$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138141.roa File: AS138141.roa (raw, json) Hash identifier: Ec8mkTtoD8Ug4PI7BwUF+mwJN+H4tYmHhOUMLX5fY8I= Subject key identifier: 5C:E7:09:04:3B:45:06:85:C0:81:E3:52:C2:18:08:98:7D:42:B3:0E Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 13F945C858EBC8AC4B85E0ED928446BC5EA4BA21 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138141.roa Signing time: Tue 10 Dec 2024 05:00:04 +0000 ROA not before: Tue 10 Dec 2024 04:55:04 +0000 ROA not after: Tue 09 Dec 2025 05:00:04 +0000 asID: 138141 IP address blocks: 103.134.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:f9:45:c8:58:eb:c8:ac:4b:85:e0:ed:92:84:46:bc:5e:a4:ba:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 10 04:55:04 2024 GMT Not After : Dec 9 05:00:04 2025 GMT Subject: CN=5CE709043B450685C081E352C21808987D42B30E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:74:f4:a2:9e:69:99:79:9f:dc:ff:28:01:5e: df:e7:10:df:89:29:1b:e8:11:65:13:fe:0c:8c:79: ad:13:84:b1:4c:a4:52:ee:25:e8:65:e2:8f:aa:b2: 5c:88:08:c9:0c:31:a3:f8:57:7e:ae:6a:6f:40:22: 33:85:50:8e:41:4d:1c:5f:fd:39:e3:93:8f:2c:dd: 40:20:e2:ed:46:cb:47:c3:28:09:9a:c8:2d:61:a8: ec:8e:42:6c:c1:99:23:6f:82:fc:ec:c8:fe:bb:2c: 7c:22:56:60:3c:e3:5c:96:35:5b:a8:95:6a:40:c8: b3:bd:ab:80:87:45:de:ae:ae:12:9a:bd:62:8c:27: 11:1f:c2:69:a1:de:af:b7:47:4b:2b:10:32:ea:95: 4e:85:63:16:a4:b4:b7:07:ab:07:4d:e8:1b:f2:60: 4e:7a:b5:66:e5:55:34:4d:a4:86:9a:76:9a:cf:c8: a3:41:05:dc:f7:10:1e:d2:2a:1f:ee:34:bc:5d:60: c1:4d:d7:75:52:6b:77:63:ca:be:f4:4e:08:8b:d3: 73:f8:c9:1d:37:ff:9b:28:eb:44:75:a9:e1:0d:2c: 31:95:65:b7:ab:f6:96:8b:21:38:73:c5:52:6c:23: 8c:2d:91:e6:1d:2a:a9:36:37:26:8d:19:d7:32:ee: 3a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E7:09:04:3B:45:06:85:C0:81:E3:52:C2:18:08:98:7D:42:B3:0E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138141.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.18.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:ef:68:62:93:fb:57:5b:e3:9c:a3:3b:1d:a5:17:1a:a3:54: 89:4b:78:53:65:78:f4:83:cb:a0:83:2a:63:dc:ef:57:d8:a2: ea:24:1a:21:27:17:0b:cc:b5:12:d2:4e:79:e8:6a:04:5f:0b: ba:be:74:bf:44:dd:ce:b4:38:ae:e4:78:7a:7d:61:b0:61:34: 79:fd:b9:2f:a4:9c:a8:cd:d7:64:67:05:4f:0e:bf:93:3c:1b: 6a:d7:7d:55:89:49:31:b3:8c:ba:8f:d0:06:d5:c1:69:2a:c0: 4f:3e:da:aa:ee:99:e8:5d:fd:2d:a5:46:a7:7e:08:96:01:0e: 63:d1:14:56:3c:36:a2:6c:da:34:37:dc:54:af:e9:87:6c:ff: b7:88:42:7c:e3:8a:08:c8:ef:c6:7d:a8:18:a1:a8:a8:e9:21: e0:7d:f6:88:75:7e:5b:3d:d3:91:b4:47:89:9d:3d:7f:2a:62: 83:84:27:b9:54:fc:a7:c3:35:79:a9:33:2f:ce:0b:c8:ad:f7: 60:9c:e1:c7:bd:51:b5:1a:17:45:6f:12:d0:62:72:0f:70:8d: e7:31:0f:44:97:c8:85:42:9e:95:d1:bf:bf:90:45:90:21:5f: 4e:a6:59:c0:e8:70:82:e0:79:7b:ee:60:8d:bb:91:38:25:53: 16:fa:22:55 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUE/lFyFjryKxLheDtkoRGvF6kuiEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUwNFoX DTI1MTIwOTA1MDAwNFowMzExMC8GA1UEAxMoNUNFNzA5MDQzQjQ1MDY4NUMwODFF MzUyQzIxODA4OTg3RDQyQjMwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPJ09KKeaZl5n9z/KAFe3+cQ34kpG+gRZRP+DIx5rROEsUykUu4l6GXij6qy XIgIyQwxo/hXfq5qb0AiM4VQjkFNHF/9OeOTjyzdQCDi7UbLR8MoCZrILWGo7I5C bMGZI2+C/OzI/rssfCJWYDzjXJY1W6iVakDIs72rgIdF3q6uEpq9YownER/CaaHe r7dHSysQMuqVToVjFqS0twerB03oG/JgTnq1ZuVVNE2khpp2ms/Io0EF3PcQHtIq H+40vF1gwU3XdVJrd2PKvvROCIvTc/jJHTf/myjrRHWp4Q0sMZVlt6v2loshOHPF UmwjjC2R5h0qqTY3Jo0Z1zLuOsECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRc5wkE O0UGhcCB41LCGAiYfUKzDjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODE0MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWeGEjANBgkqhkiG9w0BAQsFAAOCAQEAju9oYpP7V1vjnKM7HaUX GqNUiUt4U2V49IPLoIMqY9zvV9ii6iQaIScXC8y1EtJOeehqBF8Lur50v0TdzrQ4 ruR4en1hsGE0ef25L6ScqM3XZGcFTw6/kzwbatd9VYlJMbOMuo/QBtXBaSrATz7a qu6Z6F39LaVGp34IlgEOY9EUVjw2omzaNDfcVK/ph2z/t4hCfOOKCMjvxn2oGKGo qOkh4H32iHV+Wz3TkbRHiZ09fypig4QnuVT8p8M1eakzL84LyK33YJzhx71RtRoX RW8S0GJyD3CN5zEPRJfIhUKeldG/v5BFkCFfTqZZwOhwguB5e+5gjbuROCVTFvoi VQ== -----END CERTIFICATE-----Generated at Sat Apr 5 06:22:27 2025 by rpki-client