$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138842.roa File: AS138842.roa (raw, json) Hash identifier: E3Q5KqLT+yllMGZrrDMBjo97bd2W8IKspmFPvgaXbC0= Subject key identifier: 7B:A8:5C:38:F1:A2:8C:0C:27:E3:7A:12:A0:62:CE:8A:05:9B:40:B6 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7664E2100ECD3C5621793FEF822212026186A9AC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138842.roa Signing time: Tue 09 Jan 2024 04:00:15 +0000 ROA not before: Tue 09 Jan 2024 03:55:15 +0000 ROA not after: Tue 07 Jan 2025 04:00:15 +0000 asID: 138842 IP address blocks: 103.155.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:64:e2:10:0e:cd:3c:56:21:79:3f:ef:82:22:12:02:61:86:a9:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:15 2024 GMT Not After : Jan 7 04:00:15 2025 GMT Subject: CN=7BA85C38F1A28C0C27E37A12A062CE8A059B40B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:45:43:91:50:26:28:af:64:21:a7:4e:23:5c: 17:3f:50:f5:83:a2:3e:9e:f9:3d:0a:f0:46:db:8e: 84:bc:2a:ae:2b:99:92:cc:32:8d:65:47:12:60:b9: b9:bf:ba:ed:7a:0c:2e:c7:be:c9:46:5f:19:9d:d0: 6a:00:84:37:19:cc:b0:bf:99:4f:21:1a:05:10:1e: 4c:81:f8:85:02:36:ff:2d:51:47:3a:29:dc:05:09: 64:f4:9f:d7:fe:37:ae:94:9c:a6:d6:b9:44:9e:de: 80:97:60:f6:f9:80:e6:45:46:37:90:a4:67:b0:33: b1:be:a0:ae:d7:28:63:3c:8e:3b:d2:ac:a8:a9:f4: 6b:2d:21:25:13:09:f0:7d:44:3b:b5:39:1f:1e:37: e1:b6:9b:e8:ef:f9:f6:0d:2a:8f:6c:8c:8c:0c:d3: 48:fc:e3:7f:bf:77:a3:a2:22:ba:66:d2:4c:89:5b: 6a:c6:8f:cf:6e:03:f3:49:71:71:bd:07:54:10:e7: e8:cb:ef:7b:77:73:8e:46:72:11:46:23:ab:1e:e3: cb:12:cc:d2:96:32:79:c3:76:5d:ad:5a:a9:57:73: 01:71:f8:83:bd:a4:40:ac:d0:ec:5f:aa:7f:7f:7c: 4a:ab:43:50:85:f8:04:31:55:fe:5d:93:a9:89:0f: 33:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A8:5C:38:F1:A2:8C:0C:27:E3:7A:12:A0:62:CE:8A:05:9B:40:B6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138842.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.106.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:8a:41:b1:46:ff:5b:6f:bd:de:8f:7e:a3:e9:0b:d6:79:9d: 58:25:b2:17:10:bf:ba:a6:b6:dd:fe:af:d3:25:d0:16:49:ea: bd:11:cc:e3:01:a1:ba:f6:55:66:5a:79:0a:43:24:b5:5c:20: 02:a5:52:6e:9c:31:f6:91:c8:cb:3b:c0:7b:87:3e:62:8a:f8: 92:6e:3a:52:f0:3a:29:12:5b:17:be:cc:10:da:4f:45:12:ad: 0b:cb:9a:ac:9d:6b:e3:26:bb:1a:3c:10:59:33:3a:8c:97:24: a4:46:28:74:a9:39:88:da:ee:8e:bf:4c:55:b6:95:de:2e:a5: 09:6f:3d:81:3f:1c:d8:48:16:d2:3e:fe:68:97:c7:e6:85:18: b6:34:98:b6:3d:ce:6a:b0:10:f0:f4:a6:c6:04:ea:87:25:0d: ce:cc:54:3b:bc:15:1a:8d:eb:04:e6:dd:4f:3b:63:04:bd:91: a9:2f:da:f5:4a:1d:82:55:94:19:3c:5d:b3:8c:05:44:e3:1c: 02:66:93:b5:70:c5:2c:a2:7c:cc:3e:73:30:3b:d7:b1:9d:2d: 56:64:01:d1:3d:a4:48:13:ca:00:22:a0:40:c0:1a:86:12:32: 8b:09:d1:22:15:07:85:13:ff:f7:9a:fa:f4:01:69:67:bf:dc: 69:d9:65:7e -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUdmTiEA7NPFYheT/vgiISAmGGqawwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUxNVoX DTI1MDEwNzA0MDAxNVowMzExMC8GA1UEAxMoN0JBODVDMzhGMUEyOEMwQzI3RTM3 QTEyQTA2MkNFOEEwNTlCNDBCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKxFQ5FQJiivZCGnTiNcFz9Q9YOiPp75PQrwRtuOhLwqriuZkswyjWVHEmC5 ub+67XoMLse+yUZfGZ3QagCENxnMsL+ZTyEaBRAeTIH4hQI2/y1RRzop3AUJZPSf 1/43rpScpta5RJ7egJdg9vmA5kVGN5CkZ7Azsb6grtcoYzyOO9KsqKn0ay0hJRMJ 8H1EO7U5Hx434bab6O/59g0qj2yMjAzTSPzjf793o6IiumbSTIlbasaPz24D80lx cb0HVBDn6Mvve3dzjkZyEUYjqx7jyxLM0pYyecN2Xa1aqVdzAXH4g72kQKzQ7F+q f398SqtDUIX4BDFV/l2TqYkPMykCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBR7qFw4 8aKMDCfjehKgYs6KBZtAtjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODg0Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWebajANBgkqhkiG9w0BAQsFAAOCAQEAWopBsUb/W2+93o9+o+kL 1nmdWCWyFxC/uqa23f6v0yXQFknqvRHM4wGhuvZVZlp5CkMktVwgAqVSbpwx9pHI yzvAe4c+Yor4km46UvA6KRJbF77MENpPRRKtC8uarJ1r4ya7GjwQWTM6jJckpEYo dKk5iNrujr9MVbaV3i6lCW89gT8c2EgW0j7+aJfH5oUYtjSYtj3OarAQ8PSmxgTq hyUNzsxUO7wVGo3rBObdTztjBL2RqS/a9UodglWUGTxds4wFROMcAmaTtXDFLKJ8 zD5zMDvXsZ0tVmQB0T2kSBPKACKgQMAahhIyiwnRIhUHhRP/95r69AFpZ7/cadll fg== -----END CERTIFICATE-----Generated at Fri May 3 04:42:25 2024 by rpki-client on console-fra.rpki-client.org