$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151588.roa File: AS151588.roa (raw, json) Hash identifier: 9EmpCvBaDdgBRIDLIamiiYVpsEz+O95aeVmbaQSzj7s= Subject key identifier: D6:F7:24:08:1E:92:4F:69:21:55:FF:B7:BB:41:BB:D2:7C:EE:54:AC Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7CF54AA88883DE896DDC365A045628597E5BA5D0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151588.roa Signing time: Mon 18 Nov 2024 02:57:33 +0000 ROA not before: Mon 18 Nov 2024 02:52:33 +0000 ROA not after: Mon 17 Nov 2025 02:57:33 +0000 asID: 151588 IP address blocks: 2001:df3:6740::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f5:4a:a8:88:83:de:89:6d:dc:36:5a:04:56:28:59:7e:5b:a5:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 18 02:52:33 2024 GMT Not After : Nov 17 02:57:33 2025 GMT Subject: CN=D6F724081E924F692155FFB7BB41BBD27CEE54AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6f:62:7b:b4:e5:bd:de:51:1c:5a:80:f3:f2: e1:40:c8:6e:4a:6d:af:61:90:87:1c:8e:ad:75:10: 73:f4:e6:b3:cc:15:87:b3:6d:0f:b1:65:9e:ce:d0: d3:80:ba:6f:a9:ac:7f:c1:e0:d7:5a:0a:f3:6c:78: 4a:2e:d9:8e:7d:f9:03:df:3a:2c:0a:00:e6:30:59: cf:99:db:f0:0c:47:89:92:e6:7a:e5:39:31:e5:c7: 82:7c:c5:5e:40:74:da:a8:dd:15:7d:90:fb:b3:64: b3:ab:a0:54:01:03:7f:8d:76:8a:6b:db:28:5c:33: 7b:3e:56:ab:f2:db:ea:d5:61:d5:1c:64:2f:42:0a: 8d:71:62:88:92:79:1d:f1:69:1e:79:e2:04:99:ae: 05:03:69:a6:24:d6:51:14:66:ef:0d:dc:4e:70:40: 59:c9:ff:ef:85:28:f2:03:bd:72:46:83:a6:26:0c: 1d:27:17:6e:ec:ba:3c:64:a4:29:21:0f:31:70:d1: cb:da:9c:e4:54:25:8c:b0:95:71:81:15:e4:20:0b: cd:d2:6e:56:36:1b:24:fc:7c:bb:d4:7a:70:81:d1: f8:f7:0b:89:b2:ed:3f:f0:db:88:d0:2c:ce:00:a5: c9:97:94:af:3d:e9:64:81:4d:c6:c0:db:9a:9f:1f: 6b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F7:24:08:1E:92:4F:69:21:55:FF:B7:BB:41:BB:D2:7C:EE:54:AC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151588.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:6740::/48 Signature Algorithm: sha256WithRSAEncryption 3a:2f:82:14:5e:f1:43:62:57:5b:0c:6a:12:93:e9:21:e8:dc: 75:ff:de:d3:68:6f:61:90:f2:17:2d:80:ce:12:c5:fe:a3:f0: ee:67:81:1b:ef:18:8c:d6:14:8a:87:e4:b4:99:b2:36:bb:5c: 7b:20:7c:8c:fb:59:02:bd:83:65:1a:1a:40:ac:7e:8c:fe:aa: 4c:6f:d4:13:b1:d7:29:49:87:3f:57:bb:4c:9f:a0:1c:69:ce: 30:ad:71:d7:d5:af:f4:4c:da:ed:2a:27:88:ad:c4:f0:00:90: 9f:17:96:7c:81:95:0e:28:d4:1e:8f:82:12:68:07:8c:de:ac: 8a:9b:b4:a3:e1:64:aa:18:91:41:6e:fb:3f:65:4b:07:ad:b9: 12:50:d0:29:8f:db:49:a4:57:e5:d6:74:f8:e6:e0:f5:a5:e3: c8:e9:0d:3b:cc:58:8a:c9:59:52:45:10:64:4e:99:0f:6e:56: 65:8c:40:70:40:b8:66:9b:d6:61:b8:2a:ca:07:4e:95:e6:2a: af:31:83:4a:53:05:59:a6:4b:fb:7e:9c:c6:1d:9f:d4:e6:6b: 3c:9b:4a:62:58:68:b0:9b:0d:a6:5f:55:f5:32:eb:06:b1:42: 05:4d:bc:4f:ef:4c:32:14:61:24:30:65:94:06:ae:11:25:f6: 98:87:cf:9e -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUfPVKqIiD3olt3DZaBFYoWX5bpdAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTExODAyNTIzM1oX DTI1MTExNzAyNTczM1owMzExMC8GA1UEAxMoRDZGNzI0MDgxRTkyNEY2OTIxNTVG RkI3QkI0MUJCRDI3Q0VFNTRBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZvYnu05b3eURxagPPy4UDIbkptr2GQhxyOrXUQc/Tms8wVh7NtD7Flns7Q 04C6b6msf8Hg11oK82x4Si7Zjn35A986LAoA5jBZz5nb8AxHiZLmeuU5MeXHgnzF XkB02qjdFX2Q+7Nks6ugVAEDf412imvbKFwzez5Wq/Lb6tVh1RxkL0IKjXFiiJJ5 HfFpHnniBJmuBQNppiTWURRm7w3cTnBAWcn/74Uo8gO9ckaDpiYMHScXbuy6PGSk KSEPMXDRy9qc5FQljLCVcYEV5CALzdJuVjYbJPx8u9R6cIHR+PcLibLtP/DbiNAs zgClyZeUrz3pZIFNxsDbmp8faxsCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBTW9yQI HpJPaSFV/7e7QbvSfO5UrDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTU4OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfNnQDANBgkqhkiG9w0BAQsFAAOCAQEAOi+CFF7xQ2JXWwxq EpPpIejcdf/e02hvYZDyFy2AzhLF/qPw7meBG+8YjNYUiofktJmyNrtceyB8jPtZ Ar2DZRoaQKx+jP6qTG/UE7HXKUmHP1e7TJ+gHGnOMK1x19Wv9Eza7SoniK3E8ACQ nxeWfIGVDijUHo+CEmgHjN6sipu0o+FkqhiRQW77P2VLB625ElDQKY/bSaRX5dZ0 +Obg9aXjyOkNO8xYislZUkUQZE6ZD25WZYxAcEC4ZpvWYbgqygdOleYqrzGDSlMF WaZL+36cxh2f1OZrPJtKYlhosJsNpl9V9TLrBrFCBU28T+9MMhRhJDBllAauESX2 mIfPng== -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:30 2024 by rpki-client on console-ams.rpki-client.org