$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151551.roa File: AS151551.roa (raw, json) Hash identifier: si0U6jGjthzH2mIxkPvCMInLqPANfX3kCuV0v4frxnU= Subject key identifier: 2B:4F:3A:A9:4D:6A:67:E6:F3:02:91:EF:D6:8C:A5:7C:78:75:CA:A9 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5588929A87093E936439FB5951FA64204DCD987E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151551.roa Signing time: Wed 21 Aug 2024 03:00:00 +0000 ROA not before: Wed 21 Aug 2024 02:55:00 +0000 ROA not after: Wed 20 Aug 2025 03:00:00 +0000 asID: 151551 IP address blocks: 103.250.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:88:92:9a:87:09:3e:93:64:39:fb:59:51:fa:64:20:4d:cd:98:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 21 02:55:00 2024 GMT Not After : Aug 20 03:00:00 2025 GMT Subject: CN=2B4F3AA94D6A67E6F30291EFD68CA57C7875CAA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:64:09:c9:c3:81:63:08:b5:d8:e9:76:7c:69: d8:6c:14:e2:bb:43:b3:5a:87:f8:00:23:22:78:83: f2:63:5e:28:15:59:3d:8c:63:a0:4b:b9:22:14:a4: 9a:64:f6:ab:85:0a:2d:0f:07:6f:75:1e:7c:39:16: bb:89:3e:83:17:b6:c3:bc:5b:10:c4:55:01:0b:19: 0f:fa:14:ba:51:76:07:fd:29:0f:35:40:36:07:44: 85:d5:e5:cd:e7:8b:67:57:55:3e:75:d5:49:a7:ec: 59:46:bd:1b:d4:c1:63:7e:d6:31:cf:e4:08:3d:35: ae:f2:44:57:09:22:a6:98:bf:91:50:1e:50:1a:75: ca:94:df:e4:a6:12:6d:27:cb:38:c5:e3:b7:4e:6f: 2f:c5:13:3f:81:6f:de:28:e5:99:ab:c0:66:ff:9f: c7:b2:a9:b9:bc:f5:29:84:2f:27:29:b8:c8:62:ca: 63:ae:9e:79:22:76:83:5e:76:63:2e:b0:ec:59:8a: db:ee:1c:83:08:d7:2e:1c:54:8c:93:06:3d:f0:b6: 97:9e:81:98:dd:f7:22:82:c4:8a:6b:bf:7c:25:6e: ec:38:76:4e:01:4b:ce:dc:85:e1:71:32:20:82:8c: a8:a1:9a:54:aa:14:d9:2b:9a:18:31:58:27:c6:94: cc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:4F:3A:A9:4D:6A:67:E6:F3:02:91:EF:D6:8C:A5:7C:78:75:CA:A9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151551.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.250.210.0/23 Signature Algorithm: sha256WithRSAEncryption 90:4f:51:96:8b:24:52:fb:d2:1f:9a:08:e4:37:da:84:1d:3b: 5d:7e:8c:99:bb:61:b9:af:8b:cb:6f:de:4f:ec:5f:9a:b3:ca: 43:b7:87:65:63:a8:57:a2:95:ac:1c:f8:45:27:fa:57:45:03: f8:4c:7d:64:c7:70:35:a1:b2:cd:f3:59:c0:f7:1c:bc:77:e0: 01:76:d0:3a:96:6f:16:bc:ca:e6:c9:d0:81:fd:d3:74:92:70: a9:5a:7a:6a:66:8f:8d:29:07:45:3c:5e:a5:13:9c:c9:25:2c: e1:54:47:f6:c5:74:fd:bf:00:b5:34:b1:8f:10:0a:4d:7e:8f: ce:80:f5:df:c8:eb:20:29:69:01:49:81:15:15:17:a2:68:97: fb:87:3a:7e:04:d7:b2:ba:dc:92:bd:14:1c:b0:06:4b:a5:5e: 92:c3:78:fb:87:ae:4c:36:f6:ae:90:9d:90:bd:14:36:2f:0b: dd:7e:38:3e:45:60:74:4d:30:18:c8:20:97:98:14:51:81:c2: 27:92:84:39:c0:3e:1e:54:1d:6c:97:1e:e5:f5:e6:2d:dc:c6: 7c:89:db:48:ba:92:11:ef:ab:8b:08:6e:54:37:c4:fc:bf:e6: 50:f6:4a:9b:9b:05:ac:81:0e:01:98:9d:bd:15:fb:b1:64:b4: bb:cf:20:f0 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUVYiSmocJPpNkOftZUfpkIE3NmH4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgyMTAyNTUwMFoX DTI1MDgyMDAzMDAwMFowMzExMC8GA1UEAxMoMkI0RjNBQTk0RDZBNjdFNkYzMDI5 MUVGRDY4Q0E1N0M3ODc1Q0FBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMFkCcnDgWMItdjpdnxp2GwU4rtDs1qH+AAjIniD8mNeKBVZPYxjoEu5IhSk mmT2q4UKLQ8Hb3UefDkWu4k+gxe2w7xbEMRVAQsZD/oUulF2B/0pDzVANgdEhdXl zeeLZ1dVPnXVSafsWUa9G9TBY37WMc/kCD01rvJEVwkippi/kVAeUBp1ypTf5KYS bSfLOMXjt05vL8UTP4Fv3ijlmavAZv+fx7Kpubz1KYQvJym4yGLKY66eeSJ2g152 Yy6w7FmK2+4cgwjXLhxUjJMGPfC2l56BmN33IoLEimu/fCVu7Dh2TgFLztyF4XEy IIKMqKGaVKoU2SuaGDFYJ8aUzCMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQrTzqp TWpn5vMCke/WjKV8eHXKqTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTU1MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWf60jANBgkqhkiG9w0BAQsFAAOCAQEAkE9RloskUvvSH5oI5Dfa hB07XX6Mmbthua+Ly2/eT+xfmrPKQ7eHZWOoV6KVrBz4RSf6V0UD+Ex9ZMdwNaGy zfNZwPccvHfgAXbQOpZvFrzK5snQgf3TdJJwqVp6amaPjSkHRTxepROcySUs4VRH 9sV0/b8AtTSxjxAKTX6PzoD138jrIClpAUmBFRUXomiX+4c6fgTXsrrckr0UHLAG S6VeksN4+4euTDb2rpCdkL0UNi8L3X44PkVgdE0wGMggl5gUUYHCJ5KEOcA+HlQd bJce5fXmLdzGfInbSLqSEe+riwhuVDfE/L/mUPZKm5sFrIEOAZidvRX7sWS0u88g 8A== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:49 2024 by rpki-client on console-ams.rpki-client.org