$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139932.roa File: AS139932.roa (raw, json) Hash identifier: mFdq69FUK8ugBwFWrshAoEwKrqP6lA1hwuCaAdUz7Hg= Subject key identifier: A0:4A:52:7C:4A:1C:6A:1C:3D:D3:0E:D8:B5:E9:EE:8D:7C:43:36:9F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4C5467907E4BD0D2711E5009E400E8924584D880 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139932.roa Signing time: Fri 24 Nov 2023 03:40:02 +0000 ROA not before: Fri 24 Nov 2023 03:35:02 +0000 ROA not after: Fri 22 Nov 2024 03:40:02 +0000 asID: 139932 IP address blocks: 103.146.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:54:67:90:7e:4b:d0:d2:71:1e:50:09:e4:00:e8:92:45:84:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 24 03:35:02 2023 GMT Not After : Nov 22 03:40:02 2024 GMT Subject: CN=A04A527C4A1C6A1C3DD30ED8B5E9EE8D7C43369F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7e:86:92:ac:59:44:ed:63:93:77:88:f9:46: 7c:ef:cd:93:be:55:99:0a:1e:cc:05:5d:29:ee:e3: f5:a1:f7:95:a4:59:77:12:50:79:72:70:c3:09:d9: 2d:8d:ea:55:e0:cd:28:7d:75:70:b4:d2:81:39:db: 6a:58:30:69:80:26:a4:c9:e2:d4:44:b5:c0:12:37: 95:37:0d:4a:02:40:42:89:04:02:ba:25:ce:f2:60: 53:67:d0:a2:3e:4d:86:9d:ad:09:94:60:04:1d:3f: a2:b4:86:31:e8:85:56:4d:48:3e:56:fb:6f:ac:2f: 77:fd:38:31:c7:6c:c9:ee:1c:3a:33:c0:6c:fc:51: 99:08:11:7e:98:0b:d0:5a:9f:ed:26:9c:50:ef:bf: c8:88:77:de:2b:83:91:06:84:66:d7:d1:c1:5d:a8: a5:b0:ca:41:33:d1:ef:f8:ac:15:7e:58:95:14:e9: a3:fa:2a:6c:b5:57:f2:f8:13:50:41:0b:33:c6:1c: 5a:8f:51:12:63:a4:05:8c:29:54:f3:de:ff:63:c1: 0c:d0:24:56:96:6d:1c:73:fc:87:d1:92:d7:f3:6e: db:54:8a:d0:33:ee:a3:32:bf:29:84:99:86:9a:33: cf:8b:0c:60:ec:aa:d8:6e:49:7c:db:d8:99:7b:88: 75:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4A:52:7C:4A:1C:6A:1C:3D:D3:0E:D8:B5:E9:EE:8D:7C:43:36:9F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.74.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:5e:16:7d:09:82:76:4a:2c:b0:d2:f2:6d:a7:8d:d5:e2:12: f9:e0:55:39:a0:a2:12:e7:ab:a1:c1:2d:ee:41:bf:ac:93:0c: 13:35:18:de:f2:ca:a7:5d:c4:08:0f:b7:99:71:55:4e:7c:ef: f8:19:1c:8b:9b:ba:7d:56:87:ba:7b:84:b8:2c:a5:d7:79:b8: f3:f3:7c:67:51:0b:d8:09:1f:ef:6a:95:59:01:23:e3:fd:2b: 52:9a:12:ab:9a:37:72:4e:f6:0a:79:9a:26:50:a9:5e:20:42: 05:4d:d3:48:05:77:85:33:23:f5:85:ae:2c:fe:93:f4:72:8b: 19:1a:ec:91:99:8c:e3:a8:44:c8:bd:a1:cb:a8:93:6a:64:ed: 9c:e8:21:48:09:ec:9d:6a:82:a5:7f:da:ca:ef:ee:c1:23:9b: a6:e1:67:a1:fd:eb:d4:4c:c9:08:6b:fe:e6:54:2b:5d:bc:e4: 3b:ea:fd:68:b0:c3:8b:9b:69:4b:25:c3:12:ad:ab:4f:79:b6: 2e:25:95:15:fd:b6:fb:88:9e:61:39:95:82:77:0b:6b:f4:73: 7c:a4:4b:2f:db:e0:23:ea:02:2a:90:07:45:90:0b:b1:e2:66: 05:7f:ac:7e:3a:f7:97:ea:0e:7f:e0:e5:e6:00:7d:28:ea:7c: 01:59:37:a3 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUTFRnkH5L0NJxHlAJ5ADokkWE2IAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEyNDAzMzUwMloX DTI0MTEyMjAzNDAwMlowMzExMC8GA1UEAxMoQTA0QTUyN0M0QTFDNkExQzNERDMw RUQ4QjVFOUVFOEQ3QzQzMzY5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM9+hpKsWUTtY5N3iPlGfO/Nk75VmQoezAVdKe7j9aH3laRZdxJQeXJwwwnZ LY3qVeDNKH11cLTSgTnbalgwaYAmpMni1ES1wBI3lTcNSgJAQokEArolzvJgU2fQ oj5Nhp2tCZRgBB0/orSGMeiFVk1IPlb7b6wvd/04Mcdsye4cOjPAbPxRmQgRfpgL 0Fqf7SacUO+/yIh33iuDkQaEZtfRwV2opbDKQTPR7/isFX5YlRTpo/oqbLVX8vgT UEELM8YcWo9REmOkBYwpVPPe/2PBDNAkVpZtHHP8h9GS1/Nu21SK0DPuozK/KYSZ hpozz4sMYOyq2G5JfNvYmXuIdfkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSgSlJ8 ShxqHD3TDti16e6NfEM2nzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTkzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeSSjANBgkqhkiG9w0BAQsFAAOCAQEAPl4WfQmCdkossNLybaeN 1eIS+eBVOaCiEuerocEt7kG/rJMMEzUY3vLKp13ECA+3mXFVTnzv+Bkci5u6fVaH unuEuCyl13m48/N8Z1EL2Akf72qVWQEj4/0rUpoSq5o3ck72CnmaJlCpXiBCBU3T SAV3hTMj9YWuLP6T9HKLGRrskZmM46hEyL2hy6iTamTtnOghSAnsnWqCpX/ayu/u wSObpuFnof3r1EzJCGv+5lQrXbzkO+r9aLDDi5tpSyXDEq2rT3m2LiWVFf22+4ie YTmVgncLa/RzfKRLL9vgI+oCKpAHRZALseJmBX+sfjr3l+oOf+Dl5gB9KOp8AVk3 ow== -----END CERTIFICATE-----Generated at Wed May 8 15:17:42 2024 by rpki-client on console-fra.rpki-client.org