$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147159.roa File: AS147159.roa (raw, json) Hash identifier: wFlmkrLOmOW0Be8/xIDv4KGz8g1TBQej4qg6qQM5Beo= Subject key identifier: 53:94:6D:10:C8:EC:8A:42:D6:A7:51:8D:FA:F9:23:7D:CC:C3:AD:C1 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5B350301C43F25D43CBF18D15702CBBC42CC503E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147159.roa Signing time: Tue 28 May 2024 04:29:33 +0000 ROA not before: Tue 28 May 2024 04:24:33 +0000 ROA not after: Tue 27 May 2025 04:29:33 +0000 asID: 147159 IP address blocks: 36.50.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 03:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:35:03:01:c4:3f:25:d4:3c:bf:18:d1:57:02:cb:bc:42:cc:50:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 28 04:24:33 2024 GMT Not After : May 27 04:29:33 2025 GMT Subject: CN=53946D10C8EC8A42D6A7518DFAF9237DCCC3ADC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:63:c6:a6:18:f3:c6:52:8d:8b:b9:d9:f6:e0: 2a:3d:c0:cb:94:0f:f6:0a:2d:2d:47:78:16:3e:58: 10:26:b9:76:3d:4f:ea:6d:65:59:93:14:c5:79:b9: 63:af:8e:28:f5:0c:20:a5:b8:f3:98:c9:cc:e1:1f: 5c:96:03:81:22:58:a9:f4:79:21:61:42:fe:a8:af: ee:b2:f4:03:b6:66:6f:76:ed:72:0b:c4:9a:77:b4: 6e:0f:bf:d4:6c:57:21:02:bb:0d:74:e6:47:50:bb: 71:c2:27:96:bf:51:fd:78:af:3b:31:1c:cd:7c:f1: 21:1a:a9:3c:2d:7a:67:83:19:99:49:bb:2b:2b:38: 91:01:7c:54:95:6a:35:f2:5c:f3:91:c9:61:b0:75: bb:ae:d9:e3:52:11:fb:dc:63:14:94:37:e2:3c:03: 64:b3:cb:33:32:eb:a1:19:6f:6b:4f:1d:65:93:d6: fc:b7:bd:b2:92:23:34:37:86:13:a8:73:02:9a:b1: 2c:d9:cd:10:76:56:b1:7c:b7:f7:4a:b4:76:f1:4e: d5:2c:26:f9:b9:12:b6:cd:24:f9:eb:4f:9d:5c:d9: ac:4a:c4:d1:f7:76:d4:36:dd:45:8a:e7:ac:5e:27: 5b:a1:be:2f:9a:6e:97:39:c3:1f:c2:15:ab:c3:c8: f5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:94:6D:10:C8:EC:8A:42:D6:A7:51:8D:FA:F9:23:7D:CC:C3:AD:C1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147159.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.205.0/24 Signature Algorithm: sha256WithRSAEncryption 54:a4:35:25:f2:78:6f:fa:c8:7d:06:35:9a:b1:ce:6b:00:6f: ce:1b:fd:c6:3e:a8:dd:7c:d9:52:66:58:f5:b3:c6:89:51:f7: 40:a9:de:9d:e2:2a:6e:29:d2:e6:21:70:a4:e1:14:15:6a:ef: a1:03:53:95:6e:9c:3a:c2:f4:68:1b:b1:09:f1:b9:22:a1:57: 5b:af:7d:b1:14:db:3e:84:7d:2b:2e:05:fb:d8:03:5f:bb:a1: 9f:7e:c5:da:44:2c:dc:c6:e4:f8:8f:9e:fd:1c:ff:a7:65:00: 90:9f:78:40:dd:5d:a2:60:8a:86:d3:8b:cf:8a:3e:59:29:90: 97:9f:9b:71:8f:68:1a:65:b8:85:2b:90:f7:60:3d:18:65:6a: de:22:e0:2b:7a:2c:5e:6d:88:17:b0:0d:7f:18:9c:3c:5d:f8: b5:f9:cb:a5:64:68:34:01:79:5f:20:3b:18:93:d9:0e:80:2f: b9:c8:82:5d:7b:f9:d6:68:92:9d:f7:c8:82:7f:bc:b3:50:3f: 44:44:b9:03:aa:50:42:6c:69:ec:dd:e8:a3:28:de:6d:9f:f1: b9:3c:81:65:6e:54:7b:7e:92:84:6e:25:a1:75:1b:0d:bb:b2: b9:9a:ed:e5:9d:62:f5:be:79:35:d2:a1:6d:65:58:6e:20:74: 75:19:bf:ff -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUWzUDAcQ/JdQ8vxjRVwLLvELMUD4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUyODA0MjQzM1oX DTI1MDUyNzA0MjkzM1owMzExMC8GA1UEAxMoNTM5NDZEMTBDOEVDOEE0MkQ2QTc1 MThERkFGOTIzN0RDQ0MzQURDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKhjxqYY88ZSjYu52fbgKj3Ay5QP9gotLUd4Fj5YECa5dj1P6m1lWZMUxXm5 Y6+OKPUMIKW485jJzOEfXJYDgSJYqfR5IWFC/qiv7rL0A7Zmb3btcgvEmne0bg+/ 1GxXIQK7DXTmR1C7ccInlr9R/XivOzEczXzxIRqpPC16Z4MZmUm7Kys4kQF8VJVq NfJc85HJYbB1u67Z41IR+9xjFJQ34jwDZLPLMzLroRlva08dZZPW/Le9spIjNDeG E6hzApqxLNnNEHZWsXy390q0dvFO1Swm+bkSts0k+etPnVzZrErE0fd21DbdRYrn rF4nW6G+L5pulznDH8IVq8PI9VUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRTlG0Q yOyKQtanUY36+SN9zMOtwTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0NzE1OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEACQyzTANBgkqhkiG9w0BAQsFAAOCAQEAVKQ1JfJ4b/rIfQY1mrHO awBvzhv9xj6o3XzZUmZY9bPGiVH3QKneneIqbinS5iFwpOEUFWrvoQNTlW6cOsL0 aBuxCfG5IqFXW699sRTbPoR9Ky4F+9gDX7uhn37F2kQs3Mbk+I+e/Rz/p2UAkJ94 QN1domCKhtOLz4o+WSmQl5+bcY9oGmW4hSuQ92A9GGVq3iLgK3osXm2IF7ANfxic PF34tfnLpWRoNAF5XyA7GJPZDoAvuciCXXv51miSnffIgn+8s1A/RES5A6pQQmxp 7N3ooyjebZ/xuTyBZW5Ue36ShG4loXUbDbuyuZrt5Z1i9b55NdKhbWVYbiB0dRm/ /w== -----END CERTIFICATE-----Generated at Sun Jun 23 00:04:03 2024 by rpki-client on console-ams.rpki-client.org