$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151992.roa File: AS151992.roa (raw, json) Hash identifier: FVCGerbfIDxPEfStzGmZgDaUj6a9pOqce2+k2a2g5GQ= Subject key identifier: BD:31:19:03:F3:E4:E4:21:55:AD:44:B8:60:8C:4F:D5:3D:74:94:29 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2639583E78F05413F6108C68C4F36728BD1A27C8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151992.roa Signing time: Fri 22 Nov 2024 04:00:00 +0000 ROA not before: Fri 22 Nov 2024 03:55:00 +0000 ROA not after: Fri 21 Nov 2025 04:00:00 +0000 asID: 151992 IP address blocks: 103.42.242.0/24 maxlen: 24 2001:df3:4b40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:39:58:3e:78:f0:54:13:f6:10:8c:68:c4:f3:67:28:bd:1a:27:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 22 03:55:00 2024 GMT Not After : Nov 21 04:00:00 2025 GMT Subject: CN=BD311903F3E4E42155AD44B8608C4FD53D749429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:30:96:5d:b9:24:a6:44:c8:35:1f:3a:bb:7f: dd:a1:47:c4:af:17:97:7d:64:cc:d8:df:27:6c:0e: 40:dd:b6:41:49:d4:2f:d8:6b:14:e7:c1:7f:7d:51: 57:b0:59:76:1f:d5:dc:3d:a6:97:2f:e0:ff:f9:16: 1f:ff:cb:71:e6:9c:4b:f1:49:11:e6:c0:03:bd:f3: 85:ac:c7:27:aa:15:b0:47:62:ab:ac:fd:e4:7b:49: ca:f5:9e:d4:61:5d:e7:0e:f5:a3:62:e1:1a:ed:4a: 7f:5b:ca:4a:3f:fe:bb:63:c0:86:88:43:ab:d0:8d: e4:30:cc:e4:64:49:7c:5a:f7:d4:dc:67:81:ac:1d: e3:10:53:a9:95:79:0c:3d:94:6f:ec:05:d9:07:58: e0:d5:e7:35:27:6b:48:1c:f9:e4:07:77:10:a6:1e: 29:51:60:d3:ea:8b:ba:b5:cf:c7:d5:0c:34:19:74: e0:8a:ea:89:27:cb:05:61:f9:9f:1e:83:b5:5d:b7: 68:30:1f:58:5e:48:65:bf:6f:41:4c:d2:56:49:2a: 76:21:f3:fb:c1:fd:9e:28:3d:4f:19:1d:9f:07:1f: 27:7e:1f:90:32:50:85:56:dd:21:6a:cc:f9:df:0c: 28:2c:2e:94:44:4d:6b:db:e9:58:7b:6f:fb:4a:b4: 83:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:31:19:03:F3:E4:E4:21:55:AD:44:B8:60:8C:4F:D5:3D:74:94:29 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151992.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.42.242.0/24 IPv6: 2001:df3:4b40::/48 Signature Algorithm: sha256WithRSAEncryption 56:7a:92:38:16:1c:fa:ae:ae:3f:7e:18:92:7f:9a:32:6e:83: 00:c6:03:ab:1a:f1:8b:4f:92:27:56:5f:d5:f9:de:cf:a7:86: 5a:41:7c:6e:90:86:8c:74:a0:09:da:f1:f0:d9:f0:6e:ce:22: 89:08:b2:f6:75:84:3d:a5:16:5d:87:ce:f9:53:b3:81:d7:93: d0:fc:80:bf:ca:72:c7:c9:eb:ba:85:a1:1a:20:ca:fb:80:52: 9c:fe:d7:95:3a:6d:85:11:7e:29:8c:91:22:e5:53:d7:10:65: 43:6d:aa:b4:74:31:18:8d:90:65:60:40:a4:58:f7:01:83:e9: 19:46:8f:04:73:8c:da:17:c9:73:af:a9:2f:bb:ec:68:cf:b7: 17:1d:29:97:39:58:3d:36:e0:bd:18:17:ee:75:b4:d6:b9:10: 8d:b5:85:82:03:03:d1:1b:ae:75:8c:fc:a8:1a:a4:66:19:93: e9:f7:73:41:76:03:06:c7:e6:17:3b:0a:fd:5b:57:c4:70:76: ca:bf:f4:04:96:e6:d8:76:1f:58:49:87:fb:aa:85:20:31:42: c8:e4:75:f9:2d:da:77:d5:7f:3b:bb:bd:ec:ff:6a:ff:8f:5a: 1a:d5:06:ec:85:40:de:d6:33:81:31:bb:63:fa:d1:69:1a:d3: 50:71:5e:93 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUJjlYPnjwVBP2EIxoxPNnKL0aJ8gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTEyMjAzNTUwMFoX DTI1MTEyMTA0MDAwMFowMzExMC8GA1UEAxMoQkQzMTE5MDNGM0U0RTQyMTU1QUQ0 NEI4NjA4QzRGRDUzRDc0OTQyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK4wll25JKZEyDUfOrt/3aFHxK8Xl31kzNjfJ2wOQN22QUnUL9hrFOfBf31R V7BZdh/V3D2mly/g//kWH//LceacS/FJEebAA73zhazHJ6oVsEdiq6z95HtJyvWe 1GFd5w71o2LhGu1Kf1vKSj/+u2PAhohDq9CN5DDM5GRJfFr31Nxngawd4xBTqZV5 DD2Ub+wF2QdY4NXnNSdrSBz55Ad3EKYeKVFg0+qLurXPx9UMNBl04IrqiSfLBWH5 nx6DtV23aDAfWF5IZb9vQUzSVkkqdiHz+8H9nig9TxkdnwcfJ34fkDJQhVbdIWrM +d8MKCwulERNa9vpWHtv+0q0gw0CAwEAAaOCAeEwggHdMB0GA1UdDgQWBBS9MRkD 8+TkIVWtRLhgjE/VPXSUKTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTk5Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAGcq8jAPBAIAAjAJAwcAIAEN80tAMA0GCSqGSIb3DQEBCwUAA4IB AQBWepI4Fhz6rq4/fhiSf5oyboMAxgOrGvGLT5InVl/V+d7Pp4ZaQXxukIaMdKAJ 2vHw2fBuziKJCLL2dYQ9pRZdh875U7OB15PQ/IC/ynLHyeu6haEaIMr7gFKc/teV Om2FEX4pjJEi5VPXEGVDbaq0dDEYjZBlYECkWPcBg+kZRo8Ec4zaF8lzr6kvu+xo z7cXHSmXOVg9NuC9GBfudbTWuRCNtYWCAwPRG651jPyoGqRmGZPp93NBdgMGx+YX Owr9W1fEcHbKv/QElubYdh9YSYf7qoUgMULI5HX5Ldp31X87u73s/2r/j1oa1Qbs hUDe1jOBMbtj+tFpGtNQcV6T -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:30 2024 by rpki-client on console-ams.rpki-client.org