$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151583.roa File: AS151583.roa (raw, json) Hash identifier: RUTd2T8YhudlXLdGYALHYnSUrmPDNufTdwQKL9w9gVo= Subject key identifier: 7C:EB:2D:E4:91:25:88:A7:6D:C4:FD:C9:33:7B:09:7C:E0:6E:B3:64 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 599BB939D777BC525516C5EF867E302705ECC39A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151583.roa Signing time: Thu 12 Sep 2024 10:00:00 +0000 ROA not before: Thu 12 Sep 2024 09:55:00 +0000 ROA not after: Thu 11 Sep 2025 10:00:00 +0000 asID: 151583 IP address blocks: 103.236.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:9b:b9:39:d7:77:bc:52:55:16:c5:ef:86:7e:30:27:05:ec:c3:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 12 09:55:00 2024 GMT Not After : Sep 11 10:00:00 2025 GMT Subject: CN=7CEB2DE4912588A76DC4FDC9337B097CE06EB364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ec:70:e9:61:44:7a:ba:90:2f:8f:e3:be:8f: f5:16:ea:98:81:a0:38:5f:76:f2:95:ac:39:77:eb: ee:29:29:12:e4:a6:3f:7b:4a:6f:7b:3c:7e:bd:54: 2c:e5:c1:20:1e:a3:50:f2:c3:33:e7:4b:d8:6d:18: 5f:7c:d1:66:11:a3:fc:6a:d3:ef:05:88:2f:d5:a5: e6:38:35:e8:dc:f7:20:d8:6d:67:62:ec:a8:48:58: 42:77:13:76:77:d4:6f:c0:92:8c:17:6a:9a:27:c5: 7a:9e:0f:42:9a:b3:fa:f1:55:52:d3:c5:75:3b:11: 3d:7c:8c:a4:54:55:be:c7:86:12:50:f9:ce:e3:c5: 9f:3c:84:5f:3f:f0:af:15:4e:7a:41:8d:78:a2:0b: 0a:6e:e2:c3:19:89:03:da:63:55:13:8e:1c:d7:8c: fe:52:28:15:2a:b0:c9:dc:81:c8:37:a6:08:2c:5f: d0:b2:02:d8:33:08:5d:90:bd:ff:63:8b:d9:84:6b: 89:aa:21:d4:7f:f4:72:d4:ed:ee:cd:18:fc:8b:5b: 93:06:8f:63:bf:c6:32:3d:48:e0:87:54:64:37:68: ca:66:ee:47:ff:77:2d:35:86:7f:fa:01:1d:d0:b3: cf:87:8d:ef:a1:00:04:39:ad:93:59:0a:ea:27:b7: 59:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EB:2D:E4:91:25:88:A7:6D:C4:FD:C9:33:7B:09:7C:E0:6E:B3:64 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151583.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.141.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:a9:0f:5f:4b:2a:50:88:ef:ae:ea:24:ae:ea:ba:b4:2b:e3: af:62:88:f4:76:16:c6:7a:28:54:9c:a7:d8:71:87:3f:32:d6: f9:8f:44:34:07:db:74:88:ee:46:7e:4a:21:d2:b0:46:55:4b: c8:60:72:64:03:6b:00:a1:e3:3c:92:26:9c:b3:81:c9:9b:e0: 87:08:c7:36:e0:20:f0:bf:2f:69:0d:b8:60:81:e9:47:69:cb: a7:6e:d4:62:55:e0:6a:4f:6a:6e:85:43:61:6b:5e:d2:9e:4e: 8f:ac:5b:b0:72:a3:7a:a8:b3:d0:08:60:f9:ce:b5:ae:56:80: b2:ec:41:5c:8b:34:8b:40:52:8a:7c:1a:e6:02:bf:7a:8b:b2: 9f:14:2c:d4:f2:88:6b:ff:a4:af:ff:5f:f1:7f:81:15:a6:12: 33:eb:ab:e5:1c:61:b9:4b:ca:c6:12:7e:e6:50:98:33:67:2f: f8:ba:cb:f4:2b:36:5b:28:a5:a4:17:27:65:f4:ff:49:f8:d8: fd:b9:29:31:b4:8d:f2:79:cf:23:3e:7e:9a:01:e4:9e:14:c4: 7e:a2:41:3b:4f:00:40:b8:e7:28:aa:82:8d:35:91:9c:95:86: ed:30:15:c7:86:32:83:5b:fb:11:80:a4:c2:b5:f2:95:12:2f: 55:b7:97:86 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUWZu5Odd3vFJVFsXvhn4wJwXsw5owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkxMjA5NTUwMFoX DTI1MDkxMTEwMDAwMFowMzExMC8GA1UEAxMoN0NFQjJERTQ5MTI1ODhBNzZEQzRG REM5MzM3QjA5N0NFMDZFQjM2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM/scOlhRHq6kC+P476P9RbqmIGgOF928pWsOXfr7ikpEuSmP3tKb3s8fr1U LOXBIB6jUPLDM+dL2G0YX3zRZhGj/GrT7wWIL9Wl5jg16Nz3INhtZ2LsqEhYQncT dnfUb8CSjBdqmifFep4PQpqz+vFVUtPFdTsRPXyMpFRVvseGElD5zuPFnzyEXz/w rxVOekGNeKILCm7iwxmJA9pjVROOHNeM/lIoFSqwydyByDemCCxf0LIC2DMIXZC9 /2OL2YRriaoh1H/0ctTt7s0Y/ItbkwaPY7/GMj1I4IdUZDdoymbuR/93LTWGf/oB HdCzz4eN76EABDmtk1kK6ie3Wc0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBR86y3k kSWIp23E/ckzewl84G6zZDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTU4My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfsjTANBgkqhkiG9w0BAQsFAAOCAQEAD6kPX0sqUIjvruokruq6 tCvjr2KI9HYWxnooVJyn2HGHPzLW+Y9ENAfbdIjuRn5KIdKwRlVLyGByZANrAKHj PJImnLOByZvghwjHNuAg8L8vaQ24YIHpR2nLp27UYlXgak9qboVDYWte0p5Oj6xb sHKjeqiz0Ahg+c61rlaAsuxBXIs0i0BSinwa5gK/eouynxQs1PKIa/+kr/9f8X+B FaYSM+ur5RxhuUvKxhJ+5lCYM2cv+LrL9Cs2WyilpBcnZfT/SfjY/bkpMbSN8nnP Iz5+mgHknhTEfqJBO08AQLjnKKqCjTWRnJWG7TAVx4Yyg1v7EYCkwrXylRIvVbeX hg== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:49 2024 by rpki-client on console-ams.rpki-client.org