$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149359.roa File: AS149359.roa (raw, json) Hash identifier: JZulqXWz/k8lz7QutGG2f+6h+lXchAZdZZjjSPvoIFk= Subject key identifier: 30:56:C9:38:A5:94:BA:42:EA:68:45:4E:B0:95:B8:8F:C8:7C:F0:06 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 097650CC7980791F416B719D6A882E01C3D37C59 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149359.roa Signing time: Thu 14 Mar 2024 03:00:00 +0000 ROA not before: Thu 14 Mar 2024 02:55:00 +0000 ROA not after: Thu 13 Mar 2025 03:00:00 +0000 asID: 149359 IP address blocks: 103.180.118.0/23 maxlen: 24 103.215.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:76:50:cc:79:80:79:1f:41:6b:71:9d:6a:88:2e:01:c3:d3:7c:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 14 02:55:00 2024 GMT Not After : Mar 13 03:00:00 2025 GMT Subject: CN=3056C938A594BA42EA68454EB095B88FC87CF006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:95:76:f1:5f:5e:9d:98:cc:5a:bd:e5:62:a3: ad:b8:e8:b1:9c:54:66:f5:51:37:ba:d3:9d:1c:3d: d1:91:85:fa:a6:89:fa:78:ba:1e:76:cc:79:17:52: 17:b4:2e:79:3b:ca:29:d0:8b:40:69:e3:c8:2c:55: ca:8f:74:98:50:25:63:df:42:fb:8d:81:8b:f1:a0: a4:b0:11:b3:82:64:a4:3d:74:83:bc:96:9b:91:13: 02:cd:b0:a5:dc:34:72:0f:5b:50:23:6f:51:8e:e9: 5a:18:9a:af:f5:60:58:66:30:e4:82:4a:c4:c1:75: e9:92:25:1f:a4:a9:a0:cf:aa:87:7d:5a:85:57:f5: 7a:88:15:b0:d9:56:a0:e6:0c:91:fe:41:78:69:a2: 32:01:d3:11:64:b2:25:a1:65:49:56:2e:b1:c9:e8: 91:97:d2:5c:65:76:4f:e7:5a:59:e9:e6:7d:4b:be: 25:be:93:82:fb:08:b1:50:6b:1a:11:e8:40:69:dd: e0:dd:9b:ae:ca:90:dc:78:ef:f6:b9:68:88:53:0f: 81:3a:f3:e1:83:ef:1d:4b:9b:b5:90:ec:46:ac:6d: 66:fe:6a:36:f0:4d:1f:41:2b:32:dd:32:1f:51:c6: 95:20:88:b1:ae:2e:de:17:9f:65:fb:a9:6d:c4:12: 9f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:56:C9:38:A5:94:BA:42:EA:68:45:4E:B0:95:B8:8F:C8:7C:F0:06 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149359.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.180.118.0/23 103.215.71.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:b9:46:63:ec:5b:6e:88:ba:62:6f:b4:e5:37:35:04:bd:ad: c3:2c:79:6b:e8:3b:cd:73:db:b3:b1:f5:b6:0f:d2:fa:53:ea: 84:cf:f6:9f:d3:dd:41:f1:b3:53:5c:da:55:f1:78:78:05:32: d1:90:83:57:a5:10:c6:9e:da:6c:05:1f:8a:b1:78:ee:dc:dc: 41:e8:c2:49:6e:9d:fe:b6:f3:9e:58:bc:31:40:31:4c:ec:5d: ed:74:a0:96:e6:e4:dc:e8:67:3b:9c:6c:5c:da:b3:c6:21:82: d3:b1:5c:63:94:02:5e:aa:a9:a2:54:f0:7a:66:21:82:b3:49: 6f:d3:5b:73:16:9a:88:ac:bf:3f:81:cb:e5:01:ea:b0:59:27: 08:e1:84:43:08:7a:3d:a2:ce:59:f0:47:7c:8a:42:23:95:77: 4c:8f:f3:41:81:b0:d3:41:e8:0e:c7:1e:8b:24:58:7f:16:a0: c9:b8:56:66:8d:f9:9c:ba:9c:93:4b:bb:12:66:79:ba:92:e8: a3:81:0f:bb:fc:c7:33:b4:a7:39:47:ae:e3:66:4c:c8:bb:77: 10:43:e2:52:1e:97:ec:bb:20:43:bd:bf:02:4c:07:ff:c0:a1: e2:98:65:fb:3b:37:4c:ec:e4:8e:b7:3a:2b:59:46:54:bc:97: ca:8f:50:12 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUCXZQzHmAeR9Ba3GdaoguAcPTfFkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMxNDAyNTUwMFoX DTI1MDMxMzAzMDAwMFowMzExMC8GA1UEAxMoMzA1NkM5MzhBNTk0QkE0MkVBNjg0 NTRFQjA5NUI4OEZDODdDRjAwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAP+VdvFfXp2YzFq95WKjrbjosZxUZvVRN7rTnRw90ZGF+qaJ+ni6HnbMeRdS F7QueTvKKdCLQGnjyCxVyo90mFAlY99C+42Bi/GgpLARs4JkpD10g7yWm5ETAs2w pdw0cg9bUCNvUY7pWhiar/VgWGYw5IJKxMF16ZIlH6SpoM+qh31ahVf1eogVsNlW oOYMkf5BeGmiMgHTEWSyJaFlSVYuscnokZfSXGV2T+daWenmfUu+Jb6TgvsIsVBr GhHoQGnd4N2brsqQ3Hjv9rloiFMPgTrz4YPvHUubtZDsRqxtZv5qNvBNH0ErMt0y H1HGlSCIsa4u3hefZfupbcQSn5sCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBQwVsk4 pZS6QupoRU6wlbiPyHzwBjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTM1OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAWe0dgMEAGfXRzANBgkqhkiG9w0BAQsFAAOCAQEAX7lGY+xbboi6 Ym+05Tc1BL2twyx5a+g7zXPbs7H1tg/S+lPqhM/2n9PdQfGzU1zaVfF4eAUy0ZCD V6UQxp7abAUfirF47tzcQejCSW6d/rbznli8MUAxTOxd7XSglubk3OhnO5xsXNqz xiGC07FcY5QCXqqpolTwemYhgrNJb9NbcxaaiKy/P4HL5QHqsFknCOGEQwh6PaLO WfBHfIpCI5V3TI/zQYGw00HoDsceiyRYfxagybhWZo35nLqck0u7EmZ5upLoo4EP u/zHM7SnOUeu42ZMyLt3EEPiUh6X7LsgQ72/AkwH/8Ch4phl+zs3TOzkjrc6K1lG VLyXyo9QEg== -----END CERTIFICATE-----Generated at Wed May 8 10:06:53 2024 by rpki-client on console-ams.rpki-client.org