$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138835.roa File: AS138835.roa (raw, json) Hash identifier: zqYR7gPuyinhw1bbyAAixRsAx2LpXr0QEBxNPL1DmwQ= Subject key identifier: 6C:77:01:2F:67:5C:28:DE:4F:15:EF:8D:31:EF:08:9B:09:FA:36:12 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6A03BA245774A87E44DF177867070E9599ABA935 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138835.roa Signing time: Tue 09 Jan 2024 03:00:00 +0000 ROA not before: Tue 09 Jan 2024 02:55:00 +0000 ROA not after: Tue 07 Jan 2025 03:00:00 +0000 asID: 138835 IP address blocks: 103.138.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:03:ba:24:57:74:a8:7e:44:df:17:78:67:07:0e:95:99:ab:a9:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 02:55:00 2024 GMT Not After : Jan 7 03:00:00 2025 GMT Subject: CN=6C77012F675C28DE4F15EF8D31EF089B09FA3612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:13:c1:0f:15:83:c9:9d:88:be:70:2c:20:82: c5:a6:bd:f2:ec:1b:7d:1e:fe:14:e8:e0:77:d6:f8: a3:96:f8:d9:5a:da:ae:b5:45:41:8b:be:9e:20:5b: d1:7b:45:57:20:d8:27:04:29:ae:da:7a:87:06:f1: 0a:81:6a:49:00:91:02:ff:f3:69:bf:fe:9f:51:1c: 6b:f3:76:46:7e:fe:85:19:83:aa:fe:4c:53:82:65: 1e:4a:b5:b1:d2:99:17:52:30:fb:d3:a5:b0:02:f0: a5:29:a7:17:0d:30:00:17:e4:9c:e3:0a:58:9c:9c: 89:e2:34:3d:01:b0:d3:8b:36:19:69:db:0b:9d:09: a3:d0:9e:20:33:0f:50:f1:b4:69:0b:63:53:7c:3e: eb:74:7b:56:01:be:43:25:8d:45:08:61:c7:e1:b8: 6b:01:1b:3f:60:7f:e2:4d:f5:f5:12:d9:eb:10:7c: 1a:24:3d:f7:26:a5:ae:fc:97:01:44:d6:ca:ae:dc: e5:0c:c3:e8:2f:54:60:a5:8a:cc:0d:81:28:a0:af: 7c:b8:14:89:68:d5:27:da:02:fa:27:f2:bb:f9:cf: 05:c0:95:94:07:50:fd:63:db:2a:c1:5a:85:b9:bc: 26:fb:33:9d:71:70:48:bf:a4:da:bf:0f:8c:00:f4: 66:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:77:01:2F:67:5C:28:DE:4F:15:EF:8D:31:EF:08:9B:09:FA:36:12 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.10.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:8b:60:3b:5a:af:c2:85:ad:7b:8d:01:2f:25:5a:f1:6b:11: f5:0a:9a:48:42:00:09:11:f9:f4:b9:97:ce:aa:63:59:0e:eb: 33:f5:d7:b3:ff:e8:e7:5c:5e:08:18:d4:09:10:78:d1:d3:dc: c4:14:b7:84:1c:5f:55:17:3c:37:5f:84:94:16:ac:83:3c:b3: 1e:0d:49:4d:94:13:a3:c4:8f:d1:6d:06:4b:93:75:04:de:fa: b1:74:c8:65:02:0e:cc:e9:be:19:62:03:f9:15:c8:5d:ee:54: f5:04:4f:00:a7:9e:76:bf:20:97:1e:e9:19:e4:0c:50:78:07: 4f:01:26:da:56:97:3d:d0:a0:8a:b8:dd:d3:9e:e4:da:53:af: 60:e4:cd:79:30:57:f9:4a:04:a5:1f:72:dd:8b:6c:20:0c:91: 4b:ba:21:7d:89:77:ae:e1:e8:37:44:93:e5:02:ff:8b:02:55: f2:04:93:b5:2a:1a:d9:77:89:15:ce:2c:da:36:09:76:f2:5f: 84:3a:c1:02:cd:aa:43:a0:91:29:3b:e5:c8:ed:26:9e:f4:19: 9d:97:5d:64:bf:54:e3:0d:47:2c:a2:83:6b:9b:82:8d:bf:bb: dc:9c:a5:61:22:d4:91:c8:68:dd:93:8a:41:68:0d:a5:75:14: e2:8e:7e:e3 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUagO6JFd0qH5E3xd4ZwcOlZmrqTUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAyNTUwMFoX DTI1MDEwNzAzMDAwMFowMzExMC8GA1UEAxMoNkM3NzAxMkY2NzVDMjhERTRGMTVF RjhEMzFFRjA4OUIwOUZBMzYxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMQTwQ8Vg8mdiL5wLCCCxaa98uwbfR7+FOjgd9b4o5b42VrarrVFQYu+niBb 0XtFVyDYJwQprtp6hwbxCoFqSQCRAv/zab/+n1Eca/N2Rn7+hRmDqv5MU4JlHkq1 sdKZF1Iw+9OlsALwpSmnFw0wABfknOMKWJycieI0PQGw04s2GWnbC50Jo9CeIDMP UPG0aQtjU3w+63R7VgG+QyWNRQhhx+G4awEbP2B/4k319RLZ6xB8GiQ99yalrvyX AUTWyq7c5QzD6C9UYKWKzA2BKKCvfLgUiWjVJ9oC+ifyu/nPBcCVlAdQ/WPbKsFa hbm8JvsznXFwSL+k2r8PjAD0ZqUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRsdwEv Z1wo3k8V740x7wibCfo2EjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODgzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeKCjANBgkqhkiG9w0BAQsFAAOCAQEAfotgO1qvwoWte40BLyVa 8WsR9QqaSEIACRH59LmXzqpjWQ7rM/XXs//o51xeCBjUCRB40dPcxBS3hBxfVRc8 N1+ElBasgzyzHg1JTZQTo8SP0W0GS5N1BN76sXTIZQIOzOm+GWID+RXIXe5U9QRP AKeedr8glx7pGeQMUHgHTwEm2laXPdCgirjd057k2lOvYOTNeTBX+UoEpR9y3Yts IAyRS7ohfYl3ruHoN0ST5QL/iwJV8gSTtSoa2XeJFc4s2jYJdvJfhDrBAs2qQ6CR KTvlyO0mnvQZnZddZL9U4w1HLKKDa5uCjb+73JylYSLUkcho3ZOKQWgNpXUU4o5+ 4w== -----END CERTIFICATE-----Generated at Tue May 7 18:07:16 2024 by rpki-client on console-fra.rpki-client.org