$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139412.roa File: AS139412.roa (raw, json) Hash identifier: 9XBh6y4QIf/AH5Mbpekm7qpv3GhboJbH1nOqjTyR58g= Subject key identifier: 61:75:BA:4B:57:3B:0D:25:00:80:7E:30:02:21:0C:68:9C:FF:92:B6 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 56041F1BBD9EA7CD6C162BB2CF7E2C030007EE30 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139412.roa Signing time: Wed 22 May 2024 10:00:00 +0000 ROA not before: Wed 22 May 2024 09:55:00 +0000 ROA not after: Wed 21 May 2025 10:00:00 +0000 asID: 139412 IP address blocks: 103.143.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:04:1f:1b:bd:9e:a7:cd:6c:16:2b:b2:cf:7e:2c:03:00:07:ee:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 22 09:55:00 2024 GMT Not After : May 21 10:00:00 2025 GMT Subject: CN=6175BA4B573B0D2500807E3002210C689CFF92B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5d:27:3b:d3:43:4a:29:4f:54:ad:be:e7:51: 39:6f:3e:d4:20:54:69:b5:99:ef:f0:d7:d9:d8:86: 13:95:d4:9a:45:c6:1e:58:66:24:98:03:46:b2:d3: f0:84:93:a4:a9:7a:b4:af:ef:19:f5:56:bc:72:ab: 7c:bf:1c:22:02:a4:19:8b:26:ce:f5:7b:35:bb:db: e1:a6:95:8a:53:49:95:33:00:78:ae:eb:a8:5f:4b: a8:50:51:c3:63:7f:9d:19:6d:07:1c:90:bb:cf:a4: 60:52:e1:4d:4f:8d:26:31:b3:b1:05:31:52:83:64: 86:37:24:f1:8b:3c:3b:c5:74:d4:51:b1:8c:11:97: 45:8e:a9:80:fe:83:4f:2d:5c:88:ed:53:2b:c3:a6: bf:ae:c8:22:08:35:9f:2f:25:07:13:63:d7:5f:7e: 36:36:2c:77:4b:b0:0e:f7:80:0b:2a:7b:4b:e8:44: 0f:ea:c5:cd:a8:14:8c:6f:83:dc:8a:ad:0a:03:d1: 7d:0c:5f:8f:10:2a:87:aa:1a:77:d5:3b:1a:95:1e: 7d:e5:d0:37:80:6d:e9:2e:5a:96:80:e8:c3:b9:63: a5:fc:86:68:f0:56:4e:7a:11:d2:aa:15:b0:87:84: 42:e6:1d:0d:cf:ae:19:d5:49:82:6d:3a:8b:38:6a: 8f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:75:BA:4B:57:3B:0D:25:00:80:7E:30:02:21:0C:68:9C:FF:92:B6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139412.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.224.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:74:e0:fc:1b:74:3a:84:53:cc:8c:5a:c9:39:f2:0e:23:ae: 33:61:3b:72:da:ec:e9:d7:e7:cc:47:aa:42:47:8a:07:1f:26: 0b:ed:b1:11:b4:c5:52:15:e9:c8:0a:31:d3:4b:3d:98:b6:7f: a9:76:74:60:7d:f3:63:14:9f:27:75:c5:9f:ec:90:1d:d8:9c: ff:55:fd:f0:c1:ba:fd:b6:80:a1:96:58:1f:d2:83:57:3d:a0: a2:9d:b1:53:ef:c8:d7:09:e4:5a:50:df:32:73:61:67:1f:9e: 0a:e5:7e:27:6a:1b:3a:92:67:f9:1e:e1:f5:9a:86:73:3a:bb: 0f:31:f9:34:f6:93:97:16:94:42:c1:c5:0a:15:0b:b3:0d:ca: 2f:ba:d1:0e:40:52:a4:70:c8:78:ec:5e:cf:b0:90:ce:5e:97: 57:ff:0b:18:0f:1c:0a:e3:4d:97:be:f7:90:8c:6a:97:10:92: 4b:0f:b4:27:d3:04:54:27:f8:c5:e5:14:ec:d3:5a:67:23:d5: ae:db:2e:29:c6:c9:b8:51:41:f9:1c:e5:9b:f5:0d:b0:08:18: 43:74:a2:65:55:31:69:87:ae:86:ce:83:eb:38:ce:4b:8b:39: 9e:bb:85:c7:70:bb:24:cc:92:99:88:eb:29:ea:c5:e8:98:ca: a4:c5:54:30 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUVgQfG72ep81sFiuyz34sAwAH7jAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUyMjA5NTUwMFoX DTI1MDUyMTEwMDAwMFowMzExMC8GA1UEAxMoNjE3NUJBNEI1NzNCMEQyNTAwODA3 RTMwMDIyMTBDNjg5Q0ZGOTJCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJddJzvTQ0opT1StvudROW8+1CBUabWZ7/DX2diGE5XUmkXGHlhmJJgDRrLT 8ISTpKl6tK/vGfVWvHKrfL8cIgKkGYsmzvV7Nbvb4aaVilNJlTMAeK7rqF9LqFBR w2N/nRltBxyQu8+kYFLhTU+NJjGzsQUxUoNkhjck8Ys8O8V01FGxjBGXRY6pgP6D Ty1ciO1TK8Omv67IIgg1ny8lBxNj119+NjYsd0uwDveACyp7S+hED+rFzagUjG+D 3IqtCgPRfQxfjxAqh6oad9U7GpUefeXQN4Bt6S5aloDow7ljpfyGaPBWTnoR0qoV sIeEQuYdDc+uGdVJgm06izhqj+8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRhdbpL VzsNJQCAfjACIQxonP+StjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTQxMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWeP4DANBgkqhkiG9w0BAQsFAAOCAQEAjXTg/Bt0OoRTzIxayTny DiOuM2E7ctrs6dfnzEeqQkeKBx8mC+2xEbTFUhXpyAox00s9mLZ/qXZ0YH3zYxSf J3XFn+yQHdic/1X98MG6/baAoZZYH9KDVz2gop2xU+/I1wnkWlDfMnNhZx+eCuV+ J2obOpJn+R7h9ZqGczq7DzH5NPaTlxaUQsHFChULsw3KL7rRDkBSpHDIeOxez7CQ zl6XV/8LGA8cCuNNl773kIxqlxCSSw+0J9MEVCf4xeUU7NNaZyPVrtsuKcbJuFFB +Rzlm/UNsAgYQ3SiZVUxaYeuhs6D6zjOS4s5nruFx3C7JMySmYjrKerF6JjKpMVU MA== -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:54 2024 by rpki-client on console-fra.rpki-client.org