$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139385.roa File: AS139385.roa (raw, json) Hash identifier: eBDlNLN5t05CJkVIb2ID6bj94Hy9X8c0pbn2MGYlL/w= Subject key identifier: 5E:68:64:BF:3C:22:35:39:A9:2E:52:90:4D:74:01:82:30:0B:FD:DA Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2DAAD80F649E079C9C7692574498CB25C64CE188 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139385.roa Signing time: Tue 10 Dec 2024 05:00:19 +0000 ROA not before: Tue 10 Dec 2024 04:55:19 +0000 ROA not after: Tue 09 Dec 2025 05:00:19 +0000 asID: 139385 IP address blocks: 103.143.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:aa:d8:0f:64:9e:07:9c:9c:76:92:57:44:98:cb:25:c6:4c:e1:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 04:55:19 2024 GMT Not After : Dec 9 05:00:19 2025 GMT Subject: CN=5E6864BF3C223539A92E52904D740182300BFDDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:b4:95:e1:b5:69:e6:07:c8:2d:65:5d:87:24: df:8e:28:3b:b7:7c:6e:31:da:e5:62:3e:06:e0:f6: 47:af:7e:da:c9:f1:1d:7b:04:03:1c:39:b6:b2:6e: e5:38:ba:21:0d:e0:10:da:06:b2:93:b5:7e:72:69: 38:88:16:a2:27:75:5f:cd:2c:78:69:77:b4:cf:1a: 5e:d6:ce:0d:7d:a4:46:c8:c9:08:f2:93:84:44:11: b7:8f:c1:83:37:d9:48:52:74:d2:43:ae:b0:ec:91: df:c2:30:66:cc:6f:72:d6:14:cd:d3:81:a3:bc:09: 49:6b:02:a8:0a:3f:f5:ee:48:2d:6f:39:85:0c:51: 63:0b:aa:2f:91:74:7f:da:20:9e:f2:d3:a1:e4:5d: b8:3b:3f:9b:8f:0b:ae:ff:70:c8:ee:01:cf:4e:9c: 23:73:3d:76:a5:d3:4a:ce:2d:29:e2:b7:0b:6d:2a: 74:cb:ec:6b:e7:bf:b0:76:80:26:1a:b5:4f:84:43: 11:9f:e3:e8:8f:36:41:f4:06:b0:9c:b3:aa:a9:00: ab:dc:9b:a0:bb:a3:22:d8:56:3c:47:dd:f0:5f:65: 91:58:56:1e:29:c6:d2:e9:ec:5d:94:81:b2:97:bc: 8d:50:cf:f6:29:97:6e:1d:23:8b:42:69:02:85:07: 95:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:68:64:BF:3C:22:35:39:A9:2E:52:90:4D:74:01:82:30:0B:FD:DA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139385.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.2.0/24 Signature Algorithm: sha256WithRSAEncryption 70:3a:ea:da:b4:37:31:fa:63:36:10:0b:51:0c:33:26:a8:2b: c6:22:56:d7:f5:ce:07:d2:3e:fe:7d:6c:b0:c0:ba:2b:70:da: 62:0e:52:ea:eb:32:32:60:3d:1f:98:05:ad:18:34:5b:23:b3: 5e:9e:12:39:a0:09:61:59:f9:2c:d4:8d:f5:68:3c:25:9a:7c: 0b:3d:92:65:af:56:68:cf:38:cf:8e:f8:19:c9:50:a5:6c:95: 33:d1:66:03:e1:1b:c4:b3:04:1e:89:fc:42:2e:15:a5:d8:21: b2:b3:17:17:46:78:89:b6:a3:bb:be:8f:3b:92:e1:c7:ea:ae: ab:0d:97:88:64:39:3d:54:9e:86:b3:8f:65:f9:1f:5a:58:15: 5e:f1:7b:f8:2e:b1:b8:5e:b0:ef:fd:0e:0e:e0:ee:e9:7b:84: 83:18:7e:56:35:85:4d:f4:f5:6a:fa:f5:18:d8:a4:9a:ec:0e: cf:78:f6:0a:9d:92:60:56:b8:8f:24:56:24:c8:ac:3f:4e:5f: 88:e9:28:4e:bf:35:44:71:60:ca:68:26:41:1d:56:f5:38:e2: 01:1b:cc:b0:3e:a4:50:a8:56:2a:c6:96:28:35:fe:cf:ed:14: 33:a8:34:78:1f:7e:cc:a3:4c:f8:c4:8d:60:2b:0f:82:e6:fd: 9a:28:ce:ce -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIULarYD2SeB5ycdpJXRJjLJcZM4YgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUxOVoX DTI1MTIwOTA1MDAxOVowMzExMC8GA1UEAxMoNUU2ODY0QkYzQzIyMzUzOUE5MkU1 MjkwNEQ3NDAxODIzMDBCRkREQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPW0leG1aeYHyC1lXYck344oO7d8bjHa5WI+BuD2R69+2snxHXsEAxw5trJu 5Ti6IQ3gENoGspO1fnJpOIgWoid1X80seGl3tM8aXtbODX2kRsjJCPKThEQRt4/B gzfZSFJ00kOusOyR38IwZsxvctYUzdOBo7wJSWsCqAo/9e5ILW85hQxRYwuqL5F0 f9ognvLToeRduDs/m48Lrv9wyO4Bz06cI3M9dqXTSs4tKeK3C20qdMvsa+e/sHaA Jhq1T4RDEZ/j6I82QfQGsJyzqqkAq9yboLujIthWPEfd8F9lkVhWHinG0unsXZSB spe8jVDP9imXbh0ji0JpAoUHlcsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBReaGS/ PCI1OakuUpBNdAGCMAv92jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTM4NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGePAjANBgkqhkiG9w0BAQsFAAOCAQEAcDrq2rQ3MfpjNhALUQwz JqgrxiJW1/XOB9I+/n1ssMC6K3DaYg5S6usyMmA9H5gFrRg0WyOzXp4SOaAJYVn5 LNSN9Wg8JZp8Cz2SZa9WaM84z474GclQpWyVM9FmA+EbxLMEHon8Qi4VpdghsrMX F0Z4ibaju76PO5Lhx+quqw2XiGQ5PVSehrOPZfkfWlgVXvF7+C6xuF6w7/0ODuDu 6XuEgxh+VjWFTfT1avr1GNikmuwOz3j2Cp2SYFa4jyRWJMisP05fiOkoTr81RHFg ymgmQR1W9TjiARvMsD6kUKhWKsaWKDX+z+0UM6g0eB9+zKNM+MSNYCsPgub9mijO zg== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:18 2025 by rpki-client on console.sobornost.net