$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149746.roa File: AS149746.roa (raw, json) Hash identifier: iIgD4ESsnZCZ2ffXxIEsHaiz0vFIc+GFivGQLJY9ANI= Subject key identifier: 42:12:B5:1F:14:BA:A7:01:49:48:05:62:61:03:C4:24:21:57:20:FC Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0FC539049BDCB75F6B5015D7F89071E8C501DEDB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149746.roa Signing time: Tue 27 Jun 2023 03:55:52 +0000 ROA not before: Tue 27 Jun 2023 03:50:52 +0000 ROA not after: Tue 25 Jun 2024 03:55:52 +0000 asID: 149746 IP address blocks: 202.46.152.0/22 maxlen: 24 2400:e660::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:c5:39:04:9b:dc:b7:5f:6b:50:15:d7:f8:90:71:e8:c5:01:de:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 27 03:50:52 2023 GMT Not After : Jun 25 03:55:52 2024 GMT Subject: CN=4212B51F14BAA701494805626103C424215720FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:87:25:b4:27:7b:59:23:2f:f2:b7:6a:cd:36: c3:14:7a:98:d6:8b:6d:9b:90:af:de:fd:a9:63:b6: 98:3b:c7:73:67:9f:f8:e4:20:b6:e2:d9:26:44:6a: 80:09:3e:0e:2a:3a:b5:cb:6e:84:0c:f0:2e:64:dc: 3e:93:64:b2:d4:20:a0:5c:40:c1:76:5f:53:2e:ac: 83:76:9b:e5:6b:a5:38:9a:b9:6b:a9:35:1c:53:4b: 2d:18:4a:63:26:c4:e3:07:29:2a:c1:f5:91:7a:4c: 06:c0:73:64:d1:8f:52:4f:cf:53:f7:7e:6c:27:48: d5:f7:21:8c:62:0a:37:41:2c:55:98:6c:d6:0c:55: d8:81:2f:4d:07:00:19:2d:9d:61:a2:1e:85:86:18: e6:81:46:1d:c2:ce:e3:43:8f:b7:16:d4:0a:94:cf: c9:9f:b6:3f:6c:82:f1:0d:bc:01:24:38:59:27:9a: 6e:bd:55:38:ca:bd:3a:e1:6e:a5:68:34:ce:ec:ee: fb:50:24:c4:7a:39:dc:72:40:0c:f8:bd:20:d9:43: 1c:5b:aa:9d:a8:47:58:30:a6:76:76:0f:12:cb:20: fa:d8:80:38:0d:cd:51:9b:d0:f6:ac:28:47:fb:78: 1a:76:00:3e:3b:5c:57:13:ad:1d:8f:b8:b8:0c:ab: 8a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:12:B5:1F:14:BA:A7:01:49:48:05:62:61:03:C4:24:21:57:20:FC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149746.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.46.152.0/22 IPv6: 2400:e660::/32 Signature Algorithm: sha256WithRSAEncryption 79:5a:40:89:14:50:2c:b0:c7:39:8e:d5:78:24:11:14:9a:99: 01:b2:fc:7f:01:0f:58:94:d0:22:89:2f:cb:d3:f3:fa:a4:77: 23:54:80:5a:ad:6d:0a:30:7b:61:4a:08:ac:91:75:a1:20:0d: e1:00:c4:86:1f:bb:2f:e0:ff:13:1f:a1:58:c8:59:6b:40:a9: ae:00:61:a2:72:08:bc:b3:03:26:74:e0:8f:b4:e1:4f:de:3d: e7:fb:6b:ce:c3:ab:c8:e1:2c:09:2a:ef:f0:6b:5d:fd:ac:80: 76:98:ff:1a:86:06:e6:9c:68:4a:f4:cd:61:57:d2:93:d4:94: 4c:15:ea:8c:f9:9f:71:75:76:3c:56:20:24:71:3a:64:c9:79: 34:37:93:a7:d2:04:75:f8:21:54:8a:df:62:98:92:9c:83:e5: 89:95:f5:c7:bf:a2:50:3e:22:43:d1:80:71:7a:5e:9c:eb:01: fc:39:14:9f:f1:46:4a:07:75:f7:a6:8c:2f:a8:74:75:4d:81: 83:18:0b:88:88:3a:73:e6:ca:79:2b:83:33:58:f7:b7:b8:5d: 50:9a:5d:0c:5e:d5:74:a0:6b:c5:e6:f4:2a:f2:5e:c0:d9:96: 15:61:c0:00:d6:33:c8:e9:b7:2d:8b:b4:3d:1a:12:69:08:a2: df:d6:79:1a -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUD8U5BJvct19rUBXX+JBx6MUB3tswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYyNzAzNTA1MloX DTI0MDYyNTAzNTU1MlowMzExMC8GA1UEAxMoNDIxMkI1MUYxNEJBQTcwMTQ5NDgw NTYyNjEwM0M0MjQyMTU3MjBGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGHJbQne1kjL/K3as02wxR6mNaLbZuQr979qWO2mDvHc2ef+OQgtuLZJkRq gAk+Dio6tctuhAzwLmTcPpNkstQgoFxAwXZfUy6sg3ab5WulOJq5a6k1HFNLLRhK YybE4wcpKsH1kXpMBsBzZNGPUk/PU/d+bCdI1fchjGIKN0EsVZhs1gxV2IEvTQcA GS2dYaIehYYY5oFGHcLO40OPtxbUCpTPyZ+2P2yC8Q28ASQ4WSeabr1VOMq9OuFu pWg0zuzu+1AkxHo53HJADPi9INlDHFuqnahHWDCmdnYPEssg+tiAOA3NUZvQ9qwo R/t4GnYAPjtcVxOtHY+4uAyrijsCAwEAAaOCAd8wggHbMB0GA1UdDgQWBBRCErUf FLqnAUlIBWJhA8QkIVcg/DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTc0Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAsoumDANBAIAAjAHAwUAJADmYDANBgkqhkiG9w0BAQsFAAOCAQEA eVpAiRRQLLDHOY7VeCQRFJqZAbL8fwEPWJTQIokvy9Pz+qR3I1SAWq1tCjB7YUoI rJF1oSAN4QDEhh+7L+D/Ex+hWMhZa0CprgBhonIIvLMDJnTgj7ThT9495/trzsOr yOEsCSrv8Gtd/ayAdpj/GoYG5pxoSvTNYVfSk9SUTBXqjPmfcXV2PFYgJHE6ZMl5 NDeTp9IEdfghVIrfYpiSnIPliZX1x7+iUD4iQ9GAcXpenOsB/DkUn/FGSgd196aM L6h0dU2BgxgLiIg6c+bKeSuDM1j3t7hdUJpdDF7VdKBrxeb0KvJewNmWFWHAANYz yOm3LYu0PRoSaQii39Z5Gg== -----END CERTIFICATE-----Generated at Wed May 8 14:59:56 2024 by rpki-client on console-ams.rpki-client.org