$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149394.roa File: AS149394.roa (raw, json) Hash identifier: bO08wifyARemtog+xu9N9xnd72ClbdGeKKcG8MWhB+A= Subject key identifier: 10:5E:94:BC:4B:ED:91:9E:08:69:06:1E:83:78:90:9F:A5:17:C0:12 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2E3A850D33EFBD3934EDD226CA5471B47A600CB8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149394.roa Signing time: Tue 27 Jun 2023 06:37:57 +0000 ROA not before: Tue 27 Jun 2023 06:32:57 +0000 ROA not after: Tue 25 Jun 2024 06:37:57 +0000 asID: 149394 IP address blocks: 103.182.52.0/24 maxlen: 24 2001:df1:f540::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:3a:85:0d:33:ef:bd:39:34:ed:d2:26:ca:54:71:b4:7a:60:0c:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 27 06:32:57 2023 GMT Not After : Jun 25 06:37:57 2024 GMT Subject: CN=105E94BC4BED919E0869061E8378909FA517C012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7f:5f:47:cb:04:6c:67:a2:fe:be:06:a2:33: d2:1f:45:0c:19:80:b7:b2:00:f8:55:be:bd:ab:80: f6:1b:89:a7:c1:21:b5:ed:7f:cf:92:86:16:83:ed: 40:1d:fa:d5:96:b6:66:06:be:22:ae:3e:da:6c:40: 16:62:4e:2d:b8:46:73:86:0b:3f:47:fc:1c:38:9e: 9e:84:6d:2b:e8:4b:f1:ae:a4:84:ed:09:2c:26:87: 6f:cf:ff:9c:3a:51:72:c8:16:eb:62:96:ef:48:df: 1a:b4:9b:81:26:88:c2:1d:c9:cd:3f:0e:64:22:85: 53:c5:57:5d:5b:1e:97:fc:77:3f:e0:c3:03:d7:bc: f1:3e:d5:fc:7b:19:50:1d:ba:a3:76:ee:2b:bf:78: 83:57:b1:74:b6:a0:12:5a:0f:c0:83:eb:4a:a2:0b: 05:71:be:c1:b3:d1:c8:da:28:3a:dd:77:2b:38:3d: 47:6f:2a:9c:21:40:e8:c8:e1:78:c4:40:4f:e6:15: ab:5f:dc:c5:68:91:71:08:e6:ed:cc:f4:22:89:fa: df:67:34:92:86:06:c9:4a:65:3d:84:1c:72:1f:57: dd:b8:0f:89:fd:58:65:04:4e:e4:08:4f:04:65:bb: 35:b2:1c:5a:06:87:15:a4:92:a5:62:fe:66:61:00: 86:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5E:94:BC:4B:ED:91:9E:08:69:06:1E:83:78:90:9F:A5:17:C0:12 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149394.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.182.52.0/24 IPv6: 2001:df1:f540::/48 Signature Algorithm: sha256WithRSAEncryption 4e:5e:25:18:bc:53:33:67:be:77:9d:df:64:fa:55:e1:5b:e9: b2:68:bf:68:10:39:5c:69:4f:3a:4a:46:cc:5e:a8:3e:84:bd: 9a:b3:c7:38:53:e1:29:29:50:88:db:f2:dc:67:ff:2c:d6:6d: 54:20:4b:fe:4b:8b:b3:20:ce:68:cd:55:9e:c5:d0:ae:6e:d9: be:ec:f8:51:f2:cb:38:df:84:fe:d2:55:43:97:63:cb:4b:d1: f6:17:14:02:80:20:79:1a:ad:9d:df:a8:51:22:a2:a2:92:36: da:61:06:44:31:61:5a:be:f5:a6:a0:9a:77:25:c9:c5:fa:f4: d9:3a:fa:68:0b:bd:65:23:f9:38:18:64:7f:5a:4e:0c:1f:17: e1:d8:a2:ac:cb:13:14:f9:c2:42:7b:2b:3d:1b:3e:5f:b1:ac: b9:fe:df:1f:87:ec:92:16:92:c5:17:91:27:43:fd:3e:7f:74: 4c:8e:86:30:a5:25:61:c8:2d:0d:72:76:16:d9:b3:0b:66:f7: 8c:9e:d9:dd:d4:94:74:da:1a:de:ad:11:c4:f4:df:21:ec:7f: 21:24:68:c2:9b:f8:d4:37:59:24:34:b3:0c:a3:a9:21:d3:b1: 00:6e:80:96:d5:51:c4:6d:9c:fd:75:62:b3:95:0c:ca:00:0e: 6c:2a:e0:20 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIULjqFDTPvvTk07dImylRxtHpgDLgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYyNzA2MzI1N1oX DTI0MDYyNTA2Mzc1N1owMzExMC8GA1UEAxMoMTA1RTk0QkM0QkVEOTE5RTA4Njkw NjFFODM3ODkwOUZBNTE3QzAxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALN/X0fLBGxnov6+BqIz0h9FDBmAt7IA+FW+vauA9huJp8Ehte1/z5KGFoPt QB361Za2Zga+Iq4+2mxAFmJOLbhGc4YLP0f8HDienoRtK+hL8a6khO0JLCaHb8// nDpRcsgW62KW70jfGrSbgSaIwh3JzT8OZCKFU8VXXVsel/x3P+DDA9e88T7V/HsZ UB26o3buK794g1exdLagEloPwIPrSqILBXG+wbPRyNooOt13Kzg9R28qnCFA6Mjh eMRAT+YVq1/cxWiRcQjm7cz0Ion632c0koYGyUplPYQcch9X3bgPif1YZQRO5AhP BGW7NbIcWgaHFaSSpWL+ZmEAhhUCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBQQXpS8 S+2RnghpBh6DeJCfpRfAEjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTM5NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAGe2NDAPBAIAAjAJAwcAIAEN8fVAMA0GCSqGSIb3DQEBCwUAA4IB AQBOXiUYvFMzZ753nd9k+lXhW+myaL9oEDlcaU86SkbMXqg+hL2as8c4U+EpKVCI 2/LcZ/8s1m1UIEv+S4uzIM5ozVWexdCubtm+7PhR8ss434T+0lVDl2PLS9H2FxQC gCB5Gq2d36hRIqKikjbaYQZEMWFavvWmoJp3JcnF+vTZOvpoC71lI/k4GGR/Wk4M Hxfh2KKsyxMU+cJCeys9Gz5fsay5/t8fh+ySFpLFF5EnQ/0+f3RMjoYwpSVhyC0N cnYW2bMLZveMntnd1JR02hrerRHE9N8h7H8hJGjCm/jUN1kkNLMMo6kh07EAboCW 1VHEbZz9dWKzlQzKAA5sKuAg -----END CERTIFICATE-----Generated at Thu May 9 00:37:06 2024 by rpki-client on console-fra.rpki-client.org