$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147154.roa File: AS147154.roa (raw, json) Hash identifier: fBUbd9UEz9TjqNQDjREVCIdpMT4m8ZXAJaAJOJURHwk= Subject key identifier: 18:C1:19:83:C0:34:60:C1:B6:AF:75:22:33:F2:3B:A6:0E:31:5B:2D Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 08E8D9C6AF6AD6830EFA20751B04E3A5C6900664 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147154.roa Signing time: Wed 22 May 2024 04:00:00 +0000 ROA not before: Wed 22 May 2024 03:55:00 +0000 ROA not after: Wed 21 May 2025 04:00:00 +0000 asID: 147154 IP address blocks: 103.191.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e8:d9:c6:af:6a:d6:83:0e:fa:20:75:1b:04:e3:a5:c6:90:06:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 22 03:55:00 2024 GMT Not After : May 21 04:00:00 2025 GMT Subject: CN=18C11983C03460C1B6AF752233F23BA60E315B2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:01:40:d1:97:e0:a3:67:ce:23:b4:22:73:54: 72:1f:b1:0b:df:16:6e:a7:27:ef:c4:e2:c2:14:8e: e7:14:8c:97:32:c9:9b:27:aa:24:e7:83:83:4e:1e: e7:82:dd:b9:f6:87:fe:dc:a0:e4:88:1f:4b:f3:de: 8c:e6:db:27:20:fa:2f:0b:9c:32:d8:b4:e9:c3:ac: 71:8a:c3:28:b6:64:97:c4:b3:92:9f:f9:01:96:ba: c1:c2:c2:f5:55:7d:9c:10:c8:20:7a:1c:a9:a5:7b: ef:35:48:bb:9c:8a:e6:7c:2f:eb:b2:ce:16:6e:10: ab:d2:a6:ce:88:bb:e8:cc:08:2c:de:65:dc:97:46: c5:44:87:45:b6:e4:f1:93:7d:79:cc:58:e0:a4:79: 20:5f:ac:79:63:20:50:d0:7a:02:2a:21:aa:73:75: ee:f1:66:27:3e:da:30:3a:49:d0:7b:af:06:64:5d: 28:e8:1d:6e:cd:6d:9f:04:0e:57:b6:01:52:2b:53: 8b:56:dd:08:ee:84:95:48:83:18:9c:67:a0:c1:c7: ea:de:5a:42:32:8f:2a:cf:23:fa:1f:3d:a4:01:54: 07:3a:97:f1:e3:ca:0a:f6:2a:49:bc:b8:a1:7b:91: 88:dd:9a:2a:55:4b:15:72:2d:30:3d:cb:3f:8e:c2: cc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C1:19:83:C0:34:60:C1:B6:AF:75:22:33:F2:3B:A6:0E:31:5B:2D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147154.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.109.0/24 Signature Algorithm: sha256WithRSAEncryption 71:a8:44:4c:62:65:7c:98:28:a6:79:ac:2c:fa:5f:10:e5:35: 79:03:06:94:8a:93:67:54:76:00:9e:9d:3e:39:1e:e4:e9:d9: 81:c0:67:f4:03:a7:92:29:c0:ae:0a:2f:6d:8b:97:8b:1c:fa: 08:4a:c6:3e:c6:ce:c4:c8:1a:f4:a6:46:3b:f1:5e:31:76:26: fd:a3:bc:d8:f8:56:b6:b3:70:4b:3d:71:03:7e:1d:27:20:fe: 29:a0:66:cf:2f:a9:01:63:5f:2c:8d:f7:96:17:31:ba:f5:04: 7f:79:d1:36:25:2a:89:5a:4d:fd:4d:27:40:49:a2:34:56:9c: e9:52:cf:dc:d1:1e:d5:c0:a8:55:60:6d:db:d4:68:1e:dd:16: 49:b0:90:30:fb:29:cc:67:8d:9f:ec:52:46:9f:46:67:d1:6f: 58:a5:b0:08:1b:15:a6:79:bb:a8:d2:76:66:bd:a1:1b:aa:a0: 9c:55:9f:1f:5c:cc:7a:45:0e:20:7e:00:2f:10:66:09:e1:3c: be:70:e8:e1:de:df:c2:bb:b5:e4:eb:1f:36:81:b9:17:fe:03: fb:50:8b:e0:cf:38:57:2e:8e:cd:a3:bb:4a:ef:cd:2e:fe:4e: 3b:66:e7:f9:46:d6:11:cb:2d:e0:22:26:b2:19:3c:4e:41:41: 1a:b5:da:ae -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUCOjZxq9q1oMO+iB1GwTjpcaQBmQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUyMjAzNTUwMFoX DTI1MDUyMTA0MDAwMFowMzExMC8GA1UEAxMoMThDMTE5ODNDMDM0NjBDMUI2QUY3 NTIyMzNGMjNCQTYwRTMxNUIyRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJYBQNGX4KNnziO0InNUch+xC98Wbqcn78TiwhSO5xSMlzLJmyeqJOeDg04e 54LdufaH/tyg5IgfS/PejObbJyD6LwucMti06cOscYrDKLZkl8Szkp/5AZa6wcLC 9VV9nBDIIHocqaV77zVIu5yK5nwv67LOFm4Qq9Kmzoi76MwILN5l3JdGxUSHRbbk 8ZN9ecxY4KR5IF+seWMgUNB6AiohqnN17vFmJz7aMDpJ0HuvBmRdKOgdbs1tnwQO V7YBUitTi1bdCO6ElUiDGJxnoMHH6t5aQjKPKs8j+h89pAFUBzqX8ePKCvYqSby4 oXuRiN2aKlVLFXItMD3LP47CzDsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQYwRmD wDRgwbavdSIz8jumDjFbLTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0NzE1NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGe/bTANBgkqhkiG9w0BAQsFAAOCAQEAcahETGJlfJgopnmsLPpf EOU1eQMGlIqTZ1R2AJ6dPjke5OnZgcBn9AOnkinArgovbYuXixz6CErGPsbOxMga 9KZGO/FeMXYm/aO82PhWtrNwSz1xA34dJyD+KaBmzy+pAWNfLI33lhcxuvUEf3nR NiUqiVpN/U0nQEmiNFac6VLP3NEe1cCoVWBt29RoHt0WSbCQMPspzGeNn+xSRp9G Z9FvWKWwCBsVpnm7qNJ2Zr2hG6qgnFWfH1zMekUOIH4ALxBmCeE8vnDo4d7fwru1 5OsfNoG5F/4D+1CL4M84Vy6OzaO7Su/NLv5OO2bn+UbWEcst4CImshk8TkFBGrXa rg== -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:28 2024 by rpki-client on console-ams.rpki-client.org