$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138141.roa File: AS138141.roa (raw, json) Hash identifier: aC2d04aWl6Cs71jkRraQ/AI9VTenCEYjnP7vG6fb5Fg= Subject key identifier: 32:78:61:4C:48:7D:11:9A:76:C7:B5:47:4E:F5:66:53:C3:25:38:01 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 622739DF76F41C6B34C7995A0B9939301B270168 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138141.roa Signing time: Tue 09 Jan 2024 04:00:06 +0000 ROA not before: Tue 09 Jan 2024 03:55:06 +0000 ROA not after: Tue 07 Jan 2025 04:00:06 +0000 asID: 138141 IP address blocks: 103.134.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:27:39:df:76:f4:1c:6b:34:c7:99:5a:0b:99:39:30:1b:27:01:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:06 2024 GMT Not After : Jan 7 04:00:06 2025 GMT Subject: CN=3278614C487D119A76C7B5474EF56653C3253801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:23:a0:b4:3e:e8:c1:aa:84:e7:fa:19:52:40: 63:41:3a:36:c7:71:69:ab:b0:05:f6:ca:3b:2d:8e: ff:d3:f4:f2:26:06:9b:e7:a5:fb:b4:8e:f3:9e:d4: f8:c6:ad:a3:fc:1e:ff:69:4b:cc:39:a9:d5:6c:93: 3f:9a:dc:0d:c0:c8:a8:c3:2b:56:64:19:83:73:b9: e6:c2:90:21:61:2e:e6:ee:2f:80:c9:56:05:83:06: 5a:9b:fe:2b:ec:1a:94:7a:de:d7:3f:97:61:e6:8c: bf:c2:d5:f9:23:f9:f5:57:76:64:de:34:c3:a5:f6: 8d:dc:ca:2d:b6:1c:55:fb:7b:53:22:a8:78:0d:60: 77:49:b6:f2:0e:99:bc:91:6a:72:25:18:2b:2b:34: a1:55:5b:ec:08:73:ad:4f:11:af:52:f8:b5:40:11: 36:f3:a4:aa:7c:41:44:df:b1:c0:e4:50:cf:fe:b7: a3:df:6f:48:45:8d:a5:3c:7e:98:e3:4f:4b:64:4c: 57:45:68:92:2a:48:09:84:d0:c8:5e:9a:65:30:cc: a5:94:d8:2a:68:ce:eb:dc:a7:45:8d:9e:a7:76:53: d2:bc:43:e4:4d:43:88:5f:17:51:51:ee:b4:ae:9f: aa:a2:55:e7:3b:be:28:2d:cb:a0:42:7d:1e:c1:83: 8c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:78:61:4C:48:7D:11:9A:76:C7:B5:47:4E:F5:66:53:C3:25:38:01 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138141.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.18.0/23 Signature Algorithm: sha256WithRSAEncryption 70:a9:3e:34:cb:f7:fa:a0:56:3c:7a:7b:9f:02:5f:3b:32:be: f6:42:a6:f4:43:1e:c8:b3:12:97:92:ca:13:d8:fa:f4:56:75: 62:07:24:be:67:f9:7b:af:b8:65:0f:c1:b1:96:bc:4f:09:83: f2:65:81:85:0d:46:b8:21:dd:f3:78:10:d7:c6:16:20:95:48: 61:7f:fa:66:51:5e:e7:44:61:d6:6a:0e:61:1e:72:8e:55:2d: 7c:24:07:58:5b:c6:10:10:a1:58:7d:a5:60:78:df:bd:04:31: e3:95:3e:8e:61:9e:7c:e0:01:f5:17:f1:9e:41:94:44:3a:40: e3:c3:f6:05:2a:c1:a0:60:b4:65:5c:a3:44:b9:58:44:c9:95: 54:61:4c:72:81:bb:14:1e:79:76:b4:d3:22:65:43:67:38:63: 70:5a:4d:f5:08:90:01:10:9d:8a:26:e4:d6:ad:a1:b5:e1:23: 70:86:a0:3b:61:10:16:4e:6c:cd:39:18:7e:5e:26:0c:7b:7a: fd:72:50:97:e2:8f:d3:0b:4c:f5:37:08:e0:d3:7d:07:9f:82: 38:b6:2a:03:32:56:24:55:2b:b7:47:38:d4:b0:27:ee:35:95: a3:3c:b8:66:06:fd:9e:00:4d:db:47:da:48:09:8b:a1:ce:00: 9e:b1:cb:02 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUYic533b0HGs0x5laC5k5MBsnAWgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUwNloX DTI1MDEwNzA0MDAwNlowMzExMC8GA1UEAxMoMzI3ODYxNEM0ODdEMTE5QTc2QzdC NTQ3NEVGNTY2NTNDMzI1MzgwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOUjoLQ+6MGqhOf6GVJAY0E6NsdxaauwBfbKOy2O/9P08iYGm+el+7SO857U +Mato/we/2lLzDmp1WyTP5rcDcDIqMMrVmQZg3O55sKQIWEu5u4vgMlWBYMGWpv+ K+walHre1z+XYeaMv8LV+SP59Vd2ZN40w6X2jdzKLbYcVft7UyKoeA1gd0m28g6Z vJFqciUYKys0oVVb7AhzrU8Rr1L4tUARNvOkqnxBRN+xwORQz/63o99vSEWNpTx+ mONPS2RMV0VokipICYTQyF6aZTDMpZTYKmjO69ynRY2ep3ZT0rxD5E1DiF8XUVHu tK6fqqJV5zu+KC3LoEJ9HsGDjOcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQyeGFM SH0RmnbHtUdO9WZTwyU4ATAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODE0MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWeGEjANBgkqhkiG9w0BAQsFAAOCAQEAcKk+NMv3+qBWPHp7nwJf OzK+9kKm9EMeyLMSl5LKE9j69FZ1Ygckvmf5e6+4ZQ/BsZa8TwmD8mWBhQ1GuCHd 83gQ18YWIJVIYX/6ZlFe50Rh1moOYR5yjlUtfCQHWFvGEBChWH2lYHjfvQQx45U+ jmGefOAB9RfxnkGURDpA48P2BSrBoGC0ZVyjRLlYRMmVVGFMcoG7FB55drTTImVD ZzhjcFpN9QiQARCdiibk1q2hteEjcIagO2EQFk5szTkYfl4mDHt6/XJQl+KP0wtM 9TcI4NN9B5+COLYqAzJWJFUrt0c41LAn7jWVozy4Zgb9ngBN20faSAmLoc4AnrHL Ag== -----END CERTIFICATE-----Generated at Wed May 8 15:17:41 2024 by rpki-client on console-fra.rpki-client.org