$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139428.roa File: AS139428.roa (raw, json) Hash identifier: /v+mAq7foOgZSrwx/a1AXx9LHvV3ekQwwgZNWbO/b0c= Subject key identifier: 3E:A6:E6:6B:74:81:4B:81:19:B3:42:5D:1E:D6:32:F6:D5:86:AA:7C Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0E410D7F51EF3F0BC3703D41974E9B8767FA9FFD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139428.roa Signing time: Wed 18 Dec 2024 10:00:00 +0000 ROA not before: Wed 18 Dec 2024 09:55:00 +0000 ROA not after: Wed 17 Dec 2025 10:00:00 +0000 asID: 139428 IP address blocks: 103.144.146.0/23 maxlen: 24 103.183.98.0/23 maxlen: 24 2001:df1:c680::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:41:0d:7f:51:ef:3f:0b:c3:70:3d:41:97:4e:9b:87:67:fa:9f:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 18 09:55:00 2024 GMT Not After : Dec 17 10:00:00 2025 GMT Subject: CN=3EA6E66B74814B8119B3425D1ED632F6D586AA7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:38:85:0c:eb:af:dc:94:20:4d:56:ec:fc:72: 4e:06:08:98:ef:58:30:5d:8e:78:db:38:5f:41:06: 60:be:9b:23:42:91:fb:ef:d2:c9:b2:50:13:3b:da: 76:74:84:28:f5:cb:21:35:b2:a3:b0:48:4e:1f:3a: e0:66:7d:8c:3d:64:33:3e:6f:66:73:50:37:7b:f9: 47:b7:97:ad:2c:c9:bb:60:8c:62:a8:00:da:f0:ff: c1:80:d0:b3:61:04:25:4f:a5:01:c0:39:98:42:93: 51:33:80:39:db:9e:98:44:31:94:22:cb:e9:38:60: d4:57:23:88:94:31:28:ed:fb:1a:f0:c6:ea:a4:4f: 56:ec:d0:ec:a4:e3:78:3b:e1:50:22:71:26:66:56: 9e:19:c7:ee:29:22:3f:fb:f5:74:09:bd:10:05:c1: 41:d1:2a:5d:d6:fe:00:97:ed:f7:04:e2:ff:a2:04: b5:52:e9:97:be:88:53:c4:6f:6a:f9:f9:62:a6:17: ab:3b:89:2d:68:98:d2:5b:fc:30:7c:51:69:c6:9f: 1c:2d:62:26:b0:36:9d:8b:1e:16:dc:d2:18:51:e9: 03:14:12:1d:6b:c1:31:5f:93:0c:ac:9b:11:5a:77: d8:e8:f2:d8:65:51:45:7f:03:83:12:0e:cc:06:d0: ea:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A6:E6:6B:74:81:4B:81:19:B3:42:5D:1E:D6:32:F6:D5:86:AA:7C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139428.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.146.0/23 103.183.98.0/23 IPv6: 2001:df1:c680::/48 Signature Algorithm: sha256WithRSAEncryption 25:4e:a9:02:23:4a:c4:a9:9f:e5:33:34:1c:1c:28:27:1a:09: da:aa:a9:88:71:8a:a0:74:5f:fd:aa:e3:b2:f7:d7:a5:15:e9: fb:06:f8:e2:81:cc:67:8a:be:25:d7:86:48:d6:3f:99:00:d9: 51:02:10:ef:11:aa:ba:a1:fc:67:35:19:9b:13:e5:60:17:17: e1:13:f2:95:06:b6:e6:5a:6b:0c:21:36:90:fd:d9:09:81:43: 77:2d:76:cd:17:2b:dd:4c:41:eb:41:47:21:7c:2c:08:92:a5: 25:4a:de:4f:d5:85:d9:39:b8:00:7a:a6:f7:c3:d3:ba:f7:4a: fd:5b:de:6b:53:8d:fe:cc:08:a3:5b:7e:b6:7f:9f:84:b5:cc: 45:cf:5e:a3:29:8f:3c:f2:e0:89:d4:1b:1b:00:16:9c:07:e0: 84:c1:1a:c4:6d:6a:eb:e9:b6:cc:05:72:d7:85:ae:0e:db:7c: 66:e0:6b:3d:fb:26:61:86:fb:3c:08:f4:40:54:c4:06:33:9b: 2b:22:d6:68:f8:ca:d0:b3:ac:30:ab:cb:99:a0:ff:00:6d:1f: b5:bb:90:9c:89:74:31:d9:97:6b:f9:5c:7a:0a:8e:0d:65:d1: 60:54:66:8c:81:3a:7c:84:a7:b5:e2:d1:e5:fc:6b:f1:25:69: 2f:1a:03:61 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUDkENf1HvPwvDcD1Bl06bh2f6n/0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxODA5NTUwMFoX DTI1MTIxNzEwMDAwMFowMzExMC8GA1UEAxMoM0VBNkU2NkI3NDgxNEI4MTE5QjM0 MjVEMUVENjMyRjZENTg2QUE3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOA4hQzrr9yUIE1W7PxyTgYImO9YMF2OeNs4X0EGYL6bI0KR++/SybJQEzva dnSEKPXLITWyo7BITh864GZ9jD1kMz5vZnNQN3v5R7eXrSzJu2CMYqgA2vD/wYDQ s2EEJU+lAcA5mEKTUTOAOduemEQxlCLL6Thg1FcjiJQxKO37GvDG6qRPVuzQ7KTj eDvhUCJxJmZWnhnH7ikiP/v1dAm9EAXBQdEqXdb+AJft9wTi/6IEtVLpl76IU8Rv avn5YqYXqzuJLWiY0lv8MHxRacafHC1iJrA2nYseFtzSGFHpAxQSHWvBMV+TDKyb EVp32Ojy2GVRRX8DgxIOzAbQ6i8CAwEAAaOCAecwggHjMB0GA1UdDgQWBBQ+puZr dIFLgRmzQl0e1jL21YaqfDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTQyOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQnMCUw EgQCAAEwDAMEAWeQkgMEAWe3YjAPBAIAAjAJAwcAIAEN8caAMA0GCSqGSIb3DQEB CwUAA4IBAQAlTqkCI0rEqZ/lMzQcHCgnGgnaqqmIcYqgdF/9quOy99elFen7Bvji gcxnir4l14ZI1j+ZANlRAhDvEaq6ofxnNRmbE+VgFxfhE/KVBrbmWmsMITaQ/dkJ gUN3LXbNFyvdTEHrQUchfCwIkqUlSt5P1YXZObgAeqb3w9O690r9W95rU43+zAij W362f5+EtcxFz16jKY888uCJ1BsbABacB+CEwRrEbWrr6bbMBXLXha4O23xm4Gs9 +yZhhvs8CPRAVMQGM5srItZo+MrQs6wwq8uZoP8AbR+1u5CciXQx2Zdr+Vx6Co4N ZdFgVGaMgTp8hKe14tHl/GvxJWkvGgNh -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:18 2025 by rpki-client on console.sobornost.net