$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138897.roa File: AS138897.roa (raw, json) Hash identifier: e/dFvuHlPuPDEH+XrNO17sVyjvNb11WXOee2k4WyR6o= Subject key identifier: AE:F2:28:9D:07:BF:90:68:FF:FD:CA:9B:CE:1B:C7:FC:CF:45:8F:94 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0BCB4953D54E514FB4DD44E4BF2E5BE2E810D14E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138897.roa Signing time: Tue 17 Dec 2024 09:00:00 +0000 ROA not before: Tue 17 Dec 2024 08:55:00 +0000 ROA not after: Tue 16 Dec 2025 09:00:00 +0000 asID: 138897 IP address blocks: 103.140.22.0/24 maxlen: 24 2001:df0:a380::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:cb:49:53:d5:4e:51:4f:b4:dd:44:e4:bf:2e:5b:e2:e8:10:d1:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 17 08:55:00 2024 GMT Not After : Dec 16 09:00:00 2025 GMT Subject: CN=AEF2289D07BF9068FFFDCA9BCE1BC7FCCF458F94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2f:53:6c:e1:08:12:17:46:f9:98:68:5f:ec: 44:29:b8:e0:0e:01:8d:dd:2e:6e:1d:8b:af:6b:60: 42:09:c9:eb:f3:b6:55:41:a0:df:fc:ff:8e:b6:09: 5f:18:c0:98:b7:bf:d2:d9:a7:62:e8:be:1c:3b:c0: 8b:1c:f9:0c:a6:0d:ca:c3:ac:04:fe:39:3e:cc:4d: ae:cc:7c:cb:38:0e:09:e8:31:82:c2:a1:0e:33:31: 34:99:d1:21:82:e4:ae:e1:98:9d:8b:96:7f:da:75: 54:8c:ee:9d:dd:3e:14:4d:2d:fd:a2:91:9e:39:63: b3:08:f3:ee:36:e6:20:3b:95:85:0e:81:53:53:af: f1:82:b9:81:13:17:aa:01:f7:6f:e2:06:7a:cf:2a: 39:f7:6c:4f:10:9b:2b:38:1f:16:16:80:6c:92:21: 08:2f:dc:e7:70:13:ca:36:bf:e3:a3:71:74:d6:b9: c6:2c:82:51:11:c2:4e:69:bc:f8:42:ff:1d:e5:98: 82:dd:a4:92:ec:5a:1b:03:d3:31:f8:3f:69:a5:66: 06:03:e9:95:da:b0:8a:ba:d9:33:31:0b:1e:e1:a6: 75:f3:31:0a:c8:de:9c:7e:a7:f1:98:f4:51:b6:7c: 27:ed:ca:78:f4:c4:d0:be:88:0d:0b:3d:e0:6f:c4: 16:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F2:28:9D:07:BF:90:68:FF:FD:CA:9B:CE:1B:C7:FC:CF:45:8F:94 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138897.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.140.22.0/24 IPv6: 2001:df0:a380::/48 Signature Algorithm: sha256WithRSAEncryption 49:67:30:9f:f5:d4:23:8c:0f:75:41:ae:46:fb:6c:1a:a7:2e: ac:0a:b9:f1:19:be:35:87:b0:e9:13:34:82:ae:55:0b:c0:3d: dd:31:39:32:89:8a:52:4a:47:70:e9:e5:f3:2e:53:02:d6:0f: b4:44:f0:bf:31:93:3b:6a:74:9b:0a:cc:68:76:62:9b:ea:5e: 5c:29:87:86:c4:6d:95:e2:5f:20:46:f9:7a:ca:d2:24:d0:00: 6c:dc:53:41:01:a5:e6:8c:23:da:6d:ad:56:d8:98:7d:3c:6a: 21:29:41:82:c0:df:4d:cf:b3:1a:93:c9:70:07:7a:e0:cb:94: 67:f6:5b:5a:aa:e6:90:62:56:a8:2a:b8:e9:db:7e:38:26:44: 4f:e5:bf:b7:b0:c0:14:6e:30:d7:1c:64:e5:8b:3c:1e:1e:ba: 67:34:c8:19:99:50:c3:37:0c:e0:e6:6e:7d:4a:31:bd:8b:91: bb:ee:6e:b7:f7:41:b7:14:fd:a7:61:8b:81:6f:71:60:f0:c7: 66:44:33:a9:28:b8:c5:5e:e8:fc:da:b1:e1:68:31:65:df:f6: f9:93:27:f2:4e:bc:d3:ca:bc:ae:ab:2b:0a:ce:67:da:39:b6: a7:97:bd:9e:d9:06:77:80:77:f1:ac:eb:71:89:21:14:83:27: 4d:64:12:b3 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUC8tJU9VOUU+03UTkvy5b4ugQ0U4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxNzA4NTUwMFoX DTI1MTIxNjA5MDAwMFowMzExMC8GA1UEAxMoQUVGMjI4OUQwN0JGOTA2OEZGRkRD QTlCQ0UxQkM3RkNDRjQ1OEY5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALQvU2zhCBIXRvmYaF/sRCm44A4Bjd0ubh2Lr2tgQgnJ6/O2VUGg3/z/jrYJ XxjAmLe/0tmnYui+HDvAixz5DKYNysOsBP45PsxNrsx8yzgOCegxgsKhDjMxNJnR IYLkruGYnYuWf9p1VIzund0+FE0t/aKRnjljswjz7jbmIDuVhQ6BU1Ov8YK5gRMX qgH3b+IGes8qOfdsTxCbKzgfFhaAbJIhCC/c53ATyja/46NxdNa5xiyCURHCTmm8 +EL/HeWYgt2kkuxaGwPTMfg/aaVmBgPpldqwirrZMzELHuGmdfMxCsjenH6n8Zj0 UbZ8J+3KePTE0L6IDQs94G/EFj0CAwEAAaOCAeEwggHdMB0GA1UdDgQWBBSu8iid B7+QaP/9ypvOG8f8z0WPlDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODg5Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAGeMFjAPBAIAAjAJAwcAIAEN8KOAMA0GCSqGSIb3DQEBCwUAA4IB AQBJZzCf9dQjjA91Qa5G+2wapy6sCrnxGb41h7DpEzSCrlULwD3dMTkyiYpSSkdw 6eXzLlMC1g+0RPC/MZM7anSbCsxodmKb6l5cKYeGxG2V4l8gRvl6ytIk0ABs3FNB AaXmjCPaba1W2Jh9PGohKUGCwN9Nz7Mak8lwB3rgy5Rn9ltaquaQYlaoKrjp2344 JkRP5b+3sMAUbjDXHGTlizweHrpnNMgZmVDDNwzg5m59SjG9i5G77m6390G3FP2n YYuBb3Fg8MdmRDOpKLjFXuj82rHhaDFl3/b5kyfyTrzTyryuqysKzmfaObanl72e 2QZ3gHfxrOtxiSEUgydNZBKz -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:18 2025 by rpki-client on console.sobornost.net