$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151992.roa File: AS151992.roa (raw, json) Hash identifier: CMTBMSTa6jPef5gBszCZZ6DVvNVHCDzVNOY4ESIUFNQ= Subject key identifier: 6C:1F:FC:03:27:1F:00:F6:D7:10:CB:6E:25:A7:EC:DE:8B:27:26:C4 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0F12CB9AD6014D3778C512F96BC937B617E8A964 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151992.roa Signing time: Fri 22 Dec 2023 03:16:50 +0000 ROA not before: Fri 22 Dec 2023 03:11:50 +0000 ROA not after: Fri 20 Dec 2024 03:16:50 +0000 asID: 151992 IP address blocks: 103.42.242.0/24 maxlen: 24 2001:df3:4b40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:12:cb:9a:d6:01:4d:37:78:c5:12:f9:6b:c9:37:b6:17:e8:a9:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 22 03:11:50 2023 GMT Not After : Dec 20 03:16:50 2024 GMT Subject: CN=6C1FFC03271F00F6D710CB6E25A7ECDE8B2726C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:11:be:3f:d2:24:51:0e:21:fe:00:c7:8d:26: 89:d6:aa:f1:9f:7b:15:85:2d:81:42:46:5f:66:7d: b7:97:45:4d:1d:2d:b1:50:88:f7:4f:7f:5a:a5:eb: 40:a9:3b:e0:36:f0:35:92:af:fe:75:f9:1a:31:13: 34:26:c4:a3:99:54:9e:af:3e:b8:1d:9c:ac:5b:2c: e8:36:25:e6:f3:45:8a:82:04:26:a7:5a:23:e9:84: 57:4c:f5:63:36:3b:fc:1b:02:e6:9a:f0:2f:50:da: 96:0c:7a:0b:43:4f:4f:46:20:34:a3:15:84:01:82: 3f:4b:f0:66:31:f4:b3:a6:fa:62:ca:7a:9b:10:dc: 28:79:44:ed:03:7d:d3:12:df:e4:63:c0:27:d2:47: 37:55:6f:f0:3f:d7:7f:ed:1f:0b:2e:13:92:f5:e9: 90:36:cc:1b:38:cc:b5:e4:91:1b:5f:19:13:95:28: 75:d7:c8:80:d7:db:78:36:e2:a2:48:e3:71:11:6b: 76:97:7c:89:99:d6:6a:81:ed:5e:7b:13:0e:9f:9b: fd:d5:d8:e5:88:2f:78:f8:1c:02:08:d4:58:5e:f9: 60:9d:8b:76:18:fb:e3:b1:ae:21:e1:04:fa:eb:12: e4:af:5d:75:48:d6:a3:fa:13:ca:40:e4:01:fc:52: 2c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:1F:FC:03:27:1F:00:F6:D7:10:CB:6E:25:A7:EC:DE:8B:27:26:C4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151992.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.42.242.0/24 IPv6: 2001:df3:4b40::/48 Signature Algorithm: sha256WithRSAEncryption 58:bc:5d:59:89:80:fd:cf:72:10:42:2d:d8:01:ff:e5:85:c7: 1a:fd:b0:4b:a7:2f:a4:71:04:5c:e8:53:02:6e:f0:78:3e:1a: 72:6d:4f:58:0d:64:34:33:11:fb:84:b5:14:d8:d7:b4:68:da: 60:67:f7:f2:c7:b4:91:ba:a0:2a:5f:13:fc:04:8f:16:c5:c8: 83:1b:7c:2e:6a:05:4d:56:b3:8c:ba:cd:94:b4:6c:a6:bb:c6: da:d9:c1:3f:9e:ae:a7:25:a8:8a:11:dc:c6:41:c2:08:4f:34: ae:cb:e1:9f:72:54:a1:5b:22:4f:4e:b8:ef:67:1b:30:78:47: fa:8b:e2:8b:7e:a9:ba:a1:2a:19:c6:61:fe:e7:c6:20:49:b5: 17:e0:20:5b:dd:3f:0b:3d:cc:e5:84:0a:9f:68:6a:47:71:18: 91:38:35:36:c4:0b:f2:e8:62:09:7c:61:db:8f:11:b4:8b:df: 5f:42:58:c0:1d:8d:89:0d:27:96:c6:be:de:91:45:26:26:77: 91:d4:45:8c:13:1d:59:86:11:1d:c4:fc:e3:58:8d:22:ec:20: 13:71:a5:44:9c:6c:a0:71:39:b7:70:68:eb:e6:51:dd:3c:de: 8e:af:09:a2:35:6d:52:d8:28:77:d1:d5:ef:d3:7c:75:9f:57: db:42:a7:8e -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUDxLLmtYBTTd4xRL5a8k3thfoqWQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIyMjAzMTE1MFoX DTI0MTIyMDAzMTY1MFowMzExMC8GA1UEAxMoNkMxRkZDMDMyNzFGMDBGNkQ3MTBD QjZFMjVBN0VDREU4QjI3MjZDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANsRvj/SJFEOIf4Ax40midaq8Z97FYUtgUJGX2Z9t5dFTR0tsVCI909/WqXr QKk74DbwNZKv/nX5GjETNCbEo5lUnq8+uB2crFss6DYl5vNFioIEJqdaI+mEV0z1 YzY7/BsC5prwL1Dalgx6C0NPT0YgNKMVhAGCP0vwZjH0s6b6Ysp6mxDcKHlE7QN9 0xLf5GPAJ9JHN1Vv8D/Xf+0fCy4TkvXpkDbMGzjMteSRG18ZE5UoddfIgNfbeDbi okjjcRFrdpd8iZnWaoHtXnsTDp+b/dXY5YgvePgcAgjUWF75YJ2Ldhj747GuIeEE +usS5K9ddUjWo/oTykDkAfxSLCsCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBRsH/wD Jx8A9tcQy24lp+zeiycmxDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTk5Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAGcq8jAPBAIAAjAJAwcAIAEN80tAMA0GCSqGSIb3DQEBCwUAA4IB AQBYvF1ZiYD9z3IQQi3YAf/lhcca/bBLpy+kcQRc6FMCbvB4PhpybU9YDWQ0MxH7 hLUU2Ne0aNpgZ/fyx7SRuqAqXxP8BI8WxciDG3wuagVNVrOMus2UtGymu8ba2cE/ nq6nJaiKEdzGQcIITzSuy+GfclShWyJPTrjvZxsweEf6i+KLfqm6oSoZxmH+58Yg SbUX4CBb3T8LPczlhAqfaGpHcRiRODU2xAvy6GIJfGHbjxG0i99fQljAHY2JDSeW xr7ekUUmJneR1EWMEx1ZhhEdxPzjWI0i7CATcaVEnGygcTm3cGjr5lHdPN6Orwmi NW1S2Ch30dXv03x1n1fbQqeO -----END CERTIFICATE-----Generated at Wed May 8 17:45:23 2024 by rpki-client on console-ams.rpki-client.org