$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149942.roa File: AS149942.roa (raw, json) Hash identifier: h49c+PnZ8b52Fwn+P/4R2Xnpb2zz+WgNIpKZciYfnEc= Subject key identifier: B4:4D:B7:A2:B4:65:D7:CE:33:94:4D:D5:53:F0:42:8E:07:6E:28:46 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 63048C3A111FE4681AAD402073039568FEB93F21 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149942.roa Signing time: Fri 20 Oct 2023 07:01:51 +0000 ROA not before: Fri 20 Oct 2023 06:56:51 +0000 ROA not after: Fri 18 Oct 2024 07:01:51 +0000 asID: 149942 IP address blocks: 103.191.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:04:8c:3a:11:1f:e4:68:1a:ad:40:20:73:03:95:68:fe:b9:3f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 20 06:56:51 2023 GMT Not After : Oct 18 07:01:51 2024 GMT Subject: CN=B44DB7A2B465D7CE33944DD553F0428E076E2846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:23:09:16:66:a4:14:64:fb:9a:e5:1d:b8:01: 1b:45:13:38:27:5d:06:3f:34:ca:5b:64:07:5f:71: d7:d9:8a:42:a1:76:cc:36:4a:2e:7d:06:3b:88:a7: 14:ed:83:25:a0:d7:71:ac:b6:ce:b6:f7:8c:a7:ef: 72:ec:3c:d9:7a:b6:0b:c6:de:b0:70:4a:bc:c8:73: a2:3c:bd:b5:89:d2:8a:4f:fa:91:e2:33:0d:b8:c6: d1:bb:90:0c:27:aa:96:d1:41:f4:8c:11:e9:5c:f6: ae:b0:6f:d1:df:51:02:c4:43:c6:50:14:39:bc:0d: 95:cd:c7:dd:bf:06:aa:11:a3:c0:b8:9a:c2:7d:0f: eb:62:38:be:89:90:43:eb:50:48:97:ac:f6:34:39: 48:83:e9:96:06:10:a8:aa:89:bd:e8:33:7f:af:55: 52:55:70:16:6a:6b:94:0a:12:a8:2a:41:b1:56:27: 91:2e:09:c1:55:37:30:a8:67:1c:a7:90:78:28:82: 88:75:d5:72:da:1b:10:e1:61:7d:49:87:89:5f:c5: 95:4e:7e:2d:bc:15:3e:fe:ee:6c:d2:ad:2d:18:b4: 07:5a:eb:77:e8:da:98:85:49:5a:28:92:0b:f1:67: 04:06:75:5d:d1:2e:47:53:22:5b:fe:e9:7f:6d:3f: 96:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:4D:B7:A2:B4:65:D7:CE:33:94:4D:D5:53:F0:42:8E:07:6E:28:46 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149942.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.124.0/23 Signature Algorithm: sha256WithRSAEncryption 93:2a:46:bb:4d:62:c1:bd:95:48:ca:c6:98:10:19:12:be:dd: 0a:e6:d6:a3:86:d5:b3:a5:09:1c:d6:4d:14:bc:08:8d:49:79: 98:cc:e1:70:f0:b3:e0:07:05:d1:3c:9b:a2:ee:87:01:8b:1b: 0f:c5:cb:a7:99:dc:47:5a:fd:87:4b:7b:4f:e1:e5:88:5b:6e: e6:ac:78:f4:cf:7a:3c:25:17:0b:c3:1d:3b:09:df:ac:45:c8: ec:6d:1b:8d:49:fc:d0:e1:d2:d5:61:59:6e:60:b0:92:cc:78: 21:bb:38:16:43:04:9d:f3:6a:e9:4a:ff:e6:a2:80:ce:a7:05: 50:78:c5:3e:9b:a1:29:09:81:a7:8e:62:54:c7:ef:57:5c:09: f4:21:40:cd:9a:7b:c2:82:02:2b:9c:0a:43:6a:ee:89:c4:9f: 13:f6:45:94:3e:aa:47:37:06:b5:c9:6a:11:ad:03:bb:27:d3: 91:c3:3a:c7:54:66:30:51:7d:1d:85:57:fa:ed:98:d0:f7:3c: 22:68:25:6a:94:39:cf:3d:91:58:05:23:d6:44:ad:55:06:48: af:e6:2f:2e:58:ba:14:eb:fe:be:fc:c1:f8:da:ad:d3:fc:21: 80:99:d7:f7:01:e7:96:24:3e:9a:d7:91:52:89:a9:af:42:91: d9:60:fd:4e -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUYwSMOhEf5GgarUAgcwOVaP65PyEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAyMDA2NTY1MVoX DTI0MTAxODA3MDE1MVowMzExMC8GA1UEAxMoQjQ0REI3QTJCNDY1RDdDRTMzOTQ0 REQ1NTNGMDQyOEUwNzZFMjg0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMcjCRZmpBRk+5rlHbgBG0UTOCddBj80yltkB19x19mKQqF2zDZKLn0GO4in FO2DJaDXcay2zrb3jKfvcuw82Xq2C8besHBKvMhzojy9tYnSik/6keIzDbjG0buQ DCeqltFB9IwR6Vz2rrBv0d9RAsRDxlAUObwNlc3H3b8GqhGjwLiawn0P62I4vomQ Q+tQSJes9jQ5SIPplgYQqKqJvegzf69VUlVwFmprlAoSqCpBsVYnkS4JwVU3MKhn HKeQeCiCiHXVctobEOFhfUmHiV/FlU5+LbwVPv7ubNKtLRi0B1rrd+jamIVJWiiS C/FnBAZ1XdEuR1MiW/7pf20/lv0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBS0Tbei tGXXzjOUTdVT8EKOB24oRjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTk0Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWe/fDANBgkqhkiG9w0BAQsFAAOCAQEAkypGu01iwb2VSMrGmBAZ Er7dCubWo4bVs6UJHNZNFLwIjUl5mMzhcPCz4AcF0Tybou6HAYsbD8XLp5ncR1r9 h0t7T+HliFtu5qx49M96PCUXC8MdOwnfrEXI7G0bjUn80OHS1WFZbmCwksx4Ibs4 FkMEnfNq6Ur/5qKAzqcFUHjFPpuhKQmBp45iVMfvV1wJ9CFAzZp7woICK5wKQ2ru icSfE/ZFlD6qRzcGtclqEa0DuyfTkcM6x1RmMFF9HYVX+u2Y0Pc8ImglapQ5zz2R WAUj1kStVQZIr+YvLli6FOv+vvzB+Nqt0/whgJnX9wHnliQ+mteRUompr0KR2WD9 Tg== -----END CERTIFICATE-----Generated at Wed May 8 10:06:54 2024 by rpki-client on console-ams.rpki-client.org