$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139429.roa File: AS139429.roa (raw, json) Hash identifier: 2KdJXypMA++5NHRlGXQOx7M9KVkf7xfsEPZlslegHbQ= Subject key identifier: 67:F9:F8:9D:FF:6E:96:A2:DD:F4:86:48:73:42:F5:E7:AA:A5:4A:03 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1C939437F6443F486AE17E0DE151BDA1052792AD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139429.roa Signing time: Tue 09 Jan 2024 04:00:10 +0000 ROA not before: Tue 09 Jan 2024 03:55:10 +0000 ROA not after: Tue 07 Jan 2025 04:00:10 +0000 asID: 139429 IP address blocks: 103.144.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:93:94:37:f6:44:3f:48:6a:e1:7e:0d:e1:51:bd:a1:05:27:92:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:10 2024 GMT Not After : Jan 7 04:00:10 2025 GMT Subject: CN=67F9F89DFF6E96A2DDF486487342F5E7AAA54A03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e0:d9:88:54:3d:8c:8b:36:4d:3c:b5:8c:90: 52:d8:ac:13:d9:fe:66:fc:17:28:72:ca:b0:df:b5: 32:8e:14:6a:3d:3a:92:68:87:11:d3:dc:e0:07:d8: 61:5e:13:66:12:29:e2:d9:a5:e5:13:9c:8c:74:42: 27:66:05:19:80:f1:6d:e9:bd:98:2e:72:73:f6:1a: 10:c6:a5:ff:71:e8:ad:c7:8d:b2:d9:96:07:93:1b: 0f:f5:e6:0e:e4:00:bd:1a:fe:58:d0:4f:60:ce:95: 08:73:d8:5f:80:8b:3a:ae:21:bb:92:3a:05:e9:38: 71:2a:b8:33:10:82:7b:fe:e8:6e:97:d0:be:b3:ab: 4a:83:87:a9:c3:aa:30:6e:13:a0:f8:b6:17:a7:ea: 46:d7:de:e1:3d:dc:c6:4c:95:9b:a2:17:9c:84:53: b8:33:3b:0a:82:39:92:a2:87:a1:5c:2a:df:36:cd: 6d:14:3e:ee:7f:b2:f7:33:3a:f1:b9:02:cc:8e:aa: 62:57:be:c7:b4:68:7a:98:e5:cf:4c:1e:39:82:58: 91:5b:9d:22:e9:0e:8c:4a:42:c2:dd:2a:a6:b0:e5: 2e:80:52:7c:a0:4b:26:5b:8a:09:8d:f0:94:5d:2f: fc:17:2b:a9:30:61:fa:23:e4:95:a8:e4:5e:50:ce: cb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F9:F8:9D:FF:6E:96:A2:DD:F4:86:48:73:42:F5:E7:AA:A5:4A:03 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139429.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.143.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:5a:83:19:d0:45:f9:72:4f:80:d3:47:e7:24:d5:be:1d:47: b6:39:68:8c:1b:fe:7f:d9:d6:f7:e0:10:1f:38:4e:d0:1d:31: c4:85:42:31:0a:04:63:99:e3:b8:73:d1:c0:35:b9:3c:17:1c: 5b:54:80:ea:63:1e:89:01:c2:67:1b:1c:e6:71:eb:db:de:5c: dc:50:6d:d8:8d:25:24:93:44:14:68:72:a2:de:b6:fa:80:6a: b6:e5:5d:77:fd:ae:55:f4:87:66:07:55:ed:b5:a5:97:d4:b5: 79:44:7f:1c:00:8a:c2:6d:7f:54:8f:04:42:c7:eb:e6:13:73: cd:06:3e:e3:88:2f:68:cb:fc:d8:22:60:53:bb:2e:0d:4d:d5: 25:9c:f0:5a:ea:89:d1:d3:a3:c6:01:a7:35:47:25:66:de:98: a0:23:5a:50:50:5b:14:b6:5b:57:a3:1d:55:0f:17:18:10:19: fa:88:fb:77:08:ea:fc:f6:66:7c:e7:b7:a3:65:15:fd:79:d0: 67:88:88:ca:38:be:2a:47:22:c4:81:68:23:7d:42:ae:8d:c5: 52:ca:a3:76:68:53:d2:29:1c:eb:3e:40:da:0f:2d:90:c4:05: 2e:c0:a0:ba:42:55:a4:0d:6a:23:f3:4b:6b:fd:8e:a1:3f:a1: e9:f2:61:1f -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUHJOUN/ZEP0hq4X4N4VG9oQUnkq0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUxMFoX DTI1MDEwNzA0MDAxMFowMzExMC8GA1UEAxMoNjdGOUY4OURGRjZFOTZBMkRERjQ4 NjQ4NzM0MkY1RTdBQUE1NEEwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANng2YhUPYyLNk08tYyQUtisE9n+ZvwXKHLKsN+1Mo4Uaj06kmiHEdPc4AfY YV4TZhIp4tml5ROcjHRCJ2YFGYDxbem9mC5yc/YaEMal/3HorceNstmWB5MbD/Xm DuQAvRr+WNBPYM6VCHPYX4CLOq4hu5I6Bek4cSq4MxCCe/7obpfQvrOrSoOHqcOq MG4ToPi2F6fqRtfe4T3cxkyVm6IXnIRTuDM7CoI5kqKHoVwq3zbNbRQ+7n+y9zM6 8bkCzI6qYle+x7Roepjlz0weOYJYkVudIukOjEpCwt0qprDlLoBSfKBLJluKCY3w lF0v/BcrqTBh+iPklajkXlDOy0cCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRn+fid /26Wot30hkhzQvXnqqVKAzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTQyOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeQjzANBgkqhkiG9w0BAQsFAAOCAQEAS1qDGdBF+XJPgNNH5yTV vh1HtjlojBv+f9nW9+AQHzhO0B0xxIVCMQoEY5njuHPRwDW5PBccW1SA6mMeiQHC Zxsc5nHr295c3FBt2I0lJJNEFGhyot62+oBqtuVdd/2uVfSHZgdV7bWll9S1eUR/ HACKwm1/VI8EQsfr5hNzzQY+44gvaMv82CJgU7suDU3VJZzwWuqJ0dOjxgGnNUcl Zt6YoCNaUFBbFLZbV6MdVQ8XGBAZ+oj7dwjq/PZmfOe3o2UV/XnQZ4iIyji+Kkci xIFoI31Cro3FUsqjdmhT0ikc6z5A2g8tkMQFLsCgukJVpA1qI/NLa/2OoT+h6fJh Hw== -----END CERTIFICATE-----Generated at Wed May 8 18:12:15 2024 by rpki-client on console-fra.rpki-client.org