$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139967.roa File: AS139967.roa (raw, json) Hash identifier: tVx0zXxYRxOb8KgWw6K2ZchkR6Pbiq/maqxtQgAIloo= Subject key identifier: BF:9F:77:12:FD:43:CF:2A:BD:3C:41:B6:4B:EA:0C:E0:5A:64:0D:14 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2649231D79045CBAF87D296B72BD65959AA3D7A5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139967.roa Signing time: Tue 10 Dec 2024 05:00:16 +0000 ROA not before: Tue 10 Dec 2024 04:55:16 +0000 ROA not after: Tue 09 Dec 2025 05:00:16 +0000 asID: 139967 IP address blocks: 103.166.10.0/23 maxlen: 24 103.247.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:49:23:1d:79:04:5c:ba:f8:7d:29:6b:72:bd:65:95:9a:a3:d7:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 10 04:55:16 2024 GMT Not After : Dec 9 05:00:16 2025 GMT Subject: CN=BF9F7712FD43CF2ABD3C41B64BEA0CE05A640D14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d8:a0:d4:6e:c4:23:39:95:a2:37:a2:16:9c: f6:03:e1:02:6f:7c:4f:bb:26:a1:f9:1f:3b:47:6b: ee:d2:04:0c:c0:09:6d:60:c8:ad:48:1d:e6:b0:58: 50:44:9b:5d:f9:f7:97:7b:af:e1:c8:83:57:98:52: 34:62:b9:25:0f:d4:e9:36:0e:fc:2a:41:e3:0e:e9: 98:7c:a6:13:5f:b0:1c:f1:33:f2:f0:13:8e:c7:35: 80:9f:b1:a9:7c:99:aa:66:50:4d:76:18:6a:7d:9a: 1d:f4:45:15:bc:a5:ea:42:8a:7e:f7:9d:93:3d:bb: 5c:ef:31:78:fd:d6:e0:0f:a5:39:ab:3d:13:35:ce: 01:e2:57:78:3b:a1:e4:4c:ce:3e:cd:66:14:64:43: 8c:d6:83:01:1b:d9:d3:47:39:cf:61:6c:39:38:52: a4:44:b7:b6:85:bb:d5:d4:f2:1f:ee:53:83:0f:29: f0:a6:25:37:46:96:c3:cc:bb:2e:cf:2d:43:be:b4: b8:22:56:9f:bb:cc:6e:ca:d7:83:a6:35:6d:d7:60: 56:6f:ba:11:d5:d8:09:14:08:10:8c:dd:6a:39:f0: ac:a9:ab:10:1a:11:ff:2a:33:14:d7:ee:a3:23:5e: 4c:62:ca:55:8a:ec:94:c6:7f:26:8e:0c:dc:23:77: cc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9F:77:12:FD:43:CF:2A:BD:3C:41:B6:4B:EA:0C:E0:5A:64:0D:14 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139967.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.10.0/23 103.247.20.0/24 Signature Algorithm: sha256WithRSAEncryption 56:ac:a9:1f:9d:80:d4:10:6b:06:a7:ab:51:e0:3c:86:11:3e: 8b:b2:23:71:9e:3f:06:d4:1d:80:cd:b8:5a:1c:90:66:d4:f4: cc:87:f2:81:8f:53:2f:aa:26:c9:f2:ed:5f:5b:96:4f:5c:50: 79:2f:dc:bb:01:fd:de:a1:9b:fa:62:75:35:ae:65:69:ab:57: 9e:d5:25:76:20:b8:5c:3a:77:8c:91:a4:66:f5:be:22:85:a5: c6:5d:0c:f5:ba:05:48:4c:61:30:e0:06:fc:c4:4a:7f:f9:68: 92:2f:56:a4:48:3f:2f:6e:20:a4:0a:7d:b9:1d:a6:ea:68:45: 89:f7:b9:e6:47:50:e5:a3:f8:d4:e1:13:42:94:36:73:1e:d0: b0:c3:21:5b:a5:29:2f:34:71:b1:6f:b4:7a:e0:25:8d:fc:5e: 44:94:87:e7:f7:a0:a8:52:88:ae:4a:0e:d2:2c:78:80:00:34: 19:03:58:48:c5:62:e9:74:8a:0a:f6:56:e1:45:2c:85:fe:67: eb:85:c7:f3:a1:9c:b6:9a:3d:ff:f0:58:a6:12:d4:14:eb:c5: 2b:92:65:e3:2e:6e:58:cc:7c:66:bc:a5:5e:aa:cf:94:14:10: a9:5b:a1:7e:88:ba:a0:53:89:e8:85:17:c9:4d:90:3a:69:3e: 16:83:35:7e -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUJkkjHXkEXLr4fSlrcr1llZqj16UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUxNloX DTI1MTIwOTA1MDAxNlowMzExMC8GA1UEAxMoQkY5Rjc3MTJGRDQzQ0YyQUJEM0M0 MUI2NEJFQTBDRTA1QTY0MEQxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMzYoNRuxCM5laI3ohac9gPhAm98T7smofkfO0dr7tIEDMAJbWDIrUgd5rBY UESbXfn3l3uv4ciDV5hSNGK5JQ/U6TYO/CpB4w7pmHymE1+wHPEz8vATjsc1gJ+x qXyZqmZQTXYYan2aHfRFFbyl6kKKfvedkz27XO8xeP3W4A+lOas9EzXOAeJXeDuh 5EzOPs1mFGRDjNaDARvZ00c5z2FsOThSpES3toW71dTyH+5Tgw8p8KYlN0aWw8y7 Ls8tQ760uCJWn7vMbsrXg6Y1bddgVm+6EdXYCRQIEIzdajnwrKmrEBoR/yozFNfu oyNeTGLKVYrslMZ/Jo4M3CN3zLUCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBS/n3cS /UPPKr08QbZL6gzgWmQNFDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTk2Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAWemCgMEAGf3FDANBgkqhkiG9w0BAQsFAAOCAQEAVqypH52A1BBr BqerUeA8hhE+i7IjcZ4/BtQdgM24WhyQZtT0zIfygY9TL6omyfLtX1uWT1xQeS/c uwH93qGb+mJ1Na5laatXntUldiC4XDp3jJGkZvW+IoWlxl0M9boFSExhMOAG/MRK f/loki9WpEg/L24gpAp9uR2m6mhFife55kdQ5aP41OETQpQ2cx7QsMMhW6UpLzRx sW+0euAljfxeRJSH5/egqFKIrkoO0ix4gAA0GQNYSMVi6XSKCvZW4UUshf5n64XH 86Gctpo9//BYphLUFOvFK5Jl4y5uWMx8ZrylXqrPlBQQqVuhfoi6oFOJ6IUXyU2Q Omk+FoM1fg== -----END CERTIFICATE-----Generated at Sat Apr 5 06:22:44 2025 by rpki-client