$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138809.roa File: AS138809.roa (raw, json) Hash identifier: OKY71bypIv6RC5/JbZC+5p+FnIoYQj4lTgiff7GYeyk= Subject key identifier: 0D:EF:34:7B:BD:04:B8:BC:3C:D2:A4:69:9C:99:51:5B:77:67:E2:5B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4D925815358A30F3DEB86C8C175D9E05D6D0EE9E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138809.roa Signing time: Fri 06 Oct 2023 04:07:04 +0000 ROA not before: Fri 06 Oct 2023 04:02:04 +0000 ROA not after: Fri 04 Oct 2024 04:07:04 +0000 asID: 138809 IP address blocks: 103.134.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:92:58:15:35:8a:30:f3:de:b8:6c:8c:17:5d:9e:05:d6:d0:ee:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 6 04:02:04 2023 GMT Not After : Oct 4 04:07:04 2024 GMT Subject: CN=0DEF347BBD04B8BC3CD2A4699C99515B7767E25B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3a:15:bd:fd:f1:70:fe:c0:6a:3d:18:6d:1c: 05:ac:7e:2b:a2:5a:b4:6a:2a:6a:bd:b1:46:73:47: ca:e0:b4:83:89:13:6e:a2:de:1f:94:e7:45:61:d8: 27:26:7e:2a:58:b4:8e:93:d9:a1:c4:f9:df:de:bf: d1:84:1f:7b:77:ec:97:b6:8a:9c:5e:35:09:fa:d2: 54:10:c2:9d:40:2b:d0:30:8b:96:80:1e:b1:cf:71: ad:08:43:ac:e3:78:eb:ac:b1:39:7f:cf:33:71:9e: 92:9d:fe:73:27:77:dc:9a:b5:af:aa:8b:23:d9:76: 12:34:47:a9:05:ac:c0:3f:de:d1:a3:01:c9:56:3d: f8:08:2d:68:cf:3d:e2:82:5f:d4:3f:78:6d:d6:13: dc:67:57:15:a8:a9:3f:c3:00:17:cd:68:36:2b:b4: 11:9c:df:a1:fb:92:33:f2:86:58:a4:f6:c4:86:d2: a6:c9:9c:02:7c:70:4e:8d:3d:40:41:2f:ba:d3:a7: 36:21:b9:e6:72:05:3e:3f:79:ad:f5:fa:0e:cf:9d: 5c:bc:34:70:8d:ef:5b:f7:ab:0e:56:dd:1b:72:fa: fb:85:25:1a:b0:63:ea:7e:5e:85:d3:a8:b7:2c:d1: 58:1d:fb:bd:4c:19:6a:01:1b:7d:d3:29:a7:52:e1: f6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EF:34:7B:BD:04:B8:BC:3C:D2:A4:69:9C:99:51:5B:77:67:E2:5B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138809.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.228.0/22 Signature Algorithm: sha256WithRSAEncryption 57:a6:7d:65:a7:be:2f:ca:70:a9:ce:35:39:80:48:ea:b3:6c: dd:ad:d5:e4:74:bf:62:ad:8a:e9:4a:f7:9b:2c:d5:55:1d:a4: e1:b4:50:8a:94:0c:e5:b2:bb:be:fe:6d:dc:96:b4:ef:03:9f: 6a:7c:ab:55:70:fc:35:2c:4c:7c:07:11:68:2f:27:90:ca:3d: 64:65:4e:d5:17:bf:be:d0:15:06:a8:c4:1b:18:44:3b:49:e2: b6:e6:57:10:5e:21:2f:66:62:38:b4:82:37:ca:d0:23:b9:35: 9c:96:7a:42:5a:cb:9f:c8:23:c0:90:80:e9:e0:62:10:ff:68: c6:5e:5b:a8:65:1c:cb:3b:63:6f:01:d9:49:78:f7:77:e4:38: cc:72:36:2a:f1:01:55:4f:5a:36:69:02:da:3d:6d:b5:a2:bf: c1:68:d6:2c:06:d4:12:60:9d:e1:0e:28:6d:c0:f5:5a:a9:bd: b5:9f:61:95:81:fb:19:d1:96:3b:8c:86:2a:bf:3b:fe:75:37: 71:39:fa:01:79:6c:dc:95:57:60:0f:7c:f3:b9:dd:2e:b1:79: 3b:f4:7c:32:be:20:85:22:47:ae:24:44:f2:07:79:fe:df:d6: e0:be:77:33:91:a7:34:47:0e:d0:d5:d0:9b:51:7d:b2:ce:ba: 63:9f:5a:f0 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUTZJYFTWKMPPeuGyMF12eBdbQ7p4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAwNjA0MDIwNFoX DTI0MTAwNDA0MDcwNFowMzExMC8GA1UEAxMoMERFRjM0N0JCRDA0QjhCQzNDRDJB NDY5OUM5OTUxNUI3NzY3RTI1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMc6Fb398XD+wGo9GG0cBax+K6JatGoqar2xRnNHyuC0g4kTbqLeH5TnRWHY JyZ+Kli0jpPZocT5396/0YQfe3fsl7aKnF41CfrSVBDCnUAr0DCLloAesc9xrQhD rON466yxOX/PM3Gekp3+cyd33Jq1r6qLI9l2EjRHqQWswD/e0aMByVY9+AgtaM89 4oJf1D94bdYT3GdXFaipP8MAF81oNiu0EZzfofuSM/KGWKT2xIbSpsmcAnxwTo09 QEEvutOnNiG55nIFPj95rfX6Ds+dXLw0cI3vW/erDlbdG3L6+4UlGrBj6n5ehdOo tyzRWB37vUwZagEbfdMpp1Lh9nkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQN7zR7 vQS4vDzSpGmcmVFbd2fiWzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODgwOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmeG5DANBgkqhkiG9w0BAQsFAAOCAQEAV6Z9Zae+L8pwqc41OYBI 6rNs3a3V5HS/Yq2K6Ur3myzVVR2k4bRQipQM5bK7vv5t3Ja07wOfanyrVXD8NSxM fAcRaC8nkMo9ZGVO1Re/vtAVBqjEGxhEO0nituZXEF4hL2ZiOLSCN8rQI7k1nJZ6 QlrLn8gjwJCA6eBiEP9oxl5bqGUcyztjbwHZSXj3d+Q4zHI2KvEBVU9aNmkC2j1t taK/wWjWLAbUEmCd4Q4obcD1Wqm9tZ9hlYH7GdGWO4yGKr87/nU3cTn6AXls3JVX YA9887ndLrF5O/R8Mr4ghSJHriRE8gd5/t/W4L53M5GnNEcO0NXQm1F9ss66Y59a 8A== -----END CERTIFICATE-----Generated at Wed May 8 21:02:21 2024 by rpki-client on console-fra.rpki-client.org