$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151521.roa File: AS151521.roa (raw, json) Hash identifier: YKZW7J3HVGz35Q7yREtxZ5eKS7Sxtuaq1n9JX+CxiEo= Subject key identifier: A8:A2:E1:4A:BC:78:BA:69:37:EE:D3:0B:80:8C:D0:86:BA:8E:81:E4 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 457039F83BDF6CD86A2194D2E3C60675E047BBD0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151521.roa Signing time: Mon 11 Nov 2024 02:51:22 +0000 ROA not before: Mon 11 Nov 2024 02:46:22 +0000 ROA not after: Mon 10 Nov 2025 02:51:22 +0000 asID: 151521 IP address blocks: 103.176.143.0/24 maxlen: 24 103.234.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:70:39:f8:3b:df:6c:d8:6a:21:94:d2:e3:c6:06:75:e0:47:bb:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 02:46:22 2024 GMT Not After : Nov 10 02:51:22 2025 GMT Subject: CN=A8A2E14ABC78BA6937EED30B808CD086BA8E81E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3b:39:a1:b3:69:6e:04:bf:43:fa:44:5f:69: d4:e2:be:b2:e8:20:b8:61:28:78:c6:c7:f4:2e:33: 4e:04:3d:ac:80:43:37:a1:4e:71:20:c1:ab:22:97: 89:8e:6e:a7:7c:38:fa:39:70:99:46:bb:d2:75:5f: 20:f2:67:fc:f9:e5:03:0c:cc:7b:ad:6a:4b:d4:cc: 55:df:ec:5c:5f:59:91:bc:a2:d4:ce:03:3e:84:0e: 56:f2:1c:25:2e:dc:25:c6:7f:53:f9:e7:80:22:b9: a5:20:93:b4:8b:70:eb:33:83:88:dd:1e:d4:f9:97: 39:d0:91:27:46:cc:22:1d:8c:be:9f:72:6a:5a:ce: 62:08:23:de:54:e5:d8:df:6a:ed:b8:fb:22:60:c8: ea:3c:1f:89:1c:5e:49:79:4e:9b:b9:18:c5:66:ee: d1:c4:4e:18:ad:27:c1:3f:ac:0a:09:78:31:84:70: ce:a6:ee:b1:ec:b0:88:d6:b3:77:2a:db:c0:69:db: 00:62:dc:ec:82:3b:80:00:2f:fa:78:67:cd:b0:d7: 89:13:7a:f0:10:45:d9:24:d2:1e:55:95:ab:92:90: fe:4f:d7:77:f7:5e:eb:8f:f9:4c:c0:4a:21:74:63: 54:9a:ce:36:64:91:c8:f3:a2:83:0f:89:ae:a8:be: bc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A2:E1:4A:BC:78:BA:69:37:EE:D3:0B:80:8C:D0:86:BA:8E:81:E4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151521.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.176.143.0/24 103.234.34.0/23 Signature Algorithm: sha256WithRSAEncryption 66:a2:6c:cd:68:a5:71:89:84:e8:a9:fa:d3:83:e9:88:b1:3c: 48:81:3f:6f:da:02:90:ab:47:10:06:3c:99:cc:b5:e0:f0:80: 3c:0a:eb:f7:df:dd:f4:0f:d3:87:59:a1:8d:b5:9f:45:bc:e8: 53:55:2f:ea:ed:32:3f:af:11:56:c5:3d:07:f2:38:13:41:9c: e6:a4:2b:03:0f:52:2d:5e:71:cb:5f:84:10:33:c5:7d:94:26: d7:03:d8:da:a0:12:b2:0b:09:e4:39:db:fd:d8:2b:a5:0f:d6: 2f:34:92:07:fb:db:b7:75:94:ce:a5:1d:da:e6:83:45:d8:7b: 48:f3:b2:51:1f:0e:42:c2:df:57:96:c8:bd:00:e0:25:c3:d0: 30:4c:c7:cb:ed:bc:20:93:5f:b4:40:71:a2:7d:1c:28:7e:a1: f2:cc:20:c8:dc:4e:3b:64:62:91:72:37:cd:e5:77:10:a9:36: fd:13:ce:c6:9f:d5:34:76:e5:ca:ad:d1:28:c2:1d:92:ab:49: ef:53:4a:28:ef:16:a5:10:ca:41:b6:6d:ed:77:7e:6d:46:ba: 39:d3:d9:fe:e4:28:ce:b0:5d:47:97:49:17:bc:01:b9:0b:fd: 86:dc:2e:77:8b:1a:a8:14:06:95:45:9a:82:fc:09:fc:3e:f5: 19:14:6e:b4 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIURXA5+DvfbNhqIZTS48YGdeBHu9AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTExMTAyNDYyMloX DTI1MTExMDAyNTEyMlowMzExMC8GA1UEAxMoQThBMkUxNEFCQzc4QkE2OTM3RUVE MzBCODA4Q0QwODZCQThFODFFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALs7OaGzaW4Ev0P6RF9p1OK+sugguGEoeMbH9C4zTgQ9rIBDN6FOcSDBqyKX iY5up3w4+jlwmUa70nVfIPJn/PnlAwzMe61qS9TMVd/sXF9Zkbyi1M4DPoQOVvIc JS7cJcZ/U/nngCK5pSCTtItw6zODiN0e1PmXOdCRJ0bMIh2Mvp9yalrOYggj3lTl 2N9q7bj7ImDI6jwfiRxeSXlOm7kYxWbu0cROGK0nwT+sCgl4MYRwzqbuseywiNaz dyrbwGnbAGLc7II7gAAv+nhnzbDXiRN68BBF2STSHlWVq5KQ/k/Xd/de64/5TMBK IXRjVJrONmSRyPOigw+Jrqi+vCECAwEAAaOCAdYwggHSMB0GA1UdDgQWBBSoouFK vHi6aTfu0wuAjNCGuo6B5DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTUyMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAGewjwMEAWfqIjANBgkqhkiG9w0BAQsFAAOCAQEAZqJszWilcYmE 6Kn604PpiLE8SIE/b9oCkKtHEAY8mcy14PCAPArr99/d9A/Th1mhjbWfRbzoU1Uv 6u0yP68RVsU9B/I4E0Gc5qQrAw9SLV5xy1+EEDPFfZQm1wPY2qASsgsJ5Dnb/dgr pQ/WLzSSB/vbt3WUzqUd2uaDRdh7SPOyUR8OQsLfV5bIvQDgJcPQMEzHy+28IJNf tEBxon0cKH6h8swgyNxOO2RikXI3zeV3EKk2/RPOxp/VNHblyq3RKMIdkqtJ71NK KO8WpRDKQbZt7Xd+bUa6OdPZ/uQozrBdR5dJF7wBuQv9htwud4saqBQGlUWagvwJ /D71GRRutA== -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:57 2024 by rpki-client on console-fra.rpki-client.org