$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151525.roa File: AS151525.roa (raw, json) Hash identifier: RXTRyX0CZcu9R+azgWBY0tvF5omsPY9heIcbjqgpyQE= Subject key identifier: DA:36:FA:EB:AD:28:66:EA:1B:54:FE:70:C2:86:92:CB:74:C3:0C:3D Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1A77EA9CF3BEC27F216CE2AE5DE2CBD584DCEB1E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151525.roa Signing time: Mon 20 Nov 2023 02:55:55 +0000 ROA not before: Mon 20 Nov 2023 02:50:55 +0000 ROA not after: Mon 18 Nov 2024 02:55:55 +0000 asID: 151525 IP address blocks: 103.241.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:77:ea:9c:f3:be:c2:7f:21:6c:e2:ae:5d:e2:cb:d5:84:dc:eb:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 20 02:50:55 2023 GMT Not After : Nov 18 02:55:55 2024 GMT Subject: CN=DA36FAEBAD2866EA1B54FE70C28692CB74C30C3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1e:59:74:0d:19:3f:5e:95:3f:d9:56:ec:c0: be:fd:e7:01:7d:a4:bb:22:83:20:fb:db:47:4d:a4: db:f9:e2:14:95:2a:a1:7a:33:31:01:80:08:f3:0a: e3:c8:55:8e:22:5e:cc:ab:c0:8f:41:83:3c:39:85: f0:ee:39:cc:da:d9:49:d3:88:d0:60:28:d0:3a:e4: d2:99:2c:e0:12:d9:fa:a1:2a:22:cd:7b:59:09:d1: 57:d9:98:2b:86:14:df:fb:e8:a1:df:7d:7a:49:1f: ed:7d:74:d2:2c:06:f4:0b:e1:4d:60:7f:aa:7b:31: 1d:a0:fd:bb:78:cb:1a:7a:d9:91:2c:8a:ed:f7:4d: e9:8c:46:3b:95:03:7b:01:12:20:48:8c:3f:fc:c7: a5:bc:37:a1:9b:64:77:65:1a:20:8a:bc:73:db:4e: c3:ba:f3:e3:82:eb:cf:a7:b5:7b:d5:c9:98:d0:e7: 2b:2d:28:4f:11:03:1d:4c:59:f9:35:ba:61:ae:26: 75:41:a5:37:cd:b8:13:25:21:1c:9f:de:26:7c:e0: 03:f3:a8:8b:3f:6e:a5:53:69:f0:f7:62:a2:ba:2e: 33:cb:be:95:af:10:c7:9a:35:94:fb:b9:b6:f9:7e: c7:e2:75:09:ca:fa:75:92:95:17:27:51:81:78:88: 4a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:36:FA:EB:AD:28:66:EA:1B:54:FE:70:C2:86:92:CB:74:C3:0C:3D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151525.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.241.174.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:0f:e7:1b:62:d0:f2:8a:ac:b5:29:e9:9c:ec:c2:51:b2:b6: ab:6f:2c:3b:8e:da:e7:11:48:45:83:60:69:1d:15:a7:78:12: 94:c2:52:4d:e0:84:ea:e7:19:fe:39:2f:0a:20:35:b3:6a:58: 6f:f5:a3:ac:08:79:65:78:02:64:47:a3:e7:6c:53:fe:02:6d: 51:10:46:95:bc:f8:81:e0:5b:a0:ab:4b:fc:4c:7f:9b:d7:88: 8c:b1:a5:08:ac:e7:e2:96:fd:b5:27:cc:3d:03:aa:d8:c0:52: e1:eb:53:ec:12:2e:10:f0:9c:3c:a9:91:c2:4e:00:a3:40:0a: 3f:44:d6:fb:8d:6b:e7:8e:d6:56:9d:71:f1:cc:08:88:27:53: f8:0e:a1:07:d7:9c:10:c1:ca:2b:1c:55:8f:60:eb:0f:b2:b7: 5f:f4:b3:25:fe:2e:1d:63:e5:d8:0e:dc:01:40:05:87:ed:86: a8:52:af:6c:72:f5:7a:d9:3e:c3:0b:01:83:65:e7:2c:af:87: 88:d5:73:da:d3:94:ca:b1:0b:85:a1:da:2e:bf:18:eb:24:86: 53:78:2b:c3:c3:92:ac:f2:7f:7e:a6:22:7e:1f:b4:d7:b8:b6: 81:4d:ee:ba:b7:4f:02:52:01:3b:87:42:07:b7:f3:88:4e:07: bd:73:1f:2d -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUGnfqnPO+wn8hbOKuXeLL1YTc6x4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEyMDAyNTA1NVoX DTI0MTExODAyNTU1NVowMzExMC8GA1UEAxMoREEzNkZBRUJBRDI4NjZFQTFCNTRG RTcwQzI4NjkyQ0I3NEMzMEMzRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8eWXQNGT9elT/ZVuzAvv3nAX2kuyKDIPvbR02k2/niFJUqoXozMQGACPMK 48hVjiJezKvAj0GDPDmF8O45zNrZSdOI0GAo0Drk0pks4BLZ+qEqIs17WQnRV9mY K4YU3/vood99ekkf7X100iwG9AvhTWB/qnsxHaD9u3jLGnrZkSyK7fdN6YxGO5UD ewESIEiMP/zHpbw3oZtkd2UaIIq8c9tOw7rz44Lrz6e1e9XJmNDnKy0oTxEDHUxZ +TW6Ya4mdUGlN824EyUhHJ/eJnzgA/Ooiz9upVNp8PdiorouM8u+la8Qx5o1lPu5 tvl+x+J1Ccr6dZKVFydRgXiIStMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTaNvrr rShm6htU/nDChpLLdMMMPTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTUyNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWfxrjANBgkqhkiG9w0BAQsFAAOCAQEAHg/nG2LQ8oqstSnpnOzC UbK2q28sO47a5xFIRYNgaR0Vp3gSlMJSTeCE6ucZ/jkvCiA1s2pYb/WjrAh5ZXgC ZEej52xT/gJtURBGlbz4geBboKtL/Ex/m9eIjLGlCKzn4pb9tSfMPQOq2MBS4etT 7BIuEPCcPKmRwk4Ao0AKP0TW+41r547WVp1x8cwIiCdT+A6hB9ecEMHKKxxVj2Dr D7K3X/SzJf4uHWPl2A7cAUAFh+2GqFKvbHL1etk+wwsBg2XnLK+HiNVz2tOUyrEL haHaLr8Y6ySGU3grw8OSrPJ/fqYifh+017i2gU3uurdPAlIBO4dCB7fziE4HvXMf LQ== -----END CERTIFICATE-----Generated at Wed May 8 18:12:18 2024 by rpki-client on console-fra.rpki-client.org