$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151547.roa File: AS151547.roa (raw, json) Hash identifier: /7Q+ybl4uQCEXlVhh2uTkZ/ktKrHiP67RygxghhX+y0= Subject key identifier: B3:6B:74:F8:5B:14:C3:3A:BF:2B:8A:94:FF:A6:43:CB:3C:DD:13:F3 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3FFDDE50A3F18B303BA6A487ADD6B83443D6C9B6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151547.roa Signing time: Mon 02 Oct 2023 03:58:13 +0000 ROA not before: Mon 02 Oct 2023 03:53:13 +0000 ROA not after: Mon 30 Sep 2024 03:58:13 +0000 asID: 151547 IP address blocks: 103.245.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:fd:de:50:a3:f1:8b:30:3b:a6:a4:87:ad:d6:b8:34:43:d6:c9:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 2 03:53:13 2023 GMT Not After : Sep 30 03:58:13 2024 GMT Subject: CN=B36B74F85B14C33ABF2B8A94FFA643CB3CDD13F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5a:05:85:c3:f0:2c:53:4d:82:26:cd:49:59: c7:0c:df:34:46:5e:a7:87:8e:ab:58:2e:b9:da:86: a6:b5:e6:aa:07:7d:42:4d:6d:2c:aa:0d:9f:e9:a8: 37:f7:f9:70:39:c0:36:bc:8b:96:c7:dd:a4:b9:c6: 8c:4a:7c:67:f4:95:43:21:8f:44:7d:45:26:68:9c: 3c:c2:38:ca:76:1e:89:2b:db:9c:16:5c:20:c1:80: 7d:c7:e8:6b:6e:87:3b:ce:d1:72:46:ff:82:ae:57: 70:57:78:e8:3a:bc:49:14:b9:5d:fc:33:5c:5b:f8: 94:a4:f2:48:1d:7f:26:28:95:58:9f:ae:08:e2:dc: e9:b3:ca:86:18:78:c9:fd:70:2d:4e:5f:0a:d7:7f: 68:5a:42:a7:d6:a3:29:30:c8:99:05:26:44:3f:9b: 1f:05:d6:2e:c2:56:b4:66:a5:a8:3b:58:2c:68:72: fc:5c:4a:12:38:b9:78:a7:b8:49:3c:a1:98:34:e8: 44:e4:84:19:f1:8d:ef:c1:25:7e:b2:f6:cc:5e:be: b7:bf:39:0b:54:5a:75:7c:3d:c3:78:b1:da:72:e4: ae:78:d8:86:1c:76:74:11:9c:c0:a0:c3:a9:22:ff: 4c:49:af:51:66:2c:25:11:05:58:6b:ac:c9:7b:42: 31:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6B:74:F8:5B:14:C3:3A:BF:2B:8A:94:FF:A6:43:CB:3C:DD:13:F3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151547.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.245.36.0/24 Signature Algorithm: sha256WithRSAEncryption 79:df:2d:18:8c:fe:f6:d0:a0:0d:f5:fc:ed:bc:35:b0:72:e5: 4d:b8:59:e5:8b:e4:be:5e:57:41:ad:f0:87:d8:d6:ec:18:36: ed:cc:7b:71:7c:79:ac:be:c5:7c:09:e6:64:cf:7e:9c:ce:1e: c2:dd:15:08:07:08:1d:b5:00:97:60:68:cd:cc:25:01:9a:f4: 63:8e:b1:e5:4a:3d:98:62:7e:7f:64:f8:97:b2:2e:ba:19:af: d5:d0:4c:21:27:70:72:64:6f:1f:94:eb:2a:86:f1:f6:43:60: 10:e9:ed:a2:6f:8d:11:58:a1:6a:a8:62:98:6b:5c:48:42:33: 74:89:c1:6c:d3:d7:a9:4b:97:e7:4a:10:ce:c7:60:23:bd:85: 46:1a:0b:d4:e5:eb:70:55:0f:c6:cd:f1:0e:81:3e:6c:36:3f: 77:ce:79:47:f7:9b:95:4d:4f:b2:d3:39:d2:4e:42:53:b3:b0: d9:4b:14:50:f7:31:a6:ae:29:9e:45:37:e8:bd:11:64:f3:88: 7d:e3:7e:17:14:ec:41:12:26:cf:e8:d7:2b:98:22:ce:75:3d: 57:e6:81:b8:16:ee:34:99:a6:13:b2:b3:6a:6a:fb:7a:68:ab: 8f:4a:e1:ff:20:ea:4d:35:2d:50:4d:d4:05:31:0b:21:55:e9: 3c:ec:aa:96 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUP/3eUKPxizA7pqSHrda4NEPWybYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAwMjAzNTMxM1oX DTI0MDkzMDAzNTgxM1owMzExMC8GA1UEAxMoQjM2Qjc0Rjg1QjE0QzMzQUJGMkI4 QTk0RkZBNjQzQ0IzQ0REMTNGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMJaBYXD8CxTTYImzUlZxwzfNEZep4eOq1guudqGprXmqgd9Qk1tLKoNn+mo N/f5cDnANryLlsfdpLnGjEp8Z/SVQyGPRH1FJmicPMI4ynYeiSvbnBZcIMGAfcfo a26HO87Rckb/gq5XcFd46Dq8SRS5XfwzXFv4lKTySB1/JiiVWJ+uCOLc6bPKhhh4 yf1wLU5fCtd/aFpCp9ajKTDImQUmRD+bHwXWLsJWtGalqDtYLGhy/FxKEji5eKe4 STyhmDToROSEGfGN78ElfrL2zF6+t785C1RadXw9w3ix2nLkrnjYhhx2dBGcwKDD qSL/TEmvUWYsJREFWGusyXtCMTECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSza3T4 WxTDOr8ripT/pkPLPN0T8zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTU0Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGf1JDANBgkqhkiG9w0BAQsFAAOCAQEAed8tGIz+9tCgDfX87bw1 sHLlTbhZ5Yvkvl5XQa3wh9jW7Bg27cx7cXx5rL7FfAnmZM9+nM4ewt0VCAcIHbUA l2BozcwlAZr0Y46x5Uo9mGJ+f2T4l7Iuuhmv1dBMISdwcmRvH5TrKobx9kNgEOnt om+NEVihaqhimGtcSEIzdInBbNPXqUuX50oQzsdgI72FRhoL1OXrcFUPxs3xDoE+ bDY/d855R/eblU1PstM50k5CU7Ow2UsUUPcxpq4pnkU36L0RZPOIfeN+FxTsQRIm z+jXK5giznU9V+aBuBbuNJmmE7Kzamr7emirj0rh/yDqTTUtUE3UBTELIVXpPOyq lg== -----END CERTIFICATE-----Generated at Wed May 8 09:50:40 2024 by rpki-client on console-fra.rpki-client.org