$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138897.roa File: AS138897.roa (raw, json) Hash identifier: Wezd27tUH8Ea/vmoTUD7tCNa6v+xIhGyf4j51mSCs1Y= Subject key identifier: A1:B9:47:91:20:9B:A1:24:57:25:29:88:C6:EE:1E:61:87:8A:21:88 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0142E2B286C641CB47A9260111EC91BF4C76F59B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138897.roa Signing time: Tue 16 Jan 2024 09:00:00 +0000 ROA not before: Tue 16 Jan 2024 08:55:00 +0000 ROA not after: Tue 14 Jan 2025 09:00:00 +0000 asID: 138897 IP address blocks: 103.140.22.0/24 maxlen: 24 2001:df0:a380::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:42:e2:b2:86:c6:41:cb:47:a9:26:01:11:ec:91:bf:4c:76:f5:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 16 08:55:00 2024 GMT Not After : Jan 14 09:00:00 2025 GMT Subject: CN=A1B94791209BA12457252988C6EE1E61878A2188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6a:fe:fb:94:93:c5:58:59:c5:14:4b:d4:27: 8d:de:bd:00:57:8b:33:6a:79:84:90:23:dd:c4:32: 55:ee:9d:27:71:b4:02:5c:d7:24:2c:68:47:8e:c4: e7:f9:13:c8:4f:8c:14:20:9f:d6:0d:75:76:58:a2: eb:ee:c6:20:18:3a:df:c3:f9:3b:e2:65:34:13:df: 07:10:5a:da:dd:4d:3c:7b:d0:0f:76:94:7d:f2:67: 5a:3b:3c:15:65:c9:86:b4:fd:af:e3:b3:f5:a7:eb: 97:aa:08:39:44:13:75:38:fa:1c:4d:19:b7:5e:57: 52:a7:a7:b7:51:2d:d1:64:ab:cf:23:15:35:6e:a3: db:b4:7b:f9:9c:6d:64:f5:21:5b:49:1e:8f:b8:a0: 1d:af:25:0d:22:52:8e:0d:cb:56:6f:91:47:51:20: b9:98:10:78:bf:a4:52:ca:f3:4b:ab:33:11:72:80: 58:88:d1:c6:66:80:2e:01:ae:96:af:30:76:ec:f7: d4:20:f9:20:20:ab:84:08:b4:ae:1a:63:b4:9f:5b: 71:c2:78:3b:bd:dc:b8:fa:88:04:57:4c:74:c3:ef: 99:f4:99:87:8a:6e:23:e3:f4:8f:34:c0:42:45:f0: 42:0b:52:50:22:33:ec:41:87:0f:72:3e:8f:ba:4f: 6b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B9:47:91:20:9B:A1:24:57:25:29:88:C6:EE:1E:61:87:8A:21:88 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138897.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.140.22.0/24 IPv6: 2001:df0:a380::/48 Signature Algorithm: sha256WithRSAEncryption 5c:19:b3:c8:71:a5:3b:86:c6:ec:88:99:36:cd:97:46:82:06: fe:29:55:c3:60:80:bc:e7:e9:38:23:93:4c:1b:21:bf:df:bb: a2:61:c1:ab:07:53:a3:bc:89:c9:57:0c:e8:75:d7:6e:31:9d: 6e:99:62:cf:b9:0c:08:f7:92:cc:68:9b:13:01:8e:5f:a2:36: da:fb:1f:1c:86:82:f0:b8:0a:11:ad:c6:aa:12:8d:d6:6c:5d: 73:44:d1:cd:ba:1a:95:38:52:17:27:bd:3c:03:27:35:d5:90: ae:d9:a4:96:ea:3d:d0:7d:9d:83:b3:10:ce:6b:0b:b5:d4:c8: ef:bf:46:7f:b9:cf:d2:b4:7b:90:50:b6:ee:99:ed:ea:2a:9f: 7c:ce:1c:b2:6b:5d:3b:e2:62:55:7b:4f:97:ae:f2:c6:59:0e: 5e:22:91:02:c0:36:a1:fc:d3:69:91:11:52:a6:8c:87:5d:f1: 40:45:0a:1c:46:51:c1:be:56:70:d8:75:60:7f:d9:1f:91:56: 9d:82:e8:0a:69:6c:e3:ff:21:a9:4e:b1:2a:45:bb:af:94:2a: d0:cb:7f:28:72:fc:8c:f9:b0:c4:ba:80:ea:81:a6:bb:a9:ff: 00:a5:6f:56:a9:4c:ac:cf:3a:dd:44:76:65:6a:8d:9f:ae:b0: f9:ef:c9:d8 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUAULisobGQctHqSYBEeyRv0x29ZswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDExNjA4NTUwMFoX DTI1MDExNDA5MDAwMFowMzExMC8GA1UEAxMoQTFCOTQ3OTEyMDlCQTEyNDU3MjUy OTg4QzZFRTFFNjE4NzhBMjE4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMhq/vuUk8VYWcUUS9Qnjd69AFeLM2p5hJAj3cQyVe6dJ3G0AlzXJCxoR47E 5/kTyE+MFCCf1g11dlii6+7GIBg638P5O+JlNBPfBxBa2t1NPHvQD3aUffJnWjs8 FWXJhrT9r+Oz9afrl6oIOUQTdTj6HE0Zt15XUqent1Et0WSrzyMVNW6j27R7+Zxt ZPUhW0kej7igHa8lDSJSjg3LVm+RR1EguZgQeL+kUsrzS6szEXKAWIjRxmaALgGu lq8wduz31CD5ICCrhAi0rhpjtJ9bccJ4O73cuPqIBFdMdMPvmfSZh4puI+P0jzTA QkXwQgtSUCIz7EGHD3I+j7pPa8MCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBShuUeR IJuhJFclKYjG7h5hh4ohiDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODg5Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAGeMFjAPBAIAAjAJAwcAIAEN8KOAMA0GCSqGSIb3DQEBCwUAA4IB AQBcGbPIcaU7hsbsiJk2zZdGggb+KVXDYIC85+k4I5NMGyG/37uiYcGrB1OjvInJ VwzoddduMZ1umWLPuQwI95LMaJsTAY5fojba+x8choLwuAoRrcaqEo3WbF1zRNHN uhqVOFIXJ708Ayc11ZCu2aSW6j3QfZ2DsxDOawu11Mjvv0Z/uc/StHuQULbume3q Kp98zhyya1074mJVe0+XrvLGWQ5eIpECwDah/NNpkRFSpoyHXfFARQocRlHBvlZw 2HVgf9kfkVadgugKaWzj/yGpTrEqRbuvlCrQy38ocvyM+bDEuoDqgaa7qf8ApW9W qUyszzrdRHZlao2frrD578nY -----END CERTIFICATE-----Generated at Wed May 8 21:02:21 2024 by rpki-client on console-fra.rpki-client.org