$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139380.roa File: AS139380.roa (raw, json) Hash identifier: HNm6AcM62124JotSxBsleSplkNdAwA3X0PIQ8dLKRrw= Subject key identifier: 23:28:A5:47:ED:BD:01:09:8F:D5:D5:BE:E5:CF:EC:FE:03:5F:84:69 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2E7E844BDA065A7FEAB8331832F2EA3136E0C4C3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139380.roa Signing time: Mon 07 Oct 2024 07:00:00 +0000 ROA not before: Mon 07 Oct 2024 06:55:00 +0000 ROA not after: Mon 06 Oct 2025 07:00:00 +0000 asID: 139380 IP address blocks: 103.239.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:7e:84:4b:da:06:5a:7f:ea:b8:33:18:32:f2:ea:31:36:e0:c4:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Oct 7 06:55:00 2024 GMT Not After : Oct 6 07:00:00 2025 GMT Subject: CN=2328A547EDBD01098FD5D5BEE5CFECFE035F8469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:04:ad:26:35:c7:b7:e0:4a:bd:5c:cf:a9:53: 16:0f:ba:b4:17:a3:25:c9:9f:b3:ca:70:f7:d9:81: 3d:f4:ad:81:da:35:df:6b:0a:a0:c1:b6:f6:ba:9a: 92:dd:41:37:af:c9:e8:3f:c2:12:a7:48:60:81:b1: 58:37:d5:c0:ad:a3:e9:18:7a:a8:ec:61:f1:fe:a4: 2b:9d:46:d4:96:1c:24:ce:02:0a:46:6a:69:ff:38: f4:83:ac:3d:b6:aa:d9:ce:b6:86:de:38:b2:c3:ba: a1:60:2f:4a:8d:8b:24:5b:9f:51:c2:84:00:0e:0c: 58:a3:98:58:da:ef:bf:d8:93:28:8f:ee:66:19:3e: 5f:ea:bf:92:81:7e:79:d7:cb:ce:72:34:8f:65:bd: fd:9a:19:6c:c1:2d:8a:93:be:a5:ef:29:dd:bb:86: f0:f4:45:36:7f:a0:e7:69:dd:e5:17:a3:91:34:50: b2:d0:d9:4f:9f:8b:b3:45:b4:ca:dd:9c:c8:35:ad: c5:87:b6:77:11:4a:23:ed:0c:bc:93:44:35:4f:bd: 9f:34:b5:d4:a3:8f:94:44:3c:59:26:8e:f2:cb:29: a7:3e:ad:36:c5:f8:0c:9b:29:64:e9:16:ab:96:e4: 48:d0:e6:6a:ad:54:db:8e:f9:2c:da:8a:62:d5:63: ac:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:28:A5:47:ED:BD:01:09:8F:D5:D5:BE:E5:CF:EC:FE:03:5F:84:69 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139380.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.239.126.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:7b:10:33:77:1e:29:e7:c3:5d:92:72:be:b5:61:4a:c1:e6: 8f:5a:fd:b1:f4:ff:ab:d1:bb:93:e4:81:41:22:ee:91:46:31: e6:08:a1:4e:e9:50:97:f6:dd:c1:8b:27:2e:d9:6a:11:3d:3d: 2b:99:71:79:e9:29:c1:1b:cd:a6:f6:dd:26:7f:04:70:b8:e5: 87:1c:7c:8a:68:dd:eb:7c:3b:ce:b9:7d:32:a3:66:8b:50:05: fa:49:b1:7c:c8:66:50:75:9b:10:c5:4e:72:9e:64:66:22:57: aa:b6:88:d0:cf:e5:10:cc:7d:0e:20:81:f5:8b:55:4b:d2:9d: e9:00:69:81:e2:a0:88:67:14:a4:37:cb:1a:e4:c6:c7:24:e6: 83:c0:0a:e0:5e:65:51:7c:d2:ea:e7:ff:d8:82:76:6c:36:06: 8b:e0:91:ee:b7:52:b0:23:24:9c:e1:e4:c5:49:57:0e:8a:eb: d6:13:1f:ca:9e:41:4c:0c:b6:2b:c5:3f:df:eb:9a:42:bf:e9: f6:91:3c:61:1d:c2:b4:55:1a:18:15:ef:24:7a:8c:a9:99:ba: 1c:3d:f1:a4:7b:ae:38:5b:32:15:64:58:40:28:4a:5e:09:bb: 56:9b:c7:3e:41:1b:84:8c:66:17:05:63:07:6a:08:11:33:c8: e8:f5:23:83 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIULn6ES9oGWn/quDMYMvLqMTbgxMMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAwNzA2NTUwMFoX DTI1MTAwNjA3MDAwMFowMzExMC8GA1UEAxMoMjMyOEE1NDdFREJEMDEwOThGRDVE NUJFRTVDRkVDRkUwMzVGODQ2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALsErSY1x7fgSr1cz6lTFg+6tBejJcmfs8pw99mBPfStgdo132sKoMG29rqa kt1BN6/J6D/CEqdIYIGxWDfVwK2j6Rh6qOxh8f6kK51G1JYcJM4CCkZqaf849IOs Pbaq2c62ht44ssO6oWAvSo2LJFufUcKEAA4MWKOYWNrvv9iTKI/uZhk+X+q/koF+ edfLznI0j2W9/ZoZbMEtipO+pe8p3buG8PRFNn+g52nd5RejkTRQstDZT5+Ls0W0 yt2cyDWtxYe2dxFKI+0MvJNENU+9nzS11KOPlEQ8WSaO8ssppz6tNsX4DJspZOkW q5bkSNDmaq1U2475LNqKYtVjrD0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQjKKVH 7b0BCY/V1b7lz+z+A1+EaTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTM4MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfvfjANBgkqhkiG9w0BAQsFAAOCAQEATnsQM3ceKefDXZJyvrVh SsHmj1r9sfT/q9G7k+SBQSLukUYx5gihTulQl/bdwYsnLtlqET09K5lxeekpwRvN pvbdJn8EcLjlhxx8imjd63w7zrl9MqNmi1AF+kmxfMhmUHWbEMVOcp5kZiJXqraI 0M/lEMx9DiCB9YtVS9Kd6QBpgeKgiGcUpDfLGuTGxyTmg8AK4F5lUXzS6uf/2IJ2 bDYGi+CR7rdSsCMknOHkxUlXDorr1hMfyp5BTAy2K8U/3+uaQr/p9pE8YR3CtFUa GBXvJHqMqZm6HD3xpHuuOFsyFWRYQChKXgm7VpvHPkEbhIxmFwVjB2oIETPI6PUj gw== -----END CERTIFICATE-----Generated at Sun Feb 16 20:47:24 2025 by rpki-client