$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149394.roa File: AS149394.roa (raw, json) Hash identifier: 6swllzJHVPLjprxO/nvXoq31PuNsTzjm4LTmYlfq+8E= Subject key identifier: C8:16:AF:1F:20:31:A3:B7:EF:29:5E:04:FF:92:B5:15:BB:75:3A:FF Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3E9487FBD2A1F5C9874E2031339BEC4828467FF7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149394.roa Signing time: Mon 20 May 2024 02:35:57 +0000 ROA not before: Mon 20 May 2024 02:30:57 +0000 ROA not after: Mon 19 May 2025 02:35:57 +0000 asID: 149394 IP address blocks: 103.182.52.0/24 maxlen: 24 103.182.53.0/24 maxlen: 24 2001:df1:f540::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:94:87:fb:d2:a1:f5:c9:87:4e:20:31:33:9b:ec:48:28:46:7f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 20 02:30:57 2024 GMT Not After : May 19 02:35:57 2025 GMT Subject: CN=C816AF1F2031A3B7EF295E04FF92B515BB753AFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:18:e0:15:94:59:62:00:2c:25:92:5a:87:17: 0d:d2:cf:86:ce:8a:23:f2:d9:24:39:94:5f:49:d6: 13:aa:46:19:b6:57:ed:70:a7:84:46:d1:90:7f:c5: 15:47:b5:8e:65:ed:75:48:ac:f7:16:10:6d:36:fc: b5:e2:d6:37:1a:75:54:8d:41:fd:8a:59:79:61:1d: d6:72:c4:85:3b:20:58:5e:b9:01:81:74:06:2f:9c: c8:11:fa:00:d2:dc:4d:ef:3b:5b:36:4c:45:47:e4: 11:47:81:80:74:02:05:dc:f8:37:16:3b:a0:e9:97: 91:66:b8:4e:55:09:15:a1:01:0d:1d:c9:d4:34:08: 38:cd:e4:ee:93:35:cc:bf:ca:54:d0:bd:d2:81:c1: f1:36:a4:fd:9e:b2:b3:65:fb:2d:73:ba:34:57:c8: c9:48:e2:1d:4d:02:7c:0e:79:00:26:a1:38:63:cf: 2e:6c:8a:18:7c:8a:24:f4:19:09:b3:11:a6:16:3a: 1d:b3:db:bf:6c:e0:cf:ff:52:f1:f1:67:d9:ea:13: cb:5a:a7:3f:02:ab:2d:31:9d:41:ad:d2:a0:66:40: 62:20:a9:d5:36:d0:93:ff:3a:67:90:e0:71:25:41: e4:fc:40:c1:1b:2d:77:3d:3c:47:22:3f:0d:30:f1: d3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:16:AF:1F:20:31:A3:B7:EF:29:5E:04:FF:92:B5:15:BB:75:3A:FF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149394.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.182.52.0/23 IPv6: 2001:df1:f540::/48 Signature Algorithm: sha256WithRSAEncryption 16:91:9e:24:87:d8:ed:cf:c3:09:0c:b2:ce:17:bc:bc:52:cb: b6:22:4f:9b:07:67:88:a5:79:af:0f:1c:6b:07:22:c6:e9:3c: 2e:da:80:c5:e3:ee:89:0c:c9:22:33:00:d7:06:41:3f:f0:f5: 7e:c6:8a:0d:f3:10:28:e7:85:12:a8:ac:33:c6:78:31:ee:ee: 19:7c:90:0e:2b:bc:00:f5:0b:ab:16:d8:fa:23:7b:19:85:a3: 8c:43:2b:5c:cd:89:c7:b3:74:18:75:58:07:78:53:10:8c:3e: b8:23:5e:9e:e8:03:71:e4:02:28:31:29:95:5c:94:ba:15:fe: fc:ca:a2:eb:9c:94:4f:d7:58:82:23:08:ad:82:c8:12:bb:bf: 9b:a5:94:36:47:73:93:20:4f:80:46:50:0d:c1:ff:ac:ad:80: 42:80:1e:03:cf:52:a0:58:f3:dc:e4:e0:14:7b:87:c4:4b:fb: 94:6a:13:57:b6:90:fe:97:17:ba:b4:d6:61:31:4c:75:a3:5f: 10:97:5b:19:ef:e9:ab:84:03:c6:ec:dd:d9:f4:00:05:b8:5b: 85:1c:5b:60:91:5c:6a:bd:11:dd:de:e2:fc:5b:d3:3b:42:fa: 32:e0:5d:7a:33:38:8b:8e:67:c6:b8:a2:37:5a:4c:14:42:79: b7:bd:23:54 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUPpSH+9Kh9cmHTiAxM5vsSChGf/cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUyMDAyMzA1N1oX DTI1MDUxOTAyMzU1N1owMzExMC8GA1UEAxMoQzgxNkFGMUYyMDMxQTNCN0VGMjk1 RTA0RkY5MkI1MTVCQjc1M0FGRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0Y4BWUWWIALCWSWocXDdLPhs6KI/LZJDmUX0nWE6pGGbZX7XCnhEbRkH/F FUe1jmXtdUis9xYQbTb8teLWNxp1VI1B/YpZeWEd1nLEhTsgWF65AYF0Bi+cyBH6 ANLcTe87WzZMRUfkEUeBgHQCBdz4NxY7oOmXkWa4TlUJFaEBDR3J1DQIOM3k7pM1 zL/KVNC90oHB8Tak/Z6ys2X7LXO6NFfIyUjiHU0CfA55ACahOGPPLmyKGHyKJPQZ CbMRphY6HbPbv2zgz/9S8fFn2eoTy1qnPwKrLTGdQa3SoGZAYiCp1TbQk/86Z5Dg cSVB5PxAwRstdz08RyI/DTDx09UCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBTIFq8f IDGjt+8pXgT/krUVu3U6/zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTM5NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAWe2NDAPBAIAAjAJAwcAIAEN8fVAMA0GCSqGSIb3DQEBCwUAA4IB AQAWkZ4kh9jtz8MJDLLOF7y8Usu2Ik+bB2eIpXmvDxxrByLG6Twu2oDF4+6JDMki MwDXBkE/8PV+xooN8xAo54USqKwzxngx7u4ZfJAOK7wA9QurFtj6I3sZhaOMQytc zYnHs3QYdVgHeFMQjD64I16e6ANx5AIoMSmVXJS6Ff78yqLrnJRP11iCIwitgsgS u7+bpZQ2R3OTIE+ARlANwf+srYBCgB4Dz1KgWPPc5OAUe4fES/uUahNXtpD+lxe6 tNZhMUx1o18Ql1sZ7+mrhAPG7N3Z9AAFuFuFHFtgkVxqvRHd3uL8W9M7Qvoy4F16 MziLjmfGuKI3WkwUQnm3vSNU -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:48 2024 by rpki-client on console-ams.rpki-client.org