$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139406.roa File: AS139406.roa (raw, json) Hash identifier: eTikd601h44OF6xmFE1nOfuKud9tiSQtZ0zDPL8OYpI= Subject key identifier: F1:5B:5C:F7:E8:3D:D7:65:77:AD:BE:BE:C4:A8:30:10:25:AA:9D:A3 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 66144F8C55EBEE24CC5D02926C3BE08336FC4E02 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139406.roa Signing time: Tue 09 Jan 2024 04:00:01 +0000 ROA not before: Tue 09 Jan 2024 03:55:01 +0000 ROA not after: Tue 07 Jan 2025 04:00:01 +0000 asID: 139406 IP address blocks: 103.143.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 05:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:14:4f:8c:55:eb:ee:24:cc:5d:02:92:6c:3b:e0:83:36:fc:4e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:01 2024 GMT Not After : Jan 7 04:00:01 2025 GMT Subject: CN=F15B5CF7E83DD76577ADBEBEC4A8301025AA9DA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dd:21:7a:03:f3:e4:38:12:d0:17:4b:ff:12: 57:bf:97:c7:75:09:74:cf:21:fc:5e:9a:dc:8c:55: d8:3f:56:d3:97:5a:5c:fc:2c:29:89:80:94:64:76: 7b:03:65:6a:01:6b:ad:39:7d:58:8b:fc:b3:b5:56: 68:25:f9:2a:9c:cd:1e:f1:c3:b9:42:2b:45:f8:b2: 2d:05:d4:55:c5:24:0d:cb:00:8a:bf:c9:56:67:c2: 92:77:7b:0c:54:5a:a6:02:df:97:0d:90:89:52:5c: 47:50:2a:ed:62:9b:f7:b5:e7:22:26:cf:cc:bb:c4: 99:cf:ba:b2:05:b1:1e:75:b6:81:b2:cf:55:2c:15: 39:f7:96:bc:e0:c2:a6:52:de:9e:4d:ad:cd:da:f8: e0:40:c4:fa:a2:4b:26:e2:cc:68:51:87:00:a9:2d: b0:6f:43:d7:d0:d3:b5:b3:ee:e4:3d:83:58:7e:8d: 64:84:14:48:23:94:84:f5:64:eb:98:52:70:2a:c7: 27:1e:f6:60:72:be:f8:a4:bb:c0:f9:77:04:f6:eb: 02:dd:6b:a2:bc:00:0c:49:47:9d:e6:e4:7b:94:08: 5c:34:2e:69:c0:dc:f0:d6:5d:0d:c3:31:9c:f5:b5: 5e:17:71:a9:5e:7f:f0:a8:95:d8:60:4b:a2:7d:92: f3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5B:5C:F7:E8:3D:D7:65:77:AD:BE:BE:C4:A8:30:10:25:AA:9D:A3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139406.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.198.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:de:55:39:cc:68:b2:fc:00:47:ff:9d:cc:e7:4b:17:0d:8b: c3:c2:75:bf:94:cc:f1:ef:39:91:80:c4:55:ed:b2:6d:f0:53: 6e:c3:c3:2e:96:3a:ab:b9:f8:2b:2e:88:f5:2b:38:a6:7f:50: 30:7e:ae:94:83:9d:b5:b0:be:f0:89:0c:11:c4:86:fd:da:1d: 95:a8:1b:bc:2f:43:94:6d:b7:4e:ae:8d:af:d3:b1:27:30:e2: e5:f8:44:40:38:21:0c:72:fe:e3:d1:40:64:26:69:11:c6:16: f5:09:f7:d7:5c:1a:8c:5d:48:ad:70:56:aa:f0:b5:8f:e6:8a: 9a:c3:85:91:e0:16:b9:06:71:74:bd:0c:7f:8a:b4:a7:86:b2: 16:6e:5e:6e:79:9c:52:6e:dd:ac:2c:11:6d:18:e0:a3:46:7b: e4:8e:d5:90:5b:bf:fb:08:7d:49:fe:da:8c:44:8f:b6:87:71: 15:e8:f6:56:32:7a:25:32:6f:3c:b9:f3:f7:6d:79:dc:fa:1d: fa:b0:5b:b0:44:25:1e:84:e0:a1:5d:90:f6:e1:ce:a6:9d:c2: 0a:f2:c8:3f:ae:6e:2c:4c:e1:e4:64:b8:4d:3b:c4:0a:c4:97: 21:9a:4f:1a:6a:77:48:0d:55:b4:f4:30:7e:ce:36:f1:bc:61: d4:78:e6:2a -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUZhRPjFXr7iTMXQKSbDvggzb8TgIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUwMVoX DTI1MDEwNzA0MDAwMVowMzExMC8GA1UEAxMoRjE1QjVDRjdFODNERDc2NTc3QURC RUJFQzRBODMwMTAyNUFBOURBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPdIXoD8+Q4EtAXS/8SV7+Xx3UJdM8h/F6a3IxV2D9W05daXPwsKYmAlGR2 ewNlagFrrTl9WIv8s7VWaCX5KpzNHvHDuUIrRfiyLQXUVcUkDcsAir/JVmfCknd7 DFRapgLflw2QiVJcR1Aq7WKb97XnIibPzLvEmc+6sgWxHnW2gbLPVSwVOfeWvODC plLenk2tzdr44EDE+qJLJuLMaFGHAKktsG9D19DTtbPu5D2DWH6NZIQUSCOUhPVk 65hScCrHJx72YHK++KS7wPl3BPbrAt1rorwADElHnebke5QIXDQuacDc8NZdDcMx nPW1XhdxqV5/8KiV2GBLon2S8ycCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTxW1z3 6D3XZXetvr7EqDAQJaqdozAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTQwNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWePxjANBgkqhkiG9w0BAQsFAAOCAQEAC95VOcxosvwAR/+dzOdL Fw2Lw8J1v5TM8e85kYDEVe2ybfBTbsPDLpY6q7n4Ky6I9Ss4pn9QMH6ulIOdtbC+ 8IkMEcSG/dodlagbvC9DlG23Tq6Nr9OxJzDi5fhEQDghDHL+49FAZCZpEcYW9Qn3 11wajF1IrXBWqvC1j+aKmsOFkeAWuQZxdL0Mf4q0p4ayFm5ebnmcUm7drCwRbRjg o0Z75I7VkFu/+wh9Sf7ajESPtodxFej2VjJ6JTJvPLnz92153Pod+rBbsEQlHoTg oV2Q9uHOpp3CCvLIP65uLEzh5GS4TTvECsSXIZpPGmp3SA1VtPQwfs428bxh1Hjm Kg== -----END CERTIFICATE-----Generated at Thu May 2 23:02:00 2024 by rpki-client on console-fra.rpki-client.org