$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139967.roa File: AS139967.roa (raw, json) Hash identifier: kiEE6yHPr6uM8Xu/a8Q+dK1mi9DY+C/3EXjbNjYucOM= Subject key identifier: C9:0B:D5:62:13:29:0E:A3:A2:DF:72:6E:AA:6F:3D:58:E9:8F:F2:87 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 30436FCB9E72C60696E3DC6D48CBBE858599698B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139967.roa Signing time: Tue 09 Jan 2024 04:00:20 +0000 ROA not before: Tue 09 Jan 2024 03:55:20 +0000 ROA not after: Tue 07 Jan 2025 04:00:20 +0000 asID: 139967 IP address blocks: 103.166.10.0/23 maxlen: 24 103.247.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:43:6f:cb:9e:72:c6:06:96:e3:dc:6d:48:cb:be:85:85:99:69:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:20 2024 GMT Not After : Jan 7 04:00:20 2025 GMT Subject: CN=C90BD56213290EA3A2DF726EAA6F3D58E98FF287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:90:3f:66:1b:3c:ed:44:7e:bf:82:5f:22:cf: 6f:e3:28:5f:f3:a4:a9:7a:17:db:97:fa:cf:c9:b8: 0c:ec:e7:66:cb:1e:29:71:ba:e2:61:7e:71:41:e1: 6c:cd:9c:a4:83:e6:cf:88:70:2e:07:4e:d2:71:49: 8d:01:58:74:b7:49:3e:2f:42:30:64:c8:2b:80:a8: d4:44:2d:5d:f6:6f:f5:8b:f1:5e:e9:96:09:bc:67: 6d:0d:4d:74:96:4f:d2:f5:44:6a:98:04:0e:9c:2d: 92:4c:03:54:52:63:fe:9f:79:52:0d:7f:01:6b:c3: be:b5:55:cc:45:35:f3:83:34:56:cd:6f:7b:7f:95: 09:47:1f:31:9d:79:41:f6:d8:68:c1:d0:50:74:d2: ab:8b:65:39:a0:cc:e9:7f:de:6e:af:00:e3:ef:c0: b9:e1:25:0a:ba:f5:80:59:a6:83:ac:ad:81:70:4b: cf:f1:3e:5b:32:c3:ff:39:da:7b:ca:ce:37:c8:9f: 01:c5:f7:ab:45:25:7c:b6:be:fe:dc:6c:09:8b:d1: de:8a:36:17:e1:9f:f1:7e:2b:42:60:97:ab:0e:9c: 21:86:86:f0:a8:a8:c2:f4:d9:cd:de:9d:86:92:ae: 69:ec:cb:cf:fd:bd:55:31:f1:4b:e7:b5:ec:6d:62: 2e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0B:D5:62:13:29:0E:A3:A2:DF:72:6E:AA:6F:3D:58:E9:8F:F2:87 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139967.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.10.0/23 103.247.20.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:ce:c4:d7:bc:ff:6b:d9:9f:0b:52:61:17:90:21:3b:15:50: 6e:bc:bf:d7:8c:f8:99:97:82:26:b9:06:e1:bb:4c:e9:b9:e3: 5f:3d:b8:18:7e:b0:5a:56:d2:aa:b1:0d:a4:9c:f2:18:ac:7c: bc:be:76:41:5f:63:b8:9e:97:09:d3:b4:31:e8:3e:56:fa:52: 40:64:f3:bc:6e:62:96:d1:36:e7:08:40:f1:f9:0d:01:19:ba: 77:ca:ce:b8:3d:a9:79:8b:0b:36:f3:d6:4a:3a:dc:a1:70:7c: 41:21:82:36:cd:77:2e:fa:ff:01:5a:a6:79:4e:97:22:4f:97: 26:c4:f4:53:1d:c9:ee:1f:5a:f1:0c:3f:8c:78:ed:27:c9:5d: 1c:37:81:90:62:6d:ff:03:90:a3:3b:b5:b7:30:a5:0d:cf:98: bf:f9:3d:3c:d8:6c:92:91:fe:a0:4b:3c:2a:52:ea:15:ab:f3: b9:e7:e1:00:d8:27:a7:76:e9:02:0b:2e:b2:83:ec:41:51:29: 29:de:f0:e4:e9:12:cc:16:bd:f6:78:de:16:90:f0:c4:9a:1b: 79:9c:62:26:ab:b6:9e:f2:d1:7a:46:c3:1c:df:bf:86:82:e6: 99:9b:6f:0b:72:19:30:fc:25:ef:22:21:dc:0c:c7:8c:08:c0: 82:a9:d1:f9 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUMENvy55yxgaW49xtSMu+hYWZaYswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUyMFoX DTI1MDEwNzA0MDAyMFowMzExMC8GA1UEAxMoQzkwQkQ1NjIxMzI5MEVBM0EyREY3 MjZFQUE2RjNENThFOThGRjI4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALGQP2YbPO1Efr+CXyLPb+MoX/OkqXoX25f6z8m4DOznZsseKXG64mF+cUHh bM2cpIPmz4hwLgdO0nFJjQFYdLdJPi9CMGTIK4Co1EQtXfZv9YvxXumWCbxnbQ1N dJZP0vVEapgEDpwtkkwDVFJj/p95Ug1/AWvDvrVVzEU184M0Vs1ve3+VCUcfMZ15 QfbYaMHQUHTSq4tlOaDM6X/ebq8A4+/AueElCrr1gFmmg6ytgXBLz/E+WzLD/zna e8rON8ifAcX3q0UlfLa+/txsCYvR3oo2F+Gf8X4rQmCXqw6cIYaG8KiowvTZzd6d hpKuaezLz/29VTHxS+e17G1iLt0CAwEAAaOCAdYwggHSMB0GA1UdDgQWBBTJC9Vi EykOo6Lfcm6qbz1Y6Y/yhzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTk2Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAWemCgMEAGf3FDANBgkqhkiG9w0BAQsFAAOCAQEAbM7E17z/a9mf C1JhF5AhOxVQbry/14z4mZeCJrkG4btM6bnjXz24GH6wWlbSqrENpJzyGKx8vL52 QV9juJ6XCdO0Meg+VvpSQGTzvG5iltE25whA8fkNARm6d8rOuD2peYsLNvPWSjrc oXB8QSGCNs13Lvr/AVqmeU6XIk+XJsT0Ux3J7h9a8Qw/jHjtJ8ldHDeBkGJt/wOQ ozu1tzClDc+Yv/k9PNhskpH+oEs8KlLqFavzuefhANgnp3bpAgsusoPsQVEpKd7w 5OkSzBa99njeFpDwxJobeZxiJqu2nvLRekbDHN+/hoLmmZtvC3IZMPwl7yIh3AzH jAjAgqnR+Q== -----END CERTIFICATE-----Generated at Tue May 7 18:07:16 2024 by rpki-client on console-fra.rpki-client.org