$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147154.roa File: AS147154.roa (raw, json) Hash identifier: DGyGRPgJk+lKDgQinG+k22i95dGQk7MEazcCrjbJ3+U= Subject key identifier: 15:C8:1B:AD:65:8C:37:D0:0E:9B:0F:38:59:08:8E:D6:B2:B7:21:1F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 388BDE0AB9573A7C1CED81B43570E2A0C29834E8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147154.roa Signing time: Wed 21 Jun 2023 04:00:00 +0000 ROA not before: Wed 21 Jun 2023 03:55:00 +0000 ROA not after: Wed 19 Jun 2024 04:00:00 +0000 asID: 147154 IP address blocks: 103.191.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:8b:de:0a:b9:57:3a:7c:1c:ed:81:b4:35:70:e2:a0:c2:98:34:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 21 03:55:00 2023 GMT Not After : Jun 19 04:00:00 2024 GMT Subject: CN=15C81BAD658C37D00E9B0F3859088ED6B2B7211F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5f:4b:d1:85:fb:ae:5c:94:2f:51:43:64:a7: 1e:dc:96:92:e8:b5:80:f4:ef:10:d9:12:66:74:5e: 76:02:c1:5c:c4:a1:5f:b1:73:32:0c:e5:1b:c6:3a: 0d:4d:65:c5:9a:6e:16:33:cf:5d:c5:1e:fd:08:cb: 27:7d:f3:d1:24:1d:cf:b5:bf:d2:77:97:a2:6c:14: 6b:f3:bf:58:fc:55:ee:d9:d2:39:56:dd:c2:7b:a1: 34:95:dc:a0:a2:9f:b9:7e:30:77:67:3a:6b:d6:fd: e7:de:e4:bc:54:08:48:d1:1a:ce:35:9c:4b:d0:0b: 62:a2:c3:3b:3d:68:fb:b4:c6:d9:a5:f9:4e:be:42: 47:37:93:9c:ef:87:ae:e6:22:4b:2e:f3:8f:46:02: 8d:34:22:b2:f4:7d:a4:9f:b9:d1:82:a2:b6:3c:db: fa:1d:d2:07:08:89:77:86:56:63:f1:0c:38:79:b0: b9:4c:a9:1e:ad:ab:81:5a:cc:30:b9:d5:c4:14:e5: f5:7f:47:75:97:1e:e0:02:01:e1:e8:56:89:56:3f: b5:a5:05:8f:89:0e:bc:af:55:ba:f2:d1:29:33:63: 21:e9:63:de:f8:c8:f5:f3:07:75:7e:a1:2d:46:9a: e1:89:09:28:08:b3:ce:1b:b5:aa:b8:2e:f9:be:92: 37:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C8:1B:AD:65:8C:37:D0:0E:9B:0F:38:59:08:8E:D6:B2:B7:21:1F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147154.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.109.0/24 Signature Algorithm: sha256WithRSAEncryption 84:d6:89:25:57:75:e1:47:c2:70:fe:0c:b8:80:ce:72:57:dd: df:83:e0:30:50:9c:d6:6b:dd:08:fd:90:01:14:69:b7:17:0b: 3c:a3:cd:f9:5b:62:5d:2f:2a:ad:89:36:7f:6a:c9:97:7d:15: 8c:59:21:5b:e9:c4:09:f1:b4:42:89:07:0d:22:cf:17:e1:75: 6a:02:69:5d:9e:3d:01:26:cf:42:c7:14:e2:0e:5b:5a:37:20: 3f:78:b7:2c:93:18:87:40:84:97:3a:64:15:8d:9b:f1:f3:18: 6f:76:5c:5b:ee:75:d4:c9:0d:15:25:6f:45:cf:52:9b:c8:12: e0:8a:30:1b:2c:a5:ff:53:54:aa:22:50:a7:88:7a:38:9a:84: 24:a3:e8:30:75:cc:77:31:5b:27:05:d5:ed:a3:04:b5:83:3d: 17:d7:fc:07:58:f0:9d:5f:5b:e5:58:cd:71:b7:7e:33:d5:92: af:80:64:57:25:f1:ca:fe:dc:de:d4:59:a0:23:1c:bc:94:69: 1a:67:cb:08:1d:86:80:5d:e8:86:ce:b0:c9:c7:d2:0f:ed:9a: e8:a7:ec:42:2f:3f:64:9b:3a:f2:7d:ec:85:ab:87:59:96:df: a4:86:f8:91:9c:b7:23:f9:b7:f2:07:ca:ac:e9:56:36:a1:00: 7e:3f:78:7c -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUOIveCrlXOnwc7YG0NXDioMKYNOgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDYyMTAzNTUwMFoX DTI0MDYxOTA0MDAwMFowMzExMC8GA1UEAxMoMTVDODFCQUQ2NThDMzdEMDBFOUIw RjM4NTkwODhFRDZCMkI3MjExRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKBfS9GF+65clC9RQ2SnHtyWkui1gPTvENkSZnRedgLBXMShX7FzMgzlG8Y6 DU1lxZpuFjPPXcUe/QjLJ33z0SQdz7W/0neXomwUa/O/WPxV7tnSOVbdwnuhNJXc oKKfuX4wd2c6a9b9597kvFQISNEazjWcS9ALYqLDOz1o+7TG2aX5Tr5CRzeTnO+H ruYiSy7zj0YCjTQisvR9pJ+50YKitjzb+h3SBwiJd4ZWY/EMOHmwuUypHq2rgVrM MLnVxBTl9X9HdZce4AIB4ehWiVY/taUFj4kOvK9VuvLRKTNjIelj3vjI9fMHdX6h LUaa4YkJKAizzhu1qrgu+b6SN+kCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQVyBut ZYw30A6bDzhZCI7WsrchHzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0NzE1NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGe/bTANBgkqhkiG9w0BAQsFAAOCAQEAhNaJJVd14UfCcP4MuIDO clfd34PgMFCc1mvdCP2QARRptxcLPKPN+VtiXS8qrYk2f2rJl30VjFkhW+nECfG0 QokHDSLPF+F1agJpXZ49ASbPQscU4g5bWjcgP3i3LJMYh0CElzpkFY2b8fMYb3Zc W+511MkNFSVvRc9Sm8gS4IowGyyl/1NUqiJQp4h6OJqEJKPoMHXMdzFbJwXV7aME tYM9F9f8B1jwnV9b5VjNcbd+M9WSr4BkVyXxyv7c3tRZoCMcvJRpGmfLCB2GgF3o hs6wycfSD+2a6KfsQi8/ZJs68n3shauHWZbfpIb4kZy3I/m38gfKrOlWNqEAfj94 fA== -----END CERTIFICATE-----Generated at Wed May 8 10:06:53 2024 by rpki-client on console-ams.rpki-client.org