$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149907.roa File: AS149907.roa (raw, json) Hash identifier: smCiEC6hmxVMKb9tVCenfwN+epzG6odjjTovRWCXlm8= Subject key identifier: 27:21:0D:F7:1F:E1:99:06:65:7A:9F:E5:8C:10:5A:6A:9E:50:69:F4 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7EF2BCA7A95196BF5D7B7BFE82CAB190F2CAEAD5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149907.roa Signing time: Thu 22 Aug 2024 05:00:00 +0000 ROA not before: Thu 22 Aug 2024 04:55:00 +0000 ROA not after: Thu 21 Aug 2025 05:00:00 +0000 asID: 149907 IP address blocks: 103.190.112.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:f2:bc:a7:a9:51:96:bf:5d:7b:7b:fe:82:ca:b1:90:f2:ca:ea:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 22 04:55:00 2024 GMT Not After : Aug 21 05:00:00 2025 GMT Subject: CN=27210DF71FE19906657A9FE58C105A6A9E5069F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f4:42:a2:47:15:16:e5:10:48:55:df:31:6d: c8:21:5b:12:18:85:f7:40:f3:01:29:09:8c:bd:ab: 83:6d:cc:68:70:01:59:13:0c:1b:ff:76:bc:d4:d2: ea:48:27:32:2d:d9:2c:3f:e6:d4:20:fa:a7:c3:66: c1:ff:fb:59:28:33:1f:55:f7:a4:58:4a:5b:23:3d: 2f:94:1f:70:98:49:51:93:d0:87:8b:f0:b1:e9:6f: f8:18:57:c4:22:40:c5:69:7c:a4:8f:c6:24:d8:69: 99:c0:f6:d4:94:ea:99:b7:8b:30:5e:cb:d7:8e:0f: 28:45:fd:42:f6:75:c2:9f:8e:71:da:a1:32:7e:dc: 27:ea:4b:84:68:bd:6c:17:33:bc:21:c2:91:63:39: 46:47:37:1f:d2:26:2b:19:42:d1:0f:1e:fa:59:86: 22:bb:e6:bd:75:d1:62:1e:70:88:40:3c:59:a4:fb: a6:ff:b7:19:37:6c:4c:33:5e:90:62:bf:0c:2d:c5: d2:f1:4b:e2:49:44:b3:94:94:33:fc:44:2f:eb:85: 53:84:1f:48:57:1f:0d:04:03:63:cf:31:12:a9:f8: 5c:0b:8c:22:e6:a1:e5:a6:cf:24:4d:76:83:96:78: 58:03:6b:d0:98:b0:4b:57:e0:72:a1:2d:0b:0d:f2: 0e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:21:0D:F7:1F:E1:99:06:65:7A:9F:E5:8C:10:5A:6A:9E:50:69:F4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149907.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.112.0/23 Signature Algorithm: sha256WithRSAEncryption 44:47:a4:42:c2:84:a3:64:66:a1:3d:c4:bc:2a:1d:c2:01:16: 2d:6b:b4:80:2e:08:f3:1d:c2:42:7d:70:b3:ce:67:55:b3:61: 32:4f:24:ae:63:8a:2a:d7:43:17:ba:5f:fa:93:bb:ce:57:7e: a3:5d:44:55:81:2d:b0:8a:af:8d:11:b6:6c:d4:e8:85:26:78: 3a:98:ce:3d:4a:8d:21:b9:07:1b:4f:d4:58:04:bf:d7:af:06: ce:e7:83:6a:c0:21:05:92:55:b6:c0:55:2c:34:c1:db:89:9e: d9:7d:4d:69:87:f0:50:04:fe:47:32:18:fb:11:12:b8:90:eb: 37:6d:6a:a1:d7:f1:f5:19:a5:33:9e:97:7b:91:38:55:81:22: c8:eb:56:af:27:f0:66:ad:dd:f2:ba:9a:63:c6:b7:0e:15:82: ce:f3:f1:9c:d4:e7:89:42:b5:15:66:9c:84:c7:c2:bb:2c:18: 3b:4e:90:ad:da:15:82:c5:3e:b0:01:a9:5d:48:cf:66:95:7c: ff:62:16:48:f9:f4:65:b2:af:cb:23:f7:a6:ab:23:e2:5e:23: b5:a8:25:2c:98:73:87:46:ac:32:79:5a:f5:55:9c:76:8f:c0: f2:4c:e1:d3:71:bc:65:4b:6f:41:cc:b2:15:30:1a:a4:57:5e: ec:49:53:e3 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUfvK8p6lRlr9de3v+gsqxkPLK6tUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgyMjA0NTUwMFoX DTI1MDgyMTA1MDAwMFowMzExMC8GA1UEAxMoMjcyMTBERjcxRkUxOTkwNjY1N0E5 RkU1OEMxMDVBNkE5RTUwNjlGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKT0QqJHFRblEEhV3zFtyCFbEhiF90DzASkJjL2rg23MaHABWRMMG/92vNTS 6kgnMi3ZLD/m1CD6p8Nmwf/7WSgzH1X3pFhKWyM9L5QfcJhJUZPQh4vwselv+BhX xCJAxWl8pI/GJNhpmcD21JTqmbeLMF7L144PKEX9QvZ1wp+OcdqhMn7cJ+pLhGi9 bBczvCHCkWM5Rkc3H9ImKxlC0Q8e+lmGIrvmvXXRYh5wiEA8WaT7pv+3GTdsTDNe kGK/DC3F0vFL4klEs5SUM/xEL+uFU4QfSFcfDQQDY88xEqn4XAuMIuah5abPJE12 g5Z4WANr0JiwS1fgcqEtCw3yDssCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQnIQ33 H+GZBmV6n+WMEFpqnlBp9DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTkwNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWe+cDANBgkqhkiG9w0BAQsFAAOCAQEAREekQsKEo2RmoT3EvCod wgEWLWu0gC4I8x3CQn1ws85nVbNhMk8krmOKKtdDF7pf+pO7zld+o11EVYEtsIqv jRG2bNTohSZ4OpjOPUqNIbkHG0/UWAS/168GzueDasAhBZJVtsBVLDTB24me2X1N aYfwUAT+RzIY+xESuJDrN21qodfx9RmlM56Xe5E4VYEiyOtWryfwZq3d8rqaY8a3 DhWCzvPxnNTniUK1FWachMfCuywYO06QrdoVgsU+sAGpXUjPZpV8/2IWSPn0ZbKv yyP3pqsj4l4jtaglLJhzh0asMnla9VWcdo/A8kzh03G8ZUtvQcyyFTAapFde7ElT 4w== -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:29 2024 by rpki-client on console-ams.rpki-client.org