$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147139.roa File: AS147139.roa (raw, json) Hash identifier: IEaRomQuvpdGIj0zRyPTW8i5wxFPfBDJTVndAdCrt7M= Subject key identifier: E5:07:A8:DF:6D:45:E1:E1:94:BA:D1:C1:1E:93:E9:44:CA:80:3E:28 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 11BAE35B61421BE9DFF1B3C35BE61766D4D9D8BD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147139.roa Signing time: Mon 03 Jun 2024 03:59:58 +0000 ROA not before: Mon 03 Jun 2024 03:54:58 +0000 ROA not after: Mon 02 Jun 2025 03:59:58 +0000 asID: 147139 IP address blocks: 103.177.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ba:e3:5b:61:42:1b:e9:df:f1:b3:c3:5b:e6:17:66:d4:d9:d8:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 03:54:58 2024 GMT Not After : Jun 2 03:59:58 2025 GMT Subject: CN=E507A8DF6D45E1E194BAD1C11E93E944CA803E28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:38:c7:04:eb:85:b7:92:06:d3:5e:30:ec:56: 21:41:9a:cb:0e:07:e3:46:8b:64:32:26:95:af:1e: a4:2d:01:10:cb:1f:22:c6:80:fb:7c:54:81:b5:cf: 6e:cd:66:76:93:14:aa:37:3f:ca:0a:33:50:3a:62: 35:39:69:f5:a8:b4:7d:85:0b:5b:48:65:3a:02:ed: a4:7e:04:8e:d3:5e:c7:fb:a2:44:8f:c3:45:db:e5: e0:1b:25:32:3a:4a:4e:5d:bd:f8:03:b2:c6:bf:8c: 55:6c:04:e5:66:29:cf:89:58:a6:e2:03:6c:0f:24: c5:89:f4:10:66:9b:07:77:35:ed:28:c1:0f:13:9a: ac:8a:32:5f:7e:7d:66:86:f4:ed:77:45:ea:88:5e: 9b:96:b7:ea:6d:14:2b:93:07:3b:89:10:41:d6:5b: cb:ed:45:65:a9:a5:df:38:76:7b:76:eb:63:b1:b3: c2:64:0d:0b:d9:96:81:85:09:1a:cd:89:3b:88:7a: 70:b6:f1:9d:05:46:96:e5:6a:8a:8b:da:b5:80:eb: 2b:57:16:0b:9f:9b:18:f5:1f:ad:2a:bb:4a:28:28: bc:9f:86:2c:84:c9:bf:29:c5:80:29:55:c6:da:ed: 2a:03:76:ec:7e:99:6f:b3:c7:32:69:e3:3b:67:82: 72:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:07:A8:DF:6D:45:E1:E1:94:BA:D1:C1:1E:93:E9:44:CA:80:3E:28 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.20.0/23 Signature Algorithm: sha256WithRSAEncryption 90:45:81:a3:d6:e8:a0:8e:ec:27:8b:86:da:58:55:82:7f:15: 49:79:db:63:a9:e3:56:07:f7:88:43:65:be:3e:4a:6a:05:88: 34:7e:76:08:bd:da:e9:a2:0a:ac:c3:2d:51:4c:e4:90:37:9a: 6b:8e:0b:f9:32:97:5e:96:82:cd:b6:08:f7:d9:b0:96:71:92: b6:19:a9:b2:6c:8e:93:94:4b:cb:90:b6:8b:35:99:ea:09:5a: 83:71:41:81:f4:86:e9:3e:3c:4d:e6:7f:9a:7a:18:0a:5f:e3: cd:0b:ed:48:4d:85:08:f3:46:1c:2d:31:4b:98:88:83:1d:1a: c2:bf:f4:09:77:90:61:bb:c8:2a:55:d4:7d:e7:07:17:e6:f5: 16:e6:a0:b1:c3:ba:00:e3:ae:6d:2b:d6:42:be:df:d4:66:1a: ec:51:3e:88:cc:6a:03:ea:6b:2a:a5:4a:e9:de:b3:48:00:8a: fb:16:3f:ac:f5:75:37:2e:17:a3:c5:fd:66:c6:a4:af:4c:13: 0f:ce:bb:5e:20:6c:95:83:4c:76:5f:17:e5:2b:1d:02:d6:9e: 91:8d:8c:70:46:ec:9d:09:90:84:7b:32:dd:05:6e:44:f9:43: fc:10:28:f0:6a:bd:3e:7f:c4:b5:d0:5e:00:08:46:30:3e:5b: 52:13:6d:a2 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUEbrjW2FCG+nf8bPDW+YXZtTZ2L0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDYwMzAzNTQ1OFoX DTI1MDYwMjAzNTk1OFowMzExMC8GA1UEAxMoRTUwN0E4REY2RDQ1RTFFMTk0QkFE MUMxMUU5M0U5NDRDQTgwM0UyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMs4xwTrhbeSBtNeMOxWIUGayw4H40aLZDImla8epC0BEMsfIsaA+3xUgbXP bs1mdpMUqjc/ygozUDpiNTlp9ai0fYULW0hlOgLtpH4EjtNex/uiRI/DRdvl4Bsl MjpKTl29+AOyxr+MVWwE5WYpz4lYpuIDbA8kxYn0EGabB3c17SjBDxOarIoyX359 Zob07XdF6ohem5a36m0UK5MHO4kQQdZby+1FZaml3zh2e3brY7GzwmQNC9mWgYUJ Gs2JO4h6cLbxnQVGluVqiovatYDrK1cWC5+bGPUfrSq7SigovJ+GLITJvynFgClV xtrtKgN27H6Zb7PHMmnjO2eCclsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTlB6jf bUXh4ZS60cEek+lEyoA+KDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0NzEzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWexFDANBgkqhkiG9w0BAQsFAAOCAQEAkEWBo9booI7sJ4uG2lhV gn8VSXnbY6njVgf3iENlvj5KagWINH52CL3a6aIKrMMtUUzkkDeaa44L+TKXXpaC zbYI99mwlnGSthmpsmyOk5RLy5C2izWZ6glag3FBgfSG6T48TeZ/mnoYCl/jzQvt SE2FCPNGHC0xS5iIgx0awr/0CXeQYbvIKlXUfecHF+b1FuagscO6AOOubSvWQr7f 1GYa7FE+iMxqA+prKqVK6d6zSACK+xY/rPV1Ny4Xo8X9Zsakr0wTD867XiBslYNM dl8X5SsdAtaekY2McEbsnQmQhHsy3QVuRPlD/BAo8Gq9Pn/EtdBeAAhGMD5bUhNt og== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:48 2024 by rpki-client on console-ams.rpki-client.org