$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149969.roa File: AS149969.roa (raw, json) Hash identifier: vz+31WjUcR3BFyAhT8zT3hSh2l2kp2Sbw2cTl2+dstg= Subject key identifier: 6A:EA:F3:3E:3C:4A:A1:F4:02:91:9B:8F:8D:76:CE:58:B7:5A:16:6A Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 79ECFF8728415EDE495F43799103D09F2B333935 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149969.roa Signing time: Tue 31 Dec 2024 01:53:40 +0000 ROA not before: Tue 31 Dec 2024 01:48:40 +0000 ROA not after: Tue 30 Dec 2025 01:53:40 +0000 asID: 149969 IP address blocks: 103.23.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 12:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:ec:ff:87:28:41:5e:de:49:5f:43:79:91:03:d0:9f:2b:33:39:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 31 01:48:40 2024 GMT Not After : Dec 30 01:53:40 2025 GMT Subject: CN=6AEAF33E3C4AA1F402919B8F8D76CE58B75A166A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0f:b4:78:9c:01:25:95:33:fc:43:8c:a9:ef: c4:84:5a:de:45:81:13:43:a2:72:65:b9:57:a1:29: 1a:67:24:aa:4a:57:05:46:4f:66:93:2f:30:c0:d9: 26:82:be:59:0a:7d:0b:ef:de:e0:ab:33:e3:92:e8: 8f:18:5d:75:81:b0:1b:cc:c7:3a:52:bf:dd:47:0f: 0d:9a:a2:1f:ae:fb:06:e5:e9:03:df:2b:63:d8:ae: 6b:7f:86:01:51:4e:e0:0f:16:2f:e6:74:46:da:c7: 6b:ee:9e:64:a5:33:c1:ee:53:d3:ab:4b:fa:f8:7c: 19:b3:96:8e:5b:66:a4:b6:bd:cb:bd:f1:85:ec:32: d3:3c:a9:a5:3d:78:8e:60:8a:e9:5b:d5:41:c0:8f: 62:81:d3:85:47:42:b3:82:53:e8:06:d9:b5:08:a2: a8:5e:56:80:ed:8f:80:99:60:45:2e:37:b6:41:ab: 0f:cc:25:5c:a6:75:a0:8b:8a:38:cf:c3:ef:59:7a: 14:47:2c:ae:1c:4b:58:3d:02:93:0a:8c:d0:25:75: 73:7b:12:f8:da:44:53:c5:d7:24:f3:56:38:90:7f: 4b:27:0c:d5:0b:ce:c8:9b:74:3a:09:38:61:26:13: a2:31:b3:9e:38:88:31:ca:98:56:cc:a4:ed:2c:bb: f5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:EA:F3:3E:3C:4A:A1:F4:02:91:9B:8F:8D:76:CE:58:B7:5A:16:6A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149969.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.23.28.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:80:25:6d:2b:69:9d:67:3d:3b:22:ff:21:4c:5a:b5:90:db: ce:e1:28:c2:ab:0f:8c:aa:2d:c8:0f:c9:39:d1:f4:37:87:12: 6c:11:9c:c0:eb:4c:27:2c:d6:09:6d:f9:1c:5a:5c:53:f4:e3: 16:88:e4:f2:e3:35:ac:23:ad:60:81:41:a2:28:37:97:83:a8: 79:d4:09:9c:04:43:a0:8e:df:91:ba:0a:43:0d:b7:76:53:2e: 0b:35:d7:cb:f6:5b:7a:bd:a1:fd:77:26:71:8b:d1:dc:f7:ee: 3b:ff:4e:ad:a3:5b:08:d5:4a:f8:8f:77:93:d9:5a:d0:6b:2e: ea:a1:e5:63:2c:1e:d9:79:86:3c:37:75:de:d5:7c:e9:70:18: 2c:d9:a7:59:2d:7d:d5:e2:cb:94:ce:e0:9b:f0:ac:29:af:59: b7:a4:00:17:a2:1c:a4:a5:b3:3c:71:2e:81:dc:eb:24:78:1b: 9d:93:ae:25:a1:63:2e:00:10:10:ae:2a:00:13:dd:ac:07:e3: 43:b8:65:6c:64:5d:cc:b6:ef:03:64:17:77:cd:10:16:70:5e: b7:00:d5:a2:f1:1c:93:10:f4:28:ee:8b:0c:0c:66:90:26:f2: 8d:ad:b4:6d:30:97:d0:1b:6a:b0:bc:ac:2a:42:32:47:c1:85: 98:37:2b:36 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUeez/hyhBXt5JX0N5kQPQnyszOTUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIzMTAxNDg0MFoX DTI1MTIzMDAxNTM0MFowMzExMC8GA1UEAxMoNkFFQUYzM0UzQzRBQTFGNDAyOTE5 QjhGOEQ3NkNFNThCNzVBMTY2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJoPtHicASWVM/xDjKnvxIRa3kWBE0OicmW5V6EpGmckqkpXBUZPZpMvMMDZ JoK+WQp9C+/e4Ksz45LojxhddYGwG8zHOlK/3UcPDZqiH677BuXpA98rY9iua3+G AVFO4A8WL+Z0RtrHa+6eZKUzwe5T06tL+vh8GbOWjltmpLa9y73xhewy0zyppT14 jmCK6VvVQcCPYoHThUdCs4JT6AbZtQiiqF5WgO2PgJlgRS43tkGrD8wlXKZ1oIuK OM/D71l6FEcsrhxLWD0CkwqM0CV1c3sS+NpEU8XXJPNWOJB/SycM1QvOyJt0Ogk4 YSYTojGznjiIMcqYVsyk7Sy79bUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRq6vM+ PEqh9AKRm4+Nds5Yt1oWajAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTk2OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGcXHDANBgkqhkiG9w0BAQsFAAOCAQEAWoAlbStpnWc9OyL/IUxa tZDbzuEowqsPjKotyA/JOdH0N4cSbBGcwOtMJyzWCW35HFpcU/TjFojk8uM1rCOt YIFBoig3l4OoedQJnARDoI7fkboKQw23dlMuCzXXy/Zber2h/XcmcYvR3PfuO/9O raNbCNVK+I93k9la0Gsu6qHlYywe2XmGPDd13tV86XAYLNmnWS191eLLlM7gm/Cs Ka9Zt6QAF6IcpKWzPHEugdzrJHgbnZOuJaFjLgAQEK4qABPdrAfjQ7hlbGRdzLbv A2QXd80QFnBetwDVovEckxD0KO6LDAxmkCbyja20bTCX0BtqsLysKkIyR8GFmDcr Ng== -----END CERTIFICATE-----Generated at Tue Apr 8 14:23:52 2025 by rpki-client