$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149689.roa File: AS149689.roa (raw, json) Hash identifier: dEesEGNZszwwL6ps3gLDdlp11/UCld8zBnZgxWUozkI= Subject key identifier: 5C:F6:61:33:58:11:D6:B4:A4:35:AF:03:53:AB:05:E0:A6:2E:2D:EA Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 014CEF1A202291859E7FD9D068EC2664379BD4A9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149689.roa Signing time: Fri 02 May 2025 05:00:00 +0000 ROA not before: Fri 02 May 2025 04:55:00 +0000 ROA not after: Fri 01 May 2026 05:00:00 +0000 asID: 149689 IP address blocks: 103.185.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 14:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:4c:ef:1a:20:22:91:85:9e:7f:d9:d0:68:ec:26:64:37:9b:d4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 2 04:55:00 2025 GMT Not After : May 1 05:00:00 2026 GMT Subject: CN=5CF661335811D6B4A435AF0353AB05E0A62E2DEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a6:f6:74:d2:a0:4f:ce:7a:97:64:9f:14:b7: 0c:8b:8c:c6:09:29:ac:8c:09:b8:54:f9:11:7e:31: 0f:c1:be:1e:c8:56:e6:80:53:8d:d6:f6:ee:89:37: ff:c8:92:8e:fa:55:7d:fe:95:e7:fc:01:58:05:0d: b9:c4:39:f8:01:15:fc:f0:d5:95:8f:ea:20:9d:7c: 16:fa:47:56:91:94:47:93:f2:cc:47:df:97:1f:b9: 89:e7:c0:6d:4d:b4:3d:b4:5c:e0:46:2d:78:a1:26: ee:a7:41:ca:53:36:76:74:e8:de:54:3a:d3:15:fd: 01:c0:f2:8c:ba:12:c9:4d:e8:0a:5c:77:ea:66:7e: 5c:4c:8d:7c:54:3a:8e:76:53:6b:9d:d8:9c:c0:f5: e3:33:16:d4:e2:ec:8f:37:e9:5c:5d:47:54:99:3c: 0c:fc:32:f2:97:6e:d3:96:a3:d3:90:8a:8b:e6:9b: 4d:3b:cc:c0:15:49:23:86:90:e9:62:a1:df:d1:e9: 0a:6e:13:b0:d0:1b:63:6f:ce:dd:88:5b:29:ed:f4: 59:e5:7f:83:af:79:d1:5d:d5:ee:e0:6e:7a:92:2f: 8c:1d:24:39:63:ac:8d:67:ae:28:c4:72:88:4c:0f: 76:e4:53:7a:98:43:64:c3:ed:35:4f:18:02:7b:6f: 5f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F6:61:33:58:11:D6:B4:A4:35:AF:03:53:AB:05:E0:A6:2E:2D:EA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149689.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.185.252.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:30:53:83:cf:44:93:bc:c4:4f:ec:9b:72:4e:cd:72:fd:a6: 1a:7f:62:d1:ea:a1:5d:fb:29:35:84:b8:24:c6:02:3d:c6:b9: 45:cd:a4:12:ab:fe:3e:19:4c:68:30:9d:f4:78:54:94:85:e7: 52:69:11:83:4d:78:25:2f:8b:1a:98:01:97:31:6f:1f:69:70: 30:f4:72:04:f9:3b:2e:8e:f9:4d:cc:85:0d:06:3a:53:db:00: d4:0f:90:04:9e:0e:03:50:02:c6:90:85:64:87:16:4c:67:2a: 38:72:67:fd:f3:a4:f8:a2:dc:0d:be:1f:3f:7e:b8:bc:54:cc: b8:98:e8:a8:07:7d:c5:54:00:80:7d:76:51:b4:b4:06:95:0a: 23:a9:77:89:49:12:05:40:3f:4a:4b:f3:d3:16:fb:c9:b3:c8: 78:c7:c5:0d:a9:50:77:21:3c:0a:ff:73:75:3c:83:6f:83:e5: aa:99:30:60:61:90:75:7e:7f:6d:c1:9e:4b:d9:87:1c:f0:69: 53:da:9e:12:79:e8:9b:83:d7:98:64:9e:11:7b:12:3d:79:04: 42:ae:5a:64:d1:a1:23:94:ba:62:b3:27:bd:4f:b0:03:17:f5: 11:4d:2e:63:a6:ce:73:6d:33:53:d4:4d:45:e3:40:7f:64:62: f8:57:04:b7 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUAUzvGiAikYWef9nQaOwmZDeb1KkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUwMjA0NTUwMFoX DTI2MDUwMTA1MDAwMFowMzExMC8GA1UEAxMoNUNGNjYxMzM1ODExRDZCNEE0MzVB RjAzNTNBQjA1RTBBNjJFMkRFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL+m9nTSoE/OepdknxS3DIuMxgkprIwJuFT5EX4xD8G+HshW5oBTjdb27ok3 /8iSjvpVff6V5/wBWAUNucQ5+AEV/PDVlY/qIJ18FvpHVpGUR5PyzEfflx+5iefA bU20PbRc4EYteKEm7qdBylM2dnTo3lQ60xX9AcDyjLoSyU3oClx36mZ+XEyNfFQ6 jnZTa53YnMD14zMW1OLsjzfpXF1HVJk8DPwy8pdu05aj05CKi+abTTvMwBVJI4aQ 6WKh39HpCm4TsNAbY2/O3YhbKe30WeV/g6950V3V7uBuepIvjB0kOWOsjWeuKMRy iEwPduRTephDZMPtNU8YAntvX/ECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRc9mEz WBHWtKQ1rwNTqwXgpi4t6jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTY4OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWe5/DANBgkqhkiG9w0BAQsFAAOCAQEADzBTg89Ek7zET+ybck7N cv2mGn9i0eqhXfspNYS4JMYCPca5Rc2kEqv+PhlMaDCd9HhUlIXnUmkRg014JS+L GpgBlzFvH2lwMPRyBPk7Lo75TcyFDQY6U9sA1A+QBJ4OA1ACxpCFZIcWTGcqOHJn /fOk+KLcDb4fP364vFTMuJjoqAd9xVQAgH12UbS0BpUKI6l3iUkSBUA/Skvz0xb7 ybPIeMfFDalQdyE8Cv9zdTyDb4PlqpkwYGGQdX5/bcGeS9mHHPBpU9qeEnnom4PX mGSeEXsSPXkEQq5aZNGhI5S6YrMnvU+wAxf1EU0uY6bOc20zU9RNReNAf2Ri+FcE tw== -----END CERTIFICATE-----Generated at Mon May 5 23:57:43 2025 by rpki-client