 322E30911348F1B1E69281891CDF18FC86257A7D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138128.roa Signing time: Wed 17 Jul 2024 06:27:01 +0000 ROA not before: Wed 17 Jul 2024 06:22:01 +0000 ROA not after: Wed 16 Jul 2025 06:27:01 +0000 asID: 138128 IP address blocks: 103.185.36.0/23 maxlen: 24 2407:7c0::/40 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:2e:30:91:13:48:f1:b1:e6:92:81:89:1c:df:18:fc:86:25:7a:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 17 06:22:01 2024 GMT Not After : Jul 16 06:27:01 2025 GMT Subject: CN=4CD136D4C10B22BC1244EDED39EBEDCF30E2DF2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d2:f9:00:d1:2f:99:55:95:ed:64:30:81:5a: df:c2:60:97:52:93:49:95:52:15:23:03:e1:96:04: 01:85:65:1f:d4:52:d3:8b:de:f5:ec:27:47:89:4c: 6d:6c:30:c4:25:9c:cf:b7:10:89:3f:71:1f:b0:cc: 88:de:ad:af:bc:d0:b1:96:a9:18:c6:0e:1f:c2:06: 19:90:99:84:d0:b6:5f:e0:ca:76:87:d2:fb:c9:df: 20:6f:9d:64:99:ae:33:d6:19:1f:37:05:3d:d2:7f: 01:20:34:92:cc:5c:c7:02:67:80:09:3b:0e:74:c9: b2:92:55:49:5c:4b:26:b5:77:77:f7:9f:70:71:14: f7:16:49:a2:7f:f0:21:24:bb:1c:4b:fa:6a:59:f1: b7:9e:94:3d:3e:d8:3e:7d:3e:19:a3:67:54:85:43: 0f:94:45:82:43:78:ac:4d:2f:f7:93:58:00:6b:c5: 12:9a:a0:ad:74:e4:e9:a4:13:1b:29:b6:70:ef:79: ee:16:4c:34:fd:d7:04:c8:42:5b:ed:4e:30:31:b8: a7:e4:e7:f1:9f:27:39:9b:b2:15:38:0a:fb:67:1f: 81:1c:e5:b7:95:af:d2:d9:63:66:6b:a9:2a:48:e4: 93:49:b0:97:af:2c:0f:28:ca:9a:db:03:11:d7:15: d3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D1:36:D4:C1:0B:22:BC:12:44:ED:ED:39:EB:ED:CF:30:E2:DF:2F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138128.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.185.36.0/23 IPv6: 2407:7c0::/40 Signature Algorithm: sha256WithRSAEncryption 4b:46:de:c6:16:88:0e:65:e3:5a:5b:44:a4:3c:38:9f:fc:11: f2:e2:58:90:fc:ac:ed:7d:2b:90:6d:68:87:d2:d1:2e:8a:d0: 04:fc:f3:9a:6c:17:15:cf:cf:65:1e:dd:97:a9:35:6d:f5:1f: 32:d6:50:91:d2:bb:df:da:d4:02:61:48:8a:b9:65:88:2e:f3: d3:6e:22:8f:04:00:f2:1a:dd:c5:b7:ae:d8:26:c1:09:a4:d3: 6a:2f:4a:09:42:ea:c4:43:49:44:97:f6:88:97:51:3f:31:2f: 97:6d:59:0a:52:59:c2:26:3d:55:13:e7:37:cc:20:35:5f:1c: ae:e1:d9:ee:7a:f9:e9:63:89:42:c5:9c:dd:d2:ca:92:94:e1: da:e9:09:3d:ae:06:0d:d9:31:c3:8c:2e:8c:42:ad:28:3c:06: c0:8d:47:94:39:d4:53:3b:95:d8:99:77:21:4f:48:1f:4e:21: f7:d9:3b:06:a7:3a:dd:e0:58:bd:d4:c6:3c:3c:bf:a5:c7:d1: e3:a3:e5:d5:ac:e7:3e:e7:92:b3:3e:2e:6b:8a:aa:5b:43:9a: d9:72:b0:17:91:59:4a:bf:3b:a3:66:56:68:37:97:0f:cd:3c: ae:7f:26:91:d4:0a:e1:3f:bb:25:76:f0:bc:8a:40:a6:d0:05: 5f:2a:6e:9b -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgIUMi4wkRNI8bHmkoGJHN8Y/IYlen0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcxNzA2MjIwMVoX DTI1MDcxNjA2MjcwMVowMzExMC8GA1UEAxMoNENEMTM2RDRDMTBCMjJCQzEyNDRF REVEMzlFQkVEQ0YzMEUyREYyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMvS+QDRL5lVle1kMIFa38Jgl1KTSZVSFSMD4ZYEAYVlH9RS04ve9ewnR4lM bWwwxCWcz7cQiT9xH7DMiN6tr7zQsZapGMYOH8IGGZCZhNC2X+DKdofS+8nfIG+d ZJmuM9YZHzcFPdJ/ASA0ksxcxwJngAk7DnTJspJVSVxLJrV3d/efcHEU9xZJon/w ISS7HEv6alnxt56UPT7YPn0+GaNnVIVDD5RFgkN4rE0v95NYAGvFEpqgrXTk6aQT Gym2cO957hZMNP3XBMhCW+1OMDG4p+Tn8Z8nOZuyFTgK+2cfgRzlt5Wv0tljZmup Kkjkk0mwl68sDyjKmtsDEdcV06UCAwEAAaOCAeAwggHcMB0GA1UdDgQWBBRM0TbU wQsivBJE7e056+3PMOLfLzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODEyOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAvBggrBgEFBQcBBwEB/wQgMB4w DAQCAAEwBgMEAWe5JDAOBAIAAjAIAwYAJAcHwAAwDQYJKoZIhvcNAQELBQADggEB AEtG3sYWiA5l41pbRKQ8OJ/8EfLiWJD8rO19K5BtaIfS0S6K0AT885psFxXPz2Ue 3ZepNW31HzLWUJHSu9/a1AJhSIq5ZYgu89NuIo8EAPIa3cW3rtgmwQmk02ovSglC 6sRDSUSX9oiXUT8xL5dtWQpSWcImPVUT5zfMIDVfHK7h2e56+eljiULFnN3SypKU 4drpCT2uBg3ZMcOMLoxCrSg8BsCNR5Q51FM7ldiZdyFPSB9OIffZOwanOt3gWL3U xjw8v6XH0eOj5dWs5z7nkrM+LmuKqltDmtlysBeRWUq/O6NmVmg3lw/NPK5/JpHU CuE/uyV28LyKQKbQBV8qbps= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:54 2024 by rpki-client on console-fra.rpki-client.org