$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151583.roa File: AS151583.roa (raw, json) Hash identifier: klvlNfcbLB0+ulQfL0lHtsFMfWLFD1a4lspK45sxu5M= Subject key identifier: 2B:C2:58:81:6F:1E:6A:FC:60:0F:ED:4E:32:61:E2:94:49:02:0F:2D Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 50496D2FE6A3A06D5CE682F6571CC674662ED4B3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151583.roa Signing time: Thu 12 Oct 2023 09:06:06 +0000 ROA not before: Thu 12 Oct 2023 09:01:06 +0000 ROA not after: Thu 10 Oct 2024 09:06:06 +0000 asID: 151583 IP address blocks: 103.236.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:49:6d:2f:e6:a3:a0:6d:5c:e6:82:f6:57:1c:c6:74:66:2e:d4:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 12 09:01:06 2023 GMT Not After : Oct 10 09:06:06 2024 GMT Subject: CN=2BC258816F1E6AFC600FED4E3261E29449020F2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e1:bc:bf:2e:ef:3c:fb:fe:8b:cb:76:d8:da: 01:60:61:ac:15:b4:21:0e:97:32:c5:a0:ad:7a:05: 11:dc:ce:98:7a:d3:66:db:6e:95:d3:f6:d4:35:74: 12:0e:3d:f3:bf:e4:52:a2:fb:8d:7e:2b:53:e2:7f: 61:28:fa:c6:a3:b7:bf:27:2b:e8:2f:8c:3d:fd:36: dd:ef:ee:5e:2d:db:1c:d6:47:62:fe:ca:58:e2:5a: 54:90:ba:b6:84:d3:5a:fc:cb:dd:16:1c:ea:3d:94: 35:5f:01:03:e6:a0:6d:e6:98:2f:c6:81:db:26:c3: 40:a9:fa:fb:44:a8:19:40:0b:95:8b:d6:99:ed:43: 61:d9:26:d1:98:d3:86:7c:68:22:60:fd:15:3b:02: 28:29:7c:84:29:bc:d8:c0:21:53:c1:fe:b0:66:ca: b0:e2:85:44:8f:bc:dc:ca:2e:12:e6:61:ec:97:33: 57:c0:3b:1c:da:1d:fb:6a:d3:40:b7:31:41:7d:ba: a8:63:23:eb:48:58:c1:47:06:28:28:85:83:de:ae: a0:3b:a6:03:b0:eb:56:d7:c8:bd:7b:6e:e9:cc:9b: 46:5a:ee:8d:a6:a1:65:ea:05:dc:bd:56:9e:62:a5: 7e:37:1e:e1:5c:36:b8:98:80:7f:fc:b4:ea:1e:9d: 14:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C2:58:81:6F:1E:6A:FC:60:0F:ED:4E:32:61:E2:94:49:02:0F:2D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151583.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.141.0/24 Signature Algorithm: sha256WithRSAEncryption 80:15:a4:4f:59:be:f7:f7:96:50:1f:4c:57:7f:13:c5:a3:94: 58:5f:cd:8e:5b:3f:44:97:43:a7:e5:7c:ac:62:e5:73:86:9c: 7c:f4:2c:98:5a:cb:30:6f:e3:00:35:55:d4:fc:ca:93:53:a9: c9:86:f8:e5:29:03:6e:2c:22:82:f8:25:fe:d0:a3:b1:05:28: ab:3b:30:ee:2b:c9:12:2c:ce:8a:bc:38:c7:33:b4:a3:96:a6: a5:b0:0d:a4:8e:82:39:bf:08:01:d3:4f:66:a6:9c:46:df:9c: 4e:b0:58:16:28:11:93:6a:22:1b:64:e1:e2:46:fb:6b:6c:08: c2:87:bf:bd:96:6d:40:f1:48:29:fe:47:5e:e1:92:69:3a:a3: 0e:f4:55:be:ab:62:84:d4:de:22:f4:b8:74:4c:4e:6b:51:7b: cd:fd:25:d6:db:be:aa:4d:7e:6b:14:99:0b:65:82:b6:c8:51: f5:91:2c:73:21:6c:d5:f2:b6:bb:fc:06:71:7e:f5:30:76:4f: 90:08:2d:59:07:43:a1:1f:41:18:42:4d:f1:b1:79:74:43:e6: 9c:fc:4e:02:f7:f4:c9:8a:dc:29:8e:0a:45:62:3b:2f:4a:74: 37:28:e1:9c:a7:eb:8d:31:72:af:20:a5:c0:76:04:65:67:02: 23:d7:39:1f -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUUEltL+ajoG1c5oL2VxzGdGYu1LMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAxMjA5MDEwNloX DTI0MTAxMDA5MDYwNlowMzExMC8GA1UEAxMoMkJDMjU4ODE2RjFFNkFGQzYwMEZF RDRFMzI2MUUyOTQ0OTAyMEYyRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALDhvL8u7zz7/ovLdtjaAWBhrBW0IQ6XMsWgrXoFEdzOmHrTZttuldP21DV0 Eg4987/kUqL7jX4rU+J/YSj6xqO3vycr6C+MPf023e/uXi3bHNZHYv7KWOJaVJC6 toTTWvzL3RYc6j2UNV8BA+agbeaYL8aB2ybDQKn6+0SoGUALlYvWme1DYdkm0ZjT hnxoImD9FTsCKCl8hCm82MAhU8H+sGbKsOKFRI+83MouEuZh7JczV8A7HNod+2rT QLcxQX26qGMj60hYwUcGKCiFg96uoDumA7DrVtfIvXtu6cybRlrujaahZeoF3L1W nmKlfjce4Vw2uJiAf/y06h6dFNkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQrwliB bx5q/GAP7U4yYeKUSQIPLTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTU4My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfsjTANBgkqhkiG9w0BAQsFAAOCAQEAgBWkT1m+9/eWUB9MV38T xaOUWF/Njls/RJdDp+V8rGLlc4acfPQsmFrLMG/jADVV1PzKk1OpyYb45SkDbiwi gvgl/tCjsQUoqzsw7ivJEizOirw4xzO0o5ampbANpI6COb8IAdNPZqacRt+cTrBY FigRk2oiG2Th4kb7a2wIwoe/vZZtQPFIKf5HXuGSaTqjDvRVvqtihNTeIvS4dExO a1F7zf0l1tu+qk1+axSZC2WCtshR9ZEscyFs1fK2u/wGcX71MHZPkAgtWQdDoR9B GEJN8bF5dEPmnPxOAvf0yYrcKY4KRWI7L0p0NyjhnKfrjTFyryClwHYEZWcCI9c5 Hw== -----END CERTIFICATE-----Generated at Wed May 8 18:12:18 2024 by rpki-client on console-fra.rpki-client.org