$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139938.roa File: AS139938.roa (raw, json) Hash identifier: JCktbHfT2kRXzUrGXkG8Vf2IA8wWqEgpdO6BylfYIJc= Subject key identifier: 8D:24:A6:3F:77:1B:E5:D5:D7:1E:4D:DA:F1:56:D7:87:5D:31:23:22 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 022869852D02F0B1B06DB49921688D901A0297ED Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139938.roa Signing time: Fri 27 Dec 2024 06:00:00 +0000 ROA not before: Fri 27 Dec 2024 05:55:00 +0000 ROA not after: Fri 26 Dec 2025 06:00:00 +0000 asID: 139938 IP address blocks: 103.145.220.0/23 maxlen: 24 2001:df2:2c80::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:28:69:85:2d:02:f0:b1:b0:6d:b4:99:21:68:8d:90:1a:02:97:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 27 05:55:00 2024 GMT Not After : Dec 26 06:00:00 2025 GMT Subject: CN=8D24A63F771BE5D5D71E4DDAF156D7875D312322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9b:f3:c8:8e:95:2a:25:5b:10:85:1f:88:e0: 06:7b:e1:6d:05:82:45:e6:57:d0:8f:51:1c:49:1b: 6b:14:b6:c2:77:de:6f:7a:51:c9:85:29:db:7f:a1: 21:7d:67:bc:52:47:f4:fe:2a:67:01:24:e9:bc:e1: d1:c1:dc:44:84:9b:0f:55:fd:89:c1:08:d4:34:55: 19:97:e8:34:fd:51:92:ba:b6:86:43:51:2c:80:dc: 53:ea:18:41:72:17:0f:a6:32:62:c5:88:c8:0f:45: 35:5d:78:68:5b:01:76:70:90:11:ac:ee:ef:0c:5f: 8e:49:19:f4:06:e8:a9:d7:e1:a9:e9:5e:3e:ab:5e: f0:d7:50:6e:61:80:73:a4:e5:9f:3c:92:e7:f1:af: d9:1b:3b:d9:d7:fe:45:67:d8:0a:e7:a4:de:c3:55: 0d:55:48:84:1e:d7:75:4c:a6:8d:e2:13:23:d8:34: a5:7c:de:a6:e7:36:c1:6a:6d:73:d7:0b:27:9a:da: 7c:7a:a1:df:4e:5b:5f:af:7d:ec:27:6f:b4:20:18: 2f:c1:c9:d9:d1:a3:b7:e5:02:77:92:dd:7e:6b:71: 08:f7:76:af:e2:66:22:67:57:07:31:e2:24:15:84: dd:5e:8c:62:26:cd:e3:ca:84:f2:81:de:10:d8:7f: a4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:24:A6:3F:77:1B:E5:D5:D7:1E:4D:DA:F1:56:D7:87:5D:31:23:22 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.220.0/23 IPv6: 2001:df2:2c80::/48 Signature Algorithm: sha256WithRSAEncryption 88:e5:a7:8d:ed:9f:76:cf:d7:2e:eb:b1:8c:27:73:58:d7:58: 48:f6:12:d7:d9:a6:3d:41:a8:8f:77:72:43:29:da:7b:db:a4: 96:c9:27:92:7f:c4:68:c0:e3:9c:cc:9d:50:a0:3c:56:bc:73: 3c:53:8a:f1:28:91:13:04:f1:8d:21:59:4f:3c:50:d9:a3:e9: 5e:02:de:48:8e:a7:f6:25:67:99:ba:1c:cb:78:10:02:32:c4: 2b:5d:f2:1b:67:74:0b:bd:6d:b5:7c:c9:6f:60:ec:9f:05:ff: e6:4f:dd:74:57:b8:0c:d7:93:ee:11:be:dc:a6:a1:b3:3a:53: 6b:d9:da:a5:b5:5f:fa:f9:d2:cc:0d:61:36:25:ec:35:51:4f: 5d:0a:84:d3:32:00:0d:3b:44:d7:ce:c7:dd:cc:87:a3:47:22: c5:e7:b4:18:04:20:0a:60:9a:ea:88:0b:a7:39:6b:e1:78:56: f0:58:4a:88:01:59:99:a8:69:cd:7e:04:45:50:bc:2f:ef:08: 79:36:ca:13:5b:6e:6e:43:54:a3:95:4f:bc:fe:81:fc:59:dc: 31:b9:ba:db:52:a4:ac:cf:9e:ff:73:67:cd:0d:58:12:47:9b: 71:da:15:41:9a:dd:ae:13:34:ff:dc:68:95:65:44:79:ed:31: a3:56:3b:82 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUAihphS0C8LGwbbSZIWiNkBoCl+0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIyNzA1NTUwMFoX DTI1MTIyNjA2MDAwMFowMzExMC8GA1UEAxMoOEQyNEE2M0Y3NzFCRTVENUQ3MUU0 RERBRjE1NkQ3ODc1RDMxMjMyMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOCb88iOlSolWxCFH4jgBnvhbQWCReZX0I9RHEkbaxS2wnfeb3pRyYUp23+h IX1nvFJH9P4qZwEk6bzh0cHcRISbD1X9icEI1DRVGZfoNP1Rkrq2hkNRLIDcU+oY QXIXD6YyYsWIyA9FNV14aFsBdnCQEazu7wxfjkkZ9AboqdfhqelePqte8NdQbmGA c6TlnzyS5/Gv2Rs72df+RWfYCuek3sNVDVVIhB7XdUymjeITI9g0pXzepuc2wWpt c9cLJ5rafHqh305bX6997CdvtCAYL8HJ2dGjt+UCd5LdfmtxCPd2r+JmImdXBzHi JBWE3V6MYibN48qE8oHeENh/pHcCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBSNJKY/ dxvl1dceTdrxVteHXTEjIjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTkzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAWeR3DAPBAIAAjAJAwcAIAEN8iyAMA0GCSqGSIb3DQEBCwUAA4IB AQCI5aeN7Z92z9cu67GMJ3NY11hI9hLX2aY9QaiPd3JDKdp726SWySeSf8RowOOc zJ1QoDxWvHM8U4rxKJETBPGNIVlPPFDZo+leAt5Ijqf2JWeZuhzLeBACMsQrXfIb Z3QLvW21fMlvYOyfBf/mT910V7gM15PuEb7cpqGzOlNr2dqltV/6+dLMDWE2Jew1 UU9dCoTTMgANO0TXzsfdzIejRyLF57QYBCAKYJrqiAunOWvheFbwWEqIAVmZqGnN fgRFULwv7wh5NsoTW25uQ1SjlU+8/oH8WdwxubrbUqSsz57/c2fNDVgSR5tx2hVB mt2uEzT/3GiVZUR57TGjVjuC -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:18 2025 by rpki-client on console.sobornost.net