$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138863.roa File: AS138863.roa (raw, json) Hash identifier: +ebyf/tmIvdYPoKwFfXH+gx1fYnugbCJuRwG7TR8hjA= Subject key identifier: 3A:02:DB:1D:4B:D7:D2:68:14:27:32:69:6A:5C:2B:56:A6:66:8B:F8 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0A81898AC55D7EDACBF04C79AF80BD479BB8572F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138863.roa Signing time: Tue 10 Dec 2024 05:00:13 +0000 ROA not before: Tue 10 Dec 2024 04:55:13 +0000 ROA not after: Tue 09 Dec 2025 05:00:13 +0000 asID: 138863 IP address blocks: 103.139.166.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:81:89:8a:c5:5d:7e:da:cb:f0:4c:79:af:80:bd:47:9b:b8:57:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 10 04:55:13 2024 GMT Not After : Dec 9 05:00:13 2025 GMT Subject: CN=3A02DB1D4BD7D268142732696A5C2B56A6668BF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:40:4c:d9:a3:9b:a9:34:23:95:f2:2a:84:bd: 2b:3f:14:34:66:33:21:69:20:33:88:9b:d1:ba:91: 61:4e:d2:a4:a6:69:3e:22:fe:8b:c9:69:fd:05:b5: 53:1e:50:0f:89:95:c5:0f:41:85:14:3f:2d:83:20: c5:30:1b:50:f0:ba:4c:ba:28:a5:c1:b8:0d:c2:c3: 7a:f0:09:95:aa:d2:6c:ec:63:27:b9:57:70:8f:3c: 76:07:3f:f5:62:cd:f0:13:7e:4f:f0:73:79:37:ea: 22:4e:5e:ce:d6:05:26:d1:b1:74:05:fd:12:51:50: a0:48:7a:fa:d7:0b:16:e1:42:57:42:10:f9:7c:f9: 58:be:5b:32:66:9a:06:b4:39:94:43:ff:62:bd:e8: 7f:79:25:35:d6:1e:73:7f:2f:29:17:3a:b3:79:11: 2a:11:2a:0d:b7:9d:d0:91:e8:e4:f6:ec:22:48:29: dc:79:f5:e5:11:f4:de:81:6b:12:33:76:44:b2:aa: d9:d9:c1:53:bf:7b:39:d5:87:3e:df:88:22:a6:ff: e0:79:59:8d:54:48:e4:ae:7f:61:20:86:58:75:0e: a7:f7:65:96:6e:ce:40:f8:a5:d3:b5:8d:31:58:99: 4f:74:25:fd:4f:c4:00:33:5d:a8:03:dd:fd:48:5a: 4e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:02:DB:1D:4B:D7:D2:68:14:27:32:69:6A:5C:2B:56:A6:66:8B:F8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138863.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.166.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:b0:55:2a:4d:60:67:15:5c:d8:ca:d6:86:24:28:19:af:cf: b0:6d:1a:f9:90:b7:23:36:83:be:dc:bd:f9:e5:04:c2:e8:18: 12:cb:50:6c:15:a2:d4:db:0c:29:66:da:63:84:1b:3d:4b:56: 99:af:78:73:d0:18:af:72:38:26:2a:49:e9:45:31:3e:18:0a: 9c:71:88:17:af:02:d5:2f:f5:ad:61:a2:ca:2d:93:59:4a:91: 44:fd:b3:40:50:6b:d8:72:7d:41:6d:98:8a:52:c3:70:91:f5: 2f:07:dd:b2:e0:79:66:0b:04:41:19:5f:1d:84:79:a9:82:c2: 7d:de:38:58:82:4f:0e:67:0d:f5:c7:8e:09:2d:56:f3:ac:07: 22:35:f3:41:31:f3:3b:12:95:68:ea:c0:0d:fe:2c:0d:43:67: cc:b8:23:64:22:bd:57:ea:c2:f4:62:76:6b:52:33:78:41:c0: da:08:7a:ae:31:64:67:13:3b:cc:4f:d4:cd:c7:86:b4:96:97: 7f:2e:95:e1:db:0d:33:9d:f3:51:e1:88:24:6b:5d:8f:b5:b0: 81:52:c5:c3:f2:7f:83:5c:7c:7e:0d:74:47:e6:2e:50:47:15: 41:6d:74:94:8d:bf:53:0b:5e:0b:b4:84:87:d9:d4:f3:85:07: 15:26:92:18 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUCoGJisVdftrL8Ex5r4C9R5u4Vy8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUxM1oX DTI1MTIwOTA1MDAxM1owMzExMC8GA1UEAxMoM0EwMkRCMUQ0QkQ3RDI2ODE0Mjcz MjY5NkE1QzJCNTZBNjY2OEJGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANdATNmjm6k0I5XyKoS9Kz8UNGYzIWkgM4ib0bqRYU7SpKZpPiL+i8lp/QW1 Ux5QD4mVxQ9BhRQ/LYMgxTAbUPC6TLoopcG4DcLDevAJlarSbOxjJ7lXcI88dgc/ 9WLN8BN+T/BzeTfqIk5eztYFJtGxdAX9ElFQoEh6+tcLFuFCV0IQ+Xz5WL5bMmaa BrQ5lEP/Yr3of3klNdYec38vKRc6s3kRKhEqDbed0JHo5PbsIkgp3Hn15RH03oFr EjN2RLKq2dnBU797OdWHPt+IIqb/4HlZjVRI5K5/YSCGWHUOp/dllm7OQPil07WN MViZT3Ql/U/EADNdqAPd/UhaTtsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQ6Atsd S9fSaBQnMmlqXCtWpmaL+DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODg2My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWeLpjANBgkqhkiG9w0BAQsFAAOCAQEASrBVKk1gZxVc2MrWhiQo Ga/PsG0a+ZC3IzaDvty9+eUEwugYEstQbBWi1NsMKWbaY4QbPUtWma94c9AYr3I4 JipJ6UUxPhgKnHGIF68C1S/1rWGiyi2TWUqRRP2zQFBr2HJ9QW2YilLDcJH1Lwfd suB5ZgsEQRlfHYR5qYLCfd44WIJPDmcN9ceOCS1W86wHIjXzQTHzOxKVaOrADf4s DUNnzLgjZCK9V+rC9GJ2a1IzeEHA2gh6rjFkZxM7zE/UzceGtJaXfy6V4dsNM53z UeGIJGtdj7WwgVLFw/J/g1x8fg10R+YuUEcVQW10lI2/UwteC7SEh9nU84UHFSaS GA== -----END CERTIFICATE-----Generated at Sat Apr 5 06:20:16 2025 by rpki-client