$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138853.roa File: AS138853.roa (raw, json) Hash identifier: 76cUVFxCzk3hVzK0jyK/9krtzRkdRsTH/g5uAcyjuDE= Subject key identifier: EE:EF:63:CD:A2:46:3D:CF:FC:2E:8A:3B:62:4F:2A:8C:3C:08:50:8E Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 01CF2A33F8F322C308705D115AF3E265F6D6515A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138853.roa Signing time: Tue 08 Oct 2024 05:00:00 +0000 ROA not before: Tue 08 Oct 2024 04:55:00 +0000 ROA not after: Tue 07 Oct 2025 05:00:00 +0000 asID: 138853 IP address blocks: 103.137.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:cf:2a:33:f8:f3:22:c3:08:70:5d:11:5a:f3:e2:65:f6:d6:51:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 8 04:55:00 2024 GMT Not After : Oct 7 05:00:00 2025 GMT Subject: CN=EEEF63CDA2463DCFFC2E8A3B624F2A8C3C08508E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7a:e2:1a:47:cd:88:c1:cc:89:b9:ae:67:3f: 4e:54:e6:03:a7:07:44:6e:90:26:29:2c:26:a2:38: f9:85:46:cf:39:cd:7f:b9:34:3d:3d:83:1d:fd:31: 59:55:15:aa:5b:66:bc:ba:f8:ee:d8:72:39:b0:45: 17:55:b9:d5:d1:44:b5:51:eb:8c:c9:7c:5a:d3:33: d5:59:81:52:15:51:bd:1a:ba:97:92:1b:20:84:a8: 3e:7d:a2:f5:ee:55:8a:14:2d:eb:19:5e:7d:93:20: 2a:cc:94:7d:0a:d8:39:5b:7a:b6:bb:93:78:d7:7a: 22:28:bd:e0:3c:91:31:bd:d1:4c:99:56:5b:45:70: 94:ee:4d:76:e8:57:a9:dc:38:fd:d3:6a:7b:b6:de: 25:58:80:54:9e:94:6a:e6:95:d6:c0:88:96:d5:82: 60:9e:72:67:8d:fc:53:d7:f6:9c:8a:85:83:36:b0: fb:da:4f:17:fa:42:6c:62:31:a5:aa:f4:f5:2a:82: bd:f9:43:34:2e:7a:ae:4b:fc:b0:cb:9e:73:f7:01: 9b:af:bd:fe:15:11:42:93:0a:6d:de:b6:98:b6:06: 02:cb:8c:a3:a3:9f:d9:da:20:f1:b9:99:32:7a:67: 48:25:b6:9e:31:6d:86:6c:df:ea:76:01:59:8e:05: fa:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:EF:63:CD:A2:46:3D:CF:FC:2E:8A:3B:62:4F:2A:8C:3C:08:50:8E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138853.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.137.139.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:5f:78:71:25:75:ac:40:f3:23:96:46:b9:44:20:73:a4:de: ea:7e:2c:b5:cc:93:0e:32:f0:6a:42:f9:32:53:b7:e4:dd:06: 90:b6:48:2d:f4:dc:c7:6a:ac:f2:5e:ec:a1:e1:53:8c:f8:f3: 3e:ea:b6:9f:1a:e3:b7:6b:2d:5e:10:4e:87:d2:44:f9:78:88: 34:dd:04:e9:96:eb:43:54:f1:f4:b7:4e:e1:5d:67:ae:65:8e: 7e:22:e0:05:8f:19:20:f2:94:82:b8:86:d8:fc:b9:d8:30:a6: 2f:3c:13:00:28:56:45:df:63:e2:98:a3:cc:88:db:39:80:3b: 80:1c:73:83:8e:99:84:f4:65:42:38:fe:da:01:58:2b:a3:65: 32:2e:76:8a:3b:8f:3f:72:6a:5b:d7:e2:13:db:94:9e:10:3f: f3:d8:6f:bf:02:2d:61:02:af:32:27:36:55:83:75:d5:43:d1: 49:d8:a3:b6:a4:70:7c:e5:32:93:44:6c:29:b7:9a:10:75:fe: 53:98:78:87:40:75:4d:01:39:a4:85:02:58:aa:96:3d:29:42: c1:43:48:7f:e1:1e:aa:9b:87:e1:86:4e:87:50:0c:7d:61:0f: 2a:76:e3:d6:fa:87:49:f8:88:de:f5:5c:5a:89:ec:ee:f7:0a: e8:a6:73:d0 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUAc8qM/jzIsMIcF0RWvPiZfbWUVowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAwODA0NTUwMFoX DTI1MTAwNzA1MDAwMFowMzExMC8GA1UEAxMoRUVFRjYzQ0RBMjQ2M0RDRkZDMkU4 QTNCNjI0RjJBOEMzQzA4NTA4RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOJ64hpHzYjBzIm5rmc/TlTmA6cHRG6QJiksJqI4+YVGzznNf7k0PT2DHf0x WVUVqltmvLr47thyObBFF1W51dFEtVHrjMl8WtMz1VmBUhVRvRq6l5IbIISoPn2i 9e5VihQt6xlefZMgKsyUfQrYOVt6truTeNd6Iii94DyRMb3RTJlWW0VwlO5NduhX qdw4/dNqe7beJViAVJ6UauaV1sCIltWCYJ5yZ438U9f2nIqFgzaw+9pPF/pCbGIx par09SqCvflDNC56rkv8sMuec/cBm6+9/hURQpMKbd62mLYGAsuMo6Of2dog8bmZ MnpnSCW2njFthmzf6nYBWY4F+icCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTu72PN okY9z/wuijtiTyqMPAhQjjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODg1My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeJizANBgkqhkiG9w0BAQsFAAOCAQEAP194cSV1rEDzI5ZGuUQg c6Te6n4stcyTDjLwakL5MlO35N0GkLZILfTcx2qs8l7soeFTjPjzPuq2nxrjt2st XhBOh9JE+XiINN0E6ZbrQ1Tx9LdO4V1nrmWOfiLgBY8ZIPKUgriG2Py52DCmLzwT AChWRd9j4pijzIjbOYA7gBxzg46ZhPRlQjj+2gFYK6NlMi52ijuPP3JqW9fiE9uU nhA/89hvvwItYQKvMic2VYN11UPRSdijtqRwfOUyk0RsKbeaEHX+U5h4h0B1TQE5 pIUCWKqWPSlCwUNIf+EeqpuH4YZOh1AMfWEPKnbj1vqHSfiI3vVcWons7vcK6KZz 0A== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:47 2024 by rpki-client on console-ams.rpki-client.org