$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149712.roa File: AS149712.roa (raw, json) Hash identifier: q24Z7MmADkg5ewibCQkLEowOpfGRf6KWkVg/HpupYRs= Subject key identifier: 07:3E:61:2E:31:17:0E:33:68:D2:D0:C1:7B:6B:61:48:4D:AA:CA:A0 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 48B3E21B9D629C865ACCE8C3CFEAEC4E5B79366F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149712.roa Signing time: Tue 06 Feb 2024 07:00:00 +0000 ROA not before: Tue 06 Feb 2024 06:55:00 +0000 ROA not after: Tue 04 Feb 2025 07:00:00 +0000 asID: 149712 IP address blocks: 2001:df1:3d40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:b3:e2:1b:9d:62:9c:86:5a:cc:e8:c3:cf:ea:ec:4e:5b:79:36:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 6 06:55:00 2024 GMT Not After : Feb 4 07:00:00 2025 GMT Subject: CN=073E612E31170E3368D2D0C17B6B61484DAACAA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:2a:85:e9:aa:a1:3c:ae:be:ee:14:70:fd:63: 0a:23:a2:3c:a4:67:3c:80:47:5c:ab:36:a6:69:f0: 44:2a:a3:dc:a0:87:02:e1:57:14:73:a6:c5:f2:ea: bd:b5:f0:03:2e:73:58:4a:de:d8:3b:86:00:35:eb: 20:fe:83:69:e5:d6:e4:6f:32:6f:92:c4:f7:58:8a: 4b:ab:94:ae:bb:66:3f:e5:44:c5:81:ee:74:8f:a9: ad:4b:eb:50:3b:08:d7:c3:e5:18:df:d0:bd:d1:e1: af:0d:7f:e2:b8:e3:d2:5c:32:3a:ac:3b:14:f1:6f: 78:79:a6:bf:42:b4:26:9c:9c:fa:ce:e5:bf:c9:a0: af:57:e4:0b:4f:3b:5c:c6:76:cd:5a:55:95:ad:3a: 92:28:c3:e8:c9:6a:c7:47:e0:d5:9a:1c:85:d7:6c: 0e:6a:39:6e:c2:e5:7e:a4:16:e5:57:0e:35:25:a3: f6:cc:3d:d7:7c:90:84:74:6b:63:f7:00:49:76:a2: 69:88:aa:1d:2c:88:c2:f4:23:3d:80:94:2f:94:99: cc:6d:0e:9d:9a:fe:2e:4b:fd:21:45:04:77:67:1c: b4:cf:24:8d:77:1a:8a:df:71:0e:71:3e:77:a6:59: 1a:9e:31:36:77:ec:ca:fe:26:f3:37:8f:e4:c1:c7: 78:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:3E:61:2E:31:17:0E:33:68:D2:D0:C1:7B:6B:61:48:4D:AA:CA:A0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149712.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:3d40::/48 Signature Algorithm: sha256WithRSAEncryption 16:94:0a:77:ba:6b:05:78:14:30:d0:8c:fe:60:d5:18:0b:30: 26:ae:d9:9c:d7:b3:64:a6:3a:06:cf:64:19:3c:5b:9f:5c:31: d1:67:4f:b8:2a:7f:b5:64:6d:77:5e:f8:7e:4a:db:cc:0e:46: e6:1f:62:f2:11:f0:3d:14:3d:3f:57:78:41:44:1a:f1:45:be: 1a:b5:83:ba:7f:d9:7d:d6:26:26:17:80:27:98:fc:bc:de:58: a2:be:1d:9a:6b:49:b7:77:ad:d7:a4:0b:9a:ed:72:09:e8:5b: 6e:4a:86:22:f5:3b:60:bd:e5:62:c7:1f:35:48:e8:04:f7:b3: 31:bb:2c:49:77:ca:f1:27:c2:bf:a0:b2:65:b7:8b:f7:c6:da: 17:2a:fb:01:84:d4:26:af:17:76:dc:26:d3:f0:b6:aa:5e:b1: 6f:aa:15:24:31:dd:b4:d9:c3:ef:b3:96:44:dc:8f:bd:d7:20: 91:8f:fe:cf:54:f0:4b:87:50:ed:94:32:31:c1:72:3b:98:0b: e5:3e:5f:9d:db:b4:be:70:61:0c:f2:4f:f7:84:43:29:66:39: 57:ba:53:d1:c4:73:f8:69:cf:8d:23:f1:fe:d4:d2:e7:b4:25: 27:38:e6:8c:4e:c7:01:b2:4e:8c:16:19:51:e6:fe:5c:c9:91: 75:a1:77:69 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUSLPiG51inIZazOjDz+rsTlt5Nm8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIwNjA2NTUwMFoX DTI1MDIwNDA3MDAwMFowMzExMC8GA1UEAxMoMDczRTYxMkUzMTE3MEUzMzY4RDJE MEMxN0I2QjYxNDg0REFBQ0FBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPEqhemqoTyuvu4UcP1jCiOiPKRnPIBHXKs2pmnwRCqj3KCHAuFXFHOmxfLq vbXwAy5zWEre2DuGADXrIP6DaeXW5G8yb5LE91iKS6uUrrtmP+VExYHudI+prUvr UDsI18PlGN/QvdHhrw1/4rjj0lwyOqw7FPFveHmmv0K0Jpyc+s7lv8mgr1fkC087 XMZ2zVpVla06kijD6Mlqx0fg1ZochddsDmo5bsLlfqQW5VcONSWj9sw913yQhHRr Y/cASXaiaYiqHSyIwvQjPYCUL5SZzG0OnZr+Lkv9IUUEd2cctM8kjXcait9xDnE+ d6ZZGp4xNnfsyv4m8zeP5MHHeHMCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQHPmEu MRcOM2jS0MF7a2FITarKoDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTcxMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfE9QDANBgkqhkiG9w0BAQsFAAOCAQEAFpQKd7prBXgUMNCM /mDVGAswJq7ZnNezZKY6Bs9kGTxbn1wx0WdPuCp/tWRtd174fkrbzA5G5h9i8hHw PRQ9P1d4QUQa8UW+GrWDun/ZfdYmJheAJ5j8vN5Yor4dmmtJt3et16QLmu1yCehb bkqGIvU7YL3lYscfNUjoBPezMbssSXfK8SfCv6CyZbeL98baFyr7AYTUJq8Xdtwm 0/C2ql6xb6oVJDHdtNnD77OWRNyPvdcgkY/+z1TwS4dQ7ZQyMcFyO5gL5T5fndu0 vnBhDPJP94RDKWY5V7pT0cRz+GnPjSPx/tTS57QlJzjmjE7HAbJOjBYZUeb+XMmR daF3aQ== -----END CERTIFICATE-----Generated at Wed May 8 14:59:56 2024 by rpki-client on console-ams.rpki-client.org