$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151547.roa File: AS151547.roa (raw, json) Hash identifier: G8qO6SIrGXqAvct6A00151ari3D5Q1SyGsccyqe7UzM= Subject key identifier: 20:EE:03:7B:DD:15:CA:CE:B2:45:A0:22:80:A6:03:5B:34:58:2F:9F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 37E4825861BB2B3CC25EA0778A3C24F610E81AC5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151547.roa Signing time: Mon 02 Sep 2024 04:00:00 +0000 ROA not before: Mon 02 Sep 2024 03:55:00 +0000 ROA not after: Mon 01 Sep 2025 04:00:00 +0000 asID: 151547 IP address blocks: 103.245.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:e4:82:58:61:bb:2b:3c:c2:5e:a0:77:8a:3c:24:f6:10:e8:1a:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 2 03:55:00 2024 GMT Not After : Sep 1 04:00:00 2025 GMT Subject: CN=20EE037BDD15CACEB245A02280A6035B34582F9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5f:5b:88:ca:81:b2:ec:2b:1c:46:44:e6:f3: ae:4d:34:5b:61:fd:81:5e:c6:e3:b2:ec:6a:b4:fb: ac:2d:46:2e:15:6a:c6:49:ad:86:ae:08:82:ee:6d: f6:9d:b6:d1:3b:28:cf:33:dd:82:28:43:bc:52:6b: f9:75:04:41:71:3d:93:ae:17:9c:73:43:89:72:82: 41:40:17:1f:3f:6c:55:55:0f:fe:ea:55:6d:05:d4: 88:71:57:6e:1d:7a:62:2c:c4:76:87:9c:cf:d4:91: 9f:15:ac:d1:93:0a:34:b8:13:a8:af:e2:f3:a8:77: 09:f2:58:6e:77:fb:37:2a:17:ce:0a:17:ce:12:95: 25:46:1a:13:36:b5:5c:c1:18:c9:55:e4:b8:74:a9: 16:06:c1:55:f5:17:d5:92:a6:bc:c1:f3:81:e2:6d: b1:79:3f:bb:ae:c7:44:2a:34:d7:f4:d1:21:d5:ca: 07:50:87:b9:7d:a5:32:9e:6d:9e:e3:61:86:cc:6f: e6:32:7b:c8:3d:67:24:27:68:9a:79:af:a6:a5:55: 46:d4:0c:e0:70:9e:83:00:7b:0b:36:8e:6f:a5:8b: 02:e1:0e:b6:6c:2b:27:f6:d8:86:dc:b5:f4:b7:cc: 43:ba:22:02:10:1a:26:d2:d1:b1:a3:19:98:1d:5e: 17:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EE:03:7B:DD:15:CA:CE:B2:45:A0:22:80:A6:03:5B:34:58:2F:9F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151547.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.245.36.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:84:70:3c:a1:e2:3e:69:cc:12:f7:fb:bf:07:ed:b6:ff:0a: af:f6:7c:bc:24:05:4f:8c:e6:d8:8d:29:aa:81:b0:20:b4:bc: f0:cd:a4:7f:69:cf:d6:26:3d:92:cb:1a:3b:98:84:a5:14:98: 50:4e:4d:3f:d3:28:08:ac:17:7f:8f:6a:38:54:d6:ff:b0:b5: 29:0b:cf:82:87:20:ba:82:5a:5d:9c:cd:55:d6:f0:a9:fe:b0: d9:76:f2:63:2e:a6:ee:90:9c:5a:3c:fd:81:70:31:19:cc:08: 34:f4:6d:2f:b6:ca:12:df:f5:36:88:37:ef:1c:87:05:a4:3e: 56:38:d7:e8:21:78:37:0c:5b:45:8a:27:29:a3:5a:0f:a0:d4: ec:d0:5f:ca:04:c4:2b:9b:5c:0a:1c:fa:76:29:7b:f6:63:42: 02:15:83:e8:e0:67:04:73:43:85:dd:84:58:53:36:d8:f8:79: 12:2a:5e:3c:be:13:21:76:c4:5c:15:3a:54:c1:a7:07:01:a2: 5a:95:a6:ab:52:7f:94:ff:bf:9f:e1:4d:0f:0e:a7:db:18:45: d9:60:8b:61:03:e8:59:d6:3f:94:81:a5:68:b7:87:43:fa:1a: 1a:04:67:79:69:ba:db:f7:2e:99:ab:f0:96:52:c6:26:47:db: 29:83:55:81 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUN+SCWGG7KzzCXqB3ijwk9hDoGsUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkwMjAzNTUwMFoX DTI1MDkwMTA0MDAwMFowMzExMC8GA1UEAxMoMjBFRTAzN0JERDE1Q0FDRUIyNDVB MDIyODBBNjAzNUIzNDU4MkY5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNfW4jKgbLsKxxGRObzrk00W2H9gV7G47LsarT7rC1GLhVqxkmthq4Igu5t 9p220TsozzPdgihDvFJr+XUEQXE9k64XnHNDiXKCQUAXHz9sVVUP/upVbQXUiHFX bh16YizEdoecz9SRnxWs0ZMKNLgTqK/i86h3CfJYbnf7NyoXzgoXzhKVJUYaEza1 XMEYyVXkuHSpFgbBVfUX1ZKmvMHzgeJtsXk/u67HRCo01/TRIdXKB1CHuX2lMp5t nuNhhsxv5jJ7yD1nJCdomnmvpqVVRtQM4HCegwB7CzaOb6WLAuEOtmwrJ/bYhty1 9LfMQ7oiAhAaJtLRsaMZmB1eF10CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQg7gN7 3RXKzrJFoCKApgNbNFgvnzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTU0Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGf1JDANBgkqhkiG9w0BAQsFAAOCAQEASoRwPKHiPmnMEvf7vwft tv8Kr/Z8vCQFT4zm2I0pqoGwILS88M2kf2nP1iY9kssaO5iEpRSYUE5NP9MoCKwX f49qOFTW/7C1KQvPgocguoJaXZzNVdbwqf6w2XbyYy6m7pCcWjz9gXAxGcwINPRt L7bKEt/1Nog37xyHBaQ+VjjX6CF4NwxbRYonKaNaD6DU7NBfygTEK5tcChz6dil7 9mNCAhWD6OBnBHNDhd2EWFM22Ph5EipePL4TIXbEXBU6VMGnBwGiWpWmq1J/lP+/ n+FNDw6n2xhF2WCLYQPoWdY/lIGlaLeHQ/oaGgRneWm62/cumavwllLGJkfbKYNV gQ== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:27 2024 by rpki-client on console-fra.rpki-client.org