$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151000.roa File: AS151000.roa (raw, json) Hash identifier: aDVZ5XUNa2juIxkgSCTyzEdsbUrATez5gNkoxbRpZx8= Subject key identifier: 0B:96:EF:B4:9D:65:1E:9C:9D:8B:1E:4D:38:32:69:4D:6B:7C:30:9F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 390793D7929BB2FA5311A398F9D8CD507E6CABC1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151000.roa Signing time: Thu 02 Jan 2025 05:00:00 +0000 ROA not before: Thu 02 Jan 2025 04:55:00 +0000 ROA not after: Thu 01 Jan 2026 05:00:00 +0000 asID: 151000 IP address blocks: 103.139.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:07:93:d7:92:9b:b2:fa:53:11:a3:98:f9:d8:cd:50:7e:6c:ab:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jan 2 04:55:00 2025 GMT Not After : Jan 1 05:00:00 2026 GMT Subject: CN=0B96EFB49D651E9C9D8B1E4D3832694D6B7C309F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:42:57:69:e3:bf:90:22:e1:ed:64:2c:8c:04: 72:8f:96:eb:c6:e7:9f:70:d5:a5:89:93:9a:59:cd: b6:4e:e7:a3:55:20:c0:e7:59:99:b4:4b:b5:68:9f: 78:8b:07:ad:27:7a:9d:d5:da:c8:c1:b2:8e:1d:4f: 20:b6:dd:76:92:9a:25:18:cb:ca:d4:08:5a:4c:56: 33:e5:c6:43:2c:ea:42:bb:93:1f:ca:32:4c:22:d6: 90:5f:76:da:69:db:d6:d6:1f:a2:b7:9e:a7:3d:f4: 2c:63:71:5d:9e:73:57:ec:c7:5a:b0:4e:35:cb:8b: 65:89:2e:a4:4e:2a:7b:93:79:7b:e5:3c:bc:29:8d: 57:84:83:79:99:c7:81:78:e7:38:d3:42:c8:b1:0f: d1:24:d2:42:70:40:02:e3:4c:20:16:12:c4:cd:72: c3:52:46:a4:e3:37:43:75:e9:b4:0d:2d:30:07:37: 5c:52:41:2a:b9:5b:1e:3a:c7:0e:a4:b8:2a:8c:c7: f8:53:47:68:b1:78:b6:4b:26:03:4c:24:e4:8b:98: 3c:8a:b6:f2:79:ce:2c:7a:5a:64:6e:60:c5:8f:bd: 8f:4e:10:eb:29:b9:22:42:cf:a2:5f:63:62:4d:c4: e4:4c:2f:02:3b:73:5b:66:4e:5b:31:10:6a:1e:73: 28:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:96:EF:B4:9D:65:1E:9C:9D:8B:1E:4D:38:32:69:4D:6B:7C:30:9F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151000.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.244.0/23 Signature Algorithm: sha256WithRSAEncryption 98:a5:22:f2:e2:70:4c:96:21:b1:d7:de:96:d7:f9:1e:26:1f: d5:58:13:70:9a:ec:d6:f7:e0:de:57:ee:5c:a8:ba:22:97:24: dd:22:34:6f:21:e8:aa:34:f8:32:09:55:b3:2c:f3:aa:b7:fe: 55:e3:5d:d8:f2:59:b6:51:67:27:84:5d:7e:d9:88:22:f3:4c: 80:d2:1f:86:5d:c7:64:a9:a3:b8:33:a3:eb:e0:c6:bb:61:54: 14:28:fa:86:8b:03:61:99:67:8a:e0:9d:b1:75:b7:a0:24:3a: 34:a9:9e:5d:14:ab:46:aa:2b:c1:0b:41:fc:2a:ad:e8:a5:a2: 53:be:06:b8:d9:c8:32:d5:c2:c3:ec:c4:90:b3:67:f9:e8:34: 0a:bc:35:0c:22:c1:a8:ba:c3:1a:c9:5b:10:5d:c3:9c:93:81: 57:3c:f6:c4:96:a3:54:c5:1b:de:19:34:81:01:a2:fd:d7:1e: 20:0f:ad:6d:f6:29:cb:ae:ac:25:21:e4:7c:90:92:60:8e:00: 89:c2:53:1a:4a:27:6f:11:a3:1e:38:98:84:9a:da:7b:30:a7: f6:aa:e8:87:60:fa:0d:81:91:3b:f9:03:b1:c1:68:00:5b:3e: 06:61:2f:2b:c5:29:70:9f:2a:58:79:c8:10:a2:b0:42:44:00: fa:b2:5d:4c -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUOQeT15KbsvpTEaOY+djNUH5sq8EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEwMjA0NTUwMFoX DTI2MDEwMTA1MDAwMFowMzExMC8GA1UEAxMoMEI5NkVGQjQ5RDY1MUU5QzlEOEIx RTREMzgzMjY5NEQ2QjdDMzA5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNCV2njv5Ai4e1kLIwEco+W68bnn3DVpYmTmlnNtk7no1UgwOdZmbRLtWif eIsHrSd6ndXayMGyjh1PILbddpKaJRjLytQIWkxWM+XGQyzqQruTH8oyTCLWkF92 2mnb1tYforeepz30LGNxXZ5zV+zHWrBONcuLZYkupE4qe5N5e+U8vCmNV4SDeZnH gXjnONNCyLEP0STSQnBAAuNMIBYSxM1yw1JGpOM3Q3XptA0tMAc3XFJBKrlbHjrH DqS4KozH+FNHaLF4tksmA0wk5IuYPIq28nnOLHpaZG5gxY+9j04Q6ym5IkLPol9j Yk3E5EwvAjtzW2ZOWzEQah5zKOkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQLlu+0 nWUenJ2LHk04MmlNa3wwnzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTAwMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWeL9DANBgkqhkiG9w0BAQsFAAOCAQEAmKUi8uJwTJYhsdfeltf5 HiYf1VgTcJrs1vfg3lfuXKi6Ipck3SI0byHoqjT4MglVsyzzqrf+VeNd2PJZtlFn J4RdftmIIvNMgNIfhl3HZKmjuDOj6+DGu2FUFCj6hosDYZlniuCdsXW3oCQ6NKme XRSrRqorwQtB/Cqt6KWiU74GuNnIMtXCw+zEkLNn+eg0Crw1DCLBqLrDGslbEF3D nJOBVzz2xJajVMUb3hk0gQGi/dceIA+tbfYpy66sJSHkfJCSYI4AicJTGkonbxGj HjiYhJraezCn9qroh2D6DYGRO/kDscFoAFs+BmEvK8UpcJ8qWHnIEKKwQkQA+rJd TA== -----END CERTIFICATE-----Generated at Sat Apr 5 06:24:25 2025 by rpki-client