$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138854.roa File: AS138854.roa (raw, json) Hash identifier: 90beVmcGzigHTTpYiCRwRUiFsFIlfzqyeduIqQwOSpE= Subject key identifier: D4:7B:33:E6:94:AD:95:D7:92:E3:B3:1A:02:E4:19:E8:D6:03:DF:9E Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 68DDCD21950FEAF0E40944DB96E62F1F6A338F55 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138854.roa Signing time: Tue 18 Jun 2024 04:00:00 +0000 ROA not before: Tue 18 Jun 2024 03:55:00 +0000 ROA not after: Tue 17 Jun 2025 04:00:00 +0000 asID: 138854 IP address blocks: 103.138.218.0/23 maxlen: 24 103.178.88.0/24 maxlen: 24 103.178.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:dd:cd:21:95:0f:ea:f0:e4:09:44:db:96:e6:2f:1f:6a:33:8f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 18 03:55:00 2024 GMT Not After : Jun 17 04:00:00 2025 GMT Subject: CN=D47B33E694AD95D792E3B31A02E419E8D603DF9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0a:58:d2:a6:09:ac:61:9b:bc:26:de:2d:f6: ab:cb:e1:61:38:35:87:a0:61:77:07:2c:bf:71:b2: ee:0b:05:94:29:31:ce:6b:49:30:4a:35:e8:e6:07: 64:f5:a2:7b:72:c0:32:8f:3c:33:55:0a:de:a5:e5: 13:25:2b:2b:f6:f8:6f:da:6c:d8:3d:da:9d:b3:74: e0:48:b5:74:2c:63:db:66:13:20:64:dc:b3:4f:a6: f2:37:7b:4d:ce:56:85:70:bb:d1:2e:e1:2f:93:de: aa:1b:bb:9e:be:05:0b:ec:77:e0:02:eb:4b:19:f1: 95:bf:d0:f0:bd:2a:56:71:0f:9d:2d:5d:1b:1c:d0: 9c:c9:44:6f:4e:80:45:6d:75:d9:20:33:92:59:7e: d7:67:f7:ce:7d:7f:90:a2:51:95:bb:9e:48:ae:bd: 58:ee:ea:32:5b:f7:45:87:8c:ce:e3:5f:22:90:27: c3:9e:5e:e4:c0:c8:39:99:09:01:6e:d2:28:75:a4: 65:18:84:54:80:7c:1b:2c:16:fe:85:08:0f:30:7a: 0b:47:28:bc:d6:d1:07:a9:f1:25:de:44:1e:12:b6: 92:53:6c:9c:79:45:aa:bf:3e:06:1a:33:06:60:f2: 60:cc:22:da:57:2b:0c:77:7c:4b:6e:a5:95:b5:3d: fa:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7B:33:E6:94:AD:95:D7:92:E3:B3:1A:02:E4:19:E8:D6:03:DF:9E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138854.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.218.0/23 103.178.88.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:f8:26:1e:2b:cc:eb:52:3d:93:a6:c4:91:19:e6:57:ce:0b: 6e:2d:1e:e9:98:30:b0:63:c1:c8:1b:e4:e9:da:e5:26:2a:06: c6:43:2f:16:1e:eb:8d:8f:c1:f7:05:6a:61:5f:a1:20:d6:7f: 80:33:30:bc:41:19:03:75:2c:1f:36:3b:81:9e:71:eb:8e:30: 7e:6a:ed:92:15:35:e7:52:ca:8b:98:d8:cb:9b:49:b7:e7:a5: 29:34:37:db:05:a7:f2:cf:39:b1:38:14:f0:c1:f6:95:61:97: 7f:91:72:10:2f:61:3e:b2:cf:d5:d9:37:e4:84:76:c2:aa:ce: 6a:36:eb:1f:ea:87:68:03:38:eb:7d:bc:74:e6:85:ed:2e:f4: 0b:3b:71:fe:b4:43:b4:b8:31:72:02:07:33:ae:a9:3f:17:22: 85:38:07:33:bc:94:c0:8a:8c:1a:78:e2:be:49:ec:a7:7a:a9: 1d:ba:6c:fd:ad:cb:59:01:ec:b9:11:43:b8:06:53:58:22:f4: 8f:ef:90:04:14:b3:2a:1f:e2:ae:8a:be:05:23:20:7e:5a:b4: cc:a5:6f:4d:a8:9f:f4:07:92:d9:1d:5e:ec:51:7a:bc:8a:e5: ce:75:e7:54:2d:50:43:ea:9a:7b:63:fc:c5:51:58:55:2f:e9: 13:8c:49:e1 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUaN3NIZUP6vDkCUTbluYvH2ozj1UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDYxODAzNTUwMFoX DTI1MDYxNzA0MDAwMFowMzExMC8GA1UEAxMoRDQ3QjMzRTY5NEFEOTVENzkyRTNC MzFBMDJFNDE5RThENjAzREY5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALoKWNKmCaxhm7wm3i32q8vhYTg1h6Bhdwcsv3Gy7gsFlCkxzmtJMEo16OYH ZPWie3LAMo88M1UK3qXlEyUrK/b4b9ps2D3anbN04Ei1dCxj22YTIGTcs0+m8jd7 Tc5WhXC70S7hL5Peqhu7nr4FC+x34ALrSxnxlb/Q8L0qVnEPnS1dGxzQnMlEb06A RW112SAzkll+12f3zn1/kKJRlbueSK69WO7qMlv3RYeMzuNfIpAnw55e5MDIOZkJ AW7SKHWkZRiEVIB8GywW/oUIDzB6C0covNbRB6nxJd5EHhK2klNsnHlFqr8+Bhoz BmDyYMwi2lcrDHd8S26llbU9+nkCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBTUezPm lK2V15LjsxoC5Bno1gPfnjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODg1NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAWeK2gMEAWeyWDANBgkqhkiG9w0BAQsFAAOCAQEAe/gmHivM61I9 k6bEkRnmV84Lbi0e6ZgwsGPByBvk6drlJioGxkMvFh7rjY/B9wVqYV+hINZ/gDMw vEEZA3UsHzY7gZ5x644wfmrtkhU151LKi5jYy5tJt+elKTQ32wWn8s85sTgU8MH2 lWGXf5FyEC9hPrLP1dk35IR2wqrOajbrH+qHaAM46328dOaF7S70Cztx/rRDtLgx cgIHM66pPxcihTgHM7yUwIqMGnjivknsp3qpHbps/a3LWQHsuRFDuAZTWCL0j++Q BBSzKh/iroq+BSMgflq0zKVvTaif9AeS2R1e7FF6vIrlznXnVC1QQ+qae2P8xVFY VS/pE4xJ4Q== -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:27 2024 by rpki-client on console-ams.rpki-client.org