$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151554.roa File: AS151554.roa (raw, json) Hash identifier: 4GWPCXnc7sb7FLhwW/QT3RNun/tFRwZSdl6E1CK9A+c= Subject key identifier: 7F:E3:B2:26:BD:4A:C5:67:D7:0F:4E:69:64:88:0A:9D:89:69:B7:DC Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 32C00D91E2D699104CDD94DC81D6C0331CF0B457 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151554.roa Signing time: Thu 29 Feb 2024 04:15:48 +0000 ROA not before: Thu 29 Feb 2024 04:10:48 +0000 ROA not after: Thu 27 Feb 2025 04:15:48 +0000 asID: 151554 IP address blocks: 103.244.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c0:0d:91:e2:d6:99:10:4c:dd:94:dc:81:d6:c0:33:1c:f0:b4:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 29 04:10:48 2024 GMT Not After : Feb 27 04:15:48 2025 GMT Subject: CN=7FE3B226BD4AC567D70F4E6964880A9D8969B7DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:56:bf:a0:33:81:73:b3:69:e5:28:da:19:98: 7a:63:b7:0a:b7:be:3b:ae:30:29:b6:3d:6c:5e:0a: e9:d5:c8:f3:e7:3e:b5:06:a0:9c:49:e7:1e:18:e6: 93:41:bc:ed:37:bd:ba:c0:e4:6c:78:be:e0:7f:a6: 4c:b5:6a:76:77:c0:60:47:2c:a5:c5:70:a3:1c:e6: e0:95:e8:4e:06:ab:f9:f1:fa:09:6e:53:df:9f:36: cd:50:23:b8:9d:f2:97:61:d1:d8:e8:6a:18:ca:4d: 27:22:2b:65:e2:95:c9:c1:b8:9d:56:14:f7:15:72: 85:64:e8:9a:66:03:9c:75:56:b1:23:3d:d9:db:e3: 27:61:26:12:40:19:1a:2e:3c:65:ef:45:5f:94:ef: 52:3f:37:39:10:54:cb:3c:9a:dd:17:b9:6f:1f:37: b7:1c:92:bf:3a:58:fe:20:50:b2:f8:d5:b4:21:c4: 4d:49:c0:f8:8d:34:b4:37:9b:8f:59:f5:a4:6d:e5: 49:6f:63:9e:f0:dd:be:9a:ef:b4:62:e8:b8:f8:dc: 7a:16:2f:7e:ac:54:40:bd:01:0b:50:07:33:29:e7: 99:0f:4a:4b:21:ce:20:69:9b:26:8d:0f:01:4c:b0: bf:db:f4:17:8c:bf:f4:4e:6f:8d:93:3a:49:4d:f6: d4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E3:B2:26:BD:4A:C5:67:D7:0F:4E:69:64:88:0A:9D:89:69:B7:DC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151554.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.244.104.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:07:d7:87:3e:ba:60:03:33:e1:fa:06:0f:c9:4c:62:ef:dc: 5c:53:c9:53:a0:32:38:fe:be:22:13:8f:1b:f4:c3:3d:5c:1d: 52:c9:6a:2b:e8:14:e4:4b:8b:3e:e3:09:49:f6:76:75:51:fb: 52:5b:61:a3:07:24:33:f8:42:d3:c6:7e:9d:7e:87:4c:89:cd: 58:a4:23:ef:a2:48:30:89:ee:57:9b:94:88:c5:79:d4:ff:ab: 2f:70:e4:79:55:ea:0c:dd:4b:0a:a0:08:5f:3f:8d:08:a5:11: 9a:0a:52:6c:24:8d:64:44:2a:33:f6:74:1f:0a:ad:18:51:3f: 3a:4b:f9:5f:02:e4:80:ea:60:45:bf:f9:4d:a6:fd:b6:b4:f2: 69:9f:e4:eb:48:4e:c1:75:cb:f0:42:8d:ff:53:af:28:00:f8: cc:b3:bc:d4:90:c8:f1:c5:ef:e4:f2:c5:3f:c8:84:2e:b4:b4: a6:c2:23:58:bc:f9:16:72:e1:19:c2:d1:5b:d3:74:a5:6c:e1: 72:11:6d:28:34:d9:9b:b0:af:02:53:42:55:3b:ad:d8:79:f4: 40:d6:38:18:9f:96:ff:78:d6:4b:4f:37:3c:0f:51:4c:03:e9: 5f:26:fe:56:91:fe:64:72:3c:c3:ea:b6:cc:65:38:94:4e:8e: 13:89:e0:52 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUMsANkeLWmRBM3ZTcgdbAMxzwtFcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIyOTA0MTA0OFoX DTI1MDIyNzA0MTU0OFowMzExMC8GA1UEAxMoN0ZFM0IyMjZCRDRBQzU2N0Q3MEY0 RTY5NjQ4ODBBOUQ4OTY5QjdEQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKRWv6AzgXOzaeUo2hmYemO3Cre+O64wKbY9bF4K6dXI8+c+tQagnEnnHhjm k0G87Te9usDkbHi+4H+mTLVqdnfAYEcspcVwoxzm4JXoTgar+fH6CW5T3582zVAj uJ3yl2HR2OhqGMpNJyIrZeKVycG4nVYU9xVyhWTommYDnHVWsSM92dvjJ2EmEkAZ Gi48Ze9FX5TvUj83ORBUyzya3Re5bx83txySvzpY/iBQsvjVtCHETUnA+I00tDeb j1n1pG3lSW9jnvDdvprvtGLouPjcehYvfqxUQL0BC1AHMynnmQ9KSyHOIGmbJo0P AUywv9v0F4y/9E5vjZM6SU321GMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBR/47Im vUrFZ9cPTmlkiAqdiWm33DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTU1NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWf0aDANBgkqhkiG9w0BAQsFAAOCAQEAigfXhz66YAMz4foGD8lM Yu/cXFPJU6AyOP6+IhOPG/TDPVwdUslqK+gU5EuLPuMJSfZ2dVH7UlthowckM/hC 08Z+nX6HTInNWKQj76JIMInuV5uUiMV51P+rL3DkeVXqDN1LCqAIXz+NCKURmgpS bCSNZEQqM/Z0HwqtGFE/Okv5XwLkgOpgRb/5Tab9trTyaZ/k60hOwXXL8EKN/1Ov KAD4zLO81JDI8cXv5PLFP8iELrS0psIjWLz5FnLhGcLRW9N0pWzhchFtKDTZm7Cv AlNCVTut2Hn0QNY4GJ+W/3jWS083PA9RTAPpXyb+VpH+ZHI8w+q2zGU4lE6OE4ng Ug== -----END CERTIFICATE-----Generated at Wed May 8 22:46:44 2024 by rpki-client on console-ams.rpki-client.org