$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138838.roa File: AS138838.roa (raw, json) Hash identifier: hc2qsh+Gqf8iuCzVgy4PzeHbILaP6HS7qLy8ItC/BtI= Subject key identifier: 53:D6:DF:32:EC:82:6D:D2:11:6A:4D:BB:EC:20:63:FB:49:F7:65:1A Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 65AB6A4361CB0119A0674006E9FE412099C040FD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138838.roa Signing time: Tue 10 Dec 2024 05:00:13 +0000 ROA not before: Tue 10 Dec 2024 04:55:13 +0000 ROA not after: Tue 09 Dec 2025 05:00:13 +0000 asID: 138838 IP address blocks: 103.138.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ab:6a:43:61:cb:01:19:a0:67:40:06:e9:fe:41:20:99:c0:40:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 04:55:13 2024 GMT Not After : Dec 9 05:00:13 2025 GMT Subject: CN=53D6DF32EC826DD2116A4DBBEC2063FB49F7651A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4b:b3:72:e4:04:fd:6c:8c:e0:2e:ff:68:ab: d8:6a:34:ab:8d:b6:35:f6:3b:ee:36:aa:dc:78:10: fb:c2:05:4f:84:c1:14:66:95:79:29:bc:9a:8b:9d: 16:48:73:53:e6:1d:99:cc:da:9e:46:99:98:29:c1: f1:71:fa:49:7a:f5:60:da:ae:e9:85:d7:08:11:97: 28:73:f0:a2:4a:7d:d6:41:4d:8f:4e:81:d1:4d:8c: 9a:89:f1:77:86:ce:63:9b:9a:21:43:87:17:90:50: 8d:4d:4b:91:73:cb:bb:c8:57:28:ce:f2:2b:b0:bb: 35:84:51:27:37:a6:d1:a4:d1:55:3c:60:88:04:36: 9b:0c:9c:b8:e7:2e:9e:ae:65:67:4a:39:17:23:cb: 51:f3:c9:1f:a5:1a:f0:ca:40:17:d8:0f:44:ad:38: 37:42:da:e4:7c:e9:4a:8d:21:20:e9:2d:fe:25:79: a9:15:08:5e:88:dd:15:14:42:29:64:b0:6a:fa:07: 42:55:35:44:e1:95:9e:69:9e:2a:ff:50:6f:4d:05: be:16:91:28:6a:ba:6e:7d:32:90:4a:c3:54:20:25: b2:64:2e:40:76:d6:cd:8e:30:93:a0:59:39:a1:72: 26:28:40:27:16:fb:fb:65:ea:3b:e0:54:03:e8:4d: e1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D6:DF:32:EC:82:6D:D2:11:6A:4D:BB:EC:20:63:FB:49:F7:65:1A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.204.0/23 Signature Algorithm: sha256WithRSAEncryption 76:00:ae:37:27:ee:4a:5c:b1:11:14:2d:d2:98:fc:aa:2b:fa: a2:41:28:6b:b6:c6:2d:2b:ac:ab:a3:8c:50:4c:b7:9b:3d:68: 4e:e3:87:67:7b:f5:f4:2e:ae:d3:68:02:d6:24:32:55:bb:38: 7e:d9:c9:a7:03:10:28:38:e2:60:4f:27:b2:5d:38:0f:72:3f: f6:11:b3:b5:3d:8f:11:85:fa:36:ff:54:89:d8:68:f0:f4:98: c1:a0:09:0f:55:2d:4f:7c:04:c8:f3:5e:2c:ed:39:45:89:3a: 92:b0:ea:6a:de:4a:42:97:1d:8c:37:15:51:9e:5d:40:ad:0c: 0a:3f:af:3c:17:0b:02:0f:dc:63:4a:23:f4:64:23:8a:c7:37: 11:d2:d7:ad:9b:18:3f:74:a5:64:79:1f:99:85:50:c8:fc:50: a8:95:f6:17:7d:ee:1c:68:e9:1e:8b:e1:50:04:23:8c:29:04: 59:29:25:96:d3:16:6f:6d:dc:00:e5:93:34:3d:dd:9b:5f:2d: 7e:18:3a:57:49:4a:ca:6d:44:d3:63:5c:2f:03:83:8a:a4:c8: b5:07:41:f2:d1:20:70:1e:24:03:b7:d2:67:db:55:f9:19:16: 89:b2:d6:27:b8:aa:d0:af:6b:72:bd:63:9b:51:51:01:c6:2c: b4:e1:b8:39 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUZatqQ2HLARmgZ0AG6f5BIJnAQP0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUxM1oX DTI1MTIwOTA1MDAxM1owMzExMC8GA1UEAxMoNTNENkRGMzJFQzgyNkREMjExNkE0 REJCRUMyMDYzRkI0OUY3NjUxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOpLs3LkBP1sjOAu/2ir2Go0q422NfY77jaq3HgQ+8IFT4TBFGaVeSm8moud FkhzU+YdmczankaZmCnB8XH6SXr1YNqu6YXXCBGXKHPwokp91kFNj06B0U2Mmonx d4bOY5uaIUOHF5BQjU1LkXPLu8hXKM7yK7C7NYRRJzem0aTRVTxgiAQ2mwycuOcu nq5lZ0o5FyPLUfPJH6Ua8MpAF9gPRK04N0La5HzpSo0hIOkt/iV5qRUIXojdFRRC KWSwavoHQlU1ROGVnmmeKv9Qb00FvhaRKGq6bn0ykErDVCAlsmQuQHbWzY4wk6BZ OaFyJihAJxb7+2XqO+BUA+hN4b8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRT1t8y 7IJt0hFqTbvsIGP7SfdlGjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODgzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWeKzDANBgkqhkiG9w0BAQsFAAOCAQEAdgCuNyfuSlyxERQt0pj8 qiv6okEoa7bGLSusq6OMUEy3mz1oTuOHZ3v19C6u02gC1iQyVbs4ftnJpwMQKDji YE8nsl04D3I/9hGztT2PEYX6Nv9Uidho8PSYwaAJD1UtT3wEyPNeLO05RYk6krDq at5KQpcdjDcVUZ5dQK0MCj+vPBcLAg/cY0oj9GQjisc3EdLXrZsYP3SlZHkfmYVQ yPxQqJX2F33uHGjpHovhUAQjjCkEWSklltMWb23cAOWTND3dm18tfhg6V0lKym1E 02NcLwODiqTItQdB8tEgcB4kA7fSZ9tV+RkWibLWJ7iq0K9rcr1jm1FRAcYstOG4 OQ== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:18 2025 by rpki-client on console.sobornost.net