$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151569.roa File: AS151569.roa (raw, json) Hash identifier: 48wV2cKH1ljN0NgLDOsQ/rGJdhwPFOf+E66N+TTL8gs= Subject key identifier: 79:95:C5:DE:B8:7C:0B:4F:8E:37:B3:C7:6C:99:44:F4:7D:2D:BC:7A Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7822562BE7D6CE35268DFC236008BFC6EECF7684 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151569.roa Signing time: Tue 17 Oct 2023 06:50:53 +0000 ROA not before: Tue 17 Oct 2023 06:45:53 +0000 ROA not after: Tue 15 Oct 2024 06:50:53 +0000 asID: 151569 IP address blocks: 103.38.110.0/23 maxlen: 24 2001:df3:2c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:22:56:2b:e7:d6:ce:35:26:8d:fc:23:60:08:bf:c6:ee:cf:76:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 17 06:45:53 2023 GMT Not After : Oct 15 06:50:53 2024 GMT Subject: CN=7995C5DEB87C0B4F8E37B3C76C9944F47D2DBC7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:11:bd:3c:73:df:2e:74:7e:26:58:4a:43:4f: be:a0:5a:a7:91:a4:1a:c9:4e:3e:63:6d:39:1e:f7: f2:0b:96:e5:15:d1:a5:61:0b:f3:cf:e3:7e:df:87: 8f:44:05:df:23:02:32:eb:87:fa:07:b5:98:63:f0: af:f4:87:d0:80:cb:cf:7f:7d:d2:1f:eb:c3:e2:a0: d7:57:5b:51:c0:7c:ae:1a:a0:a7:aa:cc:73:78:d5: 05:fc:cf:b7:6a:79:15:9f:da:b8:13:60:54:f0:a7: 49:06:a0:4c:1f:3a:c9:88:39:58:fc:a0:0b:fe:fd: b5:81:dc:19:16:f0:8e:9a:53:88:c5:9e:65:a2:ab: d6:92:b4:51:02:e0:db:97:6a:a9:f1:e1:fe:60:50: 54:68:01:ca:29:c4:1e:98:79:ba:47:2d:b5:98:c1: 6e:93:d9:e3:b8:ba:92:c4:21:65:4e:ad:78:56:25: 10:68:7f:8d:32:5b:c8:4d:59:8a:0c:bf:6f:d4:92: d7:c6:83:71:ab:86:b6:69:7b:91:a4:d6:35:79:93: 36:2d:8e:fe:23:ea:60:9a:0c:d9:26:d6:b3:d8:51: d5:7b:0c:e7:59:24:bc:5c:ce:dc:7e:90:e4:51:b8: 91:a9:89:36:9e:76:66:6a:e6:d7:2c:71:69:74:75: 82:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:95:C5:DE:B8:7C:0B:4F:8E:37:B3:C7:6C:99:44:F4:7D:2D:BC:7A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151569.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.38.110.0/23 IPv6: 2001:df3:2c0::/48 Signature Algorithm: sha256WithRSAEncryption 6c:2f:36:bb:42:1f:54:32:28:4e:4e:75:7d:9a:51:dc:ff:8c: 1b:eb:c1:da:51:ce:ab:53:e9:77:1f:89:ee:da:b8:ae:93:b9: db:c7:94:56:a6:c9:04:4d:59:ab:29:02:0c:df:de:86:df:54: e2:2a:c0:3b:ca:8e:ff:37:fd:96:6d:74:6e:b1:44:aa:e1:5d: 49:3e:d7:14:46:b8:a6:24:b9:9e:d3:17:c9:32:f0:92:00:9a: 81:2e:ab:8e:12:91:a3:3e:9c:c3:ed:66:65:fd:fd:fa:97:b7: 34:13:2b:ae:d4:bb:17:94:ae:79:bc:f6:9d:c1:f3:07:b4:ff: 55:f6:c1:14:c7:9a:79:31:b3:58:92:9d:60:33:56:3f:28:e9: a7:b8:50:83:df:0d:b7:2d:ad:d9:8a:0b:3a:d1:e0:1d:19:b9: 1b:8b:37:e6:ef:d8:cf:1a:92:10:af:87:23:d6:60:fa:fc:46: d6:7f:2a:d3:01:b4:4e:e7:5c:2a:d6:0b:4a:44:11:c1:1e:c1: 4d:96:2d:d2:bf:38:d1:5e:01:2f:b8:33:09:41:b3:b9:c8:9e: 62:7e:0f:20:db:1f:d2:f9:b3:d2:63:29:a5:74:22:65:67:96: c1:04:be:ff:07:d4:1e:11:89:8c:20:ee:0e:c6:d4:24:43:8f: df:54:9e:69 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUeCJWK+fWzjUmjfwjYAi/xu7PdoQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAxNzA2NDU1M1oX DTI0MTAxNTA2NTA1M1owMzExMC8GA1UEAxMoNzk5NUM1REVCODdDMEI0RjhFMzdC M0M3NkM5OTQ0RjQ3RDJEQkM3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMURvTxz3y50fiZYSkNPvqBap5GkGslOPmNtOR738guW5RXRpWEL88/jft+H j0QF3yMCMuuH+ge1mGPwr/SH0IDLz3990h/rw+Kg11dbUcB8rhqgp6rMc3jVBfzP t2p5FZ/auBNgVPCnSQagTB86yYg5WPygC/79tYHcGRbwjppTiMWeZaKr1pK0UQLg 25dqqfHh/mBQVGgByinEHph5ukcttZjBbpPZ47i6ksQhZU6teFYlEGh/jTJbyE1Z igy/b9SS18aDcauGtml7kaTWNXmTNi2O/iPqYJoM2SbWs9hR1XsM51kkvFzO3H6Q 5FG4kamJNp52Zmrm1yxxaXR1grsCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBR5lcXe uHwLT443s8dsmUT0fS28ejAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTU2OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAWcmbjAPBAIAAjAJAwcAIAEN8wLAMA0GCSqGSIb3DQEBCwUAA4IB AQBsLza7Qh9UMihOTnV9mlHc/4wb68HaUc6rU+l3H4nu2riuk7nbx5RWpskETVmr KQIM396G31TiKsA7yo7/N/2WbXRusUSq4V1JPtcURrimJLme0xfJMvCSAJqBLquO EpGjPpzD7WZl/f36l7c0Eyuu1LsXlK55vPadwfMHtP9V9sEUx5p5MbNYkp1gM1Y/ KOmnuFCD3w23La3Zigs60eAdGbkbizfm79jPGpIQr4cj1mD6/EbWfyrTAbRO51wq 1gtKRBHBHsFNli3SvzjRXgEvuDMJQbO5yJ5ifg8g2x/S+bPSYymldCJlZ5bBBL7/ B9QeEYmMIO4OxtQkQ4/fVJ5p -----END CERTIFICATE-----Generated at Wed May 8 10:06:55 2024 by rpki-client on console-ams.rpki-client.org