$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151545.roa File: AS151545.roa (raw, json) Hash identifier: Gl12f+2rB4NeyW59TJJN5/IrKi+KvzwT0aXKqXGRqNI= Subject key identifier: 75:6D:45:41:C8:44:FB:07:66:DA:19:E3:5C:02:4A:91:1B:1D:35:39 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2E3D523AE601C75DF380EC8A5C4BF3AAC6FB1D5E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151545.roa Signing time: Fri 13 Sep 2024 03:00:00 +0000 ROA not before: Fri 13 Sep 2024 02:55:00 +0000 ROA not after: Fri 12 Sep 2025 03:00:00 +0000 asID: 151545 IP address blocks: 103.236.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:3d:52:3a:e6:01:c7:5d:f3:80:ec:8a:5c:4b:f3:aa:c6:fb:1d:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 13 02:55:00 2024 GMT Not After : Sep 12 03:00:00 2025 GMT Subject: CN=756D4541C844FB0766DA19E35C024A911B1D3539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8d:c0:b9:97:1d:4e:f6:8f:4a:9b:6e:a8:85: c2:4d:92:ae:3a:ed:d1:12:52:fa:12:cc:83:78:8d: 33:88:74:8c:07:38:95:f8:39:0e:d8:37:fc:48:11: 54:5c:f4:bd:fb:3e:d4:95:0d:ee:37:5c:a7:5c:22: 6c:4d:43:51:72:33:87:0a:76:ac:ca:48:ee:55:35: 20:0b:90:74:23:92:4e:9d:1a:7e:97:f9:f0:c4:d2: 34:af:66:eb:44:c4:da:73:02:e2:64:c1:ac:e8:84: 27:71:a2:69:64:ff:8f:56:64:99:62:8a:ec:47:f6: 5d:29:dc:5f:1f:87:2a:c5:24:e5:39:08:2e:9f:04: 75:47:65:ee:6e:9e:4b:00:36:9a:18:6b:9f:b7:ce: 3c:3e:05:91:46:9c:19:66:f2:62:a5:4c:28:19:95: b7:fe:82:40:0c:51:36:02:5f:04:0b:8c:9c:28:a4: 33:bc:18:ef:ba:a0:b1:7b:fa:ad:68:21:51:bc:2a: 1a:07:63:0c:0a:78:17:af:0e:19:7b:97:13:c0:a9: 68:97:32:c3:5f:a9:63:7f:cf:70:54:75:b2:25:3f: 2b:7a:fc:a4:fa:56:bb:7b:7f:d5:29:84:dd:e7:1b: 58:ec:91:26:a8:c2:ac:12:4a:51:8b:06:97:fc:62: ad:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6D:45:41:C8:44:FB:07:66:DA:19:E3:5C:02:4A:91:1B:1D:35:39 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151545.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.130.0/23 Signature Algorithm: sha256WithRSAEncryption 30:62:ae:bf:3b:41:2d:e7:be:a6:13:76:f8:5d:34:76:f1:7c: c5:d6:7e:1d:05:69:bb:4d:0f:97:f2:28:ee:b6:3c:1c:75:2a: cf:4e:69:16:a6:b8:ca:3f:d5:55:0c:6c:6e:13:b7:af:da:e8: f9:87:70:2f:66:b3:5f:58:85:f5:8a:ba:09:9e:7b:0c:1c:0d: 00:c8:f7:d9:46:db:ec:6b:b4:30:12:58:2d:94:b8:d6:0f:93: c8:b8:3f:1a:0d:66:fe:76:f6:3f:c2:00:f5:37:75:14:70:9b: cb:dd:49:b5:49:0e:91:cb:ce:08:2b:0d:9e:af:55:85:f6:71: 0e:18:a5:1f:b2:ac:c4:4f:9b:db:f1:14:ad:9e:ee:da:a0:db: 78:b6:b5:18:c8:4b:33:a6:2e:db:9a:9c:03:37:a5:dc:c7:25: 35:c2:55:4f:90:5b:ae:43:34:f5:eb:48:06:fe:6f:da:f0:de: 8b:da:7a:bb:29:8a:30:e7:51:1a:93:d5:21:8b:33:5e:f5:e3: 79:32:af:2f:28:41:d7:43:ac:09:ac:e1:ce:a3:d1:17:33:80: 83:21:3d:ec:74:68:aa:11:b0:5d:60:d7:79:43:ef:67:2c:32: 3d:53:74:ae:f7:f3:e9:4a:53:cb:69:2e:cf:64:1e:4a:cc:3b: 6f:da:a9:b1 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIULj1SOuYBx13zgOyKXEvzqsb7HV4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkxMzAyNTUwMFoX DTI1MDkxMjAzMDAwMFowMzExMC8GA1UEAxMoNzU2RDQ1NDFDODQ0RkIwNzY2REEx OUUzNUMwMjRBOTExQjFEMzUzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCNwLmXHU72j0qbbqiFwk2Srjrt0RJS+hLMg3iNM4h0jAc4lfg5Dtg3/EgR VFz0vfs+1JUN7jdcp1wibE1DUXIzhwp2rMpI7lU1IAuQdCOSTp0afpf58MTSNK9m 60TE2nMC4mTBrOiEJ3GiaWT/j1ZkmWKK7Ef2XSncXx+HKsUk5TkILp8EdUdl7m6e SwA2mhhrn7fOPD4FkUacGWbyYqVMKBmVt/6CQAxRNgJfBAuMnCikM7wY77qgsXv6 rWghUbwqGgdjDAp4F68OGXuXE8CpaJcyw1+pY3/PcFR1siU/K3r8pPpWu3t/1SmE 3ecbWOyRJqjCrBJKUYsGl/xirTUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBR1bUVB yET7B2baGeNcAkqRGx01OTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTU0NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWfsgjANBgkqhkiG9w0BAQsFAAOCAQEAMGKuvztBLee+phN2+F00 dvF8xdZ+HQVpu00Pl/Io7rY8HHUqz05pFqa4yj/VVQxsbhO3r9ro+YdwL2azX1iF 9Yq6CZ57DBwNAMj32Ubb7Gu0MBJYLZS41g+TyLg/Gg1m/nb2P8IA9Td1FHCby91J tUkOkcvOCCsNnq9VhfZxDhilH7KsxE+b2/EUrZ7u2qDbeLa1GMhLM6Yu25qcAzel 3MclNcJVT5BbrkM09etIBv5v2vDei9p6uymKMOdRGpPVIYszXvXjeTKvLyhB10Os CazhzqPRFzOAgyE97HRoqhGwXWDXeUPvZywyPVN0rvfz6UpTy2kuz2QeSsw7b9qp sQ== -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:29 2024 by rpki-client on console-ams.rpki-client.org