$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139932.roa File: AS139932.roa (raw, json) Hash identifier: UwX0hVBPXqj3JnzwBGfjHqgr9KuvKTCjanDWb1ymjaU= Subject key identifier: 94:5B:8A:63:4C:18:88:88:8A:74:AC:35:B5:04:63:32:B6:BA:04:63 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 13B11F45A802BBF9378A3D27C2C7DC59DF1C0BE7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139932.roa Signing time: Fri 25 Oct 2024 04:00:00 +0000 ROA not before: Fri 25 Oct 2024 03:55:00 +0000 ROA not after: Fri 24 Oct 2025 04:00:00 +0000 asID: 139932 IP address blocks: 103.146.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b1:1f:45:a8:02:bb:f9:37:8a:3d:27:c2:c7:dc:59:df:1c:0b:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 25 03:55:00 2024 GMT Not After : Oct 24 04:00:00 2025 GMT Subject: CN=945B8A634C1888888A74AC35B5046332B6BA0463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:38:c3:24:86:68:06:15:d4:65:0e:4a:0d:26: e7:f7:2e:34:75:70:3e:43:9f:3a:80:8d:81:44:f9: 9a:7c:3e:7b:e1:2d:07:0c:de:93:19:14:62:cc:51: 56:93:5e:24:37:29:d9:49:c5:ac:f3:cd:8b:d5:55: 8e:a4:f4:0a:c8:bb:15:aa:49:e7:cf:c9:7a:ee:fc: a8:e0:c5:aa:a1:64:55:fb:53:4a:37:8e:c8:64:5b: 9d:6e:5d:75:1b:86:57:4e:94:f3:9a:90:a2:d9:4c: 84:47:25:87:4c:bf:b0:1c:9f:83:72:50:fd:b4:6e: 64:4c:15:5d:45:b9:4e:86:6e:8d:c7:2a:3e:a9:bb: 59:53:1d:4f:90:00:ce:d3:26:12:61:76:fe:f4:28: 75:03:db:00:9a:6f:58:b7:33:03:3c:8f:6f:ae:9b: 6d:b3:77:0b:e1:64:4b:36:30:b0:27:ae:87:c3:7b: bc:12:f2:c8:8f:46:a5:ab:c2:b3:93:1e:a1:62:c1: 69:2e:64:93:6f:5a:b7:63:5a:a8:cb:a5:41:98:3f: 58:00:c0:f0:fc:e3:c3:8e:f1:4e:4c:dd:e9:c8:41: 75:19:b9:57:70:c3:03:84:f3:50:26:49:79:de:ee: 60:ed:cb:bf:b1:00:75:95:4b:cf:30:9a:45:2d:ed: 0f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5B:8A:63:4C:18:88:88:8A:74:AC:35:B5:04:63:32:B6:BA:04:63 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.74.0/24 Signature Algorithm: sha256WithRSAEncryption 13:ce:fd:f6:d4:35:9a:90:ef:61:d2:09:63:23:95:14:5c:19: b4:f4:8f:f7:84:18:a3:1d:d7:77:72:13:b2:78:e0:36:11:cd: ce:7a:e7:d8:aa:cc:53:a0:8f:66:45:fe:1b:d2:57:5a:03:84: 3c:25:dc:2b:e0:62:3a:66:db:6c:32:27:34:ea:5a:7c:49:79: 1a:a8:44:ba:85:83:0d:0a:13:cc:e7:b4:17:28:b2:7d:de:c7: 1a:ca:9a:1f:c2:8a:f6:f4:aa:f7:b5:61:d9:83:5e:46:29:ac: f2:4d:08:f2:5e:1e:93:ec:99:db:2a:eb:d5:ef:6d:fd:e5:44: b0:08:6e:28:42:6b:7c:81:0f:42:e3:a1:a3:eb:3c:7f:a0:56: 73:e0:ca:73:41:29:67:62:99:40:17:61:59:cb:1e:e7:79:b1: 90:e2:4d:a5:a5:05:69:ba:0a:dd:88:7b:bc:68:0f:ec:40:ad: eb:36:bb:5e:b1:5e:3a:7f:f7:7c:c2:6c:00:a6:55:43:1e:9a: fe:8d:4b:99:65:e3:b2:a7:19:0a:2b:73:d6:69:38:dc:ec:cc: 88:3a:65:5d:4e:6f:27:4d:26:e6:77:f0:d7:6c:e3:d9:83:b6: f3:7a:fe:31:a8:d4:b1:ef:4f:a7:1a:89:1c:4b:a0:13:38:bb: 52:23:8f:b8 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUE7EfRagCu/k3ij0nwsfcWd8cC+cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAyNTAzNTUwMFoX DTI1MTAyNDA0MDAwMFowMzExMC8GA1UEAxMoOTQ1QjhBNjM0QzE4ODg4ODhBNzRB QzM1QjUwNDYzMzJCNkJBMDQ2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL04wySGaAYV1GUOSg0m5/cuNHVwPkOfOoCNgUT5mnw+e+EtBwzekxkUYsxR VpNeJDcp2UnFrPPNi9VVjqT0Csi7FapJ58/Jeu78qODFqqFkVftTSjeOyGRbnW5d dRuGV06U85qQotlMhEclh0y/sByfg3JQ/bRuZEwVXUW5ToZujccqPqm7WVMdT5AA ztMmEmF2/vQodQPbAJpvWLczAzyPb66bbbN3C+FkSzYwsCeuh8N7vBLyyI9GpavC s5MeoWLBaS5kk29at2NaqMulQZg/WADA8Pzjw47xTkzd6chBdRm5V3DDA4TzUCZJ ed7uYO3Lv7EAdZVLzzCaRS3tDxkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSUW4pj TBiIiIp0rDW1BGMytroEYzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTkzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeSSjANBgkqhkiG9w0BAQsFAAOCAQEAE8799tQ1mpDvYdIJYyOV FFwZtPSP94QYox3Xd3ITsnjgNhHNznrn2KrMU6CPZkX+G9JXWgOEPCXcK+BiOmbb bDInNOpafEl5GqhEuoWDDQoTzOe0Fyiyfd7HGsqaH8KK9vSq97Vh2YNeRims8k0I 8l4ek+yZ2yrr1e9t/eVEsAhuKEJrfIEPQuOho+s8f6BWc+DKc0EpZ2KZQBdhWcse 53mxkOJNpaUFaboK3Yh7vGgP7ECt6za7XrFeOn/3fMJsAKZVQx6a/o1LmWXjsqcZ Citz1mk43OzMiDplXU5vJ00m5nfw12zj2YO283r+MajUse9PpxqJHEugEzi7UiOP uA== -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:54 2024 by rpki-client on console-fra.rpki-client.org