$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149392.roa File: AS149392.roa (raw, json) Hash identifier: noczb0VpI25qzKNBLGHK6gQHAY85r/9ecdZKGir53gE= Subject key identifier: A7:92:8D:31:8B:2D:9B:AD:42:BD:09:84:52:DB:87:25:27:C0:05:FD Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6E2D9A48E9D9EEBA1C26983E3544BFD78EEB5E24 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149392.roa Signing time: Fri 20 Dec 2024 07:00:00 +0000 ROA not before: Fri 20 Dec 2024 06:55:00 +0000 ROA not after: Fri 19 Dec 2025 07:00:00 +0000 asID: 149392 IP address blocks: 103.181.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:2d:9a:48:e9:d9:ee:ba:1c:26:98:3e:35:44:bf:d7:8e:eb:5e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 20 06:55:00 2024 GMT Not After : Dec 19 07:00:00 2025 GMT Subject: CN=A7928D318B2D9BAD42BD098452DB872527C005FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:85:c0:9d:0f:3f:c0:38:73:39:00:94:32:12: c9:9d:6a:64:d1:0c:bc:bc:ca:3b:ee:3d:2e:eb:0c: 51:7b:75:50:ea:ea:37:6b:4e:dc:32:2d:ba:1a:0a: 51:e9:96:3b:ca:cb:9a:56:75:f9:f3:92:5b:5b:9f: a0:e0:a1:33:61:17:e7:fa:13:da:b7:2e:59:79:ac: 64:06:f9:db:36:17:78:11:93:c6:4e:85:93:1f:a7: 39:71:1a:d8:dd:34:ea:51:9a:1f:7d:d1:17:8a:a0: 2c:9c:f5:99:4c:8c:8b:87:25:d8:08:a3:63:dd:b0: 4f:27:2c:c9:fc:33:17:a8:d0:0d:1e:c4:2c:39:46: 88:dd:c2:00:9f:b9:7d:e8:4c:61:1f:46:d2:95:83: 7a:e7:f4:0f:80:f1:e2:7b:4b:23:e0:b8:d4:88:0e: bf:a3:5b:6d:ab:48:69:7c:d1:91:78:6f:e9:dd:9b: a7:db:09:d5:c2:9d:1c:0e:78:71:fc:02:03:59:dc: c2:fa:15:b0:88:6e:f8:e2:a5:e5:3b:9a:66:10:0f: bd:a1:f6:95:06:df:6a:88:be:76:cd:77:66:0d:83: cf:84:26:3e:c9:b0:78:e5:11:d1:db:49:6e:5e:ee: 40:7f:51:76:69:80:f9:f7:e6:28:a4:53:cb:09:06: 88:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:92:8D:31:8B:2D:9B:AD:42:BD:09:84:52:DB:87:25:27:C0:05:FD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149392.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.181.78.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:c6:e6:11:75:96:cc:85:cb:bd:8a:fa:82:ee:54:4e:27:5e: 52:d9:f0:d0:49:c2:06:3f:94:64:96:e2:dd:10:23:c2:e7:a1: b2:c3:c9:37:b2:7d:3e:2c:83:b0:99:ac:a7:0a:50:a8:2e:45: 67:c1:82:b9:ce:f3:b6:7a:ce:f5:0c:fa:f2:8b:de:a7:0e:8e: 62:79:71:a4:62:9f:39:a2:0a:6b:98:c2:e1:28:f8:f2:2e:07: 37:ca:10:16:5f:95:2d:2b:93:8a:0f:7e:7f:ab:6f:9a:dd:36: b9:eb:a4:ea:e2:3a:63:5c:44:3a:89:09:22:1d:a4:aa:43:30: 3f:99:5a:6b:20:3c:03:a4:99:c7:21:3b:33:58:99:23:4f:e4: ee:d4:0d:be:8d:e9:82:c9:c5:49:a6:e1:30:61:d7:96:3c:e6: 80:a4:b1:0e:93:da:4d:b1:47:91:86:48:94:b3:b3:7e:8a:3a: 95:a3:0e:1e:6e:f6:7c:3b:e7:6c:31:32:e4:f0:f0:c9:be:1e: 93:3c:35:36:6c:32:e1:3c:ad:f9:2f:e5:c1:1c:8e:58:a7:65: c3:dd:d4:12:b2:96:e9:17:df:58:10:20:13:f8:e7:10:7a:fe: c1:b0:9f:7a:d9:85:53:a4:6c:41:97:4e:fa:88:5a:a4:6a:a7: e2:a0:a1:11 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUbi2aSOnZ7rocJpg+NUS/147rXiQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIyMDA2NTUwMFoX DTI1MTIxOTA3MDAwMFowMzExMC8GA1UEAxMoQTc5MjhEMzE4QjJEOUJBRDQyQkQw OTg0NTJEQjg3MjUyN0MwMDVGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL6FwJ0PP8A4czkAlDISyZ1qZNEMvLzKO+49LusMUXt1UOrqN2tO3DItuhoK UemWO8rLmlZ1+fOSW1ufoOChM2EX5/oT2rcuWXmsZAb52zYXeBGTxk6Fkx+nOXEa 2N006lGaH33RF4qgLJz1mUyMi4cl2AijY92wTycsyfwzF6jQDR7ELDlGiN3CAJ+5 fehMYR9G0pWDeuf0D4Dx4ntLI+C41IgOv6NbbatIaXzRkXhv6d2bp9sJ1cKdHA54 cfwCA1ncwvoVsIhu+OKl5TuaZhAPvaH2lQbfaoi+ds13Zg2Dz4QmPsmweOUR0dtJ bl7uQH9RdmmA+ffmKKRTywkGiG8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSnko0x iy2brUK9CYRS24clJ8AF/TAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTM5Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWe1TjANBgkqhkiG9w0BAQsFAAOCAQEAHcbmEXWWzIXLvYr6gu5U TideUtnw0EnCBj+UZJbi3RAjwuehssPJN7J9PiyDsJmspwpQqC5FZ8GCuc7ztnrO 9Qz68ovepw6OYnlxpGKfOaIKa5jC4Sj48i4HN8oQFl+VLSuTig9+f6tvmt02ueuk 6uI6Y1xEOokJIh2kqkMwP5laayA8A6SZxyE7M1iZI0/k7tQNvo3pgsnFSabhMGHX ljzmgKSxDpPaTbFHkYZIlLOzfoo6laMOHm72fDvnbDEy5PDwyb4ekzw1Nmwy4Tyt +S/lwRyOWKdlw93UErKW6RffWBAgE/jnEHr+wbCfetmFU6RsQZdO+ohapGqn4qCh EQ== -----END CERTIFICATE-----Generated at Sat Apr 5 06:22:39 2025 by rpki-client