$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140437.roa File: AS140437.roa (raw, json) Hash identifier: LRS5eEjAnv2nPnmE3tv0dGIHNUw+JrYD4dgOP0DktXg= Subject key identifier: FD:C9:DA:91:54:F5:BC:13:BB:95:C5:09:3D:89:E6:9E:1B:A2:B6:33 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4542ACBFB85D45EE4EC8E6DF93D5579094C6C861 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140437.roa Signing time: Tue 10 Dec 2024 05:00:05 +0000 ROA not before: Tue 10 Dec 2024 04:55:05 +0000 ROA not after: Tue 09 Dec 2025 05:00:05 +0000 asID: 140437 IP address blocks: 103.151.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:42:ac:bf:b8:5d:45:ee:4e:c8:e6:df:93:d5:57:90:94:c6:c8:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 10 04:55:05 2024 GMT Not After : Dec 9 05:00:05 2025 GMT Subject: CN=FDC9DA9154F5BC13BB95C5093D89E69E1BA2B633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ef:26:64:8b:95:f6:18:db:2a:d8:3f:db:bf: fe:05:67:26:24:7f:40:24:ae:fe:6f:ed:8c:a2:73: bc:b4:a2:82:8b:e1:8e:e3:0d:1b:ac:9c:cb:5e:6b: 4d:b3:3b:56:bf:c8:c2:93:da:73:01:2e:41:41:77: e8:a0:94:f8:d1:77:d0:64:c0:70:6d:8d:f5:dc:d7: 3a:fc:81:ec:a2:8e:35:c6:59:12:4b:c6:e1:00:74: 55:65:0e:fd:22:c7:25:47:49:7a:6a:15:4c:2a:9e: f2:a7:8a:41:11:6d:c4:e2:cb:d0:6d:81:8e:4e:91: f1:b2:73:a9:77:a0:5e:17:c2:43:6c:e9:5d:40:09: 67:27:2f:6a:77:16:5b:cb:2d:79:5d:59:2e:7b:d2: bb:47:4c:29:d5:13:3f:29:bb:69:37:83:c7:67:da: b8:2a:8f:45:37:d2:2e:c3:ff:90:7f:f7:e5:ba:ab: 88:67:0d:ca:1e:2c:ff:14:d4:cf:ec:62:65:fa:1a: 51:86:7d:70:ab:db:fd:fd:73:fe:09:de:85:63:5e: 73:3e:93:5d:6c:92:08:fb:a2:47:bc:75:66:10:ee: 93:78:2e:4e:e8:8d:53:01:f6:5d:1e:9f:65:f4:b7: f4:1f:7e:36:a8:18:9e:88:d4:a7:1e:c6:bb:88:0e: 15:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C9:DA:91:54:F5:BC:13:BB:95:C5:09:3D:89:E6:9E:1B:A2:B6:33 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.246.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:3a:00:22:e7:48:2d:f6:2f:a7:fb:4a:df:43:23:e9:dc:b9: bb:85:68:a5:b5:8f:24:6c:69:1e:07:08:70:3d:c6:cd:83:35: 5d:eb:d7:d6:89:b5:fc:18:8a:44:56:24:35:d9:57:f2:19:36: 96:b0:b0:58:eb:dd:d9:ce:aa:43:db:64:c8:2e:c7:bd:d5:24: c8:4b:24:71:4c:bf:b3:06:80:6e:66:7f:c7:cb:e9:53:6f:f4: e9:e2:15:69:77:3d:ee:72:44:90:85:fa:a4:5e:b8:9a:b1:b1: 0b:8e:fb:87:2c:3a:7d:79:01:c3:10:bd:85:bb:dd:b5:86:cf: ba:b5:fc:80:83:57:19:c3:c2:7b:c5:51:cb:27:c0:64:70:39: 4b:e3:2d:19:f3:84:a7:be:85:7c:f8:27:05:fc:c9:10:c2:ae: b0:e3:82:ce:ce:86:8b:e9:14:35:d3:a8:3a:89:f5:89:08:00: c9:d3:94:ec:1b:20:10:43:ce:c3:58:0a:0d:8a:88:04:10:51: 82:74:c4:62:cd:6d:3e:49:8b:5b:05:02:ab:bf:ad:ed:18:4e: e3:be:09:d9:dd:b9:20:e4:ed:6b:f5:7b:bb:d0:53:ec:f4:d2: 97:7c:bb:6a:cb:31:f3:a1:cf:b3:cf:19:de:dd:8f:70:59:b7: 91:87:71:ed -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIURUKsv7hdRe5OyObfk9VXkJTGyGEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUwNVoX DTI1MTIwOTA1MDAwNVowMzExMC8GA1UEAxMoRkRDOURBOTE1NEY1QkMxM0JCOTVD NTA5M0Q4OUU2OUUxQkEyQjYzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALrvJmSLlfYY2yrYP9u//gVnJiR/QCSu/m/tjKJzvLSigovhjuMNG6ycy15r TbM7Vr/IwpPacwEuQUF36KCU+NF30GTAcG2N9dzXOvyB7KKONcZZEkvG4QB0VWUO /SLHJUdJemoVTCqe8qeKQRFtxOLL0G2Bjk6R8bJzqXegXhfCQ2zpXUAJZycvancW W8steV1ZLnvSu0dMKdUTPym7aTeDx2fauCqPRTfSLsP/kH/35bqriGcNyh4s/xTU z+xiZfoaUYZ9cKvb/f1z/gnehWNecz6TXWySCPuiR7x1ZhDuk3guTuiNUwH2XR6f ZfS39B9+NqgYnojUpx7Gu4gOFdcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBT9ydqR VPW8E7uVxQk9ieaeG6K2MzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MDQzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWeX9jANBgkqhkiG9w0BAQsFAAOCAQEATDoAIudILfYvp/tK30Mj 6dy5u4VopbWPJGxpHgcIcD3GzYM1XevX1om1/BiKRFYkNdlX8hk2lrCwWOvd2c6q Q9tkyC7HvdUkyEskcUy/swaAbmZ/x8vpU2/06eIVaXc97nJEkIX6pF64mrGxC477 hyw6fXkBwxC9hbvdtYbPurX8gINXGcPCe8VRyyfAZHA5S+MtGfOEp76FfPgnBfzJ EMKusOOCzs6Gi+kUNdOoOon1iQgAydOU7BsgEEPOw1gKDYqIBBBRgnTEYs1tPkmL WwUCq7+t7RhO474J2d25IOTta/V7u9BT7PTSl3y7assx86HPs88Z3t2PcFm3kYdx 7Q== -----END CERTIFICATE-----Generated at Sat Apr 5 06:24:17 2025 by rpki-client