$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151532.roa File: AS151532.roa (raw, json) Hash identifier: z5xrLTGLxCzuIu81RXtedqsCTQzbIgsziw2aott4acE= Subject key identifier: B4:01:3C:51:EF:75:A2:F8:19:46:63:FF:3A:6D:2A:03:F0:0B:D4:64 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 45313D9C0A44400A7440EB0F559AD8F072E28193 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151532.roa Signing time: Wed 23 Aug 2023 07:15:24 +0000 ROA not before: Wed 23 Aug 2023 07:10:24 +0000 ROA not after: Wed 21 Aug 2024 07:15:24 +0000 asID: 151532 IP address blocks: 103.245.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:31:3d:9c:0a:44:40:0a:74:40:eb:0f:55:9a:d8:f0:72:e2:81:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 23 07:10:24 2023 GMT Not After : Aug 21 07:15:24 2024 GMT Subject: CN=B4013C51EF75A2F8194663FF3A6D2A03F00BD464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:62:a1:f7:6c:06:f0:6a:31:a5:0e:2f:ee:cb: 88:ba:8c:06:b9:cd:2c:d7:ea:47:a7:30:1c:2d:df: 03:9a:61:6c:bb:13:57:30:94:d1:c3:f8:0c:f3:62: 4a:c8:c3:6d:58:3c:44:61:94:3a:35:7e:21:30:12: 08:bc:a4:48:76:74:73:5e:d8:1d:0c:93:bd:79:18: c0:6d:61:e8:ae:69:4e:23:f4:df:56:7d:cd:98:83: a6:03:2c:77:bf:32:00:03:66:84:3e:54:54:ff:39: aa:e6:b4:38:ea:4b:3d:11:53:d5:70:ec:49:cc:02: 15:3e:1c:c2:55:bd:6f:c7:cb:db:21:51:38:ad:98: 44:a6:92:a2:e1:d5:09:c1:78:1d:c2:9e:c4:3b:ed: 7e:4f:38:aa:3e:fe:99:cf:66:61:b4:ac:f6:e9:46: bd:a5:ef:82:10:7d:e6:5e:75:61:cf:32:a8:fb:ea: bc:5b:3d:ca:32:e6:82:12:1e:3e:e8:1d:4c:d2:07: d6:ec:47:a7:b7:1c:2d:bc:86:ae:48:f9:dc:2d:2b: f5:7c:33:3f:cc:46:08:69:de:d1:9a:6e:ed:65:38: bc:92:2c:72:75:0c:0a:91:52:e0:e7:4c:04:aa:0f: 7d:39:c3:8e:c3:1e:c2:96:5c:0e:81:d3:8e:69:35: 0f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:01:3C:51:EF:75:A2:F8:19:46:63:FF:3A:6D:2A:03:F0:0B:D4:64 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.245.56.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:64:7e:cf:7f:f6:45:0f:64:84:1c:1b:8d:7b:73:49:da:76: 81:99:8b:49:a0:e0:0b:e8:50:2c:c0:f4:82:77:18:fb:6b:50: 6c:8f:b4:1f:f3:95:50:6e:60:00:c7:80:04:1c:df:a1:5b:3a: 2a:90:bf:ee:4c:03:fe:73:d8:c9:6a:29:2f:0c:07:e7:c7:a5: 19:e0:da:64:0c:14:2c:ce:b3:17:be:7a:7b:98:ff:96:06:f3: d1:50:3b:d4:b2:c3:c8:fd:3a:4e:75:21:ea:f5:a1:e6:b8:3b: 21:30:09:26:c2:15:23:08:d4:04:af:0e:5b:c3:93:d5:2e:83: d5:13:26:f4:c5:fc:56:f1:62:cd:06:e2:05:af:b4:31:b0:e2: 4d:89:d6:4b:cf:5d:c2:57:7c:24:8a:35:c9:e4:71:7c:93:e4: 55:b7:9c:de:7b:99:e0:f1:2a:1d:b7:5a:f8:0c:a0:3e:c2:f8: 7b:f2:5c:9c:db:f7:99:28:18:30:28:1c:0c:05:65:df:87:4a: 33:6e:e4:c4:33:10:8d:d8:e2:9f:76:62:95:b4:1d:0e:5d:15: 4a:b5:8a:1a:99:f3:c7:f9:a7:05:8e:f1:16:50:f7:ae:69:b4: a3:ba:c3:9b:3d:20:8d:8f:bb:4a:f0:64:41:31:f7:0b:68:09: 9c:d0:02:cc -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIURTE9nApEQAp0QOsPVZrY8HLigZMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgyMzA3MTAyNFoX DTI0MDgyMTA3MTUyNFowMzExMC8GA1UEAxMoQjQwMTNDNTFFRjc1QTJGODE5NDY2 M0ZGM0E2RDJBMDNGMDBCRDQ2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALRiofdsBvBqMaUOL+7LiLqMBrnNLNfqR6cwHC3fA5phbLsTVzCU0cP4DPNi SsjDbVg8RGGUOjV+ITASCLykSHZ0c17YHQyTvXkYwG1h6K5pTiP031Z9zZiDpgMs d78yAANmhD5UVP85qua0OOpLPRFT1XDsScwCFT4cwlW9b8fL2yFROK2YRKaSouHV CcF4HcKexDvtfk84qj7+mc9mYbSs9ulGvaXvghB95l51Yc8yqPvqvFs9yjLmghIe PugdTNIH1uxHp7ccLbyGrkj53C0r9XwzP8xGCGne0Zpu7WU4vJIscnUMCpFS4OdM BKoPfTnDjsMewpZcDoHTjmk1DxUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBS0ATxR 73Wi+BlGY/86bSoD8AvUZDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTUzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGf1ODANBgkqhkiG9w0BAQsFAAOCAQEAm2R+z3/2RQ9khBwbjXtz Sdp2gZmLSaDgC+hQLMD0gncY+2tQbI+0H/OVUG5gAMeABBzfoVs6KpC/7kwD/nPY yWopLwwH58elGeDaZAwULM6zF756e5j/lgbz0VA71LLDyP06TnUh6vWh5rg7ITAJ JsIVIwjUBK8OW8OT1S6D1RMm9MX8VvFizQbiBa+0MbDiTYnWS89dwld8JIo1yeRx fJPkVbec3nuZ4PEqHbda+AygPsL4e/JcnNv3mSgYMCgcDAVl34dKM27kxDMQjdji n3ZilbQdDl0VSrWKGpnzx/mnBY7xFlD3rmm0o7rDmz0gjY+7SvBkQTH3C2gJnNAC zA== -----END CERTIFICATE-----Generated at Tue May 7 16:42:41 2024 by rpki-client on console-ams.rpki-client.org