$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149746.roa File: AS149746.roa (raw, json) Hash identifier: UZdzIxTPJUgF1P7qHRswQDfqnpwnoQcY5ploGVqL9Jw= Subject key identifier: 30:6C:89:BC:9C:C6:6C:BF:59:73:5A:8A:08:EC:23:6F:97:35:2A:F9 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 627A45BB441F21D5D8BE99C5E767F5024E0C42A0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149746.roa Signing time: Tue 29 Apr 2025 04:00:00 +0000 ROA not before: Tue 29 Apr 2025 03:55:00 +0000 ROA not after: Tue 28 Apr 2026 04:00:00 +0000 asID: 149746 IP address blocks: 202.46.152.0/22 maxlen: 24 2400:e660::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 14:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:7a:45:bb:44:1f:21:d5:d8:be:99:c5:e7:67:f5:02:4e:0c:42:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 29 03:55:00 2025 GMT Not After : Apr 28 04:00:00 2026 GMT Subject: CN=306C89BC9CC66CBF59735A8A08EC236F97352AF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1e:79:2d:73:1f:cc:9f:f3:b3:77:81:17:4a: 0e:47:50:a6:41:ba:c5:fc:d0:b0:69:3b:d5:b8:6c: 75:24:b8:80:2c:55:8e:b6:67:a5:2b:12:85:1e:8b: 6f:a2:1d:58:82:78:e8:b1:54:58:a5:82:2e:a5:ea: b6:95:0d:2a:8f:80:e7:36:1e:d4:57:6f:f3:42:42: 4b:4a:aa:4f:82:1d:29:4d:ac:0a:92:b5:85:f9:42: 53:72:f0:06:ef:0b:cb:55:7e:94:d9:97:af:51:6f: dd:c2:d3:7b:09:86:0c:5f:85:2a:da:9b:1e:48:2f: a5:c7:0e:c1:f4:98:da:13:2d:ae:b8:a9:76:68:4b: af:b3:f9:3d:e3:28:f6:ca:74:96:56:8d:d1:bd:87: 8b:6f:3e:3d:40:31:cc:d2:14:2c:33:db:02:65:62: 1a:f8:ed:72:c1:03:e4:ab:10:52:85:66:10:63:ba: bc:71:e8:b7:1b:d9:44:a9:2c:57:d4:67:64:6d:3b: e0:64:27:37:f4:8c:71:e6:f8:4a:08:a2:a9:8d:53: 9e:c0:9b:68:e0:2a:58:f1:a9:db:df:75:c9:44:55: 5b:80:e2:b8:ac:fc:5f:d2:9b:7b:91:75:3b:66:83: f1:88:92:85:33:d2:2c:3f:16:28:9e:d9:05:0b:1f: 33:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6C:89:BC:9C:C6:6C:BF:59:73:5A:8A:08:EC:23:6F:97:35:2A:F9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149746.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.46.152.0/22 IPv6: 2400:e660::/32 Signature Algorithm: sha256WithRSAEncryption 64:05:82:0b:83:15:76:07:c3:10:1a:33:fd:90:24:83:5c:74: 2c:7b:57:cf:93:70:90:51:54:4b:c2:e1:83:84:90:fc:89:ee: 94:3b:d0:f6:3b:a6:4d:18:f8:1d:2d:51:b7:44:a1:2d:69:ba: f6:8d:d1:6a:96:ce:4f:de:52:ef:9b:26:bf:1e:2f:7d:9c:7d: b8:1f:79:a8:14:16:32:33:30:f0:21:f4:c1:7d:6f:a9:2b:f1: 5d:d9:2d:7a:9c:ed:5a:0b:1a:c3:55:10:38:e8:a2:68:0b:28: 86:fd:0e:70:be:82:28:5f:fe:bf:42:15:23:0e:93:d3:42:e9: 94:25:6f:1a:57:0f:e2:e4:ee:52:6f:c5:f3:57:fe:af:61:ef: 3a:ed:74:75:3c:07:06:ff:4a:1b:c1:dc:04:ca:01:98:e8:c3: dc:3a:38:7e:78:e9:2f:0f:15:38:6f:aa:f8:de:70:de:71:fa: ac:61:b0:f6:fa:91:d2:89:43:b6:73:f7:4c:f1:f1:e7:bd:e8: 48:88:4a:be:63:bc:eb:e3:5e:38:fc:d0:9b:08:9f:82:38:e4: 2c:57:ce:67:bf:4f:9a:b9:d9:35:fc:6e:f1:46:d7:ae:0b:34: 97:45:65:f3:c2:52:f2:1d:de:57:63:71:5a:04:c7:f1:18:81: f6:0f:f9:9c -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUYnpFu0QfIdXYvpnF52f1Ak4MQqAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQyOTAzNTUwMFoX DTI2MDQyODA0MDAwMFowMzExMC8GA1UEAxMoMzA2Qzg5QkM5Q0M2NkNCRjU5NzM1 QThBMDhFQzIzNkY5NzM1MkFGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMEeeS1zH8yf87N3gRdKDkdQpkG6xfzQsGk71bhsdSS4gCxVjrZnpSsShR6L b6IdWIJ46LFUWKWCLqXqtpUNKo+A5zYe1Fdv80JCS0qqT4IdKU2sCpK1hflCU3Lw Bu8Ly1V+lNmXr1Fv3cLTewmGDF+FKtqbHkgvpccOwfSY2hMtrripdmhLr7P5PeMo 9sp0llaN0b2Hi28+PUAxzNIULDPbAmViGvjtcsED5KsQUoVmEGO6vHHotxvZRKks V9RnZG074GQnN/SMceb4SgiiqY1TnsCbaOAqWPGp2991yURVW4DiuKz8X9Kbe5F1 O2aD8YiShTPSLD8WKJ7ZBQsfM+ECAwEAAaOCAd8wggHbMB0GA1UdDgQWBBQwbIm8 nMZsv1lzWooI7CNvlzUq+TAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTc0Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAsoumDANBAIAAjAHAwUAJADmYDANBgkqhkiG9w0BAQsFAAOCAQEA ZAWCC4MVdgfDEBoz/ZAkg1x0LHtXz5NwkFFUS8Lhg4SQ/InulDvQ9jumTRj4HS1R t0ShLWm69o3RapbOT95S75smvx4vfZx9uB95qBQWMjMw8CH0wX1vqSvxXdktepzt Wgsaw1UQOOiiaAsohv0OcL6CKF/+v0IVIw6T00LplCVvGlcP4uTuUm/F81f+r2Hv Ou10dTwHBv9KG8HcBMoBmOjD3Do4fnjpLw8VOG+q+N5w3nH6rGGw9vqR0olDtnP3 TPHx573oSIhKvmO86+NeOPzQmwifgjjkLFfOZ79PmrnZNfxu8UbXrgs0l0Vl88JS 8h3eV2NxWgTH8RiB9g/5nA== -----END CERTIFICATE-----Generated at Tue May 6 06:50:13 2025 by rpki-client