$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139409.roa File: AS139409.roa (raw, json) Hash identifier: MeU2A+bdEuV1+N3+BXbvyDxn5sdgVJenycHA3ipeeWM= Subject key identifier: C5:84:ED:73:38:D4:67:4A:E1:D5:EE:18:49:28:A1:DD:88:16:A7:24 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7C49245BB3A3B308EDA8D6565007EF69EBD66EA9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139409.roa Signing time: Tue 10 Dec 2024 05:00:26 +0000 ROA not before: Tue 10 Dec 2024 04:55:26 +0000 ROA not after: Tue 09 Dec 2025 05:00:26 +0000 asID: 139409 IP address blocks: 103.143.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:49:24:5b:b3:a3:b3:08:ed:a8:d6:56:50:07:ef:69:eb:d6:6e:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 10 04:55:26 2024 GMT Not After : Dec 9 05:00:26 2025 GMT Subject: CN=C584ED7338D4674AE1D5EE184928A1DD8816A724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d0:25:29:02:e3:b3:8c:80:f5:73:94:cf:01: 17:f8:3a:99:24:38:5e:83:df:ec:4f:0c:22:2c:87: 4c:1a:83:dd:57:76:21:41:f9:4d:8c:fa:a6:e5:b0: b7:98:37:5e:8f:01:da:0a:08:1d:30:f5:e6:99:b5: 85:cf:70:b8:31:44:c4:85:e0:97:1c:9d:e5:8e:f3: 66:25:13:d5:cb:70:2a:ac:63:50:bd:b9:bd:77:63: a4:39:8a:e2:33:aa:92:65:59:80:f5:ba:28:e0:a9: e6:63:34:36:75:91:06:ee:8e:42:08:0d:6b:f0:de: 91:68:62:e5:e7:e9:eb:43:70:59:40:8a:59:ee:89: e7:f6:26:ef:0b:84:6a:8f:86:b4:13:3f:b4:49:01: 39:f4:07:fb:53:2e:80:18:9d:29:c4:84:4f:d7:49: 2a:9a:0a:45:20:bf:e9:20:42:11:46:98:b5:ea:e0: 6b:90:d0:20:07:36:09:0c:82:af:1b:dc:64:54:1d: e6:ae:c7:d3:c2:9d:53:cd:e3:c2:95:38:66:3d:65: 3f:17:59:22:4c:b4:b5:e6:b2:f1:57:f6:ba:d9:ff: 31:42:98:94:9b:e4:19:d5:29:3d:a9:60:d9:f2:24: ec:74:c8:7e:a4:00:4b:34:ab:22:ef:c5:16:f0:c7: 40:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:84:ED:73:38:D4:67:4A:E1:D5:EE:18:49:28:A1:DD:88:16:A7:24 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139409.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.196.0/23 Signature Algorithm: sha256WithRSAEncryption 82:80:86:e7:a8:3a:e0:34:74:29:c9:35:e1:ad:2d:b7:d5:bd: fd:66:97:39:36:9a:4b:31:1f:f8:dc:99:c7:c9:e6:19:4a:3a: 87:5b:26:15:eb:b9:46:17:d2:26:50:81:2b:3f:a2:a3:45:53: a1:41:e1:64:cf:63:7c:9d:8a:21:5c:2d:42:b8:c8:63:30:a9: 61:4e:8b:1f:3f:40:21:98:fd:b5:c4:65:ae:ad:6c:7c:54:22: ae:53:35:bd:15:11:01:00:97:25:50:9b:24:03:fb:24:82:b0: d2:ff:8e:bd:81:ff:c9:fd:25:91:1a:6f:0b:37:60:63:76:df: 15:ea:8f:ef:0c:75:91:6f:e3:e9:4b:6a:ff:ed:c9:da:a6:76: fa:1c:d6:54:46:8c:c0:d1:44:9f:dd:77:1e:58:76:45:f7:aa: 1b:c3:e2:b0:ff:f4:f2:96:71:bf:56:07:d7:b7:53:28:a9:05: 48:ce:84:bd:49:b5:c3:c6:80:89:66:00:10:3d:bd:71:99:dd: 87:28:7b:fa:7f:1a:26:a0:62:a8:10:e2:46:5f:1d:5b:92:11: 87:18:a0:f5:fb:47:65:b2:24:dc:fd:d9:52:77:a3:2a:df:d6: b6:60:07:94:6a:12:7c:96:9f:fd:3e:b0:06:ac:e9:2e:6d:b6: c2:95:d2:bb -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUfEkkW7OjswjtqNZWUAfvaevWbqkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUyNloX DTI1MTIwOTA1MDAyNlowMzExMC8GA1UEAxMoQzU4NEVENzMzOEQ0Njc0QUUxRDVF RTE4NDkyOEExREQ4ODE2QTcyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOHQJSkC47OMgPVzlM8BF/g6mSQ4XoPf7E8MIiyHTBqD3Vd2IUH5TYz6puWw t5g3Xo8B2goIHTD15pm1hc9wuDFExIXglxyd5Y7zZiUT1ctwKqxjUL25vXdjpDmK 4jOqkmVZgPW6KOCp5mM0NnWRBu6OQggNa/DekWhi5efp60NwWUCKWe6J5/Ym7wuE ao+GtBM/tEkBOfQH+1MugBidKcSET9dJKpoKRSC/6SBCEUaYterga5DQIAc2CQyC rxvcZFQd5q7H08KdU83jwpU4Zj1lPxdZIky0teay8Vf2utn/MUKYlJvkGdUpPalg 2fIk7HTIfqQASzSrIu/FFvDHQAUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTFhO1z ONRnSuHV7hhJKKHdiBanJDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTQwOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWePxDANBgkqhkiG9w0BAQsFAAOCAQEAgoCG56g64DR0Kck14a0t t9W9/WaXOTaaSzEf+NyZx8nmGUo6h1smFeu5RhfSJlCBKz+io0VToUHhZM9jfJ2K IVwtQrjIYzCpYU6LHz9AIZj9tcRlrq1sfFQirlM1vRURAQCXJVCbJAP7JIKw0v+O vYH/yf0lkRpvCzdgY3bfFeqP7wx1kW/j6Utq/+3J2qZ2+hzWVEaMwNFEn913Hlh2 RfeqG8PisP/08pZxv1YH17dTKKkFSM6EvUm1w8aAiWYAED29cZndhyh7+n8aJqBi qBDiRl8dW5IRhxig9ftHZbIk3P3ZUnejKt/WtmAHlGoSfJaf/T6wBqzpLm22wpXS uw== -----END CERTIFICATE-----Generated at Sat Apr 5 06:26:52 2025 by rpki-client