$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149927.roa File: AS149927.roa (raw, json) Hash identifier: N5Ixhe6eLd8X3RQ/3/b28kzIpDPCwpFVbJS/cC6Qk4U= Subject key identifier: AF:89:54:BF:81:93:FA:A3:98:A7:BB:3D:B2:29:0E:44:91:C7:64:65 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 51A2F2DD2DC5ABCEADD6647D4009E3A2FDE755D2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149927.roa Signing time: Mon 14 Oct 2024 05:00:00 +0000 ROA not before: Mon 14 Oct 2024 04:55:00 +0000 ROA not after: Mon 13 Oct 2025 05:00:00 +0000 asID: 149927 IP address blocks: 103.189.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:a2:f2:dd:2d:c5:ab:ce:ad:d6:64:7d:40:09:e3:a2:fd:e7:55:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 14 04:55:00 2024 GMT Not After : Oct 13 05:00:00 2025 GMT Subject: CN=AF8954BF8193FAA398A7BB3DB2290E4491C76465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d3:fe:00:5b:1e:a9:02:23:7a:64:34:72:f4: e4:65:fd:3a:13:8b:c1:a9:81:a0:6f:cb:41:19:30: 99:cc:c6:a0:f2:5e:12:58:f8:d2:3c:7c:cc:aa:22: c4:ad:4c:a6:f4:09:32:fc:c8:d3:0d:61:9a:fb:08: f6:75:3d:07:14:84:5d:e0:e9:19:92:f6:18:91:d1: fd:54:e4:d7:e7:c2:92:73:3b:d2:60:56:de:ec:32: 05:b4:ad:c5:b5:c7:ef:89:3a:9a:09:ac:de:98:8c: ce:3d:24:a6:73:db:93:1d:ae:41:5e:59:f4:2d:48: 37:cd:59:10:f1:85:6d:b3:78:5d:a7:23:39:0b:b6: c3:ea:af:da:d4:da:50:c2:3d:a0:2b:ee:22:21:6c: d3:58:0a:e3:57:33:bc:56:83:ff:60:9c:88:33:e6: 80:29:b3:fe:ea:13:95:3f:2e:38:50:0f:8c:dd:2c: 33:db:2b:dc:e5:5d:41:d0:95:3a:00:97:ff:29:37: 1d:53:80:f5:d2:0e:14:66:dd:5a:ed:5d:f1:51:23: 48:b3:5a:e5:35:5e:44:12:01:98:fc:84:e8:2e:17: 49:b5:a1:e0:82:de:b9:59:f8:0d:a9:08:cf:7f:03: 37:be:b5:c8:94:6d:56:60:27:5c:a5:10:b9:d0:fe: 3a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:89:54:BF:81:93:FA:A3:98:A7:BB:3D:B2:29:0E:44:91:C7:64:65 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149927.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.245.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:b7:34:59:71:f0:1d:35:9e:b9:e5:a5:6a:79:73:54:13:75: e4:5c:e9:d4:45:2a:ad:cf:48:e5:40:cd:97:c0:75:be:38:68: 2d:c7:f7:f9:7d:cf:d9:8c:ee:ca:e9:11:fc:ac:f3:d7:39:b7: 44:b2:32:08:14:28:99:6c:ee:93:28:0d:14:fe:e9:21:01:26: e5:3e:bf:30:90:35:d2:44:96:f9:f3:93:91:3e:b0:14:e2:7f: 13:0b:60:e2:86:fa:b3:cb:6e:af:af:54:9f:e1:3a:72:f9:49: a1:f7:aa:46:ca:29:63:bf:2b:87:58:ba:d7:2c:3a:d2:c2:c1: 0a:ed:e9:19:15:73:c4:dd:10:3a:27:ee:a6:8c:fb:6a:8c:cc: 85:f4:bf:b7:93:c1:3d:78:58:96:d4:ba:4d:b8:fe:70:01:9a: 08:b4:7f:de:63:a7:ca:70:ea:60:35:2b:a4:0b:3b:d7:65:0d: c1:f3:f1:35:80:10:59:e3:1e:08:59:2e:40:1b:f9:4d:3b:55: 21:16:2d:2b:f7:f7:82:cb:37:e8:ff:d2:f3:e4:ce:25:19:cc: 86:8e:13:3d:b4:01:b9:84:12:a8:ac:14:64:6d:2e:95:a6:de: c1:68:73:d0:cb:e9:11:eb:4c:6b:70:51:77:93:6d:82:9b:fa: 50:58:47:c0 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUUaLy3S3Fq86t1mR9QAnjov3nVdIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAxNDA0NTUwMFoX DTI1MTAxMzA1MDAwMFowMzExMC8GA1UEAxMoQUY4OTU0QkY4MTkzRkFBMzk4QTdC QjNEQjIyOTBFNDQ5MUM3NjQ2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANDT/gBbHqkCI3pkNHL05GX9OhOLwamBoG/LQRkwmczGoPJeElj40jx8zKoi xK1MpvQJMvzI0w1hmvsI9nU9BxSEXeDpGZL2GJHR/VTk1+fCknM70mBW3uwyBbSt xbXH74k6mgms3piMzj0kpnPbkx2uQV5Z9C1IN81ZEPGFbbN4XacjOQu2w+qv2tTa UMI9oCvuIiFs01gK41czvFaD/2CciDPmgCmz/uoTlT8uOFAPjN0sM9sr3OVdQdCV OgCX/yk3HVOA9dIOFGbdWu1d8VEjSLNa5TVeRBIBmPyE6C4XSbWh4ILeuVn4DakI z38DN761yJRtVmAnXKUQudD+Oj8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSviVS/ gZP6o5inuz2yKQ5EkcdkZTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTkyNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGe99TANBgkqhkiG9w0BAQsFAAOCAQEADrc0WXHwHTWeueWlanlz VBN15Fzp1EUqrc9I5UDNl8B1vjhoLcf3+X3P2YzuyukR/Kzz1zm3RLIyCBQomWzu kygNFP7pIQEm5T6/MJA10kSW+fOTkT6wFOJ/Ewtg4ob6s8tur69Un+E6cvlJofeq RsopY78rh1i61yw60sLBCu3pGRVzxN0QOifupoz7aozMhfS/t5PBPXhYltS6Tbj+ cAGaCLR/3mOnynDqYDUrpAs712UNwfPxNYAQWeMeCFkuQBv5TTtVIRYtK/f3gss3 6P/S8+TOJRnMho4TPbQBuYQSqKwUZG0ulabewWhz0MvpEetMa3BRd5Ntgpv6UFhH wA== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:26 2024 by rpki-client on console-fra.rpki-client.org