$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149413.roa File: AS149413.roa (raw, json) Hash identifier: mGrW/O6dG9VtxuBpukXa3XKhJ20UQnrr93ajeAelvxg= Subject key identifier: A3:6B:64:9F:9E:F9:EE:AB:91:49:57:59:BD:FE:30:CF:EB:45:F2:29 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4A88DD77D9DE779A5FE2E0ABB62E930C95A7E6E8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149413.roa Signing time: Thu 19 Oct 2023 06:45:36 +0000 ROA not before: Thu 19 Oct 2023 06:40:36 +0000 ROA not after: Thu 17 Oct 2024 06:45:36 +0000 asID: 149413 IP address blocks: 103.182.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:88:dd:77:d9:de:77:9a:5f:e2:e0:ab:b6:2e:93:0c:95:a7:e6:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 19 06:40:36 2023 GMT Not After : Oct 17 06:45:36 2024 GMT Subject: CN=A36B649F9EF9EEAB91495759BDFE30CFEB45F229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:aa:cb:39:ee:06:c4:61:86:f9:dc:fa:8f:9b: af:79:ab:08:8d:c8:4a:bc:af:2c:e4:c3:94:13:57: 67:94:95:4a:47:6f:4e:7b:a8:a2:6e:c0:0d:eb:64: 87:7d:0d:b0:09:40:64:2d:be:1b:65:01:fe:00:67: ed:a5:ce:6a:d5:b3:1a:a9:dc:3a:09:2b:17:5b:0e: 8b:50:e3:96:d7:92:37:50:21:b3:a7:24:f7:9b:25: 57:e7:5f:d6:55:3a:8b:aa:33:a7:5a:ab:fb:b1:d1: fe:40:fc:12:74:30:a6:2e:7b:fb:b7:e5:9b:d3:bd: 93:08:5b:44:91:fd:6e:08:20:43:f3:34:d8:74:2a: 29:6f:ff:b6:c1:ec:5e:70:7f:7d:60:76:6a:50:2f: 8a:98:7c:53:d2:6d:10:e2:2e:51:1f:7d:05:df:ca: c0:b9:c9:41:42:bf:c6:c6:08:e2:73:79:f5:5e:38: b5:08:4a:c0:9c:35:6a:12:96:a0:be:48:5c:6c:ee: fc:28:bc:ed:c2:51:5f:a9:bc:c2:e5:11:d4:9c:24: 03:a4:a2:a6:85:53:74:6d:74:90:b5:9c:36:ac:26: d2:83:f6:f0:50:6a:b8:05:50:9b:a9:35:d1:1f:98: 98:16:a1:68:74:0c:4e:ea:09:09:5a:4e:d3:30:4c: 67:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6B:64:9F:9E:F9:EE:AB:91:49:57:59:BD:FE:30:CF:EB:45:F2:29 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149413.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.182.249.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:2b:f1:19:bf:3b:30:d9:b1:b5:f2:80:9d:87:c1:e1:f4:87: cc:67:1d:5c:e8:d0:b2:13:b1:62:80:2d:7f:97:24:bb:59:ca: 8c:b9:a9:f3:9d:4d:60:b9:da:ba:26:ef:3e:d6:98:82:86:6e: 42:33:94:1f:28:4d:4e:53:33:41:e8:9b:3d:d1:12:b4:e6:c6: 6a:31:5c:8f:87:ec:5c:ab:70:50:ce:f5:ac:e2:66:0e:df:81: 16:48:70:21:49:6f:fd:d8:3d:f5:85:b9:da:08:df:a3:26:14: b1:61:d3:b3:7c:2f:c7:17:fd:12:78:a0:9e:84:5c:21:8c:4c: 72:30:7f:02:bc:02:d3:93:d3:05:5f:e4:d0:2e:eb:91:13:c3: da:4f:5d:f7:eb:44:90:bc:45:c1:8f:61:d6:78:62:b6:e7:92: aa:38:49:e0:d4:2a:28:43:fe:d9:98:bb:07:7d:92:e9:43:09: 27:e0:87:36:65:ed:32:9f:01:72:28:6a:47:a8:44:78:d3:43: 9b:9c:47:c1:1f:54:06:b3:be:2d:4e:2f:7f:0c:ea:56:b5:4b: 45:62:6f:a1:d4:9c:11:f9:ac:c1:1d:a3:e2:21:43:64:82:36: 53:a5:00:57:9d:db:93:f5:17:d7:d0:af:92:52:40:c7:fb:20: 0b:68:67:e2 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUSojdd9ned5pf4uCrti6TDJWn5ugwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAxOTA2NDAzNloX DTI0MTAxNzA2NDUzNlowMzExMC8GA1UEAxMoQTM2QjY0OUY5RUY5RUVBQjkxNDk1 NzU5QkRGRTMwQ0ZFQjQ1RjIyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPqqyznuBsRhhvnc+o+br3mrCI3ISryvLOTDlBNXZ5SVSkdvTnuoom7ADetk h30NsAlAZC2+G2UB/gBn7aXOatWzGqncOgkrF1sOi1DjlteSN1Ahs6ck95slV+df 1lU6i6ozp1qr+7HR/kD8EnQwpi57+7flm9O9kwhbRJH9bgggQ/M02HQqKW//tsHs XnB/fWB2alAviph8U9JtEOIuUR99Bd/KwLnJQUK/xsYI4nN59V44tQhKwJw1ahKW oL5IXGzu/Ci87cJRX6m8wuUR1JwkA6SipoVTdG10kLWcNqwm0oP28FBquAVQm6k1 0R+YmBahaHQMTuoJCVpO0zBMZycCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSja2Sf nvnuq5FJV1m9/jDP60XyKTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTQxMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGe2+TANBgkqhkiG9w0BAQsFAAOCAQEAeyvxGb87MNmxtfKAnYfB 4fSHzGcdXOjQshOxYoAtf5cku1nKjLmp851NYLnauibvPtaYgoZuQjOUHyhNTlMz QeibPdEStObGajFcj4fsXKtwUM71rOJmDt+BFkhwIUlv/dg99YW52gjfoyYUsWHT s3wvxxf9EnignoRcIYxMcjB/ArwC05PTBV/k0C7rkRPD2k9d9+tEkLxFwY9h1nhi tueSqjhJ4NQqKEP+2Zi7B32S6UMJJ+CHNmXtMp8BcihqR6hEeNNDm5xHwR9UBrO+ LU4vfwzqVrVLRWJvodScEfmswR2j4iFDZII2U6UAV53bk/UX19CvklJAx/sgC2hn 4g== -----END CERTIFICATE-----Generated at Wed May 8 09:50:39 2024 by rpki-client on console-fra.rpki-client.org