$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151000.roa File: AS151000.roa (raw, json) Hash identifier: D7161Wh2h/K3KLCIAccb4z3+yM9+NtYUTBgOdY6NGuo= Subject key identifier: B0:53:C3:27:19:37:70:84:72:AA:D4:CB:E9:22:94:9A:C1:3F:71:F5 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 177B1D46D0C92CD2A4BA2D7937BCDB85AC56D8A5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151000.roa Signing time: Thu 01 Feb 2024 04:10:30 +0000 ROA not before: Thu 01 Feb 2024 04:05:30 +0000 ROA not after: Thu 30 Jan 2025 04:10:30 +0000 asID: 151000 IP address blocks: 103.139.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:7b:1d:46:d0:c9:2c:d2:a4:ba:2d:79:37:bc:db:85:ac:56:d8:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 1 04:05:30 2024 GMT Not After : Jan 30 04:10:30 2025 GMT Subject: CN=B053C3271937708472AAD4CBE922949AC13F71F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e1:e8:5f:60:d5:38:8c:f4:a2:ab:23:fd:e6: 70:24:11:03:95:05:0d:f6:cd:ae:be:3e:ef:ca:c9: 88:d7:cd:03:01:c5:12:07:4c:e7:6e:5e:1c:65:ab: 60:94:24:be:08:0c:db:65:09:97:f1:16:e5:83:5f: 88:9b:64:6a:44:37:54:1c:90:42:aa:52:4b:ff:50: 61:9b:12:5d:c2:68:a2:a0:74:a6:f2:3e:28:ae:c9: 07:1e:c4:d7:d3:c2:62:5d:da:93:47:f0:80:c5:66: aa:b2:2d:15:03:1c:06:83:f6:00:d8:cf:0b:ab:1f: f9:9a:4d:22:86:8e:46:83:3e:e7:3f:cd:1c:6c:6f: c4:0a:08:76:f1:0a:c6:55:fe:bc:3a:7c:8c:31:17: 64:5e:1a:53:ce:ce:27:2f:30:65:32:f4:92:6c:bf: 86:86:52:2d:bf:40:93:9f:a0:5d:4e:f5:5a:15:b6: 34:19:03:1c:58:db:60:d6:66:80:b8:7f:ab:19:83: 40:fe:3f:8c:9b:8c:16:27:57:b2:8c:e6:a4:20:17: 71:8d:0f:d7:ca:e2:ab:a4:ec:42:3e:41:73:48:80: 91:ea:a4:d0:90:07:f0:1d:44:91:7a:ff:c0:0f:66: 01:30:82:45:41:9a:b0:ae:e7:ec:e3:88:4f:b8:d3: 3d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:53:C3:27:19:37:70:84:72:AA:D4:CB:E9:22:94:9A:C1:3F:71:F5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151000.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.244.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:32:af:1a:68:78:b9:9b:65:cb:d4:c7:08:32:cb:42:05:fb: 2a:77:e2:b4:36:a1:93:13:77:d0:11:b4:1e:cc:b8:57:38:c4: 7c:65:89:f2:60:b5:98:d3:d2:4a:d4:c3:e1:0a:ce:64:39:3e: d5:28:50:0a:a7:f8:55:1c:4c:2d:97:a9:bb:94:95:57:a8:97: 8b:74:c3:4d:9a:77:bc:db:2c:5c:22:6a:60:55:2a:fc:4d:4c: c2:89:37:30:d6:c6:cf:65:20:6a:b0:d8:60:14:b8:bf:f5:59: 17:0b:cd:45:2c:3b:25:de:98:f3:0e:a3:4f:b4:5f:41:80:e1: 60:8f:35:71:12:04:a3:c0:56:35:9f:5b:8b:9f:e5:c2:a9:b2: 56:e0:c1:45:3f:7b:fa:d4:85:5b:c2:05:45:66:f1:68:cd:eb: 35:1f:52:97:44:7a:d7:5c:5e:93:f1:b5:bb:01:5d:7d:f6:ac: 7a:86:19:84:da:ff:e7:a5:83:eb:d0:d9:4e:f7:c3:f3:b6:44: 73:50:02:66:cd:93:6c:49:8e:61:15:50:0e:0c:b6:fa:93:af: 62:1e:04:e4:93:f1:61:d7:84:3e:74:c1:67:8b:cd:13:d3:55: 2e:d4:82:71:06:6f:6b:4b:b8:c7:7a:91:30:71:83:9a:be:f7: 8f:b4:31:90 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUF3sdRtDJLNKkui15N7zbhaxW2KUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIwMTA0MDUzMFoX DTI1MDEzMDA0MTAzMFowMzExMC8GA1UEAxMoQjA1M0MzMjcxOTM3NzA4NDcyQUFE NENCRTkyMjk0OUFDMTNGNzFGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOnh6F9g1TiM9KKrI/3mcCQRA5UFDfbNrr4+78rJiNfNAwHFEgdM525eHGWr YJQkvggM22UJl/EW5YNfiJtkakQ3VByQQqpSS/9QYZsSXcJooqB0pvI+KK7JBx7E 19PCYl3ak0fwgMVmqrItFQMcBoP2ANjPC6sf+ZpNIoaORoM+5z/NHGxvxAoIdvEK xlX+vDp8jDEXZF4aU87OJy8wZTL0kmy/hoZSLb9Ak5+gXU71WhW2NBkDHFjbYNZm gLh/qxmDQP4/jJuMFidXsozmpCAXcY0P18riq6TsQj5Bc0iAkeqk0JAH8B1EkXr/ wA9mATCCRUGasK7n7OOIT7jTPTUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSwU8Mn GTdwhHKq1MvpIpSawT9x9TAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTAwMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWeL9DANBgkqhkiG9w0BAQsFAAOCAQEAajKvGmh4uZtly9THCDLL QgX7KnfitDahkxN30BG0Hsy4VzjEfGWJ8mC1mNPSStTD4QrOZDk+1ShQCqf4VRxM LZepu5SVV6iXi3TDTZp3vNssXCJqYFUq/E1Mwok3MNbGz2UgarDYYBS4v/VZFwvN RSw7Jd6Y8w6jT7RfQYDhYI81cRIEo8BWNZ9bi5/lwqmyVuDBRT97+tSFW8IFRWbx aM3rNR9Sl0R611xek/G1uwFdffaseoYZhNr/56WD69DZTvfD87ZEc1ACZs2TbEmO YRVQDgy2+pOvYh4E5JPxYdeEPnTBZ4vNE9NVLtSCcQZva0u4x3qRMHGDmr73j7Qx kA== -----END CERTIFICATE-----Generated at Wed May 8 17:45:23 2024 by rpki-client on console-ams.rpki-client.org