$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151551.roa File: AS151551.roa (raw, json) Hash identifier: yPKJwnOevVxLWEHXxwMQcJqe+Y7/4cW8cUb5QxtWxUs= Subject key identifier: F9:49:0A:8C:96:34:10:B5:87:74:A9:77:90:C9:07:D0:6F:44:51:F6 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7AEAACB87EDAE0E44DC321FFAF02E537C46E60E0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151551.roa Signing time: Wed 20 Sep 2023 02:26:53 +0000 ROA not before: Wed 20 Sep 2023 02:21:53 +0000 ROA not after: Wed 18 Sep 2024 02:26:53 +0000 asID: 151551 IP address blocks: 103.250.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ea:ac:b8:7e:da:e0:e4:4d:c3:21:ff:af:02:e5:37:c4:6e:60:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 20 02:21:53 2023 GMT Not After : Sep 18 02:26:53 2024 GMT Subject: CN=F9490A8C963410B58774A97790C907D06F4451F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:95:cc:4f:76:17:6e:8b:64:e1:b5:29:b8:99: c0:fd:36:f8:4a:66:65:25:db:bc:ab:f6:2a:c7:d3: 6c:77:85:46:05:5c:f6:70:99:36:b1:0c:67:3f:ba: 38:37:8a:6f:8a:07:d0:a9:a9:3c:7c:88:f2:01:64: 40:3e:ae:96:b5:2b:33:35:02:2b:8d:d6:8e:11:cb: 18:cf:7e:ae:f6:3f:41:77:95:8d:35:21:26:e2:01: 96:01:0c:77:e6:a0:5b:2a:c4:aa:59:c5:d7:52:2e: f6:22:c5:e7:43:bf:d1:ee:e0:80:ad:b9:fd:0e:fb: fc:5b:1f:dd:7b:33:d6:97:ca:82:37:53:c1:44:43: 85:43:c6:7c:e7:75:33:3e:fa:93:1a:47:04:a3:6a: c8:d7:7a:06:c9:a4:28:e1:15:61:4a:cf:25:79:08: 2a:f3:0d:d9:a1:51:7e:f2:2f:8b:67:12:4b:86:90: c9:02:2d:bb:3f:b7:37:5f:6b:8c:10:53:d1:7e:38: 53:5c:a9:5b:92:a2:7c:4d:e7:22:83:04:40:34:e7: 30:6d:4e:83:64:b9:87:11:c8:20:f5:2e:47:4f:f6: be:56:31:63:db:cf:f3:3d:55:d7:6a:6e:e6:41:60: 72:4f:32:1b:63:f0:60:6e:87:17:ed:b7:3e:73:e8: 42:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:49:0A:8C:96:34:10:B5:87:74:A9:77:90:C9:07:D0:6F:44:51:F6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151551.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.250.210.0/23 Signature Algorithm: sha256WithRSAEncryption 06:b8:6e:15:dc:4a:5b:d4:12:85:28:ed:73:de:1e:df:40:9d: 14:ab:1f:83:74:c5:fb:68:f1:ac:59:cd:82:eb:57:b0:a6:a3: 83:5b:e8:26:23:32:b5:7a:39:78:3c:a0:06:5c:a9:1c:9e:71: b9:5a:46:18:d3:44:0e:dc:7c:de:27:fe:f2:d5:2a:58:15:9f: 10:9e:3e:03:59:71:d0:64:6d:a1:4b:1d:71:19:42:83:a5:7f: 5d:a3:73:10:cc:57:7f:56:f5:a7:61:75:ef:b5:9d:52:00:2a: bd:e3:11:93:23:ca:b1:ba:b3:88:fb:c8:ba:d6:7b:80:42:ba: 53:ab:f8:8a:74:84:eb:bb:58:92:bf:ef:d6:de:40:f0:bd:2d: 73:42:dc:2a:c7:e1:a4:90:80:48:7b:ff:1c:8c:e9:d2:73:08: a4:4c:42:9f:87:85:2d:8a:b8:fb:16:45:e7:5d:3c:e2:4c:88: b1:04:db:8c:89:3b:8d:7d:84:26:e5:80:81:c8:02:20:80:a3: 38:fc:4e:a7:24:d6:46:e3:74:e0:d8:f5:03:22:00:5d:1c:8a: 14:53:f2:79:cb:53:f8:7b:44:b7:69:43:7b:b0:4d:13:42:ff: 79:47:65:70:02:dc:3f:4c:a6:a3:f3:5f:ef:fc:1e:29:e7:bb: f1:7a:46:99 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUeuqsuH7a4ORNwyH/rwLlN8RuYOAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkyMDAyMjE1M1oX DTI0MDkxODAyMjY1M1owMzExMC8GA1UEAxMoRjk0OTBBOEM5NjM0MTBCNTg3NzRB OTc3OTBDOTA3RDA2RjQ0NTFGNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWVzE92F26LZOG1KbiZwP02+EpmZSXbvKv2KsfTbHeFRgVc9nCZNrEMZz+6 ODeKb4oH0KmpPHyI8gFkQD6ulrUrMzUCK43WjhHLGM9+rvY/QXeVjTUhJuIBlgEM d+agWyrEqlnF11Iu9iLF50O/0e7ggK25/Q77/Fsf3Xsz1pfKgjdTwURDhUPGfOd1 Mz76kxpHBKNqyNd6BsmkKOEVYUrPJXkIKvMN2aFRfvIvi2cSS4aQyQItuz+3N19r jBBT0X44U1ypW5KifE3nIoMEQDTnMG1Og2S5hxHIIPUuR0/2vlYxY9vP8z1V12pu 5kFgck8yG2PwYG6HF+23PnPoQpECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBT5SQqM ljQQtYd0qXeQyQfQb0RR9jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTU1MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWf60jANBgkqhkiG9w0BAQsFAAOCAQEABrhuFdxKW9QShSjtc94e 30CdFKsfg3TF+2jxrFnNgutXsKajg1voJiMytXo5eDygBlypHJ5xuVpGGNNEDtx8 3if+8tUqWBWfEJ4+A1lx0GRtoUsdcRlCg6V/XaNzEMxXf1b1p2F177WdUgAqveMR kyPKsbqziPvIutZ7gEK6U6v4inSE67tYkr/v1t5A8L0tc0LcKsfhpJCASHv/HIzp 0nMIpExCn4eFLYq4+xZF51084kyIsQTbjIk7jX2EJuWAgcgCIICjOPxOpyTWRuN0 4Nj1AyIAXRyKFFPyectT+HtEt2lDe7BNE0L/eUdlcALcP0ymo/Nf7/weKee78XpG mQ== -----END CERTIFICATE-----Generated at Wed May 8 18:12:18 2024 by rpki-client on console-fra.rpki-client.org