$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139385.roa File: AS139385.roa (raw, json) Hash identifier: jdyIt3oyy0+IGrTfJPv64QoTb/9aNiL3P+vQssm5w9o= Subject key identifier: F5:AD:CC:5E:FC:75:24:AB:7E:17:E9:2F:6C:12:E5:C4:CE:2E:E3:72 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 19A59CBF45971BA03822BF8BB43F6FC857843722 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139385.roa Signing time: Tue 09 Jan 2024 04:00:23 +0000 ROA not before: Tue 09 Jan 2024 03:55:23 +0000 ROA not after: Tue 07 Jan 2025 04:00:23 +0000 asID: 139385 IP address blocks: 103.143.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 00:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a5:9c:bf:45:97:1b:a0:38:22:bf:8b:b4:3f:6f:c8:57:84:37:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:23 2024 GMT Not After : Jan 7 04:00:23 2025 GMT Subject: CN=F5ADCC5EFC7524AB7E17E92F6C12E5C4CE2EE372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d2:0b:0c:06:cc:41:47:97:a7:f7:e9:2f:9f: 21:63:94:88:c1:cb:5b:72:33:25:e7:00:eb:e1:fa: 02:f6:1a:29:0b:e7:d0:3e:3a:23:c1:ec:ab:78:9f: f3:cb:e1:aa:4a:9a:6c:1b:1c:fc:2b:c9:d8:7e:89: 62:4c:71:d0:d8:95:42:03:9b:d9:66:b4:51:c2:8c: 5f:dc:6f:ad:c6:b9:f2:7d:61:cf:8d:47:07:1f:5e: 1f:1f:ff:72:34:49:b2:5c:80:79:0d:56:4c:a1:b2: 06:33:e1:76:49:da:7c:53:4f:43:a1:12:c0:dd:a9: 74:3e:1b:ba:ea:c0:cb:e4:cb:9e:df:ba:5e:ba:e4: f1:70:f3:23:5f:24:49:ed:02:90:de:1f:30:38:2b: 2d:86:b4:1d:15:1f:6d:39:2e:0e:ae:2a:38:e6:08: 5e:e1:57:52:8b:43:30:74:62:fd:50:c6:53:9b:da: 64:29:9b:7d:52:b4:48:9f:5d:fe:4a:fe:4f:eb:cb: d1:ab:dd:ca:1c:c6:9c:b6:cc:23:07:84:6f:4c:de: bd:f1:1c:25:a2:d4:52:73:21:85:a3:9f:b9:5b:f9: db:84:7d:b1:21:f8:57:a4:76:a5:cc:1d:59:a3:bf: 2b:b6:70:e3:6d:09:6e:a6:62:34:3a:23:54:7e:7b: 15:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:AD:CC:5E:FC:75:24:AB:7E:17:E9:2F:6C:12:E5:C4:CE:2E:E3:72 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139385.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.2.0/24 Signature Algorithm: sha256WithRSAEncryption 88:c1:43:62:c1:94:60:65:16:c4:c8:33:01:9e:79:30:0c:82: c5:f5:2e:9d:af:91:b1:94:1e:f5:e7:ba:b1:45:27:d3:46:82: cb:70:03:9a:72:ab:f2:f2:5a:85:44:eb:1f:12:71:fc:36:6f: 7a:03:ab:cb:7f:66:6b:49:27:7e:93:15:07:bb:f8:41:b0:78: 9e:c4:6f:da:ee:86:d0:2e:25:72:7b:dd:0d:b9:9d:a8:b4:ea: 63:a1:3a:aa:4a:4b:00:eb:cc:3a:57:d6:d9:15:7a:fe:3d:58: ce:e7:ed:a8:a9:94:3e:2a:79:f2:19:cc:eb:64:ad:60:60:fa: 3f:48:8a:95:24:89:71:72:38:83:52:c2:08:3e:8b:8b:f6:df: 4a:d6:de:2b:0d:ee:0e:d6:8b:14:de:e9:78:e3:6b:5d:c3:8e: eb:30:66:98:3b:36:50:16:8b:1c:47:9d:f5:20:8d:cf:4c:6f: 17:bc:be:1f:4c:76:51:20:a3:7b:a0:08:be:51:4f:59:a4:a0: 5e:41:61:89:55:09:2c:2b:72:c1:0f:7f:d0:45:15:b3:3e:61: 67:4d:02:31:97:39:53:8f:58:c1:18:5f:aa:94:ee:2d:31:c4: 0a:ba:44:0d:1e:f3:60:b4:63:ea:da:b9:f4:51:3a:08:8f:c8: 26:59:e3:7d -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUGaWcv0WXG6A4Ir+LtD9vyFeENyIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUyM1oX DTI1MDEwNzA0MDAyM1owMzExMC8GA1UEAxMoRjVBRENDNUVGQzc1MjRBQjdFMTdF OTJGNkMxMkU1QzRDRTJFRTM3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3SCwwGzEFHl6f36S+fIWOUiMHLW3IzJecA6+H6AvYaKQvn0D46I8Hsq3if 88vhqkqabBsc/CvJ2H6JYkxx0NiVQgOb2Wa0UcKMX9xvrca58n1hz41HBx9eHx// cjRJslyAeQ1WTKGyBjPhdknafFNPQ6ESwN2pdD4buurAy+TLnt+6Xrrk8XDzI18k Se0CkN4fMDgrLYa0HRUfbTkuDq4qOOYIXuFXUotDMHRi/VDGU5vaZCmbfVK0SJ9d /kr+T+vL0avdyhzGnLbMIweEb0zevfEcJaLUUnMhhaOfuVv524R9sSH4V6R2pcwd WaO/K7Zw420JbqZiNDojVH57Fa8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBT1rcxe /HUkq34X6S9sEuXEzi7jcjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTM4NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGePAjANBgkqhkiG9w0BAQsFAAOCAQEAiMFDYsGUYGUWxMgzAZ55 MAyCxfUuna+RsZQe9ee6sUUn00aCy3ADmnKr8vJahUTrHxJx/DZvegOry39ma0kn fpMVB7v4QbB4nsRv2u6G0C4lcnvdDbmdqLTqY6E6qkpLAOvMOlfW2RV6/j1Yzuft qKmUPip58hnM62StYGD6P0iKlSSJcXI4g1LCCD6Li/bfStbeKw3uDtaLFN7peONr XcOO6zBmmDs2UBaLHEed9SCNz0xvF7y+H0x2USCje6AIvlFPWaSgXkFhiVUJLCty wQ9/0EUVsz5hZ00CMZc5U49YwRhfqpTuLTHECrpEDR7zYLRj6tq59FE6CI/IJlnj fQ== -----END CERTIFICATE-----Generated at Thu May 2 14:39:48 2024 by rpki-client on console-ams.rpki-client.org