$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149927.roa File: AS149927.roa (raw, json) Hash identifier: cadPmrvyFrMX4v5+pQ/L7ykDL1VTsWl2FkxHvoFRvOE= Subject key identifier: 3A:75:FC:43:53:3E:DE:69:75:EF:F5:BF:32:55:88:0C:1A:83:6E:F7 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 277F8F164F9522F24FEB6F29CDD648A9266C4960 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149927.roa Signing time: Mon 13 Nov 2023 04:39:43 +0000 ROA not before: Mon 13 Nov 2023 04:34:43 +0000 ROA not after: Mon 11 Nov 2024 04:39:43 +0000 asID: 149927 IP address blocks: 103.189.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:7f:8f:16:4f:95:22:f2:4f:eb:6f:29:cd:d6:48:a9:26:6c:49:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 13 04:34:43 2023 GMT Not After : Nov 11 04:39:43 2024 GMT Subject: CN=3A75FC43533EDE6975EFF5BF3255880C1A836EF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:03:a6:7e:2f:88:6d:42:be:de:4e:2e:e0:ed: 70:5d:03:f8:03:d6:f2:08:67:36:4f:6d:65:c9:ca: 69:2b:1c:c2:a1:35:52:e9:42:8b:cf:2e:a5:86:d7: e6:af:41:c0:34:46:4b:fa:35:ad:53:fe:b7:90:b6: 94:8b:7a:ea:1e:ef:80:74:e2:d5:77:f0:27:b2:82: 1a:9a:de:c2:ae:2a:a6:60:36:97:ed:e4:2a:f3:f7: c1:a0:7f:af:9c:38:bd:ba:83:b9:3c:70:6a:84:33: 10:ef:ea:ef:f8:e4:12:10:48:aa:91:49:30:a6:f9: 2e:ca:89:c4:95:10:a2:07:b6:24:ab:4f:0b:83:a2: 5e:29:4a:13:50:d0:b4:34:92:5e:3e:8a:2d:8c:21: 89:04:ac:07:fc:a5:60:f6:f7:40:38:8d:5d:fc:12: 46:c2:5b:36:41:af:20:97:e8:94:2e:42:15:c6:e8: b9:93:7d:9e:89:ef:50:3e:3e:3b:16:13:af:e5:67: 1f:80:e1:61:6e:c9:70:35:d9:be:66:56:42:fd:8c: 1b:fe:ce:95:79:dd:32:b3:72:3e:26:21:e5:83:83: 45:91:fa:bf:15:ed:54:c0:d3:25:61:ea:00:9e:82: f6:f3:e2:75:7f:ae:4d:5f:5a:87:3c:72:da:fd:4e: 91:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:75:FC:43:53:3E:DE:69:75:EF:F5:BF:32:55:88:0C:1A:83:6E:F7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149927.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.245.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:81:26:4a:0a:94:8b:f9:01:a6:19:ca:9c:ae:4d:a9:33:50: ea:68:58:68:c6:c7:20:ab:52:53:49:70:4d:0f:72:95:23:4d: ab:97:1f:fd:d4:9c:16:f1:99:65:7b:0a:c3:82:64:c0:6c:9a: cd:75:ab:55:fc:fd:8d:42:4b:72:7a:f9:29:45:dc:79:49:2b: 88:1c:6b:2a:fc:3b:20:56:48:13:bd:fb:99:07:07:86:1f:49: 8b:bf:37:70:17:89:f1:59:99:02:33:af:83:88:05:c0:68:33: c8:82:ff:7a:15:ca:bd:d9:46:52:79:9d:0e:d3:09:06:18:2b: 66:12:cb:03:e4:b7:79:7b:a2:8d:eb:02:9c:47:ec:11:34:d5: 72:f9:b5:a4:9a:10:aa:b9:d5:f4:8f:47:2d:a1:f1:71:cc:9a: b2:e2:23:c9:ab:04:1c:3e:d9:49:4f:1e:8e:81:09:c8:38:06: 96:31:5e:f5:75:3f:5c:d1:02:bd:89:8b:a5:fb:98:59:88:82: 08:42:32:7e:40:b9:ae:89:44:97:b6:07:52:8a:e4:14:a4:30: 3d:99:a2:5a:df:bc:3c:d4:4d:08:fd:31:6c:4e:c3:61:b8:f8: 15:8f:1a:ed:8d:1a:6b:a6:97:1f:dc:ec:63:03:55:af:96:a2: af:67:03:41 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUJ3+PFk+VIvJP628pzdZIqSZsSWAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTExMzA0MzQ0M1oX DTI0MTExMTA0Mzk0M1owMzExMC8GA1UEAxMoM0E3NUZDNDM1MzNFREU2OTc1RUZG NUJGMzI1NTg4MEMxQTgzNkVGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKoDpn4viG1Cvt5OLuDtcF0D+APW8ghnNk9tZcnKaSscwqE1UulCi88upYbX 5q9BwDRGS/o1rVP+t5C2lIt66h7vgHTi1XfwJ7KCGprewq4qpmA2l+3kKvP3waB/ r5w4vbqDuTxwaoQzEO/q7/jkEhBIqpFJMKb5LsqJxJUQoge2JKtPC4OiXilKE1DQ tDSSXj6KLYwhiQSsB/ylYPb3QDiNXfwSRsJbNkGvIJfolC5CFcbouZN9nonvUD4+ OxYTr+VnH4DhYW7JcDXZvmZWQv2MG/7OlXndMrNyPiYh5YODRZH6vxXtVMDTJWHq AJ6C9vPidX+uTV9ahzxy2v1Okb8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQ6dfxD Uz7eaXXv9b8yVYgMGoNu9zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTkyNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGe99TANBgkqhkiG9w0BAQsFAAOCAQEAK4EmSgqUi/kBphnKnK5N qTNQ6mhYaMbHIKtSU0lwTQ9ylSNNq5cf/dScFvGZZXsKw4JkwGyazXWrVfz9jUJL cnr5KUXceUkriBxrKvw7IFZIE737mQcHhh9Ji783cBeJ8VmZAjOvg4gFwGgzyIL/ ehXKvdlGUnmdDtMJBhgrZhLLA+S3eXuijesCnEfsETTVcvm1pJoQqrnV9I9HLaHx ccyasuIjyasEHD7ZSU8ejoEJyDgGljFe9XU/XNECvYmLpfuYWYiCCEIyfkC5rolE l7YHUorkFKQwPZmiWt+8PNRNCP0xbE7DYbj4FY8a7Y0aa6aXH9zsYwNVr5air2cD QQ== -----END CERTIFICATE-----Generated at Wed May 8 17:45:23 2024 by rpki-client on console-ams.rpki-client.org