$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151512.roa File: AS151512.roa (raw, json) Hash identifier: ugtqLXp+iqn7dvk5s9vztLw+ahOL0MjryhDAdfXrALY= Subject key identifier: ED:16:1D:0B:FF:F8:3A:EA:78:3B:81:CD:60:F3:BC:9B:86:F6:A0:64 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 325D62F8E9E27DBD930ED56481A369CE15AAB927 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151512.roa Signing time: Tue 13 Aug 2024 07:00:00 +0000 ROA not before: Tue 13 Aug 2024 06:55:00 +0000 ROA not after: Tue 12 Aug 2025 07:00:00 +0000 asID: 151512 IP address blocks: 103.234.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:5d:62:f8:e9:e2:7d:bd:93:0e:d5:64:81:a3:69:ce:15:aa:b9:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 13 06:55:00 2024 GMT Not After : Aug 12 07:00:00 2025 GMT Subject: CN=ED161D0BFFF83AEA783B81CD60F3BC9B86F6A064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:32:3a:16:29:c4:fb:7d:9f:9d:e4:3a:0d:b8: d4:c5:c6:16:0a:ee:80:6d:37:61:17:f8:b1:06:66: a8:ab:64:18:9a:1c:ab:16:8e:34:00:53:5a:1f:3e: 82:19:92:16:a1:31:36:6e:44:84:c1:08:8c:8f:77: 9a:8c:ef:6f:67:77:80:d5:6c:85:15:5c:d0:92:bc: 63:b7:b1:26:4d:25:1a:ae:ef:30:4c:e2:06:54:8e: f7:11:c8:3a:d1:9e:c6:b0:d0:87:3d:a0:17:08:d1: e0:23:31:91:ef:14:28:96:4a:8b:1a:4e:13:f5:68: e4:fa:af:0a:2b:68:b0:bc:9c:b7:33:f9:3f:41:30: cc:e1:23:d4:d9:6a:06:72:1a:d7:19:6d:d6:0f:2f: fa:18:4b:fd:94:d5:77:3e:98:ad:ff:3f:12:99:b5: 38:a9:6c:67:17:0f:dc:43:41:06:04:8d:72:b5:f2: 0f:d0:1a:a1:f8:a9:f8:0b:db:6b:c1:81:fe:02:66: af:40:22:e3:fa:47:12:43:bd:44:30:03:d1:e7:98: 86:46:ec:fc:5f:87:d8:0d:a2:25:e1:83:97:43:8a: 94:df:e9:25:77:ea:16:8d:3d:a8:52:b3:e0:d6:b4: 83:f6:09:62:4e:ac:89:4a:45:6e:f1:ba:cd:22:54: 52:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:16:1D:0B:FF:F8:3A:EA:78:3B:81:CD:60:F3:BC:9B:86:F6:A0:64 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151512.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.234.30.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:24:12:80:fc:5e:e7:89:19:e4:82:45:c4:d9:9a:28:45:49: be:0e:27:93:3f:2e:a8:5e:14:2c:e4:74:1b:c6:01:f2:79:0a: eb:e3:1f:34:7c:38:c7:c0:ad:41:ff:6f:67:5a:7c:b1:f9:06: 6a:e0:35:7d:16:27:25:ef:98:87:5d:60:71:ca:2c:dd:b7:11: 39:35:49:9b:f2:ac:d7:84:a6:9b:e3:fd:4e:c1:72:cc:f8:12: 23:7a:5d:1b:ec:ae:ce:d3:08:02:11:f6:cf:73:66:b4:ea:5e: bc:f2:ea:e0:dd:76:34:01:d5:87:ef:6d:27:54:d2:a7:5f:62: 4f:c8:6c:1b:ae:d6:c4:21:0e:21:34:81:df:7c:5f:66:46:a5: 0d:f5:cc:e4:f7:ab:7f:e9:22:08:20:0c:e0:2c:6c:5e:10:b6: 48:aa:a3:b3:25:97:8b:45:25:72:43:62:64:bd:21:da:c7:ff: 4d:73:97:30:2a:16:49:cc:6f:b5:8b:e8:d1:43:22:b8:2e:bf: 99:5d:33:69:63:4f:4d:da:92:c5:e1:fa:12:22:21:9e:0f:d7: d8:46:c5:c0:d1:5a:74:3f:b5:bb:b4:50:c8:22:28:ae:02:73: 8a:a3:93:1a:6e:6a:63:d0:84:05:76:cb:35:ba:a7:ec:2b:42: 58:14:f5:6c -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUMl1i+Onifb2TDtVkgaNpzhWquScwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgxMzA2NTUwMFoX DTI1MDgxMjA3MDAwMFowMzExMC8GA1UEAxMoRUQxNjFEMEJGRkY4M0FFQTc4M0I4 MUNENjBGM0JDOUI4NkY2QTA2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOkyOhYpxPt9n53kOg241MXGFgrugG03YRf4sQZmqKtkGJocqxaONABTWh8+ ghmSFqExNm5EhMEIjI93mozvb2d3gNVshRVc0JK8Y7exJk0lGq7vMEziBlSO9xHI OtGexrDQhz2gFwjR4CMxke8UKJZKixpOE/Vo5PqvCitosLyctzP5P0EwzOEj1Nlq BnIa1xlt1g8v+hhL/ZTVdz6Yrf8/Epm1OKlsZxcP3ENBBgSNcrXyD9Aaofip+Avb a8GB/gJmr0Ai4/pHEkO9RDAD0eeYhkbs/F+H2A2iJeGDl0OKlN/pJXfqFo09qFKz 4Na0g/YJYk6siUpFbvG6zSJUUhkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTtFh0L //g66ng7gc1g87ybhvagZDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTUxMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWfqHjANBgkqhkiG9w0BAQsFAAOCAQEAHSQSgPxe54kZ5IJFxNma KEVJvg4nkz8uqF4ULOR0G8YB8nkK6+MfNHw4x8CtQf9vZ1p8sfkGauA1fRYnJe+Y h11gccos3bcROTVJm/Ks14Smm+P9TsFyzPgSI3pdG+yuztMIAhH2z3NmtOpevPLq 4N12NAHVh+9tJ1TSp19iT8hsG67WxCEOITSB33xfZkalDfXM5Perf+kiCCAM4Cxs XhC2SKqjsyWXi0UlckNiZL0h2sf/TXOXMCoWScxvtYvo0UMiuC6/mV0zaWNPTdqS xeH6EiIhng/X2EbFwNFadD+1u7RQyCIorgJziqOTGm5qY9CEBXbLNbqn7CtCWBT1 bA== -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:57 2024 by rpki-client on console-fra.rpki-client.org