$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140389.roa File: AS140389.roa (raw, json) Hash identifier: k/qoXryjN4yTCQNZ/YK8rzAE3fmg9sWSsk/HGmPHAok= Subject key identifier: 01:94:58:84:A2:29:0F:30:5D:AC:51:47:9E:6C:6B:08:64:32:AE:15 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 232A0DC3A5C6A768FC01A5A9F8958E591AC1D31F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140389.roa Signing time: Thu 24 Aug 2023 06:23:29 +0000 ROA not before: Thu 24 Aug 2023 06:18:29 +0000 ROA not after: Thu 22 Aug 2024 06:23:29 +0000 asID: 140389 IP address blocks: 103.7.184.0/23 maxlen: 24 103.147.32.0/23 maxlen: 24 103.253.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:2a:0d:c3:a5:c6:a7:68:fc:01:a5:a9:f8:95:8e:59:1a:c1:d3:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 24 06:18:29 2023 GMT Not After : Aug 22 06:23:29 2024 GMT Subject: CN=01945884A2290F305DAC51479E6C6B086432AE15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d7:59:f6:10:25:57:52:54:f6:77:b2:06:df: a3:6b:b2:b5:17:71:0a:d7:52:f4:db:84:a1:02:75: 0f:2d:31:ab:9c:d3:7a:b5:0a:51:24:67:c7:b7:5f: 28:8e:9b:6f:4a:8b:1d:9a:71:b7:8c:f4:d6:a7:78: 19:05:3a:e4:e4:00:0e:7f:68:72:ee:85:d5:87:ba: 22:10:98:ec:b0:d3:e8:3c:3c:06:99:50:f2:6a:99: 1a:45:5c:ac:fe:31:d1:75:f0:96:28:8d:2c:29:2e: 66:48:5b:48:66:9a:64:f9:bd:74:7d:e2:40:e8:50: e2:59:57:0e:77:55:68:15:c1:f5:fd:d4:9e:41:5d: 3f:56:e7:71:7e:9c:d0:64:7c:bb:27:89:2d:8b:56: 39:9c:3a:0c:04:81:bf:b0:95:b4:ad:41:b7:78:f7: aa:34:9a:79:ab:79:17:8f:c9:42:98:47:10:81:56: 05:2e:83:81:b5:48:b0:b5:a6:37:24:55:f6:97:99: 96:36:06:9e:4e:7a:91:46:a6:44:1c:c2:7f:6f:25: 22:2b:6d:0f:f6:33:05:11:33:21:9b:eb:ae:00:66: 6d:f5:5e:d8:8d:64:77:30:45:df:6d:68:07:d8:c1: c9:62:79:ef:24:ec:f8:4f:02:98:f5:12:7f:eb:08: 44:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:94:58:84:A2:29:0F:30:5D:AC:51:47:9E:6C:6B:08:64:32:AE:15 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140389.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.7.184.0/23 103.147.32.0/23 103.253.244.0/23 Signature Algorithm: sha256WithRSAEncryption 07:06:80:d9:ba:7f:a0:61:44:45:cc:4b:24:2e:15:16:8a:df: b7:5d:78:5c:f0:04:58:33:fe:fb:54:66:29:b4:80:f7:65:f4: 2f:46:b7:8c:eb:60:62:57:17:c5:70:a1:c6:1a:8e:9c:c9:ab: fa:fd:4f:49:65:35:da:f7:b8:e4:1c:7b:65:e1:36:75:41:70: c8:a8:c0:4f:fe:3e:38:53:0c:8d:28:d6:cf:55:d1:cd:7b:08: be:d8:42:e4:b1:6a:83:6d:b0:5a:b4:e7:20:31:0a:08:b1:0c: 14:48:75:45:f6:b6:48:70:c0:d0:73:53:2c:af:6e:94:53:48: 0b:8e:10:14:0b:37:9c:d0:5a:08:40:46:42:4d:d7:58:eb:56: 4e:ad:88:6b:b1:ac:d2:23:f2:99:34:5a:46:fa:dd:ea:2d:ce: 86:04:24:ba:77:96:5a:e9:32:02:13:36:30:98:a8:39:6b:02: 61:2f:4f:93:16:f6:34:83:dc:4c:3d:08:31:6f:21:57:e8:68: 2c:8b:ba:cb:90:9e:f4:e3:72:3d:b5:1d:64:23:92:64:42:fb: a9:5a:ba:1f:54:1d:f1:16:d2:74:27:63:df:4c:bc:10:b0:3a: c0:81:54:8a:13:0c:f8:0e:ea:06:59:85:bd:c6:41:20:e4:4f: fa:a9:f5:e9 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUIyoNw6XGp2j8AaWp+JWOWRrB0x8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgyNDA2MTgyOVoX DTI0MDgyMjA2MjMyOVowMzExMC8GA1UEAxMoMDE5NDU4ODRBMjI5MEYzMDVEQUM1 MTQ3OUU2QzZCMDg2NDMyQUUxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALnXWfYQJVdSVPZ3sgbfo2uytRdxCtdS9NuEoQJ1Dy0xq5zTerUKUSRnx7df KI6bb0qLHZpxt4z01qd4GQU65OQADn9ocu6F1Ye6IhCY7LDT6Dw8BplQ8mqZGkVc rP4x0XXwliiNLCkuZkhbSGaaZPm9dH3iQOhQ4llXDndVaBXB9f3UnkFdP1bncX6c 0GR8uyeJLYtWOZw6DASBv7CVtK1Bt3j3qjSaeat5F4/JQphHEIFWBS6DgbVIsLWm NyRV9peZljYGnk56kUamRBzCf28lIittD/YzBREzIZvrrgBmbfVe2I1kdzBF321o B9jByWJ57yTs+E8CmPUSf+sIRDsCAwEAAaOCAdwwggHYMB0GA1UdDgQWBBQBlFiE oikPMF2sUUeebGsIZDKuFTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MDM4OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBow GAQCAAEwEgMEAWcHuAMEAWeTIAMEAWf99DANBgkqhkiG9w0BAQsFAAOCAQEABwaA 2bp/oGFERcxLJC4VForft114XPAEWDP++1RmKbSA92X0L0a3jOtgYlcXxXChxhqO nMmr+v1PSWU12ve45Bx7ZeE2dUFwyKjAT/4+OFMMjSjWz1XRzXsIvthC5LFqg22w WrTnIDEKCLEMFEh1Rfa2SHDA0HNTLK9ulFNIC44QFAs3nNBaCEBGQk3XWOtWTq2I a7Gs0iPymTRaRvrd6i3OhgQkuneWWukyAhM2MJioOWsCYS9Pkxb2NIPcTD0IMW8h V+hoLIu6y5Ce9ONyPbUdZCOSZEL7qVq6H1Qd8RbSdCdj30y8ELA6wIFUihMM+A7q BlmFvcZBIORP+qn16Q== -----END CERTIFICATE-----Generated at Wed May 8 17:45:22 2024 by rpki-client on console-ams.rpki-client.org