$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149399.roa File: AS149399.roa (raw, json) Hash identifier: DcZDs9s1B08HoxCWrU4bk9xrA6j+11NmMfbvaKyj3bo= Subject key identifier: BC:8A:38:F1:E5:DC:66:C5:A0:FA:60:E1:D0:EC:1E:A6:EA:36:C8:CB Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3AB0E76772767D0BC392D250F47F5CDF68B3D63A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149399.roa Signing time: Fri 10 May 2024 10:00:00 +0000 ROA not before: Fri 10 May 2024 09:55:00 +0000 ROA not after: Fri 09 May 2025 10:00:00 +0000 asID: 149399 IP address blocks: 103.181.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b0:e7:67:72:76:7d:0b:c3:92:d2:50:f4:7f:5c:df:68:b3:d6:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 10 09:55:00 2024 GMT Not After : May 9 10:00:00 2025 GMT Subject: CN=BC8A38F1E5DC66C5A0FA60E1D0EC1EA6EA36C8CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:48:da:49:a3:2e:0a:9b:23:02:7b:a1:59:97: 4e:0a:5f:46:b3:d6:fe:5e:62:99:c8:4f:c4:b7:a2: 09:aa:7f:8e:56:55:52:aa:a5:63:c8:c6:da:9b:12: 0a:13:ca:43:b7:39:b4:45:c0:04:b3:f2:f5:18:bf: 3d:5e:c5:00:bc:76:05:6f:fe:2e:d2:eb:89:ef:ca: 6f:86:8f:c2:50:6a:26:fb:d6:8e:49:28:b4:2b:78: 2f:e6:d8:47:9b:fe:b8:a3:fc:4c:ca:16:70:82:39: e3:3c:e6:a4:3e:c2:f8:b7:64:3e:4d:16:50:3e:a4: 88:dd:31:90:bc:c4:38:c4:d2:a9:a5:c9:ed:b8:7e: 4c:75:44:b0:13:03:1d:44:d8:fe:49:f7:61:04:f2: e1:b9:5a:6b:e9:a1:6d:05:b4:79:fa:d9:14:1f:d8: 16:db:3b:6c:fb:2e:58:15:9e:9d:d1:48:49:46:35: 23:65:fc:92:e9:14:52:a4:7b:de:dc:45:d5:46:0e: 3c:34:5e:d3:5a:46:ec:69:95:96:99:ba:85:07:0a: e8:d2:46:d5:78:b8:aa:f7:3d:b7:3f:5a:11:be:9c: 93:37:de:d8:d9:f9:0e:a3:42:d0:9d:d9:d5:33:1c: 6d:d4:0e:ab:46:64:0e:33:6c:0f:ee:46:74:80:9a: d1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:8A:38:F1:E5:DC:66:C5:A0:FA:60:E1:D0:EC:1E:A6:EA:36:C8:CB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149399.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.181.242.0/23 Signature Algorithm: sha256WithRSAEncryption 92:fe:e2:dd:7c:db:0b:a6:24:96:28:ec:af:b2:1e:e5:5e:f6: c1:b5:55:c0:7e:07:49:1c:a7:18:d8:13:b6:64:90:4c:67:1f: af:e6:7a:23:92:c0:ff:b8:b9:df:0b:a3:42:1a:1a:f7:5e:ba: 65:b1:05:c5:6a:2e:c5:ce:3b:d3:4e:f6:76:4d:25:f6:09:c4: 40:f7:72:83:67:40:24:57:53:5d:d4:3a:d8:34:9e:47:7e:cf: 8c:eb:f9:63:de:b2:cd:e3:1b:98:23:4a:27:a2:a0:a7:fd:dd: 15:ae:98:42:92:d2:a7:4d:38:4b:4a:d5:36:09:81:5f:f6:75: 2d:19:77:69:d1:33:79:a2:be:2a:b5:4b:41:5e:a9:29:57:8d: 34:ab:c5:ea:f0:13:76:e0:eb:59:54:32:ee:0b:c2:72:f1:9b: 71:93:fd:a5:fa:ad:7b:60:0f:58:5d:a1:50:f4:06:2c:3d:05: 02:ec:c1:58:f0:b3:75:68:5c:11:fb:49:c6:04:3e:a2:e7:8f: db:cf:ac:52:7c:bb:e8:52:3f:1f:fc:cd:e4:92:fe:35:4c:cb: 9e:38:c1:c3:c5:fa:bf:fc:52:14:59:e0:46:06:31:eb:37:e9: fd:a8:cf:21:f9:5e:e7:ef:3c:8e:ef:f6:00:8e:02:ca:dd:13: 56:cf:48:9f -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUOrDnZ3J2fQvDktJQ9H9c32iz1jowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUxMDA5NTUwMFoX DTI1MDUwOTEwMDAwMFowMzExMC8GA1UEAxMoQkM4QTM4RjFFNURDNjZDNUEwRkE2 MEUxRDBFQzFFQTZFQTM2QzhDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOVI2kmjLgqbIwJ7oVmXTgpfRrPW/l5imchPxLeiCap/jlZVUqqlY8jG2psS ChPKQ7c5tEXABLPy9Ri/PV7FALx2BW/+LtLrie/Kb4aPwlBqJvvWjkkotCt4L+bY R5v+uKP8TMoWcII54zzmpD7C+LdkPk0WUD6kiN0xkLzEOMTSqaXJ7bh+THVEsBMD HUTY/kn3YQTy4blaa+mhbQW0efrZFB/YFts7bPsuWBWendFISUY1I2X8kukUUqR7 3txF1UYOPDRe01pG7GmVlpm6hQcK6NJG1Xi4qvc9tz9aEb6ckzfe2Nn5DqNC0J3Z 1TMcbdQOq0ZkDjNsD+5GdICa0dsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBS8ijjx 5dxmxaD6YOHQ7B6m6jbIyzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTM5OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWe18jANBgkqhkiG9w0BAQsFAAOCAQEAkv7i3XzbC6Yklijsr7Ie 5V72wbVVwH4HSRynGNgTtmSQTGcfr+Z6I5LA/7i53wujQhoa9166ZbEFxWouxc47 0072dk0l9gnEQPdyg2dAJFdTXdQ62DSeR37PjOv5Y96yzeMbmCNKJ6Kgp/3dFa6Y QpLSp004S0rVNgmBX/Z1LRl3adEzeaK+KrVLQV6pKVeNNKvF6vATduDrWVQy7gvC cvGbcZP9pfqte2APWF2hUPQGLD0FAuzBWPCzdWhcEftJxgQ+oueP28+sUny76FI/ H/zN5JL+NUzLnjjBw8X6v/xSFFngRgYx6zfp/ajPIfle5+88ju/2AI4Cyt0TVs9I nw== -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:56 2024 by rpki-client on console-fra.rpki-client.org