$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147079.roa File: AS147079.roa (raw, json) Hash identifier: zW/PqEUsF1awKVBtMi23cwrGTDoD63yOJEXfkxyUVu4= Subject key identifier: 34:6E:10:32:BF:AE:73:B9:59:C0:4F:36:72:EB:52:17:58:7D:BD:9D Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 59A02ED10624B82E93D4296535DC6D36D9ECACD5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147079.roa Signing time: Wed 31 Jan 2024 04:00:00 +0000 ROA not before: Wed 31 Jan 2024 03:55:00 +0000 ROA not after: Wed 29 Jan 2025 04:00:00 +0000 asID: 147079 IP address blocks: 2407:ed40::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:a0:2e:d1:06:24:b8:2e:93:d4:29:65:35:dc:6d:36:d9:ec:ac:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 31 03:55:00 2024 GMT Not After : Jan 29 04:00:00 2025 GMT Subject: CN=346E1032BFAE73B959C04F3672EB5217587DBD9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:94:94:ba:ed:e2:51:8c:b8:4a:5d:e6:0b:42: 21:1a:4e:be:d7:d1:62:c3:36:84:37:fb:66:cd:fd: 3c:b8:82:43:eb:11:ab:7a:a4:15:d6:b6:6e:99:24: 18:08:0f:2c:2c:e1:e9:0a:02:13:87:0d:ff:e6:86: fc:94:cc:82:82:5c:c5:94:08:35:6c:ec:72:7f:de: 5e:d4:8c:4e:e6:25:73:f3:6d:dc:5e:c0:95:65:cc: 36:2d:d5:04:58:19:24:01:b5:40:2b:2b:4b:a8:aa: 43:eb:6d:11:3b:9a:b4:03:d7:3d:c9:7e:54:d4:74: f2:68:be:3c:95:fa:c9:01:12:c5:e0:c4:b5:59:15: 40:08:cb:04:4c:77:1b:a7:6a:db:d6:0c:81:f5:3f: 1b:46:25:46:d7:9f:4a:7d:ed:1c:fb:c4:be:74:97: 82:99:02:4f:5d:1f:35:23:6b:85:fe:90:2b:8c:16: e9:34:9a:47:45:8c:5c:24:87:d8:a4:8d:f0:0a:09: ec:f8:d9:e5:13:66:27:cd:71:db:5d:ba:72:cf:8e: cf:82:39:d6:92:f1:a9:b3:ab:0f:75:5f:75:2f:3f: 4b:75:b8:e7:0e:0c:7e:85:ad:02:0e:da:81:56:2e: 70:66:98:01:f3:c9:f8:5f:95:b5:ed:35:be:87:5c: 80:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6E:10:32:BF:AE:73:B9:59:C0:4F:36:72:EB:52:17:58:7D:BD:9D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147079.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:ed40::/32 Signature Algorithm: sha256WithRSAEncryption 54:a3:0e:42:71:d4:16:b2:3e:f0:a4:63:b5:57:6f:94:83:7b: e1:88:db:9f:8e:d1:c8:69:cf:ab:c9:55:3b:a2:73:15:08:ed: 22:c1:d6:5e:48:8c:8b:63:6d:fe:07:b2:5a:ba:03:cb:4c:aa: 23:ad:63:d8:fd:dd:49:66:a6:ad:1d:28:9f:bd:d1:be:31:ae: 95:73:f8:df:b8:a3:9b:46:fd:e9:92:7d:4d:11:74:54:fd:1c: 0b:05:00:05:24:40:ba:b2:0d:c7:f7:c0:83:8b:2d:10:a7:f0: d3:9a:9e:2a:7e:20:9e:df:d8:d0:9b:43:b9:36:a7:9b:15:3a: ce:d6:b7:0c:21:a1:3d:c8:91:40:81:94:bf:af:30:cd:38:bb: b7:98:c4:56:14:b6:b4:6a:69:68:8d:fe:5b:66:87:9a:6e:8c: 52:5b:86:70:6b:2b:b0:7b:76:8d:47:e1:b5:d2:ec:2d:2f:e2: 50:66:3f:25:55:ee:f3:7d:5e:1c:cf:66:a8:e4:f3:a2:c5:17: 31:3a:12:d8:72:1b:c7:4d:e7:96:40:d7:47:fd:18:87:48:57: 59:88:6d:f3:6e:f5:77:d8:4d:0d:4f:6b:ba:fa:3b:c1:91:6d: 6c:34:e9:81:aa:21:bd:6c:ef:c2:7a:47:f4:45:eb:22:a1:1c: 99:17:c3:bf -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUWaAu0QYkuC6T1CllNdxtNtnsrNUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEzMTAzNTUwMFoX DTI1MDEyOTA0MDAwMFowMzExMC8GA1UEAxMoMzQ2RTEwMzJCRkFFNzNCOTU5QzA0 RjM2NzJFQjUyMTc1ODdEQkQ5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOUlLrt4lGMuEpd5gtCIRpOvtfRYsM2hDf7Zs39PLiCQ+sRq3qkFda2bpkk GAgPLCzh6QoCE4cN/+aG/JTMgoJcxZQINWzscn/eXtSMTuYlc/Nt3F7AlWXMNi3V BFgZJAG1QCsrS6iqQ+ttETuatAPXPcl+VNR08mi+PJX6yQESxeDEtVkVQAjLBEx3 G6dq29YMgfU/G0YlRtefSn3tHPvEvnSXgpkCT10fNSNrhf6QK4wW6TSaR0WMXCSH 2KSN8AoJ7PjZ5RNmJ81x2126cs+Oz4I51pLxqbOrD3VfdS8/S3W45w4MfoWtAg7a gVYucGaYAfPJ+F+Vte01vodcgBUCAwEAAaOCAdEwggHNMB0GA1UdDgQWBBQ0bhAy v65zuVnATzZy61IXWH29nTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0NzA3OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQH7UAwDQYJKoZIhvcNAQELBQADggEBAFSjDkJx1BayPvCkY7VX b5SDe+GI25+O0chpz6vJVTuicxUI7SLB1l5IjItjbf4Hslq6A8tMqiOtY9j93Ulm pq0dKJ+90b4xrpVz+N+4o5tG/emSfU0RdFT9HAsFAAUkQLqyDcf3wIOLLRCn8NOa nip+IJ7f2NCbQ7k2p5sVOs7WtwwhoT3IkUCBlL+vMM04u7eYxFYUtrRqaWiN/ltm h5pujFJbhnBrK7B7do1H4bXS7C0v4lBmPyVV7vN9XhzPZqjk86LFFzE6EthyG8dN 55ZA10f9GIdIV1mIbfNu9XfYTQ1Pa7r6O8GRbWw06YGqIb1s78J6R/RF6yKhHJkX w78= -----END CERTIFICATE-----Generated at Wed May 8 17:45:22 2024 by rpki-client on console-ams.rpki-client.org