$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38158.roa File: AS38158.roa (raw, json) Hash identifier: Gtga4eN9KOEB3U7zvjkoId6Tlz4XtjHAKAT8aq2z3N8= Subject key identifier: 5E:2D:0E:F0:86:8C:8E:8E:B9:29:A1:34:17:71:10:5E:8D:70:3F:78 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0E6E39F1C51F32D1140705FF9270F4DC280C6665 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38158.roa Signing time: Tue 10 Dec 2024 07:19:12 +0000 ROA not before: Tue 10 Dec 2024 07:14:12 +0000 ROA not after: Tue 09 Dec 2025 07:19:12 +0000 asID: 38158 IP address blocks: 103.91.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:6e:39:f1:c5:1f:32:d1:14:07:05:ff:92:70:f4:dc:28:0c:66:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 07:14:12 2024 GMT Not After : Dec 9 07:19:12 2025 GMT Subject: CN=5E2D0EF0868C8E8EB929A1341771105E8D703F78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5a:a1:2f:ce:7e:b7:ca:57:1d:2f:6a:bb:9a: f4:36:a6:4d:1c:07:d4:14:f6:1e:ca:7e:a2:17:21: 0c:9a:8a:8c:bc:34:ba:69:eb:7f:68:06:ff:60:b3: d2:fd:bf:d5:d1:d6:4d:24:ae:d3:4b:ab:d0:d3:83: 0a:70:4b:92:cf:b9:1b:83:d8:7e:6e:43:40:21:c1: 7e:43:82:a3:d5:c0:b7:ea:d0:e7:a6:75:63:e0:d9: ba:69:82:ec:d9:f0:34:c0:33:c5:5b:2f:2f:28:0a: 78:7e:79:df:f4:37:00:9b:3a:84:77:f5:d3:b6:44: c6:0e:80:36:54:29:2a:b0:af:73:e7:bb:93:33:93: ea:2c:34:a6:90:94:c4:60:57:31:ba:e6:54:f7:53: 75:3c:b4:20:22:f6:dc:43:4e:16:a9:7d:b5:36:55: e1:ef:d4:4b:94:c2:46:4a:b2:c2:1e:62:be:f8:2c: 4b:c0:8e:57:cd:53:89:ff:17:d7:ea:16:21:65:ea: 2b:09:5d:62:81:2a:8a:3c:b9:8f:d1:31:b5:37:55: 25:32:25:e3:54:53:d6:2d:92:64:3d:e2:64:53:ea: 7a:39:43:98:b5:6e:ad:fc:e8:13:e5:23:da:41:27: 3f:04:d5:9f:3f:fe:8e:e7:27:e5:d3:c7:4b:6b:59: 1e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2D:0E:F0:86:8C:8E:8E:B9:29:A1:34:17:71:10:5E:8D:70:3F:78 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38158.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.91.20.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:66:2d:a1:c2:3f:cf:80:c5:1c:65:62:50:d2:0e:bb:69:c4: a3:eb:c2:9c:86:7e:4a:40:cf:9a:0b:0d:26:96:19:64:a1:b4: d6:93:b8:f0:f6:23:d9:b2:c1:61:a3:9c:9b:7b:96:b4:96:fa: 86:f2:1b:35:04:6f:c8:71:8d:6a:14:73:81:43:d0:2a:88:be: fc:07:08:40:2e:0a:a7:6c:00:4f:87:ca:31:ce:36:78:cb:f2: f0:49:1c:aa:1a:9b:1f:54:a5:71:c7:75:cb:dc:8d:40:58:1f: 47:4d:45:5c:b4:4e:4b:4e:29:aa:4c:72:5b:be:a6:e2:31:c3: 2d:08:ad:e4:74:80:cd:b9:38:59:ba:86:10:34:6a:68:11:f0: 76:a9:4f:01:6f:15:4b:4a:73:8d:43:96:22:47:fd:11:68:25: 00:85:99:7a:b1:09:f6:09:b4:9f:84:e0:8f:c1:5a:25:da:8d: 15:db:a5:5e:be:9c:42:7b:6e:a6:b4:bc:08:ef:90:9d:63:39: b3:24:e5:cc:4c:81:57:04:d0:99:8a:ab:d6:c8:48:1a:c9:55: 90:fd:90:58:0c:d6:d4:5f:c8:cf:18:b9:a8:19:2b:da:6e:99: b5:0b:e3:b4:23:9e:c7:00:3a:3d:83:e2:e2:87:da:88:f5:21: c4:7e:18:a6 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUDm458cUfMtEUBwX/knD03CgMZmUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA3MTQxMloX DTI1MTIwOTA3MTkxMlowMzExMC8GA1UEAxMoNUUyRDBFRjA4NjhDOEU4RUI5MjlB MTM0MTc3MTEwNUU4RDcwM0Y3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALFaoS/OfrfKVx0varua9DamTRwH1BT2Hsp+ohchDJqKjLw0umnrf2gG/2Cz 0v2/1dHWTSSu00ur0NODCnBLks+5G4PYfm5DQCHBfkOCo9XAt+rQ56Z1Y+DZummC 7NnwNMAzxVsvLygKeH553/Q3AJs6hHf107ZExg6ANlQpKrCvc+e7kzOT6iw0ppCU xGBXMbrmVPdTdTy0ICL23ENOFql9tTZV4e/US5TCRkqywh5ivvgsS8COV81Tif8X 1+oWIWXqKwldYoEqijy5j9ExtTdVJTIl41RT1i2SZD3iZFPqejlDmLVurfzoE+Uj 2kEnPwTVnz/+jucn5dPHS2tZHiMCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBReLQ7w hoyOjrkpoTQXcRBejXA/eDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzM4MTU4LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ1sUMA0GCSqGSIb3DQEBCwUAA4IBAQA/Zi2hwj/PgMUcZWJQ0g67 acSj68Kchn5KQM+aCw0mlhlkobTWk7jw9iPZssFho5ybe5a0lvqG8hs1BG/IcY1q FHOBQ9AqiL78BwhALgqnbABPh8oxzjZ4y/LwSRyqGpsfVKVxx3XL3I1AWB9HTUVc tE5LTimqTHJbvqbiMcMtCK3kdIDNuThZuoYQNGpoEfB2qU8BbxVLSnONQ5YiR/0R aCUAhZl6sQn2CbSfhOCPwVol2o0V26VevpxCe26mtLwI75CdYzmzJOXMTIFXBNCZ iqvWyEgayVWQ/ZBYDNbUX8jPGLmoGSvabpm1C+O0I57HADo9g+Lih9qI9SHEfhim -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:20 2025 by rpki-client on console.sobornost.net