$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140389.roa File: AS140389.roa (raw, json) Hash identifier: hAZNLjoqIK5d4cE+v582ouJ5SKGNq3EtdKrrqkpEJY4= Subject key identifier: 2C:64:B2:7F:07:A3:C4:B9:5D:05:95:07:70:D9:B5:34:30:16:5E:98 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3C2CABB1698490A68F4FE53177307622D8697FD0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140389.roa Signing time: Thu 25 Jul 2024 07:00:00 +0000 ROA not before: Thu 25 Jul 2024 06:55:00 +0000 ROA not after: Thu 24 Jul 2025 07:00:00 +0000 asID: 140389 IP address blocks: 103.7.184.0/23 maxlen: 24 103.147.32.0/23 maxlen: 24 103.253.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:2c:ab:b1:69:84:90:a6:8f:4f:e5:31:77:30:76:22:d8:69:7f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 25 06:55:00 2024 GMT Not After : Jul 24 07:00:00 2025 GMT Subject: CN=2C64B27F07A3C4B95D05950770D9B53430165E98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1a:1b:27:64:66:6d:2b:80:d6:af:27:cc:37: 97:2a:d3:54:f1:36:b2:03:07:3f:02:6b:d1:94:e0: 7d:29:1b:8b:48:6e:fb:47:61:f4:79:a2:50:83:c5: 88:c8:d7:1e:c2:b3:52:1a:3e:4d:16:3c:c3:9c:36: 9c:1e:72:1e:a5:68:47:f7:fc:96:2f:04:88:9a:1d: 5a:fa:c0:f8:ec:19:a7:e1:be:b3:f4:a4:6c:dd:fd: 73:d1:af:0b:f6:72:b2:4e:e9:77:02:42:b3:af:3c: ce:69:70:03:d0:f4:ea:ce:ae:c5:f3:54:de:c7:3d: dd:ae:fd:3a:44:c0:d5:ab:dd:62:82:63:a1:34:e8: 20:19:c9:79:85:26:98:bb:8e:9c:6c:d3:51:47:c5: bd:71:4b:71:76:3d:20:e2:c3:1c:c2:be:08:62:a4: a6:15:c3:ec:63:0f:cd:f4:1d:f5:de:f0:57:c9:f6: bc:15:00:61:16:ec:8e:40:25:21:87:1f:b7:21:66: fd:f2:92:4f:57:85:c8:90:79:7f:fb:ab:9f:c4:04: 60:d5:f5:35:8f:1f:b5:59:8c:ea:a2:be:dd:0e:41: 25:85:93:ce:67:ed:ef:f9:47:7b:2c:66:74:c5:ce: 28:0a:88:ef:5a:c2:22:3e:7d:e5:ee:ea:92:a8:6d: 6a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:64:B2:7F:07:A3:C4:B9:5D:05:95:07:70:D9:B5:34:30:16:5E:98 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140389.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.7.184.0/23 103.147.32.0/23 103.253.244.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:d0:78:34:3e:a8:7d:6e:df:b2:eb:b7:eb:6f:81:32:19:9f: d1:10:25:19:c3:9d:3a:c9:a6:f4:93:2e:ea:eb:81:98:0d:84: 4b:d9:be:8a:92:e9:99:aa:b2:16:c8:6a:6c:4c:a1:81:15:66: bb:7e:12:32:f9:06:9d:ec:18:a2:e9:e7:07:ac:e5:d5:0d:c1: c3:18:f6:e1:f7:49:3b:3b:3a:23:b0:50:a4:15:8b:58:c6:f5: 3e:b7:4b:8a:83:13:96:b9:57:66:90:d8:c2:df:4f:82:61:00: 4b:bb:ae:6e:ec:a2:e2:c7:35:51:12:eb:bb:e9:e1:0e:ad:82: e5:12:11:7c:2e:cb:dd:1a:8d:ff:57:42:73:61:d5:58:9d:25: 5a:be:e7:c8:b4:2f:9f:ff:dd:43:86:b2:46:9d:26:f9:75:43: f0:2f:b5:c7:4d:7d:e5:07:de:a8:c4:9d:0e:d2:d2:7a:34:61: 03:2d:e8:1e:c7:96:62:00:34:39:1f:9d:1a:f0:6b:af:c0:b0: ef:60:c8:c5:6d:db:66:2c:75:74:2d:ec:bf:5b:e6:d4:24:75: c6:b3:77:e9:2d:a7:93:7a:82:14:fa:d0:3d:25:9b:cc:93:a4: 67:81:8c:39:43:21:bc:f2:01:31:3b:f2:3e:47:36:0b:58:45: f7:b5:d1:89 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUPCyrsWmEkKaPT+UxdzB2Ithpf9AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcyNTA2NTUwMFoX DTI1MDcyNDA3MDAwMFowMzExMC8GA1UEAxMoMkM2NEIyN0YwN0EzQzRCOTVEMDU5 NTA3NzBEOUI1MzQzMDE2NUU5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUaGydkZm0rgNavJ8w3lyrTVPE2sgMHPwJr0ZTgfSkbi0hu+0dh9HmiUIPF iMjXHsKzUho+TRY8w5w2nB5yHqVoR/f8li8EiJodWvrA+OwZp+G+s/SkbN39c9Gv C/Zysk7pdwJCs688zmlwA9D06s6uxfNU3sc93a79OkTA1avdYoJjoTToIBnJeYUm mLuOnGzTUUfFvXFLcXY9IOLDHMK+CGKkphXD7GMPzfQd9d7wV8n2vBUAYRbsjkAl IYcftyFm/fKST1eFyJB5f/urn8QEYNX1NY8ftVmM6qK+3Q5BJYWTzmft7/lHeyxm dMXOKAqI71rCIj595e7qkqhtaoECAwEAAaOCAdwwggHYMB0GA1UdDgQWBBQsZLJ/ B6PEuV0FlQdw2bU0MBZemDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MDM4OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBow GAQCAAEwEgMEAWcHuAMEAWeTIAMEAWf99DANBgkqhkiG9w0BAQsFAAOCAQEAXdB4 ND6ofW7fsuu362+BMhmf0RAlGcOdOsmm9JMu6uuBmA2ES9m+ipLpmaqyFshqbEyh gRVmu34SMvkGnewYounnB6zl1Q3Bwxj24fdJOzs6I7BQpBWLWMb1PrdLioMTlrlX ZpDYwt9PgmEAS7uubuyi4sc1URLru+nhDq2C5RIRfC7L3RqN/1dCc2HVWJ0lWr7n yLQvn//dQ4ayRp0m+XVD8C+1x0195QfeqMSdDtLSejRhAy3oHseWYgA0OR+dGvBr r8Cw72DIxW3bZix1dC3sv1vm1CR1xrN36S2nk3qCFPrQPSWbzJOkZ4GMOUMhvPIB MTvyPkc2C1hF97XRiQ== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:47 2024 by rpki-client on console-ams.rpki-client.org