$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS46044.roa File: AS46044.roa (raw, json) Hash identifier: N+U2BghEK3vBiMkh85kV9soEM89gQU6OgAQI934dM2E= Subject key identifier: 16:AC:2C:36:1C:F3:F6:ED:D9:27:22:F5:1D:03:EC:E5:A3:6C:66:DB Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 463FA6F844FDC72FD08151A3A1B78009EF5A58E8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS46044.roa Signing time: Tue 10 Dec 2024 05:00:02 +0000 ROA not before: Tue 10 Dec 2024 04:55:02 +0000 ROA not after: Tue 09 Dec 2025 05:00:02 +0000 asID: 46044 IP address blocks: 111.223.252.0/22 maxlen: 24 2405:9940::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:3f:a6:f8:44:fd:c7:2f:d0:81:51:a3:a1:b7:80:09:ef:5a:58:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 10 04:55:02 2024 GMT Not After : Dec 9 05:00:02 2025 GMT Subject: CN=16AC2C361CF3F6EDD92722F51D03ECE5A36C66DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d2:ef:b7:92:4c:25:55:7a:a9:34:a1:3e:23: 06:ac:53:b5:7c:ac:f4:52:55:26:2f:a3:1e:75:a9: 4b:68:6a:3c:8e:9b:e5:f3:65:0f:49:2c:27:80:11: 94:1f:84:c6:93:49:52:07:81:60:4a:dd:2c:92:ac: 66:bb:48:13:e9:79:4a:45:e6:92:4a:5c:53:01:5c: 8c:cc:15:d9:a6:2e:d7:56:da:77:ac:79:29:9a:f0: fc:64:12:a4:77:4a:64:d1:73:7d:73:ce:0d:6e:09: 6d:23:b5:91:ac:c3:63:53:4a:e0:3e:65:56:02:4e: b6:e7:d9:47:1b:52:04:e0:87:99:1a:2b:56:bc:22: d5:e7:aa:9b:8d:30:57:3e:f4:39:e4:fa:61:91:be: d0:de:25:f0:02:0b:62:06:b7:af:16:f8:6f:87:a1: 7e:12:40:17:75:c7:27:4b:5c:3d:2d:40:9b:47:87: f6:c8:8b:cb:d9:d8:9a:f9:37:d5:5f:ff:b7:e1:b6: d5:ea:39:28:51:c1:f3:e4:84:42:30:07:0f:89:6b: 8f:e8:0c:34:f8:f0:83:b2:5e:13:93:ac:fb:a7:8c: 8a:2c:e9:ac:e2:ef:7e:4b:cd:31:f3:a4:2b:68:a6: 7a:d2:7b:fe:87:3f:fc:7a:ba:fd:14:ad:5d:79:d4: 36:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AC:2C:36:1C:F3:F6:ED:D9:27:22:F5:1D:03:EC:E5:A3:6C:66:DB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS46044.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 111.223.252.0/22 IPv6: 2405:9940::/32 Signature Algorithm: sha256WithRSAEncryption 82:24:87:21:d1:e2:af:96:88:4c:35:3e:86:a0:7f:a1:4b:a3: 6d:be:be:5c:c6:51:49:12:da:5e:9f:10:f6:3b:76:20:de:cf: 09:18:0b:f0:cc:9b:46:d2:7e:fb:23:71:03:52:2b:5a:0d:72: 61:7f:4c:f9:2e:cd:04:db:05:18:d0:02:64:aa:9b:bb:4d:ed: e6:f1:bf:df:aa:08:02:83:f3:05:14:c9:de:85:8b:6d:2a:4b: ea:67:ab:f1:c6:ea:9b:3a:17:0e:6a:81:85:17:e9:ca:fc:ee: a8:5e:ce:f6:88:e4:04:f2:8b:48:ae:d1:1b:c2:9e:88:0c:77: ae:d5:7e:a0:25:ce:10:dd:83:2e:00:8a:46:3c:ab:95:16:3a: 51:2e:df:83:d0:89:35:51:f4:be:2e:25:25:3c:32:44:ae:31: d8:38:63:1b:33:4a:97:e8:6e:da:af:71:21:63:ca:72:0f:3e: 79:7f:f2:14:1b:8c:f8:35:65:bd:7f:0a:8a:64:60:38:85:9d: 9a:c4:fa:e9:5b:96:75:c1:7a:ac:82:71:82:10:b0:3c:cd:68: e6:b2:37:4b:4e:de:fe:69:20:33:6a:34:7a:55:f3:5f:46:06: 66:02:07:03:7d:4d:5a:ae:a5:fe:29:1f:79:19:e6:37:30:fc: 6a:c5:d9:f9 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIURj+m+ET9xy/QgVGjobeACe9aWOgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUwMloX DTI1MTIwOTA1MDAwMlowMzExMC8GA1UEAxMoMTZBQzJDMzYxQ0YzRjZFREQ5Mjcy MkY1MUQwM0VDRTVBMzZDNjZEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM/S77eSTCVVeqk0oT4jBqxTtXys9FJVJi+jHnWpS2hqPI6b5fNlD0ksJ4AR lB+ExpNJUgeBYErdLJKsZrtIE+l5SkXmkkpcUwFcjMwV2aYu11bad6x5KZrw/GQS pHdKZNFzfXPODW4JbSO1kazDY1NK4D5lVgJOtufZRxtSBOCHmRorVrwi1eeqm40w Vz70OeT6YZG+0N4l8AILYga3rxb4b4ehfhJAF3XHJ0tcPS1Am0eH9siLy9nYmvk3 1V//t+G21eo5KFHB8+SEQjAHD4lrj+gMNPjwg7JeE5Os+6eMiizprOLvfkvNMfOk K2imetJ7/oc//Hq6/RStXXnUNi8CAwEAAaOCAd4wggHaMB0GA1UdDgQWBBQWrCw2 HPP27dknIvUdA+zlo2xm2zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzQ2MDQ0LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCb9/8MA0EAgACMAcDBQAkBZlAMA0GCSqGSIb3DQEBCwUAA4IBAQCC JIch0eKvlohMNT6GoH+hS6Ntvr5cxlFJEtpenxD2O3Yg3s8JGAvwzJtG0n77I3ED UitaDXJhf0z5Ls0E2wUY0AJkqpu7Te3m8b/fqggCg/MFFMnehYttKkvqZ6vxxuqb OhcOaoGFF+nK/O6oXs72iOQE8otIrtEbwp6IDHeu1X6gJc4Q3YMuAIpGPKuVFjpR Lt+D0Ik1UfS+LiUlPDJErjHYOGMbM0qX6G7ar3EhY8pyDz55f/IUG4z4NWW9fwqK ZGA4hZ2axPrpW5Z1wXqsgnGCELA8zWjmsjdLTt7+aSAzajR6VfNfRgZmAgcDfU1a rqX+KR95GeY3MPxqxdn5 -----END CERTIFICATE-----Generated at Sat Apr 5 06:22:41 2025 by rpki-client