$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149877.roa File: AS149877.roa (raw, json) Hash identifier: seR20GZvEu5MRlV57853IrG4RPyWfRN3KP8StP4KPhs= Subject key identifier: F8:22:41:5E:EC:3F:39:01:D4:E0:1C:D8:58:4C:7F:D0:36:32:CC:7F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 415DFAC498472C0A0AAFEEB464A22A9AC853F0B0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149877.roa Signing time: Mon 02 Jun 2025 03:20:48 +0000 ROA not before: Mon 02 Jun 2025 03:15:48 +0000 ROA not after: Mon 01 Jun 2026 03:20:48 +0000 asID: 149877 IP address blocks: 202.70.132.0/23 maxlen: 24 202.125.82.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:5d:fa:c4:98:47:2c:0a:0a:af:ee:b4:64:a2:2a:9a:c8:53:f0:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 2 03:15:48 2025 GMT Not After : Jun 1 03:20:48 2026 GMT Subject: CN=F822415EEC3F3901D4E01CD8584C7FD03632CC7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:79:77:88:c7:d7:73:7c:71:b1:8c:b0:52:d2: 0a:c7:3e:02:6e:a8:92:38:3f:2c:87:f9:f7:bc:59: db:63:34:da:35:71:df:89:da:60:e2:60:1a:38:d5: c2:d0:72:45:0c:4e:cd:bb:30:08:4f:95:42:50:50: a9:2b:d6:4a:95:26:10:bd:89:c0:9d:de:e3:bf:c5: d6:94:0e:02:26:3a:d3:a7:58:cb:7d:9a:e1:97:5d: b4:de:21:e8:13:0e:9d:b1:e0:48:1f:ec:dc:ce:18: bb:cb:85:8a:4a:c7:52:02:52:70:e0:26:32:c2:ba: e3:d6:8b:d5:01:db:5d:7e:63:42:b7:c4:d8:98:21: 4a:f8:b8:17:4b:01:ac:93:20:c3:92:37:3d:58:f6: 10:72:ce:ef:dd:8e:bc:a1:4d:9e:1b:f9:f8:53:63: d5:fc:8d:04:3c:fe:e8:07:4c:9b:04:9f:cd:4b:18: 3d:dc:b8:48:79:a6:fd:ca:ac:69:ff:d5:0b:83:13: 01:68:44:b8:7d:ee:8e:62:d2:38:c6:29:7d:c2:50: 08:b8:79:bc:cf:f3:6a:67:65:43:18:dd:aa:9f:53: 68:80:bf:02:6d:f5:63:b1:a4:82:b7:23:a5:51:22: 1c:ab:49:fd:e5:22:09:1e:a3:82:ec:05:90:3c:8b: a9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:22:41:5E:EC:3F:39:01:D4:E0:1C:D8:58:4C:7F:D0:36:32:CC:7F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149877.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.70.132.0/23 202.125.82.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:75:59:85:17:aa:22:3e:d9:9c:c6:1f:b7:e6:42:12:9f:e5: 4a:db:fa:09:83:06:db:0a:ca:f9:d3:9c:62:90:b4:6e:d6:3d: 34:42:84:bc:8d:41:8e:37:dc:9e:17:e7:40:85:27:97:d3:8a: d8:a7:1c:1e:81:c8:e2:8b:5d:d3:27:0a:e6:f3:43:d7:f9:60: 26:6f:1d:1f:63:ee:71:f9:3c:15:89:45:c0:1e:00:08:de:c6: 6a:60:ca:2e:07:72:3d:79:91:39:c4:b8:8e:02:ef:6e:9c:6e: 0c:17:a8:e8:43:e3:d4:dc:73:0e:51:eb:92:04:21:6f:51:c2: 84:e1:fd:12:3f:84:3f:9f:d2:ac:ec:b6:b2:e3:77:fa:f1:aa: 6b:fb:8f:f5:08:9c:8e:67:96:f0:c1:8f:a6:3a:79:91:37:ae: ce:0d:09:40:a6:f9:b2:ab:83:c4:49:47:18:40:bc:83:a1:aa: db:69:ac:44:41:8e:c3:03:bf:ae:8c:09:d1:43:98:9c:7d:dc: f8:c3:1e:05:1f:84:da:57:dc:e9:62:c6:21:9b:81:28:61:c3: 1d:c4:1c:f2:05:21:35:d0:93:a4:f0:b3:4d:75:19:89:a1:31: 22:55:6c:d4:65:82:8d:27:8a:a5:38:f9:e5:50:de:d8:e8:55: 6b:4f:c1:b7 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUQV36xJhHLAoKr+60ZKIqmshT8LAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMjAzMTU0OFoX DTI2MDYwMTAzMjA0OFowMzExMC8GA1UEAxMoRjgyMjQxNUVFQzNGMzkwMUQ0RTAx Q0Q4NTg0QzdGRDAzNjMyQ0M3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOp5d4jH13N8cbGMsFLSCsc+Am6okjg/LIf597xZ22M02jVx34naYOJgGjjV wtByRQxOzbswCE+VQlBQqSvWSpUmEL2JwJ3e47/F1pQOAiY606dYy32a4ZddtN4h 6BMOnbHgSB/s3M4Yu8uFikrHUgJScOAmMsK649aL1QHbXX5jQrfE2JghSvi4F0sB rJMgw5I3PVj2EHLO792OvKFNnhv5+FNj1fyNBDz+6AdMmwSfzUsYPdy4SHmm/cqs af/VC4MTAWhEuH3ujmLSOMYpfcJQCLh5vM/zamdlQxjdqp9TaIC/Am31Y7Gkgrcj pVEiHKtJ/eUiCR6jguwFkDyLqfECAwEAAaOCAdYwggHSMB0GA1UdDgQWBBT4IkFe 7D85AdTgHNhYTH/QNjLMfzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0OTg3Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAcpGhAMEAcp9UjANBgkqhkiG9w0BAQsFAAOCAQEAmnVZhReqIj7Z nMYft+ZCEp/lStv6CYMG2wrK+dOcYpC0btY9NEKEvI1BjjfcnhfnQIUnl9OK2Kcc HoHI4otd0ycK5vND1/lgJm8dH2Pucfk8FYlFwB4ACN7GamDKLgdyPXmROcS4jgLv bpxuDBeo6EPj1NxzDlHrkgQhb1HChOH9Ej+EP5/SrOy2suN3+vGqa/uP9QicjmeW 8MGPpjp5kTeuzg0JQKb5squDxElHGEC8g6Gq22msREGOwwO/rowJ0UOYnH3c+MMe BR+E2lfc6WLGIZuBKGHDHcQc8gUhNdCTpPCzTXUZiaExIlVs1GWCjSeKpTj55VDe 2OhVa0/Btw== -----END CERTIFICATE-----Generated at Sun Jun 29 12:09:12 2025 by rpki-client