$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151569.roa File: AS151569.roa (raw, json) Hash identifier: EeBlmFxbaQrPj4xqf3jkkXdZk+184pzC4IHcfT/BwHo= Subject key identifier: EB:9D:46:98:B2:F3:32:93:4E:43:CD:95:E8:4D:9A:97:A7:3B:B2:A6 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7A7F078FD5E25EBB5D55E6B96034197C8F368C42 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151569.roa Signing time: Tue 17 Sep 2024 07:00:00 +0000 ROA not before: Tue 17 Sep 2024 06:55:00 +0000 ROA not after: Tue 16 Sep 2025 07:00:00 +0000 asID: 151569 IP address blocks: 103.38.110.0/23 maxlen: 24 2001:df3:2c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:7f:07:8f:d5:e2:5e:bb:5d:55:e6:b9:60:34:19:7c:8f:36:8c:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 17 06:55:00 2024 GMT Not After : Sep 16 07:00:00 2025 GMT Subject: CN=EB9D4698B2F332934E43CD95E84D9A97A73BB2A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:67:67:93:7b:5a:6b:66:a7:cc:ac:24:1e:3b: de:6f:70:e8:80:53:6a:2e:be:44:00:95:ec:5b:da: 49:1e:5a:41:70:34:23:54:e5:88:04:ac:36:0d:c5: 6e:f1:40:7c:f4:78:39:1b:04:2c:37:ad:51:9f:b9: fe:19:ae:96:91:e6:73:99:42:fb:f9:00:9d:af:d4: 07:52:fa:57:53:7e:2c:54:46:34:9f:56:1e:c5:a9: 9a:c3:0f:ef:f5:f6:95:e5:54:0d:b0:72:99:50:54: 4b:67:60:03:1d:59:2c:f2:b0:a9:79:50:50:d9:f7: 41:63:3e:82:ac:de:5d:d3:8d:c0:5a:ce:e3:b5:10: 33:aa:c4:bf:68:d2:f3:4a:2a:45:ad:c4:ba:f4:ee: f7:57:19:9c:c6:48:e4:b3:32:0a:99:29:f1:7c:ef: 28:11:de:24:75:c6:ad:6d:71:3c:ef:40:74:cb:0a: 0e:9d:48:a2:54:ab:22:17:66:80:f8:7e:df:88:c8: 99:c0:53:74:20:62:2d:46:73:5a:ac:e9:12:24:75: 9c:54:14:fe:cf:09:fe:6f:54:90:ec:dd:ab:2a:c9: a5:05:dc:4f:4d:1a:f8:75:31:60:53:58:68:9e:5a: a2:ce:24:ba:d9:d8:61:db:28:63:97:fd:36:e0:1f: 37:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:9D:46:98:B2:F3:32:93:4E:43:CD:95:E8:4D:9A:97:A7:3B:B2:A6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151569.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.38.110.0/23 IPv6: 2001:df3:2c0::/48 Signature Algorithm: sha256WithRSAEncryption 49:6d:5b:db:02:92:92:bd:e7:2a:26:e5:3f:e9:0f:95:d6:de: 88:c7:85:94:62:11:2c:a8:de:db:75:65:17:c4:12:a9:f0:fd: 74:35:15:72:91:fc:82:ef:49:c2:33:b2:e7:15:73:bc:34:b3: 2a:28:f0:ac:d8:51:61:8e:83:0e:85:f2:6f:aa:5a:05:a0:57: 01:24:d1:3f:ed:b2:aa:cc:20:26:fd:9a:6b:c6:ab:0f:59:79: 59:ac:63:4b:35:3a:15:13:f7:b5:bd:cf:aa:98:92:6d:ca:7e: e3:b9:48:2b:7e:e8:ca:5b:a8:6d:cd:0c:50:57:5f:19:34:24: 7d:f6:30:e8:ea:4b:58:6f:43:43:6d:24:f0:2a:b2:14:da:2e: bd:a7:56:00:a3:50:93:41:ff:ee:c2:1f:21:c7:b9:a9:39:f3: 53:55:0a:db:cf:da:66:df:ef:e4:c1:76:c8:10:fe:17:15:01: f7:fd:90:b2:4b:1a:cb:07:f2:be:72:e5:2b:5f:c9:1c:96:5d: 76:5c:81:8b:73:2d:d4:ed:d0:29:f4:d7:95:6e:f5:75:23:de: 03:1b:59:8a:24:b9:d9:43:b2:2c:57:6c:f3:82:82:dd:41:0c: 83:76:91:c2:88:71:65:7b:66:62:b7:fc:90:08:da:89:a1:90: 19:0b:4b:8c -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUen8Hj9XiXrtdVea5YDQZfI82jEIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkxNzA2NTUwMFoX DTI1MDkxNjA3MDAwMFowMzExMC8GA1UEAxMoRUI5RDQ2OThCMkYzMzI5MzRFNDND RDk1RTg0RDlBOTdBNzNCQjJBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMVnZ5N7Wmtmp8ysJB473m9w6IBTai6+RACV7FvaSR5aQXA0I1TliASsNg3F bvFAfPR4ORsELDetUZ+5/hmulpHmc5lC+/kAna/UB1L6V1N+LFRGNJ9WHsWpmsMP 7/X2leVUDbBymVBUS2dgAx1ZLPKwqXlQUNn3QWM+gqzeXdONwFrO47UQM6rEv2jS 80oqRa3EuvTu91cZnMZI5LMyCpkp8XzvKBHeJHXGrW1xPO9AdMsKDp1IolSrIhdm gPh+34jImcBTdCBiLUZzWqzpEiR1nFQU/s8J/m9UkOzdqyrJpQXcT00a+HUxYFNY aJ5aos4kutnYYdsoY5f9NuAfN6UCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBTrnUaY svMyk05DzZXoTZqXpzuypjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTU2OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAWcmbjAPBAIAAjAJAwcAIAEN8wLAMA0GCSqGSIb3DQEBCwUAA4IB AQBJbVvbApKSvecqJuU/6Q+V1t6Ix4WUYhEsqN7bdWUXxBKp8P10NRVykfyC70nC M7LnFXO8NLMqKPCs2FFhjoMOhfJvqloFoFcBJNE/7bKqzCAm/ZprxqsPWXlZrGNL NToVE/e1vc+qmJJtyn7juUgrfujKW6htzQxQV18ZNCR99jDo6ktYb0NDbSTwKrIU 2i69p1YAo1CTQf/uwh8hx7mpOfNTVQrbz9pm3+/kwXbIEP4XFQH3/ZCySxrLB/K+ cuUrX8kcll12XIGLcy3U7dAp9NeVbvV1I94DG1mKJLnZQ7IsV2zzgoLdQQyDdpHC iHFle2Zit/yQCNqJoZAZC0uM -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:27 2024 by rpki-client on console-fra.rpki-client.org