$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139430.roa File: AS139430.roa (raw, json) Hash identifier: MQRavT1JIrE2kvx1foyJMgrg8WL9YUblVXumo73whJQ= Subject key identifier: D2:21:5C:11:D0:B1:BB:8B:BB:05:78:0D:3F:95:E2:CF:A9:97:7B:00 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 196B050A1BEF0BBE94ABC1A4B7A56F2CD25CA4A1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139430.roa Signing time: Tue 09 Jan 2024 04:00:12 +0000 ROA not before: Tue 09 Jan 2024 03:55:12 +0000 ROA not after: Tue 07 Jan 2025 04:00:12 +0000 asID: 139430 IP address blocks: 103.144.190.0/23 maxlen: 24 2001:df1:d780::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:6b:05:0a:1b:ef:0b:be:94:ab:c1:a4:b7:a5:6f:2c:d2:5c:a4:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:12 2024 GMT Not After : Jan 7 04:00:12 2025 GMT Subject: CN=D2215C11D0B1BB8BBB05780D3F95E2CFA9977B00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:32:01:4c:7a:09:07:7a:63:41:a0:b2:24:c0: 5f:bc:63:28:dd:58:d7:10:a6:10:a3:8b:91:09:18: 43:5a:e2:e6:bf:68:78:94:74:14:71:cc:66:ca:e0: 76:4e:34:59:75:a8:44:03:89:eb:ef:d3:b6:e1:7f: 22:bc:99:21:f6:89:da:09:6c:81:3e:c1:4c:f3:30: 59:c7:f9:95:0d:e7:6e:d3:9e:24:17:f6:87:e4:ad: 99:da:3a:9b:06:3f:0d:dd:2f:ac:f5:b7:d3:0c:53: c8:e6:50:75:92:9c:a6:ff:8a:03:07:20:01:71:97: 76:7e:d3:06:79:7a:63:0e:64:fc:83:3a:2b:d6:95: 78:71:8d:9c:9b:e3:8f:25:d0:a7:fc:49:be:2d:8a: c2:b2:5e:45:80:3c:5b:05:86:b9:17:47:a7:f7:0c: 71:eb:ef:be:3d:1f:4c:9c:83:1f:2e:fa:03:eb:e2: f4:2b:9d:8b:f2:90:5b:9b:51:0b:72:ee:29:04:5a: 73:d5:56:50:30:cf:ec:b2:e4:ed:ab:99:ac:50:8d: 1c:4e:ca:1d:a7:68:44:85:07:28:c4:2a:b4:b0:7d: a6:63:b2:4e:ce:de:f4:f6:7e:db:bf:57:a0:21:56: 57:9e:0e:fa:70:18:a4:4e:c2:06:b9:90:ce:84:5c: 1d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:21:5C:11:D0:B1:BB:8B:BB:05:78:0D:3F:95:E2:CF:A9:97:7B:00 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.190.0/23 IPv6: 2001:df1:d780::/48 Signature Algorithm: sha256WithRSAEncryption 71:9f:4e:e6:ef:35:b3:08:ef:c8:ed:16:04:48:3f:02:fa:5a: 7a:2a:d5:be:11:19:ac:9a:40:b0:48:eb:a9:88:b8:cb:a6:28: 11:cb:42:b0:de:03:e0:e1:fe:af:36:d2:91:e0:fa:f0:64:dc: 64:c8:e4:57:c5:b8:ad:4a:1f:65:60:a6:19:57:5c:31:5f:82: 2c:97:82:41:ab:94:e0:48:c3:64:5a:8d:57:cd:d8:9b:1b:42: 32:39:c3:55:f2:6e:de:1d:d3:43:1f:04:42:a6:9f:86:8c:ce: a9:89:13:f9:5c:f0:48:94:08:61:61:ae:50:13:a9:b3:64:aa: ea:3e:60:5d:d1:9c:99:ae:1f:a4:97:17:57:3f:da:4f:e2:b2: 76:40:55:23:8a:8a:6c:e6:ca:c4:8f:d2:8b:37:a8:f2:a0:8c: 60:30:3f:ab:b0:e1:db:89:d3:c9:c5:7e:a9:7c:8c:8e:f4:c5: 0b:93:55:5a:fc:c2:bd:22:ff:4c:aa:aa:60:b1:cc:e2:ef:7e: 8e:66:42:df:65:6d:f9:d0:ad:f5:fe:60:68:99:0e:2c:55:72: 18:e4:dc:3d:74:62:e7:a5:bb:e8:89:74:d6:eb:1d:9f:fa:17: e9:32:28:50:ce:33:f8:c5:9c:4b:29:72:dd:7a:0c:4e:8d:2a: 76:66:0d:c7 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUGWsFChvvC76Uq8Gkt6VvLNJcpKEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUxMloX DTI1MDEwNzA0MDAxMlowMzExMC8GA1UEAxMoRDIyMTVDMTFEMEIxQkI4QkJCMDU3 ODBEM0Y5NUUyQ0ZBOTk3N0IwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANwyAUx6CQd6Y0GgsiTAX7xjKN1Y1xCmEKOLkQkYQ1ri5r9oeJR0FHHMZsrg dk40WXWoRAOJ6+/TtuF/IryZIfaJ2glsgT7BTPMwWcf5lQ3nbtOeJBf2h+Stmdo6 mwY/Dd0vrPW30wxTyOZQdZKcpv+KAwcgAXGXdn7TBnl6Yw5k/IM6K9aVeHGNnJvj jyXQp/xJvi2KwrJeRYA8WwWGuRdHp/cMcevvvj0fTJyDHy76A+vi9Cudi/KQW5tR C3LuKQRac9VWUDDP7LLk7auZrFCNHE7KHadoRIUHKMQqtLB9pmOyTs7e9PZ+279X oCFWV54O+nAYpE7CBrmQzoRcHQcCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBTSIVwR 0LG7i7sFeA0/leLPqZd7ADAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTQzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAWeQvjAPBAIAAjAJAwcAIAEN8deAMA0GCSqGSIb3DQEBCwUAA4IB AQBxn07m7zWzCO/I7RYESD8C+lp6KtW+ERmsmkCwSOupiLjLpigRy0Kw3gPg4f6v NtKR4PrwZNxkyORXxbitSh9lYKYZV1wxX4Isl4JBq5TgSMNkWo1XzdibG0IyOcNV 8m7eHdNDHwRCpp+GjM6piRP5XPBIlAhhYa5QE6mzZKrqPmBd0ZyZrh+klxdXP9pP 4rJ2QFUjiops5srEj9KLN6jyoIxgMD+rsOHbidPJxX6pfIyO9MULk1Va/MK9Iv9M qqpgsczi736OZkLfZW350K31/mBomQ4sVXIY5Nw9dGLnpbvoiXTW6x2f+hfpMihQ zjP4xZxLKXLdegxOjSp2Zg3H -----END CERTIFICATE-----Generated at Wed May 8 21:02:21 2024 by rpki-client on console-fra.rpki-client.org