$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149723.roa File: AS149723.roa (raw, json) Hash identifier: p/tSsOoJV+FOPpP8+Pqt+1jZ+HRu4A/rYWHDgTRzPyg= Subject key identifier: F0:58:E6:F0:75:9E:B8:10:46:FD:70:CA:75:EA:46:3C:45:90:17:32 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1E36632335D2CF5B313DADC240D9EE52F339D7F1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149723.roa Signing time: Mon 08 Jan 2024 07:06:05 +0000 ROA not before: Mon 08 Jan 2024 07:01:05 +0000 ROA not after: Mon 06 Jan 2025 07:06:05 +0000 asID: 149723 IP address blocks: 103.138.53.0/24 maxlen: 24 2001:df2:79c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:36:63:23:35:d2:cf:5b:31:3d:ad:c2:40:d9:ee:52:f3:39:d7:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 8 07:01:05 2024 GMT Not After : Jan 6 07:06:05 2025 GMT Subject: CN=F058E6F0759EB81046FD70CA75EA463C45901732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b8:ad:1b:f4:19:23:ce:32:4a:03:7d:68:d8: 49:59:2f:f7:41:d9:1c:cc:cd:7c:c4:a3:6b:04:2c: 1c:64:f0:d4:0a:23:8d:33:f9:b5:c9:0a:4a:28:f9: 15:7e:38:62:70:58:c5:61:8a:2f:db:27:bc:7e:a9: d9:19:8f:e4:95:5a:79:e2:2a:a0:45:62:2c:aa:1e: 66:7e:95:5b:ce:7b:75:58:56:5c:6f:b1:85:57:2d: 69:69:d6:e7:99:0a:73:ee:d2:b7:48:2c:33:a8:0d: 29:53:9d:db:4d:9b:47:51:65:0f:f6:47:f4:c0:c2: 0a:1b:42:92:36:19:31:d4:62:52:d6:6f:fc:9c:28: 8d:6c:29:0e:e7:dd:9f:93:ca:61:da:61:93:e0:ef: 4d:a4:62:d2:36:14:95:f3:d4:2d:3c:25:9e:d3:4d: dd:36:85:a7:f9:ec:dd:2f:cf:42:c1:53:f8:16:de: f7:d4:ec:fe:dc:59:39:ec:46:ce:c0:b8:b7:0f:f4: 95:c6:ce:bb:ba:f4:fb:25:bc:46:a8:f3:c8:bc:44: e6:05:e3:2a:fb:31:56:c1:ed:41:0e:5f:b7:ea:3c: d6:f7:22:99:5c:ea:9b:bd:12:10:31:5d:ea:e5:24: fb:c2:67:de:ee:f9:f0:2d:77:9f:16:6b:b0:f7:6c: 77:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:58:E6:F0:75:9E:B8:10:46:FD:70:CA:75:EA:46:3C:45:90:17:32 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149723.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.53.0/24 IPv6: 2001:df2:79c0::/48 Signature Algorithm: sha256WithRSAEncryption 77:12:4f:ce:e4:c9:e0:61:a8:99:e1:49:fa:2d:23:60:92:db: 39:48:c7:49:80:38:8c:c1:17:b1:8e:32:69:0d:1d:10:31:d9: 6c:da:de:1d:59:7b:a2:e9:d8:5e:cd:f7:18:cc:d8:77:50:9d: ae:59:bd:3f:a6:b0:57:fe:bb:bc:58:d4:6d:23:c6:44:3d:ff: 2c:88:5b:83:a1:81:6f:84:f3:1e:b4:51:25:a7:0f:f6:b7:25: 74:ac:d7:c8:00:82:47:ce:23:6f:31:fa:d1:d5:e4:11:41:da: 5d:11:1d:3e:4a:21:f5:ff:be:e8:ee:90:b3:35:7e:95:ea:ba: dd:2d:47:ae:ad:b4:b2:7f:ce:be:ac:04:2b:78:1b:0b:8f:3d: 8f:3e:a3:55:0e:dd:f6:a4:48:33:fb:94:51:31:44:07:27:cc: bd:62:0f:9f:83:9a:20:1e:6d:f4:c2:bc:a3:eb:d3:80:72:f1: 49:c8:87:f2:8c:5f:c8:9d:ed:7a:e8:5b:11:ae:a4:f8:f5:83: 86:46:74:85:8f:c1:5c:a1:d0:44:ff:eb:ec:f2:79:8f:89:a3: 9e:cb:b2:79:de:19:f2:b5:4b:aa:1a:fc:18:ed:38:5a:33:83: c2:86:dd:87:6c:88:20:f8:8b:9d:73:5c:64:ae:1b:26:b3:3c: 66:67:79:d2 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUHjZjIzXSz1sxPa3CQNnuUvM51/EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwODA3MDEwNVoX DTI1MDEwNjA3MDYwNVowMzExMC8GA1UEAxMoRjA1OEU2RjA3NTlFQjgxMDQ2RkQ3 MENBNzVFQTQ2M0M0NTkwMTczMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALC4rRv0GSPOMkoDfWjYSVkv90HZHMzNfMSjawQsHGTw1AojjTP5tckKSij5 FX44YnBYxWGKL9snvH6p2RmP5JVaeeIqoEViLKoeZn6VW857dVhWXG+xhVctaWnW 55kKc+7St0gsM6gNKVOd202bR1FlD/ZH9MDCChtCkjYZMdRiUtZv/JwojWwpDufd n5PKYdphk+DvTaRi0jYUlfPULTwlntNN3TaFp/ns3S/PQsFT+Bbe99Ts/txZOexG zsC4tw/0lcbOu7r0+yW8RqjzyLxE5gXjKvsxVsHtQQ5ft+o81vcimVzqm70SEDFd 6uUk+8Jn3u758C13nxZrsPdsd58CAwEAAaOCAeEwggHdMB0GA1UdDgQWBBTwWObw dZ64EEb9cMp16kY8RZAXMjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTcyMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAGeKNTAPBAIAAjAJAwcAIAEN8nnAMA0GCSqGSIb3DQEBCwUAA4IB AQB3Ek/O5MngYaiZ4Un6LSNgkts5SMdJgDiMwRexjjJpDR0QMdls2t4dWXui6dhe zfcYzNh3UJ2uWb0/prBX/ru8WNRtI8ZEPf8siFuDoYFvhPMetFElpw/2tyV0rNfI AIJHziNvMfrR1eQRQdpdER0+SiH1/77o7pCzNX6V6rrdLUeurbSyf86+rAQreBsL jz2PPqNVDt32pEgz+5RRMUQHJ8y9Yg+fg5ogHm30wryj69OAcvFJyIfyjF/Ine16 6FsRrqT49YOGRnSFj8FcodBE/+vs8nmPiaOey7J53hnytUuqGvwY7ThaM4PCht2H bIgg+Iudc1xkrhsmszxmZ3nS -----END CERTIFICATE-----Generated at Wed May 8 18:12:16 2024 by rpki-client on console-fra.rpki-client.org