$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149688.roa File: AS149688.roa (raw, json) Hash identifier: I+El/PZtpE+Ygdp75xwC1s7bJ03YgA5n/gbeZYKBDIo= Subject key identifier: FF:EC:FE:9F:07:17:B3:91:8C:6E:B8:56:F1:61:2C:80:06:34:41:45 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 79FB409794CB812F63FB3045FA3CCF78F19CE88A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149688.roa Signing time: Wed 20 Dec 2023 06:56:33 +0000 ROA not before: Wed 20 Dec 2023 06:51:33 +0000 ROA not after: Wed 18 Dec 2024 06:56:33 +0000 asID: 149688 IP address blocks: 2401:5920::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:fb:40:97:94:cb:81:2f:63:fb:30:45:fa:3c:cf:78:f1:9c:e8:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 20 06:51:33 2023 GMT Not After : Dec 18 06:56:33 2024 GMT Subject: CN=FFECFE9F0717B3918C6EB856F1612C8006344145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:33:4a:fc:ff:c2:84:61:b6:40:76:ee:db:13: 9f:0c:c3:4c:20:6f:0b:0b:d0:b1:81:bb:31:44:e3: 74:d8:c8:70:84:3d:67:92:6a:fd:44:f9:ab:f8:66: ad:c2:06:4b:09:ef:76:ff:3b:85:32:fe:9e:e8:3a: a3:1c:2f:90:66:84:1a:6c:61:c5:d9:79:08:94:e6: c9:df:17:a7:a4:d0:35:ba:2c:11:a0:98:4d:33:c9: 37:08:fc:75:d8:9b:39:7c:ca:a9:44:6c:42:2c:75: fd:6d:6c:04:54:6e:af:86:ab:13:7e:31:e1:9b:eb: 48:cf:7a:e8:9b:f6:86:25:bb:4e:38:4d:dc:58:04: 56:20:03:57:c7:d9:af:3a:8b:91:2c:46:dc:ee:e9: 28:32:02:bd:18:06:7a:53:5d:8c:8c:bf:2f:38:c8: f5:ab:ac:44:9c:10:54:79:0a:f1:99:12:38:2d:d1: 08:ea:b8:5b:eb:5f:26:cc:47:f1:a3:74:ba:41:37: 9d:7e:62:16:c7:25:43:d2:77:55:d5:9b:f6:48:66: 77:00:95:db:5f:cf:88:6e:45:bd:12:6b:cf:08:03: a4:2f:d1:a1:f3:13:d5:2c:66:74:94:c5:d5:27:c6: 1f:95:07:79:43:1a:ca:1a:05:6e:f7:d1:23:ab:f5: 41:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:EC:FE:9F:07:17:B3:91:8C:6E:B8:56:F1:61:2C:80:06:34:41:45 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149688.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:5920::/32 Signature Algorithm: sha256WithRSAEncryption 1b:65:7e:b8:3e:fe:72:b1:7d:14:f9:1e:63:6b:d1:3f:77:bc: b1:58:5f:d3:dc:6e:e6:08:db:62:2c:f5:b3:b9:9b:10:d3:43: 36:70:2f:55:b6:bc:6e:7a:45:f3:d8:6a:c5:73:a0:70:af:c7: 34:74:6b:bc:39:ea:ec:da:45:a8:38:49:b0:2f:d5:dd:bf:c2: 0e:4a:9b:57:a0:7b:5f:92:2b:c9:4d:13:fb:88:7c:23:23:73: 92:70:d2:83:25:e9:e6:de:4f:d9:f4:09:f6:39:a5:20:0b:2d: bc:43:e8:74:1e:de:70:4b:a0:78:9f:84:82:7e:18:0c:19:fa: 0d:25:3a:06:4b:42:df:e2:67:68:ba:f8:1a:83:dd:ed:03:21: 43:19:90:95:87:a1:59:b8:75:ea:66:b7:4d:48:19:bb:02:08: ff:e3:af:87:e4:94:98:fb:b1:11:57:5a:22:fa:93:d8:d5:fe: 07:94:4f:8e:80:aa:47:2d:86:a7:23:53:ef:15:cb:48:7d:97: 8e:69:14:ae:33:f7:bf:3c:e5:7e:31:fe:f3:86:f9:21:d6:a3: 0e:7d:56:b0:b7:90:0a:2b:0b:0f:02:20:5e:49:63:a9:f8:f7: d3:83:2b:38:e4:93:d0:66:65:37:73:3f:48:08:6a:4a:52:91: cf:9d:8d:ad -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUeftAl5TLgS9j+zBF+jzPePGc6IowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIyMDA2NTEzM1oX DTI0MTIxODA2NTYzM1owMzExMC8GA1UEAxMoRkZFQ0ZFOUYwNzE3QjM5MThDNkVC ODU2RjE2MTJDODAwNjM0NDE0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMgzSvz/woRhtkB27tsTnwzDTCBvCwvQsYG7MUTjdNjIcIQ9Z5Jq/UT5q/hm rcIGSwnvdv87hTL+nug6oxwvkGaEGmxhxdl5CJTmyd8Xp6TQNbosEaCYTTPJNwj8 ddibOXzKqURsQix1/W1sBFRur4arE34x4ZvrSM966Jv2hiW7TjhN3FgEViADV8fZ rzqLkSxG3O7pKDICvRgGelNdjIy/LzjI9ausRJwQVHkK8ZkSOC3RCOq4W+tfJsxH 8aN0ukE3nX5iFsclQ9J3VdWb9khmdwCV21/PiG5FvRJrzwgDpC/RofMT1SxmdJTF 1SfGH5UHeUMayhoFbvfRI6v1QUkCAwEAAaOCAdEwggHNMB0GA1UdDgQWBBT/7P6f BxezkYxuuFbxYSyABjRBRTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTY4OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQBWSAwDQYJKoZIhvcNAQELBQADggEBABtlfrg+/nKxfRT5HmNr 0T93vLFYX9PcbuYI22Is9bO5mxDTQzZwL1W2vG56RfPYasVzoHCvxzR0a7w56uza Rag4SbAv1d2/wg5Km1ege1+SK8lNE/uIfCMjc5Jw0oMl6ebeT9n0CfY5pSALLbxD 6HQe3nBLoHifhIJ+GAwZ+g0lOgZLQt/iZ2i6+BqD3e0DIUMZkJWHoVm4depmt01I GbsCCP/jr4fklJj7sRFXWiL6k9jV/geUT46AqkcthqcjU+8Vy0h9l45pFK4z9788 5X4x/vOG+SHWow59VrC3kAorCw8CIF5JY6n499ODKzjkk9BmZTdzP0gIakpSkc+d ja0= -----END CERTIFICATE-----Generated at Wed May 8 15:17:44 2024 by rpki-client on console-fra.rpki-client.org