$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149688.roa File: AS149688.roa (raw, json) Hash identifier: BE8DOMlmmYVLVvL8rnO7iHefD/BJ6OveHWf3FSBwo2Q= Subject key identifier: B3:87:58:76:93:5A:6D:62:17:71:71:C8:C6:35:11:18:42:B6:4A:16 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3F979441D9437FFF62FABC71EFE8FC8FF7A0CCAE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149688.roa Signing time: Wed 20 Nov 2024 07:00:00 +0000 ROA not before: Wed 20 Nov 2024 06:55:00 +0000 ROA not after: Wed 19 Nov 2025 07:00:00 +0000 asID: 149688 IP address blocks: 2401:5920::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:97:94:41:d9:43:7f:ff:62:fa:bc:71:ef:e8:fc:8f:f7:a0:cc:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 20 06:55:00 2024 GMT Not After : Nov 19 07:00:00 2025 GMT Subject: CN=B3875876935A6D62177171C8C635111842B64A16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b2:22:b8:aa:68:f6:bb:81:64:9d:d9:49:3d: e0:ad:2a:83:85:7a:01:0a:cf:d3:0c:54:f6:fc:6e: 42:17:47:f7:84:4b:ad:d4:af:23:ef:27:8e:93:5b: ed:14:26:8f:ab:ab:36:cd:15:57:26:3d:cd:b6:e9: 28:26:4c:5b:f0:68:26:26:c4:4b:46:20:04:e5:19: 94:5f:c1:c9:4e:91:b8:d2:e6:97:30:0d:ff:5e:ff: f4:9f:c6:28:0e:41:94:43:07:20:c4:14:e2:9d:a6: 1c:07:c5:25:97:ad:f2:c5:dd:96:21:41:2e:c6:d9: 79:e6:68:3d:f3:a1:9f:d5:24:29:15:9c:ea:d8:87: 96:b8:e4:68:56:f4:7e:07:b1:d4:1b:f6:61:2c:eb: 36:de:a2:04:c8:83:b3:01:83:09:dc:11:0f:e6:eb: 5c:91:ad:b7:3d:85:89:4e:0f:66:e5:68:f7:45:83: 80:ed:86:63:3b:b7:5a:ad:b6:df:a3:a8:81:97:0f: a8:ab:d8:87:7c:d6:b7:38:fc:06:d3:5d:5d:01:1d: 66:7a:cf:33:ad:40:b8:f7:dc:84:00:1c:70:0c:84: 58:8b:05:7a:58:95:6b:34:ba:7c:43:6f:4d:b1:bc: 2a:b1:a8:94:93:0f:8d:00:10:fd:da:1e:61:53:c6: 2b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:87:58:76:93:5A:6D:62:17:71:71:C8:C6:35:11:18:42:B6:4A:16 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149688.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:5920::/32 Signature Algorithm: sha256WithRSAEncryption 2c:e4:39:80:78:59:d2:b1:4d:b2:e9:c7:b0:34:18:18:5e:05: 80:c6:71:58:4b:12:73:52:4c:dd:ec:33:9d:91:81:3e:7c:83: 77:43:72:f5:28:9c:f9:cd:64:5c:3a:0b:1a:84:cc:5f:67:fb: fa:69:33:d4:79:75:69:ca:69:c8:96:3b:e0:e8:38:ca:0f:bd: 17:62:6a:66:fe:22:79:22:3b:e9:44:28:fc:a3:03:2f:b0:4c: a1:03:6a:fb:20:b9:e0:4b:58:0f:ab:1a:02:3a:57:6b:32:ae: 3f:ab:91:0b:f2:9b:01:89:76:09:b9:23:e8:c9:93:0d:35:66: 40:d3:12:aa:30:1b:4f:b2:46:a6:df:85:5e:4f:04:36:36:53: a2:ae:ad:a6:46:a2:33:01:78:13:f3:65:0b:6d:b1:d3:62:78: e8:7d:fd:d5:5f:f6:64:01:ad:be:5b:9a:a2:17:1d:93:da:20: 90:ea:a9:d8:f3:78:c3:25:94:2f:cb:a1:e2:12:a5:a3:05:d4: 09:bd:53:96:79:a8:eb:64:4f:61:3a:d8:a6:9f:3c:13:9c:e5: 20:b7:fa:f8:29:bf:fe:81:75:ba:8d:df:50:aa:2f:17:30:9c: 3c:aa:7c:49:ed:0c:2e:95:18:d0:4f:10:25:ca:3d:62:46:82: 4d:69:74:37 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUP5eUQdlDf/9i+rxx7+j8j/egzK4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTEyMDA2NTUwMFoX DTI1MTExOTA3MDAwMFowMzExMC8GA1UEAxMoQjM4NzU4NzY5MzVBNkQ2MjE3NzE3 MUM4QzYzNTExMTg0MkI2NEExNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMKyIriqaPa7gWSd2Uk94K0qg4V6AQrP0wxU9vxuQhdH94RLrdSvI+8njpNb 7RQmj6urNs0VVyY9zbbpKCZMW/BoJibES0YgBOUZlF/ByU6RuNLmlzAN/17/9J/G KA5BlEMHIMQU4p2mHAfFJZet8sXdliFBLsbZeeZoPfOhn9UkKRWc6tiHlrjkaFb0 fgex1Bv2YSzrNt6iBMiDswGDCdwRD+brXJGttz2FiU4PZuVo90WDgO2GYzu3Wq22 36OogZcPqKvYh3zWtzj8BtNdXQEdZnrPM61AuPfchAAccAyEWIsFeliVazS6fENv TbG8KrGolJMPjQAQ/doeYVPGK+MCAwEAAaOCAdEwggHNMB0GA1UdDgQWBBSzh1h2 k1ptYhdxccjGNREYQrZKFjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTY4OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQBWSAwDQYJKoZIhvcNAQELBQADggEBACzkOYB4WdKxTbLpx7A0 GBheBYDGcVhLEnNSTN3sM52RgT58g3dDcvUonPnNZFw6CxqEzF9n+/ppM9R5dWnK aciWO+DoOMoPvRdiamb+InkiO+lEKPyjAy+wTKEDavsgueBLWA+rGgI6V2syrj+r kQvymwGJdgm5I+jJkw01ZkDTEqowG0+yRqbfhV5PBDY2U6KuraZGojMBeBPzZQtt sdNieOh9/dVf9mQBrb5bmqIXHZPaIJDqqdjzeMMllC/LoeISpaMF1Am9U5Z5qOtk T2E62KafPBOc5SC3+vgpv/6BdbqN31CqLxcwnDyqfEntDC6VGNBPECXKPWJGgk1p dDc= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:48 2024 by rpki-client on console-ams.rpki-client.org