$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149676.roa File: AS149676.roa (raw, json) Hash identifier: mvR6NSJULHzOlcE9hhoZnHnqJ7QC5iRpIDJCO7qyDMs= Subject key identifier: 2B:79:9F:F9:3B:0D:AA:23:E3:87:AF:18:B5:E8:B9:75:41:4A:70:E1 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 096D04621A7BFF3A8E9D244B6EA0FB6EFE2176C2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149676.roa Signing time: Thu 14 Nov 2024 10:02:08 +0000 ROA not before: Thu 14 Nov 2024 09:57:08 +0000 ROA not after: Thu 13 Nov 2025 10:02:08 +0000 asID: 149676 IP address blocks: 2001:df1:cd40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:6d:04:62:1a:7b:ff:3a:8e:9d:24:4b:6e:a0:fb:6e:fe:21:76:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 14 09:57:08 2024 GMT Not After : Nov 13 10:02:08 2025 GMT Subject: CN=2B799FF93B0DAA23E387AF18B5E8B975414A70E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:57:2c:19:94:b1:39:0b:70:d0:99:5b:6f:52: e6:c1:c1:45:bd:e7:70:2c:69:31:b0:fc:86:7b:de: 68:1f:5a:1d:e5:78:0b:23:06:20:d8:35:3d:06:8e: f8:ad:34:1f:fe:88:ca:67:bd:22:9e:65:74:54:6b: e6:30:ea:e5:93:5c:45:6b:33:c1:ae:92:d9:8b:8d: af:41:0d:46:33:39:a5:27:3f:15:eb:5c:f1:86:de: 51:f0:d1:81:ce:cc:c4:6d:02:4f:1b:2b:e7:13:b1: 0c:be:0d:63:0b:f4:fb:eb:86:e4:8e:d0:96:27:38: 9c:77:e5:f8:3b:81:35:81:f0:5c:98:85:92:45:9d: 3f:39:8c:cc:0b:32:3f:60:9c:1c:51:a9:da:7e:69: 25:07:9d:d4:4e:5d:f6:1d:b7:52:d6:0d:3f:73:08: c6:92:02:96:d5:f4:9f:a0:4c:6a:8a:92:e0:7f:8e: 0d:72:f3:f5:6d:d4:14:a1:45:16:c4:7c:09:92:74: 15:6b:ca:3e:ce:1b:4d:5a:43:0c:e3:85:c6:67:2b: dc:e1:b0:8d:9d:75:f5:45:40:0a:00:2b:b5:1a:2c: c2:04:a3:64:01:18:e0:3d:ed:8c:1c:e7:a4:e5:3e: fb:55:aa:ba:56:4b:b1:93:96:ac:04:33:ac:75:d6: a3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:79:9F:F9:3B:0D:AA:23:E3:87:AF:18:B5:E8:B9:75:41:4A:70:E1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:cd40::/48 Signature Algorithm: sha256WithRSAEncryption 2c:09:c1:c3:51:94:44:ae:fe:3c:c5:c0:04:ea:00:d6:48:ab: f1:88:eb:83:8b:cd:43:d7:f2:6c:27:31:e7:85:c4:11:08:e0: c8:a2:c5:f2:71:c2:a1:51:6f:3c:aa:ea:16:d3:04:cc:18:ec: 46:c8:48:75:da:4a:29:d6:c0:c0:a9:5a:ce:2c:7c:ec:08:ea: c5:b1:77:f9:ce:78:d8:0a:e5:5c:69:06:4d:28:01:16:f8:6b: 38:35:60:74:7d:6d:01:7b:fd:66:f5:45:82:8a:b3:a4:c4:69: dc:d8:ec:c2:9f:30:23:72:aa:18:7a:e3:6e:21:f0:84:f7:d7: e5:79:2b:49:20:7b:4f:17:80:3f:f3:eb:96:bc:a8:bc:80:a1: c7:cb:2c:1c:2d:36:fc:c8:b7:45:da:b9:ff:28:a7:ed:35:50: 64:ad:b0:6a:e2:d7:7b:3d:cd:46:3d:2a:8a:16:9f:f3:99:fa: 7b:5a:3f:ce:5a:f1:65:ae:c9:57:ad:37:2f:32:35:46:ef:0d: 01:9b:a4:15:20:98:29:ed:a2:01:f7:83:9d:85:b8:2b:28:6a: 29:5e:8d:e0:6f:0c:25:fb:c5:fe:4f:81:38:b3:5f:ad:b9:1c: 60:15:a8:d2:86:c4:db:8d:28:8d:7f:0e:c1:04:aa:1d:00:bb: 28:0c:82:ce -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUCW0EYhp7/zqOnSRLbqD7bv4hdsIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTExNDA5NTcwOFoX DTI1MTExMzEwMDIwOFowMzExMC8GA1UEAxMoMkI3OTlGRjkzQjBEQUEyM0UzODdB RjE4QjVFOEI5NzU0MTRBNzBFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALpXLBmUsTkLcNCZW29S5sHBRb3ncCxpMbD8hnveaB9aHeV4CyMGINg1PQaO +K00H/6Iyme9Ip5ldFRr5jDq5ZNcRWszwa6S2YuNr0ENRjM5pSc/Fetc8YbeUfDR gc7MxG0CTxsr5xOxDL4NYwv0++uG5I7Qlic4nHfl+DuBNYHwXJiFkkWdPzmMzAsy P2CcHFGp2n5pJQed1E5d9h23UtYNP3MIxpICltX0n6BMaoqS4H+ODXLz9W3UFKFF FsR8CZJ0FWvKPs4bTVpDDOOFxmcr3OGwjZ119UVACgArtRoswgSjZAEY4D3tjBzn pOU++1WqulZLsZOWrAQzrHXWo88CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQreZ/5 Ow2qI+OHrxi16Ll1QUpw4TAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTY3Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfHNQDANBgkqhkiG9w0BAQsFAAOCAQEALAnBw1GURK7+PMXA BOoA1kir8Yjrg4vNQ9fybCcx54XEEQjgyKLF8nHCoVFvPKrqFtMEzBjsRshIddpK KdbAwKlazix87AjqxbF3+c542ArlXGkGTSgBFvhrODVgdH1tAXv9ZvVFgoqzpMRp 3Njswp8wI3KqGHrjbiHwhPfX5XkrSSB7TxeAP/PrlryovIChx8ssHC02/Mi3Rdq5 /yin7TVQZK2wauLXez3NRj0qihaf85n6e1o/zlrxZa7JV603LzI1Ru8NAZukFSCY Ke2iAfeDnYW4KyhqKV6N4G8MJfvF/k+BOLNfrbkcYBWo0obE240ojX8OwQSqHQC7 KAyCzg== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:26 2024 by rpki-client on console-fra.rpki-client.org