$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139993.roa File: AS139993.roa (raw, json) Hash identifier: t7S5gXQtDNHp0UfREHd0iT887j5C5i7Y54YY8HQ9xOo= Subject key identifier: 8D:8B:54:9D:CC:9C:F1:E0:E4:FF:C3:8F:65:6A:45:65:1F:75:FF:9A Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0C780F76D34A3DEE2B6C8BEC30BA63926AF009E5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139993.roa Signing time: Tue 09 Jan 2024 04:00:19 +0000 ROA not before: Tue 09 Jan 2024 03:55:19 +0000 ROA not after: Tue 07 Jan 2025 04:00:19 +0000 asID: 139993 IP address blocks: 103.148.112.0/23 maxlen: 24 2001:df2:d080::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:78:0f:76:d3:4a:3d:ee:2b:6c:8b:ec:30:ba:63:92:6a:f0:09:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 03:55:19 2024 GMT Not After : Jan 7 04:00:19 2025 GMT Subject: CN=8D8B549DCC9CF1E0E4FFC38F656A45651F75FF9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:19:d3:ea:57:1d:e9:d1:e1:bd:d2:67:d6:cb: 00:ca:e8:1b:dc:8d:98:45:26:c9:2e:9b:cc:51:0f: fd:04:ba:cf:34:c2:26:5a:cb:6c:91:70:97:b4:05: d6:8f:8d:68:12:bc:14:89:51:50:f4:11:06:23:ab: b5:e2:38:11:3f:5d:19:23:c1:f8:62:72:03:36:d4: 92:ad:9c:91:dd:a6:6c:b9:7f:26:19:39:ba:67:42: d9:bc:b9:3a:43:22:48:d5:c7:26:bd:87:2b:d8:73: a3:bc:42:31:e6:5b:e1:8e:b3:ed:14:38:e7:f9:02: 76:47:18:36:2e:6e:bc:83:43:a9:c2:b0:9a:43:e7: eb:fd:fe:15:23:ff:a5:91:10:1c:c5:a5:b3:64:c5: ba:43:69:db:82:fe:13:85:84:14:ae:7b:a9:e9:25: 12:23:cc:9b:a6:c1:dc:73:8e:bc:e3:8b:34:35:af: eb:fe:35:3b:6e:db:4a:0c:7a:42:d9:a6:a0:53:f6: 65:3c:2d:ac:ea:13:2a:cb:87:cf:5d:87:4a:66:6b: 27:02:9f:d8:6a:9c:7f:7d:92:93:ea:64:7d:c4:7e: 24:de:4e:64:05:d6:85:5b:33:c7:1a:e3:cf:9a:63: 01:90:35:50:36:e3:40:fd:7b:c3:23:f4:54:ba:08: 31:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8B:54:9D:CC:9C:F1:E0:E4:FF:C3:8F:65:6A:45:65:1F:75:FF:9A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139993.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.112.0/23 IPv6: 2001:df2:d080::/48 Signature Algorithm: sha256WithRSAEncryption 22:71:1a:38:5b:7a:6e:7d:6c:b0:4b:30:ea:02:0b:34:c4:92: 7a:40:95:8e:4e:17:71:c3:2b:c3:b8:c1:04:5c:16:45:87:28: 8d:e8:99:36:9b:24:43:63:6a:e7:ee:4b:3b:9e:34:eb:14:6d: 40:20:7c:2d:06:1e:ed:f4:1d:63:c5:0b:6a:ed:48:c9:b7:4d: e4:43:c1:8f:54:2b:bc:71:4b:cb:22:f1:b8:08:f5:93:df:00: ca:97:25:37:14:fe:43:a3:79:5e:58:c7:0e:01:2b:ca:0c:b6: 76:3f:41:8d:58:ee:d7:a4:e8:98:b3:4b:11:68:41:f1:ca:e3: 7c:1a:e9:55:be:7c:32:86:56:2c:5d:de:ec:9e:f3:8b:12:64: d9:fb:38:5b:e6:c6:6d:d8:b5:77:f7:0d:58:a5:1b:21:aa:3e: c9:a4:c4:b6:9c:18:42:cb:71:aa:2d:38:4b:d8:9e:c3:b0:5c: bd:73:f5:0c:ab:0b:a2:02:f8:f1:39:02:ef:76:53:6a:3c:67: ef:16:53:e4:cf:c0:2e:a9:b1:6d:96:12:99:6f:50:9d:c4:73: a1:57:63:a1:15:eb:1a:b4:99:8d:77:c1:64:8b:a3:43:c8:de: bc:b3:15:5b:96:f1:ef:2e:44:cf:b9:6d:80:5b:48:ea:53:be: 6b:69:9b:cc -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUDHgPdtNKPe4rbIvsMLpjkmrwCeUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUxOVoX DTI1MDEwNzA0MDAxOVowMzExMC8GA1UEAxMoOEQ4QjU0OURDQzlDRjFFMEU0RkZD MzhGNjU2QTQ1NjUxRjc1RkY5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPIZ0+pXHenR4b3SZ9bLAMroG9yNmEUmyS6bzFEP/QS6zzTCJlrLbJFwl7QF 1o+NaBK8FIlRUPQRBiOrteI4ET9dGSPB+GJyAzbUkq2ckd2mbLl/Jhk5umdC2by5 OkMiSNXHJr2HK9hzo7xCMeZb4Y6z7RQ45/kCdkcYNi5uvINDqcKwmkPn6/3+FSP/ pZEQHMWls2TFukNp24L+E4WEFK57qeklEiPMm6bB3HOOvOOLNDWv6/41O27bSgx6 QtmmoFP2ZTwtrOoTKsuHz12HSmZrJwKf2Gqcf32Sk+pkfcR+JN5OZAXWhVszxxrj z5pjAZA1UDbjQP17wyP0VLoIMRUCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBSNi1Sd zJzx4OT/w49lakVlH3X/mjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTk5My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAWeUcDAPBAIAAjAJAwcAIAEN8tCAMA0GCSqGSIb3DQEBCwUAA4IB AQAicRo4W3pufWywSzDqAgs0xJJ6QJWOThdxwyvDuMEEXBZFhyiN6Jk2myRDY2rn 7ks7njTrFG1AIHwtBh7t9B1jxQtq7UjJt03kQ8GPVCu8cUvLIvG4CPWT3wDKlyU3 FP5Do3leWMcOASvKDLZ2P0GNWO7XpOiYs0sRaEHxyuN8GulVvnwyhlYsXd7snvOL EmTZ+zhb5sZt2LV39w1YpRshqj7JpMS2nBhCy3GqLThL2J7DsFy9c/UMqwuiAvjx OQLvdlNqPGfvFlPkz8AuqbFtlhKZb1CdxHOhV2OhFesatJmNd8Fki6NDyN68sxVb lvHvLkTPuW2AW0jqU75raZvM -----END CERTIFICATE-----Generated at Fri May 3 03:08:30 2024 by rpki-client on console-ams.rpki-client.org