$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149942.roa File: AS149942.roa (raw, json) Hash identifier: BpJWuI073W7KCpWsxDlReZTdH5tVt3DWxvP7+DkqLnE= Subject key identifier: 9F:0D:4F:3D:5C:13:C8:8C:18:27:CD:29:0B:EC:93:96:5A:79:E3:0F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0AE7B77962CA8CA8B73A45F9EAE83ED3F09CCEE6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149942.roa Signing time: Fri 20 Sep 2024 08:00:00 +0000 ROA not before: Fri 20 Sep 2024 07:55:00 +0000 ROA not after: Fri 19 Sep 2025 08:00:00 +0000 asID: 149942 IP address blocks: 103.191.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:e7:b7:79:62:ca:8c:a8:b7:3a:45:f9:ea:e8:3e:d3:f0:9c:ce:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 20 07:55:00 2024 GMT Not After : Sep 19 08:00:00 2025 GMT Subject: CN=9F0D4F3D5C13C88C1827CD290BEC93965A79E30F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:64:d9:58:9f:3e:98:63:0a:49:08:7c:b1:ff: 49:9c:66:99:4c:da:f2:41:8e:b8:f5:e2:dc:37:eb: d4:69:a0:2d:d2:7f:9f:36:aa:32:a5:8d:7c:36:34: 8a:2d:a6:ac:7f:31:d7:bb:24:c7:c4:71:c3:e3:c4: c9:d0:42:78:9b:50:33:1d:a3:22:f8:c3:6b:89:a3: 03:fe:0e:2f:94:06:39:71:dc:aa:84:b3:f6:34:29: 19:61:8a:9b:0a:fc:89:36:7f:cf:f6:a2:57:9b:b4: 4a:f1:f8:ea:0f:42:d9:5e:b5:ff:ba:3d:de:6f:f7: c6:50:2a:87:c9:4d:c1:a8:8d:b7:53:6f:60:12:01: 85:6c:59:20:18:8c:ea:f0:5f:2f:02:4f:86:5d:8e: 83:89:6d:8f:76:d8:a1:ab:35:89:0f:de:8c:98:ea: ea:b5:5f:9d:56:76:07:58:5f:e6:a8:5b:18:56:ff: 62:5d:fe:24:bb:3d:98:b6:70:45:5f:75:57:2e:f1: ba:dd:dc:f7:f1:66:1c:24:73:b4:24:19:00:49:a1: 45:57:a1:ec:e5:02:f7:9e:66:f0:82:1d:8e:7f:98: 16:b8:a3:31:82:a8:48:0c:94:a0:bb:9c:dc:c5:bc: 8f:f0:22:58:49:03:de:e6:d0:47:ea:66:be:9b:ee: c7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0D:4F:3D:5C:13:C8:8C:18:27:CD:29:0B:EC:93:96:5A:79:E3:0F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149942.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.124.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:2f:2f:b3:51:dd:8d:7a:2d:f1:1b:11:9e:a7:7f:09:16:d2: 07:96:df:a8:f8:75:88:04:d8:c9:e8:52:ac:47:7b:58:21:0b: 79:0d:bf:40:a3:e3:fc:e7:52:c5:7f:9e:97:1b:3a:47:51:92: dc:54:db:87:2b:a1:3d:92:77:39:1c:82:b3:c9:ca:17:32:86: 34:a6:b6:66:35:1d:64:e6:77:46:af:45:71:38:2b:8d:a5:c2: b7:a1:65:4b:00:b3:d4:44:3a:e2:1c:0c:b3:e2:c5:85:a1:47: 77:95:dc:99:15:de:21:97:da:77:a7:50:c2:06:f8:b2:e4:a0: 73:71:c8:b3:90:30:f7:40:06:a8:cc:12:8c:78:bd:24:c8:18: 49:bc:91:55:c0:cc:22:94:d7:10:38:97:8c:f9:f7:96:6a:fe: 96:54:fd:79:d2:1e:c6:0e:fb:bd:6d:3d:85:a1:87:6f:fd:c6: c4:a2:bc:72:d4:b2:f6:34:d2:92:72:a2:b4:0b:03:f1:38:f6: 07:fb:de:6e:80:b1:80:4a:1e:21:6a:71:13:04:bd:7e:a7:20: 64:7a:e2:1a:35:d1:05:4d:3d:9a:e5:d3:df:7c:82:d2:3a:f5: 33:d0:12:80:16:cd:e4:46:85:b2:fd:f2:4f:f7:32:b1:63:20: ec:e5:9a:d9 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUCue3eWLKjKi3OkX56ug+0/CczuYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkyMDA3NTUwMFoX DTI1MDkxOTA4MDAwMFowMzExMC8GA1UEAxMoOUYwRDRGM0Q1QzEzQzg4QzE4MjdD RDI5MEJFQzkzOTY1QTc5RTMwRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOtk2VifPphjCkkIfLH/SZxmmUza8kGOuPXi3Dfr1GmgLdJ/nzaqMqWNfDY0 ii2mrH8x17skx8Rxw+PEydBCeJtQMx2jIvjDa4mjA/4OL5QGOXHcqoSz9jQpGWGK mwr8iTZ/z/aiV5u0SvH46g9C2V61/7o93m/3xlAqh8lNwaiNt1NvYBIBhWxZIBiM 6vBfLwJPhl2Og4ltj3bYoas1iQ/ejJjq6rVfnVZ2B1hf5qhbGFb/Yl3+JLs9mLZw RV91Vy7xut3c9/FmHCRztCQZAEmhRVeh7OUC955m8IIdjn+YFrijMYKoSAyUoLuc 3MW8j/AiWEkD3ubQR+pmvpvux+kCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSfDU89 XBPIjBgnzSkL7JOWWnnjDzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTk0Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWe/fDANBgkqhkiG9w0BAQsFAAOCAQEASi8vs1HdjXot8RsRnqd/ CRbSB5bfqPh1iATYyehSrEd7WCELeQ2/QKPj/OdSxX+elxs6R1GS3FTbhyuhPZJ3 ORyCs8nKFzKGNKa2ZjUdZOZ3Rq9FcTgrjaXCt6FlSwCz1EQ64hwMs+LFhaFHd5Xc mRXeIZfad6dQwgb4suSgc3HIs5Aw90AGqMwSjHi9JMgYSbyRVcDMIpTXEDiXjPn3 lmr+llT9edIexg77vW09haGHb/3GxKK8ctSy9jTSknKitAsD8Tj2B/veboCxgEoe IWpxEwS9fqcgZHriGjXRBU09muXT33yC0jr1M9ASgBbN5EaFsv3yT/cysWMg7OWa 2Q== -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:56 2024 by rpki-client on console-fra.rpki-client.org