$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149971.roa File: AS149971.roa (raw, json) Hash identifier: cLM+1+/OoX8RkerEjJrTOQ2qosX3uqxDjTlah6mWkJo= Subject key identifier: 01:EC:84:83:20:8A:DB:43:9E:B8:C5:50:32:B2:69:88:B9:29:03:8F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 03B3B605974F56526E76D21A81F9F0045155B8BC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149971.roa Signing time: Fri 04 Jul 2025 10:00:00 +0000 ROA not before: Fri 04 Jul 2025 09:55:00 +0000 ROA not after: Fri 03 Jul 2026 10:00:00 +0000 asID: 149971 IP address blocks: 2001:df2:b440::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 06:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:b3:b6:05:97:4f:56:52:6e:76:d2:1a:81:f9:f0:04:51:55:b8:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 4 09:55:00 2025 GMT Not After : Jul 3 10:00:00 2026 GMT Subject: CN=01EC8483208ADB439EB8C55032B26988B929038F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:52:d1:8d:92:ca:27:03:2d:3d:e3:13:6f:db: 8f:04:60:40:48:74:55:c7:af:2b:96:f3:45:13:e0: 3a:40:be:be:fe:25:c5:ad:4e:2d:db:49:b9:77:59: 05:b1:1e:30:7f:88:9d:29:bf:21:0e:9a:56:2e:5a: a8:6f:9b:75:79:8a:22:c5:b5:5d:6a:9d:6b:49:7f: b3:60:c6:fe:37:4d:1a:1a:94:46:ce:cb:a0:01:82: e5:d7:d5:dd:ba:fe:0c:32:82:82:51:8a:bf:a0:5c: f0:d8:08:19:9b:37:c3:77:34:7f:4f:59:30:1b:12: a2:51:5b:90:b0:cd:70:dd:ea:af:ad:b4:d9:03:f4: 12:41:93:5b:74:48:0c:5d:54:40:e5:f5:f4:31:3b: 71:e7:04:e6:cb:e8:4d:c4:55:33:1b:55:96:50:0e: 5b:6c:8a:b8:63:a3:01:ff:cd:d8:69:19:41:7d:fc: 8e:3d:2d:e3:b3:ec:ea:fa:72:d3:51:b3:df:4a:c3: 9a:16:b5:e5:46:aa:ed:cb:5b:b8:d1:58:17:ab:60: 9b:f9:2c:a1:c0:85:f5:12:de:a2:33:4f:4b:13:92: c9:1d:4d:b6:5a:8e:17:34:65:09:46:b9:f1:80:5d: c6:31:da:e0:4e:e0:39:cc:4f:d3:60:f8:b6:c2:8d: d8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EC:84:83:20:8A:DB:43:9E:B8:C5:50:32:B2:69:88:B9:29:03:8F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149971.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:b440::/48 Signature Algorithm: sha256WithRSAEncryption 21:36:bd:45:a8:8f:0e:e2:65:35:a6:64:e4:73:07:62:64:55: 26:dc:6d:03:bb:10:43:50:5f:ab:db:05:b0:12:66:f1:09:26: 21:42:ad:f7:f4:3c:2c:bf:fa:d6:74:f6:25:61:0e:63:25:71: ba:55:b4:8b:8e:70:d2:5d:b5:14:b8:33:ce:43:98:91:c4:92: d0:10:f8:33:d6:9b:5f:5f:40:24:ed:24:88:81:e7:76:2c:c1: ae:ab:bd:12:11:45:5a:af:c8:c0:0d:f3:c8:53:6b:8d:e5:79: a6:d0:56:b3:56:2a:75:41:76:58:84:d4:87:9d:4b:8c:98:75: 4b:ad:59:5c:20:5a:29:78:3c:35:9d:ea:d7:fb:96:21:a6:d9: c7:52:8f:f5:e5:9e:5e:75:ff:1b:e1:0e:88:10:92:a5:d1:d7: 04:62:6f:93:24:75:c5:f7:ca:a7:de:d0:8e:98:c1:c8:6c:0e: bb:1d:8c:5e:39:cc:7e:fd:14:aa:4a:f5:ff:7a:72:c4:2f:3b: 68:2c:a4:5d:48:57:18:27:a6:ae:80:2c:88:da:05:c9:36:f2: 33:27:3c:1e:39:d7:da:f1:60:c6:9c:81:f2:24:cc:dd:a6:9c: 35:2b:ba:2d:66:cd:40:dd:6c:5b:dd:b0:e4:5f:25:ae:35:f5: b5:22:02:88 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUA7O2BZdPVlJudtIagfnwBFFVuLwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcwNDA5NTUwMFoX DTI2MDcwMzEwMDAwMFowMzExMC8GA1UEAxMoMDFFQzg0ODMyMDhBREI0MzlFQjhD NTUwMzJCMjY5ODhCOTI5MDM4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMJS0Y2SyicDLT3jE2/bjwRgQEh0VcevK5bzRRPgOkC+vv4lxa1OLdtJuXdZ BbEeMH+InSm/IQ6aVi5aqG+bdXmKIsW1XWqda0l/s2DG/jdNGhqURs7LoAGC5dfV 3br+DDKCglGKv6Bc8NgIGZs3w3c0f09ZMBsSolFbkLDNcN3qr6202QP0EkGTW3RI DF1UQOX19DE7cecE5svoTcRVMxtVllAOW2yKuGOjAf/N2GkZQX38jj0t47Ps6vpy 01Gz30rDmha15Uaq7ctbuNFYF6tgm/ksocCF9RLeojNPSxOSyR1NtlqOFzRlCUa5 8YBdxjHa4E7gOcxP02D4tsKN2P0CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQB7ISD IIrbQ564xVAysmmIuSkDjzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTk3MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfK0QDANBgkqhkiG9w0BAQsFAAOCAQEAITa9RaiPDuJlNaZk 5HMHYmRVJtxtA7sQQ1Bfq9sFsBJm8QkmIUKt9/Q8LL/61nT2JWEOYyVxulW0i45w 0l21FLgzzkOYkcSS0BD4M9abX19AJO0kiIHndizBrqu9EhFFWq/IwA3zyFNrjeV5 ptBWs1YqdUF2WITUh51LjJh1S61ZXCBaKXg8NZ3q1/uWIabZx1KP9eWeXnX/G+EO iBCSpdHXBGJvkyR1xffKp97QjpjByGwOux2MXjnMfv0Uqkr1/3pyxC87aCykXUhX GCemroAsiNoFyTbyMyc8HjnX2vFgxpyB8iTM3aacNSu6LWbNQN1sW92w5F8lrjX1 tSICiA== -----END CERTIFICATE-----Generated at Mon Jul 21 07:25:56 2025 by rpki-client