$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139938.roa File: AS139938.roa (raw, json) Hash identifier: YOdYUoILCKeJ7xAnjf5bZexhet/5gdDSgYmnwAsa0fw= Subject key identifier: A8:6E:9C:46:31:85:82:94:C2:B4:D1:F3:7C:FA:CB:61:22:FB:41:52 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1EFB4FC9FE5C14B9672560B9E1DDC2F2DBCFAE42 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139938.roa Signing time: Fri 26 Jan 2024 05:00:00 +0000 ROA not before: Fri 26 Jan 2024 04:55:00 +0000 ROA not after: Fri 24 Jan 2025 05:00:00 +0000 asID: 139938 IP address blocks: 103.145.220.0/23 maxlen: 24 2001:df2:2c80::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:fb:4f:c9:fe:5c:14:b9:67:25:60:b9:e1:dd:c2:f2:db:cf:ae:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 26 04:55:00 2024 GMT Not After : Jan 24 05:00:00 2025 GMT Subject: CN=A86E9C4631858294C2B4D1F37CFACB6122FB4152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5b:d6:ef:70:6c:af:85:f0:a5:ab:0e:86:7c: 18:65:d4:fc:e8:61:79:d1:d8:87:fc:25:28:55:25: 50:e5:e5:45:71:4a:f2:ef:70:b6:7d:78:1d:f3:8b: d2:c4:b9:7d:93:c1:c7:ba:54:7a:b8:94:1e:7e:84: 60:72:f1:69:87:7b:1c:ec:87:b6:86:29:d2:c9:6e: 2c:06:9f:74:46:3f:4b:dd:11:2c:1c:16:e4:33:e9: b9:a5:42:41:0c:e5:5c:13:c5:43:2f:f4:d5:99:1a: a3:9c:02:7e:39:4e:8a:9c:b8:ad:4e:65:3e:50:c1: e5:9d:85:71:bc:75:53:b3:59:58:cd:1b:2d:d1:3e: df:1e:e5:c7:6c:13:ab:56:92:62:50:9e:25:b4:58: d2:26:10:f0:7d:16:67:42:69:60:8e:ef:e8:78:0f: b8:51:91:87:8e:13:1e:5b:4f:7b:20:82:32:7f:74: 43:46:14:a6:6a:c1:a7:a7:30:d3:57:45:d9:0b:4f: 4d:e6:cc:3d:fa:e6:0d:bb:00:d8:22:a7:9d:52:a0: 98:58:bd:ea:0c:e3:86:c5:15:73:25:2c:6b:36:cd: 75:e2:d1:5b:ac:c0:77:2a:61:68:0d:ee:0b:47:88: cc:8b:60:27:91:d9:b3:db:52:55:5d:27:72:0c:c5: a8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6E:9C:46:31:85:82:94:C2:B4:D1:F3:7C:FA:CB:61:22:FB:41:52 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.220.0/23 IPv6: 2001:df2:2c80::/48 Signature Algorithm: sha256WithRSAEncryption 82:2a:2c:ae:05:ad:35:f1:6e:69:27:94:fe:65:29:fc:e9:a6: b5:c2:f6:94:70:ed:0d:40:d9:43:c1:56:b1:c9:7b:1e:a5:63: 28:ca:e3:fc:c1:4b:e0:98:6d:29:e9:ac:fe:ac:e8:a8:d5:ac: d1:47:e5:4c:f1:e4:c3:07:02:ad:0c:d8:32:06:49:56:f8:fe: 27:9b:a5:ae:79:7d:79:b8:33:3f:67:2f:4b:4f:5e:7b:92:00: b5:51:0c:d9:9c:ab:54:98:ce:ee:50:bd:e8:e6:69:79:dd:ce: a0:5b:32:7c:0b:c6:4e:87:ac:03:0c:67:65:7c:54:85:28:8b: 26:6d:fa:6f:90:d6:09:09:e9:81:38:25:27:c4:39:c1:a8:fd: 86:ac:5e:02:48:18:ab:17:cb:39:e3:f0:2d:05:ba:79:32:c1: d4:80:be:aa:3d:42:00:a5:78:0d:3a:1f:ea:55:67:0f:52:7c: 2c:5f:69:20:00:e5:1f:8c:5a:d6:dc:1a:1b:d8:c4:3a:cf:37: a9:bb:45:02:ad:b6:a5:1b:e8:c0:75:13:36:bf:63:9b:1c:f6: 9a:0c:76:94:3c:b4:8d:6d:43:87:37:48:6a:df:0b:67:11:38: 95:2b:b3:55:5f:83:53:ad:60:be:8f:d7:b7:ec:a4:4c:c2:cd: 78:7d:1b:d5 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUHvtPyf5cFLlnJWC54d3C8tvPrkIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEyNjA0NTUwMFoX DTI1MDEyNDA1MDAwMFowMzExMC8GA1UEAxMoQTg2RTlDNDYzMTg1ODI5NEMyQjRE MUYzN0NGQUNCNjEyMkZCNDE1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANBb1u9wbK+F8KWrDoZ8GGXU/OhhedHYh/wlKFUlUOXlRXFK8u9wtn14HfOL 0sS5fZPBx7pUeriUHn6EYHLxaYd7HOyHtoYp0sluLAafdEY/S90RLBwW5DPpuaVC QQzlXBPFQy/01Zkao5wCfjlOipy4rU5lPlDB5Z2Fcbx1U7NZWM0bLdE+3x7lx2wT q1aSYlCeJbRY0iYQ8H0WZ0JpYI7v6HgPuFGRh44THltPeyCCMn90Q0YUpmrBp6cw 01dF2QtPTebMPfrmDbsA2CKnnVKgmFi96gzjhsUVcyUsazbNdeLRW6zAdyphaA3u C0eIzItgJ5HZs9tSVV0ncgzFqMkCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBSobpxG MYWClMK00fN8+sthIvtBUjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTkzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAWeR3DAPBAIAAjAJAwcAIAEN8iyAMA0GCSqGSIb3DQEBCwUAA4IB AQCCKiyuBa018W5pJ5T+ZSn86aa1wvaUcO0NQNlDwVaxyXsepWMoyuP8wUvgmG0p 6az+rOio1azRR+VM8eTDBwKtDNgyBklW+P4nm6WueX15uDM/Zy9LT157kgC1UQzZ nKtUmM7uUL3o5ml53c6gWzJ8C8ZOh6wDDGdlfFSFKIsmbfpvkNYJCemBOCUnxDnB qP2GrF4CSBirF8s54/AtBbp5MsHUgL6qPUIApXgNOh/qVWcPUnwsX2kgAOUfjFrW 3Bob2MQ6zzepu0UCrbalG+jAdRM2v2ObHPaaDHaUPLSNbUOHN0hq3wtnETiVK7NV X4NTrWC+j9e37KRMws14fRvV -----END CERTIFICATE-----Generated at Thu May 9 00:29:15 2024 by rpki-client on console-ams.rpki-client.org