$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140030.roa File: AS140030.roa (raw, json) Hash identifier: QvfYZlaWcwBRCAzpowp9A85W3WLANgpVSjbch+iSFU4= Subject key identifier: 5D:D4:F1:46:4A:8F:7B:6C:B2:2D:1C:94:86:C7:8B:22:81:78:9C:DB Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5F70E871CA44269CA85EA9FD2F506CD06BD1B928 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140030.roa Signing time: Tue 10 Dec 2024 05:00:04 +0000 ROA not before: Tue 10 Dec 2024 04:55:04 +0000 ROA not after: Tue 09 Dec 2025 05:00:04 +0000 asID: 140030 IP address blocks: 103.149.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:70:e8:71:ca:44:26:9c:a8:5e:a9:fd:2f:50:6c:d0:6b:d1:b9:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 10 04:55:04 2024 GMT Not After : Dec 9 05:00:04 2025 GMT Subject: CN=5DD4F1464A8F7B6CB22D1C9486C78B2281789CDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:50:67:41:70:d5:66:e4:d7:10:f5:61:81:89: 41:22:8b:18:95:a0:38:d8:9a:74:0c:b0:1e:cc:b6: f7:94:32:2c:00:8f:53:80:cc:5a:04:22:42:27:19: 46:0b:c2:a2:4e:be:c1:39:06:49:8f:f1:57:a4:08: 3e:8f:78:46:7f:ea:3a:a6:25:53:eb:78:23:87:6b: 85:79:47:13:82:5e:8e:e5:c9:18:f0:48:67:bd:b1: e1:f8:70:a6:04:7c:8b:56:1d:f6:b8:3f:ac:0b:3a: e4:7f:b8:af:72:03:cc:7b:ee:3b:29:06:27:d4:4d: aa:23:49:ab:50:6a:e3:86:6d:08:42:65:51:12:69: ef:ea:76:b2:4a:8e:38:36:df:be:46:f5:ed:a1:bc: 29:65:2a:08:3a:2d:9d:54:c0:24:05:21:0e:74:c9: a4:87:46:2b:09:65:1f:a1:ab:5f:11:b1:91:71:11: 1f:e5:70:0e:b2:98:a9:86:58:e5:c0:e0:75:e6:df: 8f:6c:85:b9:0c:99:79:eb:d3:ff:f8:71:b8:46:55: fe:e3:33:8d:2e:64:66:ec:58:fc:72:0e:9b:c4:86: 10:22:b8:44:c3:11:54:84:de:23:cf:eb:5a:7d:02: 80:26:d6:db:70:7b:14:29:1e:08:04:76:b3:5f:34: 24:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D4:F1:46:4A:8F:7B:6C:B2:2D:1C:94:86:C7:8B:22:81:78:9C:DB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.203.0/24 Signature Algorithm: sha256WithRSAEncryption 66:7b:24:2d:87:0b:f6:41:68:9e:55:75:8c:f4:f6:dd:99:c7: 74:a2:00:5d:5d:72:2d:3b:02:e5:d7:b0:e9:56:d0:97:06:c8: d1:8b:bb:8a:03:19:cd:82:27:f2:a1:fb:a4:ca:37:23:80:60: 5f:5b:93:2a:e1:3a:a9:ac:b1:f3:e6:16:d7:e9:b2:5a:c5:2d: c7:62:03:18:4c:a0:74:fc:d7:a0:a0:bc:25:27:c9:5c:6f:fd: 32:c2:3b:b4:ea:47:58:43:8e:34:23:b0:84:e5:e2:b4:2c:6f: 34:e2:36:d8:db:40:7e:6d:66:31:f7:bf:ee:ea:02:e1:d3:a1: bc:d0:06:7b:5b:fc:7c:5f:69:e3:37:56:bb:65:d9:24:b6:ca: 79:a7:8e:1e:da:60:1a:f1:09:18:79:07:93:33:a3:02:69:a1: 88:ac:14:46:82:31:6f:e4:73:e3:68:b4:ba:1d:7d:77:42:62: 71:2d:1b:12:c9:78:4b:34:48:0e:dd:47:9c:4b:a0:54:9c:6f: d4:8a:33:d6:6c:fa:fb:e8:ff:d6:c7:b4:f6:67:7e:da:82:5e: 64:b5:7a:f2:2f:cb:16:c2:82:a4:e6:2a:d7:55:bc:10:ce:95: e4:1e:27:1e:54:b3:a6:db:f0:18:4f:3e:46:b7:9e:c5:ce:e7: d6:8d:7a:be -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUX3DoccpEJpyoXqn9L1Bs0GvRuSgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUwNFoX DTI1MTIwOTA1MDAwNFowMzExMC8GA1UEAxMoNURENEYxNDY0QThGN0I2Q0IyMkQx Qzk0ODZDNzhCMjI4MTc4OUNEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ9QZ0Fw1Wbk1xD1YYGJQSKLGJWgONiadAywHsy295QyLACPU4DMWgQiQicZ RgvCok6+wTkGSY/xV6QIPo94Rn/qOqYlU+t4I4drhXlHE4JejuXJGPBIZ72x4fhw pgR8i1Yd9rg/rAs65H+4r3IDzHvuOykGJ9RNqiNJq1Bq44ZtCEJlURJp7+p2skqO ODbfvkb17aG8KWUqCDotnVTAJAUhDnTJpIdGKwllH6GrXxGxkXERH+VwDrKYqYZY 5cDgdebfj2yFuQyZeevT//hxuEZV/uMzjS5kZuxY/HIOm8SGECK4RMMRVITeI8/r Wn0CgCbW23B7FCkeCAR2s180JIkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRd1PFG So97bLItHJSGx4sigXic2zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MDAzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeVyzANBgkqhkiG9w0BAQsFAAOCAQEAZnskLYcL9kFonlV1jPT2 3ZnHdKIAXV1yLTsC5dew6VbQlwbI0Yu7igMZzYIn8qH7pMo3I4BgX1uTKuE6qayx 8+YW1+myWsUtx2IDGEygdPzXoKC8JSfJXG/9MsI7tOpHWEOONCOwhOXitCxvNOI2 2NtAfm1mMfe/7uoC4dOhvNAGe1v8fF9p4zdWu2XZJLbKeaeOHtpgGvEJGHkHkzOj AmmhiKwURoIxb+Rz42i0uh19d0JicS0bEsl4SzRIDt1HnEugVJxv1Ioz1mz6++j/ 1se09md+2oJeZLV68i/LFsKCpOYq11W8EM6V5B4nHlSzptvwGE8+Rreexc7n1o16 vg== -----END CERTIFICATE-----Generated at Sat Apr 5 06:24:16 2025 by rpki-client