$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149392.roa File: AS149392.roa (raw, json) Hash identifier: 5sAUVolr+5wSBzWu/c3FG3kXS1rP4S7Pfhe5sNVMUF4= Subject key identifier: 9F:67:D7:23:BB:50:F1:4F:18:3B:16:8D:BB:90:C8:9B:E6:56:07:BC Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1A4292A4A21D4732F7A74020222A985407E32722 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149392.roa Signing time: Fri 19 Jan 2024 07:00:00 +0000 ROA not before: Fri 19 Jan 2024 06:55:00 +0000 ROA not after: Fri 17 Jan 2025 07:00:00 +0000 asID: 149392 IP address blocks: 103.181.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:42:92:a4:a2:1d:47:32:f7:a7:40:20:22:2a:98:54:07:e3:27:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 19 06:55:00 2024 GMT Not After : Jan 17 07:00:00 2025 GMT Subject: CN=9F67D723BB50F14F183B168DBB90C89BE65607BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:80:2b:bd:10:5c:23:f3:c0:e3:73:63:da:d6: 7d:4b:cc:d4:49:32:3c:55:98:58:f2:37:2c:20:d2: 36:0a:e4:1b:f9:ac:4d:38:48:f4:ad:d1:e6:00:5c: d9:50:c3:1a:4d:b4:1a:3c:7e:2b:f5:70:07:e2:2d: b9:37:66:00:17:97:b6:2b:12:e4:e8:cd:19:56:37: e8:de:68:16:8b:4c:a5:52:1e:2e:9f:79:51:9d:27: f7:a4:d4:c6:94:b1:88:d1:f1:ef:05:d9:2f:4e:fd: 89:0a:16:b0:f0:aa:69:6a:32:0c:c7:09:da:12:f7: c8:e2:31:42:63:e1:5a:80:fb:5c:a8:6c:ae:1b:64: a0:2a:84:ba:02:df:cb:70:55:83:a9:09:08:cd:d3: 70:44:46:14:83:b1:31:4c:5d:bb:90:8e:27:41:e7: f8:cd:2a:03:c3:71:6d:ef:4f:61:f9:66:9f:36:38: 98:f2:ba:ad:13:c9:73:d4:78:fa:84:a2:29:79:b6: 44:cf:33:61:eb:1e:e2:13:8e:ca:21:f6:ee:bc:d3: 57:31:c3:c8:b9:43:54:f1:c7:30:9b:c0:0e:44:c1: da:5b:a8:5f:aa:91:5f:7f:9a:01:47:63:68:f7:a2: 4b:47:f1:51:85:06:6a:d6:e6:5b:8f:77:b0:e5:0d: 4e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:67:D7:23:BB:50:F1:4F:18:3B:16:8D:BB:90:C8:9B:E6:56:07:BC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149392.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.181.78.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:48:d5:34:3f:9c:8a:01:7f:28:2d:57:67:f7:97:f8:6f:41: 32:25:32:a0:fa:d3:1a:6a:d9:6e:27:23:48:75:1b:6f:29:04: b5:25:c1:f2:1d:5f:48:af:a6:1b:dc:2a:2c:06:cf:de:bd:bb: 15:81:04:0a:50:82:65:bc:9f:2a:da:b4:f5:27:be:02:87:11: 33:5f:7b:b8:0d:92:a5:04:8f:51:27:32:de:21:b9:9e:8d:64: 31:9d:8b:4b:54:72:97:7c:8d:cf:33:71:f7:86:bf:b7:a8:12: 33:7a:49:a6:64:ae:65:2d:0b:8c:ac:ef:f8:df:ec:61:89:71: 53:8f:47:a2:6c:b9:af:18:3a:84:50:7a:f6:eb:81:5e:00:28: cf:43:d0:95:87:38:c4:e7:24:29:1d:b8:f2:67:86:c1:ee:ed: 83:a5:4a:39:5f:f0:3c:fa:14:e9:ec:58:61:55:ed:fb:e9:c5: 87:d5:de:65:0d:23:e0:f9:c5:ec:7d:5a:d4:92:46:f3:59:2f: c6:84:93:fe:fa:da:7f:57:4c:49:3f:dc:9a:0f:72:20:e3:ff: 12:aa:bd:c5:d8:72:92:d1:a2:c8:8c:cf:cb:b4:ec:2f:af:89: b5:21:be:da:d2:50:e0:0d:ab:ad:85:6a:a5:b1:14:8e:2c:5a: 6e:5b:f0:1b -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUGkKSpKIdRzL3p0AgIiqYVAfjJyIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDExOTA2NTUwMFoX DTI1MDExNzA3MDAwMFowMzExMC8GA1UEAxMoOUY2N0Q3MjNCQjUwRjE0RjE4M0Ix NjhEQkI5MEM4OUJFNjU2MDdCQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANOAK70QXCPzwONzY9rWfUvM1EkyPFWYWPI3LCDSNgrkG/msTThI9K3R5gBc 2VDDGk20Gjx+K/VwB+ItuTdmABeXtisS5OjNGVY36N5oFotMpVIeLp95UZ0n96TU xpSxiNHx7wXZL079iQoWsPCqaWoyDMcJ2hL3yOIxQmPhWoD7XKhsrhtkoCqEugLf y3BVg6kJCM3TcERGFIOxMUxdu5COJ0Hn+M0qA8Nxbe9PYflmnzY4mPK6rRPJc9R4 +oSiKXm2RM8zYese4hOOyiH27rzTVzHDyLlDVPHHMJvADkTB2luoX6qRX3+aAUdj aPeiS0fxUYUGatbmW493sOUNTr8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSfZ9cj u1DxTxg7Fo27kMib5lYHvDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTM5Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWe1TjANBgkqhkiG9w0BAQsFAAOCAQEAjEjVND+cigF/KC1XZ/eX +G9BMiUyoPrTGmrZbicjSHUbbykEtSXB8h1fSK+mG9wqLAbP3r27FYEEClCCZbyf Ktq09Se+AocRM197uA2SpQSPUScy3iG5no1kMZ2LS1Ryl3yNzzNx94a/t6gSM3pJ pmSuZS0LjKzv+N/sYYlxU49Homy5rxg6hFB69uuBXgAoz0PQlYc4xOckKR248meG we7tg6VKOV/wPPoU6exYYVXt++nFh9XeZQ0j4PnF7H1a1JJG81kvxoST/vraf1dM ST/cmg9yIOP/Eqq9xdhyktGiyIzPy7TsL6+JtSG+2tJQ4A2rrYVqpbEUjixablvw Gw== -----END CERTIFICATE-----Generated at Wed May 8 07:45:27 2024 by rpki-client on console-ams.rpki-client.org