$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151565.roa File: AS151565.roa (raw, json) Hash identifier: NkSNQo/o1UX/Vjgy/IIu7BEkXpty/Ir9jjXepfuAmQ4= Subject key identifier: C9:C0:77:BD:AC:5D:F2:87:5F:E2:DA:7E:12:F7:E7:B7:0E:4F:46:CD Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0C45C9676CEFEBEE409D112C21723921CE23952F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151565.roa Signing time: Wed 27 Sep 2023 03:16:13 +0000 ROA not before: Wed 27 Sep 2023 03:11:13 +0000 ROA not after: Wed 25 Sep 2024 03:16:13 +0000 asID: 151565 IP address blocks: 103.253.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:45:c9:67:6c:ef:eb:ee:40:9d:11:2c:21:72:39:21:ce:23:95:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 27 03:11:13 2023 GMT Not After : Sep 25 03:16:13 2024 GMT Subject: CN=C9C077BDAC5DF2875FE2DA7E12F7E7B70E4F46CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:57:63:20:a3:83:46:cf:00:e3:e9:df:4b:01: 78:75:a4:14:49:d2:83:c0:1c:7d:bd:57:92:e5:9c: 3f:74:31:bf:33:c7:aa:be:d2:85:f9:28:a0:45:22: 2f:c9:7d:13:64:10:5b:5a:68:f5:7c:0d:a9:eb:89: 86:80:08:48:31:d0:23:44:3b:3c:58:54:be:11:7b: 4b:a3:64:bb:fd:dc:e6:6f:3f:46:40:5f:c4:93:f3: 71:2a:64:f4:95:8d:3d:8a:d8:bd:7e:7b:0d:ff:80: db:99:ad:94:8e:43:6f:20:2c:45:56:41:e9:a6:9b: f4:c2:57:2f:ba:26:01:0e:55:8e:f2:02:60:3e:cc: d6:4a:7a:e5:bd:6b:e7:2a:96:18:26:6e:44:15:ea: 13:0c:e4:3b:7d:8a:61:bd:e4:a3:3e:57:27:45:35: e5:a9:c8:6a:21:95:17:a7:26:a0:a8:3b:de:3d:65: ed:ec:5c:94:0f:59:d6:77:67:20:96:d9:d2:22:22: fa:6c:e7:75:f8:30:e1:a3:b9:4b:57:ee:06:fa:5c: 32:9a:4b:b8:30:25:f5:d0:52:90:0c:de:4f:9e:65: 0d:e0:bb:15:c8:23:d4:93:df:33:04:89:85:56:97: f0:f8:d3:fd:18:d0:ad:55:18:dc:6f:86:ad:1d:d7: 94:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C0:77:BD:AC:5D:F2:87:5F:E2:DA:7E:12:F7:E7:B7:0E:4F:46:CD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151565.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.253.230.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:be:1a:64:d0:29:91:99:e5:38:24:96:4c:f0:d8:ea:f4:8e: 00:95:cd:7b:11:77:39:b9:27:b8:5b:04:70:12:7f:81:31:08: 09:77:e3:68:76:f1:b2:ef:97:1b:b5:92:30:84:8c:91:2f:f8: 55:ca:0c:4b:eb:f2:a2:4f:87:6f:f3:21:13:d4:60:bb:e7:91: d3:45:be:d9:8f:bc:e9:47:27:2b:fc:82:37:ff:35:bc:21:3d: 65:7e:5f:b4:68:81:66:8b:3b:14:e7:0b:02:9d:b0:69:41:6f: 6a:dc:9c:41:00:97:7c:18:28:a3:9f:ed:61:dc:af:0a:d5:3b: 9b:77:17:40:c3:db:70:a1:71:b6:19:ff:f2:ad:7a:75:de:5c: 20:af:82:86:3a:c6:ee:33:7a:c4:94:8a:d7:79:e7:90:a9:50: ec:4a:cd:57:60:13:68:cc:3d:86:25:2c:33:76:87:48:5b:ed: 1c:76:89:01:d8:59:39:af:15:57:f6:ba:93:ae:54:42:de:d1: 78:b1:f1:81:6b:45:40:c7:89:b1:1d:eb:91:20:16:c2:b8:02: 18:e0:86:32:d3:b4:2b:34:28:f0:d1:dc:87:89:e8:99:29:42: 9f:d8:5e:f7:35:ae:8c:39:2d:57:f0:8a:f8:bf:84:6e:e2:76: 6f:7f:df:9a -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUDEXJZ2zv6+5AnREsIXI5Ic4jlS8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkyNzAzMTExM1oX DTI0MDkyNTAzMTYxM1owMzExMC8GA1UEAxMoQzlDMDc3QkRBQzVERjI4NzVGRTJE QTdFMTJGN0U3QjcwRTRGNDZDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANFXYyCjg0bPAOPp30sBeHWkFEnSg8Acfb1XkuWcP3QxvzPHqr7ShfkooEUi L8l9E2QQW1po9XwNqeuJhoAISDHQI0Q7PFhUvhF7S6Nku/3c5m8/RkBfxJPzcSpk 9JWNPYrYvX57Df+A25mtlI5DbyAsRVZB6aab9MJXL7omAQ5VjvICYD7M1kp65b1r 5yqWGCZuRBXqEwzkO32KYb3koz5XJ0U15anIaiGVF6cmoKg73j1l7exclA9Z1ndn IJbZ0iIi+mzndfgw4aO5S1fuBvpcMppLuDAl9dBSkAzeT55lDeC7Fcgj1JPfMwSJ hVaX8PjT/RjQrVUY3G+GrR3XlFkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTJwHe9 rF3yh1/i2n4S9+e3Dk9GzTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTU2NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGf95jANBgkqhkiG9w0BAQsFAAOCAQEAG74aZNApkZnlOCSWTPDY 6vSOAJXNexF3ObknuFsEcBJ/gTEICXfjaHbxsu+XG7WSMISMkS/4VcoMS+vyok+H b/MhE9Rgu+eR00W+2Y+86UcnK/yCN/81vCE9ZX5ftGiBZos7FOcLAp2waUFvatyc QQCXfBgoo5/tYdyvCtU7m3cXQMPbcKFxthn/8q16dd5cIK+ChjrG7jN6xJSK13nn kKlQ7ErNV2ATaMw9hiUsM3aHSFvtHHaJAdhZOa8VV/a6k65UQt7ReLHxgWtFQMeJ sR3rkSAWwrgCGOCGMtO0KzQo8NHch4nomSlCn9he9zWujDktV/CK+L+EbuJ2b3/f mg== -----END CERTIFICATE-----Generated at Wed May 8 17:45:23 2024 by rpki-client on console-ams.rpki-client.org