$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151554.roa File: AS151554.roa (raw, json) Hash identifier: qKxhTXQ1gpdVlzamMfB58Kc/xgzC7Fh8pj+MUjQYzFY= Subject key identifier: 52:84:EB:80:B2:56:AF:DA:F0:11:E2:83:C3:14:D0:5B:9F:1D:28:40 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 65DD2AFCDEC3FB7EB1EDF8F577AFA5285F834D58 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151554.roa Signing time: Thu 30 Jan 2025 05:00:00 +0000 ROA not before: Thu 30 Jan 2025 04:55:00 +0000 ROA not after: Thu 29 Jan 2026 05:00:00 +0000 asID: 151554 IP address blocks: 103.244.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:dd:2a:fc:de:c3:fb:7e:b1:ed:f8:f5:77:af:a5:28:5f:83:4d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jan 30 04:55:00 2025 GMT Not After : Jan 29 05:00:00 2026 GMT Subject: CN=5284EB80B256AFDAF011E283C314D05B9F1D2840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:10:e0:9a:a1:2e:64:7a:3c:cb:94:87:dd:8c: b2:7b:30:04:e5:52:49:0c:3a:68:de:31:90:08:cc: 02:d8:aa:32:fa:d1:6c:72:6e:dd:c9:52:91:b0:41: 18:1b:c9:8f:14:17:7f:72:d8:a1:0c:61:ca:ff:d3: 80:18:25:28:5f:4f:38:f2:0a:3b:dd:0b:2e:f4:1f: a7:60:bc:f3:83:52:65:17:e3:b6:55:78:03:94:2f: 1e:1f:68:df:27:c4:05:36:b1:6a:28:91:83:55:43: fd:88:d5:cf:05:6d:0a:4a:3c:29:12:67:40:f3:73: 6c:d4:ec:37:cc:90:ef:3e:bc:5b:e5:96:8e:4f:46: 82:9b:b2:51:46:fd:f5:ba:46:56:0b:8f:52:79:34: a2:a7:6c:84:69:66:55:3c:4b:a8:6e:02:24:88:6d: e2:39:52:1a:a9:e3:d2:5a:3a:e9:e2:51:a6:e1:de: 06:42:ed:8a:e9:e9:62:02:36:32:a7:69:f9:2a:0c: 55:5f:e2:11:1e:74:fe:7a:8a:56:17:22:c3:62:c0: 02:53:0b:06:41:b3:b7:e5:b8:43:6f:0e:76:b6:91: 8a:38:20:2f:82:5e:28:3c:6e:bc:a6:be:02:af:11: 4b:ae:d7:b9:de:95:20:fc:b4:43:6b:c2:07:9b:27: e1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:84:EB:80:B2:56:AF:DA:F0:11:E2:83:C3:14:D0:5B:9F:1D:28:40 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151554.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.244.104.0/23 Signature Algorithm: sha256WithRSAEncryption 74:95:e0:e9:5f:63:f0:9e:68:ac:b2:86:34:e3:36:97:58:78: bd:ec:86:f0:db:23:7e:f9:22:9d:64:9e:d5:78:36:a7:d9:3c: 7d:99:0e:1f:18:a3:b4:ad:0c:c7:51:89:02:cc:61:a9:d0:d6: d1:65:b8:da:6c:0c:7c:97:e7:6a:d1:f7:66:ee:bb:53:41:fe: 71:73:78:56:9d:db:73:2f:eb:bf:2b:7d:cf:62:21:8b:4f:0d: 45:b9:7b:fb:59:aa:75:0b:91:92:81:61:84:61:15:22:a4:84: 80:b0:02:64:30:9a:8a:78:04:8b:0e:26:0c:d9:d1:cb:fb:ec: 29:62:ef:fd:04:05:c8:9e:99:c7:e7:2d:a8:d6:b2:c9:49:c2: 5c:0e:33:0e:9d:13:e4:7c:d5:46:b0:e2:c7:17:ea:46:ed:c8: 09:25:b2:68:1b:6c:0f:e7:45:ec:dd:77:88:61:bf:3c:f5:07: 88:8b:af:17:b1:96:ff:06:c0:c1:39:75:de:7a:ed:6c:99:ee: b3:7f:74:8e:84:a2:4a:24:27:9b:d5:9a:90:33:48:d8:0e:72: bd:31:63:cb:c9:16:47:8f:2b:fc:33:bf:9b:cb:f3:d8:fa:1b: 22:d4:1f:2d:c1:12:ae:7a:6b:a3:6c:e5:fb:70:3a:2c:ee:68: 43:e8:23:79 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUZd0q/N7D+36x7fj1d6+lKF+DTVgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEzMDA0NTUwMFoX DTI2MDEyOTA1MDAwMFowMzExMC8GA1UEAxMoNTI4NEVCODBCMjU2QUZEQUYwMTFF MjgzQzMxNEQwNUI5RjFEMjg0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANgQ4JqhLmR6PMuUh92MsnswBOVSSQw6aN4xkAjMAtiqMvrRbHJu3clSkbBB GBvJjxQXf3LYoQxhyv/TgBglKF9POPIKO90LLvQfp2C884NSZRfjtlV4A5QvHh9o 3yfEBTaxaiiRg1VD/YjVzwVtCko8KRJnQPNzbNTsN8yQ7z68W+WWjk9GgpuyUUb9 9bpGVguPUnk0oqdshGlmVTxLqG4CJIht4jlSGqnj0lo66eJRpuHeBkLtiunpYgI2 Mqdp+SoMVV/iER50/nqKVhciw2LAAlMLBkGzt+W4Q28OdraRijggL4JeKDxuvKa+ Aq8RS67Xud6VIPy0Q2vCB5sn4cECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRShOuA slav2vAR4oPDFNBbnx0oQDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTU1NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWf0aDANBgkqhkiG9w0BAQsFAAOCAQEAdJXg6V9j8J5orLKGNOM2 l1h4veyG8NsjfvkinWSe1Xg2p9k8fZkOHxijtK0Mx1GJAsxhqdDW0WW42mwMfJfn atH3Zu67U0H+cXN4Vp3bcy/rvyt9z2Ihi08NRbl7+1mqdQuRkoFhhGEVIqSEgLAC ZDCaingEiw4mDNnRy/vsKWLv/QQFyJ6Zx+ctqNayyUnCXA4zDp0T5HzVRrDixxfq Ru3ICSWyaBtsD+dF7N13iGG/PPUHiIuvF7GW/wbAwTl13nrtbJnus390joSiSiQn m9WakDNI2A5yvTFjy8kWR48r/DO/m8vz2PobItQfLcESrnpro2zl+3A6LO5oQ+gj eQ== -----END CERTIFICATE-----Generated at Sat Apr 5 06:26:43 2025 by rpki-client