$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151993.roa File: AS151993.roa (raw, json) Hash identifier: +v+u9DHJonyvk35ZVMF24gTz4IeDDQFFZaFXd/aLb80= Subject key identifier: C9:4D:5E:71:66:B4:2C:68:1F:14:76:2B:3D:08:A4:33:B5:CC:E0:79 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2B818A6E672F94697C4566DEE352946D1A8054B9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151993.roa Signing time: Wed 20 Nov 2024 07:00:00 +0000 ROA not before: Wed 20 Nov 2024 06:55:00 +0000 ROA not after: Wed 19 Nov 2025 07:00:00 +0000 asID: 151993 IP address blocks: 203.111.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:81:8a:6e:67:2f:94:69:7c:45:66:de:e3:52:94:6d:1a:80:54:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 20 06:55:00 2024 GMT Not After : Nov 19 07:00:00 2025 GMT Subject: CN=C94D5E7166B42C681F14762B3D08A433B5CCE079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:83:b7:b4:fe:0a:ea:25:0f:bd:f4:5f:50:11: 6f:c5:5d:de:52:43:25:cb:2c:74:b2:b4:d4:9a:7c: 1c:67:e4:76:c6:3f:28:1e:46:20:da:0d:fc:c5:d1: 74:ab:b6:39:17:a8:a8:43:4c:c6:8c:b0:e5:38:f0: 7d:15:34:00:9f:27:4a:b2:df:5f:00:a4:31:88:cd: c2:cd:56:9d:a9:87:f5:be:1e:be:59:5d:37:31:4e: 17:0e:01:5b:93:3d:67:90:5c:a5:a5:0b:01:7b:0a: 9b:3b:26:55:0f:e3:d5:35:54:2f:0b:b1:07:de:93: 8d:cd:4c:5d:94:89:73:ae:94:f4:72:03:76:e3:08: 82:39:9e:dd:5d:85:b8:b4:b1:a9:e9:d0:fe:1c:b1: b1:10:b2:dd:e9:a4:23:f1:45:8d:0d:ba:93:a0:4f: 9f:80:a2:9e:e3:d3:77:8e:2d:e5:b2:f4:4c:e5:ad: f3:c7:32:74:0e:46:c1:eb:99:46:ce:64:b7:5d:4b: 9a:a1:6d:df:7c:45:ee:38:0d:27:8c:52:9a:29:44: 95:72:98:87:08:0d:5b:01:fd:49:ba:95:46:bf:a5: c3:95:a2:d2:9b:9c:3a:ed:17:75:45:ed:56:77:73: 16:21:db:61:2d:d6:44:0c:3e:95:e1:9b:cd:7e:90: 2b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4D:5E:71:66:B4:2C:68:1F:14:76:2B:3D:08:A4:33:B5:CC:E0:79 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151993.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.111.252.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:2e:cf:cd:f7:c8:94:18:7d:2a:b9:77:85:d0:d2:b6:2c:36: 5c:71:3e:b6:4f:ae:2f:13:a1:9a:94:3d:08:c7:43:47:d3:c4: f0:bb:ed:ee:31:4a:af:08:95:eb:93:5e:62:f9:f0:b0:ef:59: e7:e9:91:9b:30:ec:f6:37:d9:a5:2a:7b:0d:59:ed:97:3a:35: 63:81:09:76:67:b3:6a:7a:f9:45:70:13:99:d3:f0:aa:29:d2: 3d:64:80:d6:fc:59:e2:f2:b3:92:a9:3e:3a:df:bb:92:26:7c: 6f:0e:c2:2e:7e:17:1f:19:78:d7:14:14:c0:68:07:92:f1:f5: 45:dd:ae:4e:05:0b:b9:a6:89:19:f7:9e:ec:64:11:d7:9f:b0: e7:20:3b:37:97:75:a8:60:c0:b8:2d:a2:06:b2:f9:a5:2a:a9: d3:b2:9f:4f:5e:2d:03:b8:78:d8:e6:00:8c:0a:50:f7:21:b9: 19:a9:5a:28:c4:3c:18:c8:25:ca:5b:03:01:5a:21:26:ac:10: 8b:66:14:00:b7:16:f6:6e:8d:33:9a:80:87:4e:1e:ef:62:7d: a3:cc:c3:67:d6:d8:0e:0e:1a:43:81:de:8e:0f:c4:92:97:77: 6d:98:44:bd:76:f7:f1:fb:ab:cd:49:cb:01:f9:54:b0:b3:17: 32:4f:74:e2 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUK4GKbmcvlGl8RWbe41KUbRqAVLkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTEyMDA2NTUwMFoX DTI1MTExOTA3MDAwMFowMzExMC8GA1UEAxMoQzk0RDVFNzE2NkI0MkM2ODFGMTQ3 NjJCM0QwOEE0MzNCNUNDRTA3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALCDt7T+CuolD730X1ARb8Vd3lJDJcssdLK01Jp8HGfkdsY/KB5GINoN/MXR dKu2OReoqENMxoyw5TjwfRU0AJ8nSrLfXwCkMYjNws1WnamH9b4evlldNzFOFw4B W5M9Z5BcpaULAXsKmzsmVQ/j1TVULwuxB96Tjc1MXZSJc66U9HIDduMIgjme3V2F uLSxqenQ/hyxsRCy3emkI/FFjQ26k6BPn4CinuPTd44t5bL0TOWt88cydA5GweuZ Rs5kt11LmqFt33xF7jgNJ4xSmilElXKYhwgNWwH9SbqVRr+lw5Wi0pucOu0XdUXt VndzFiHbYS3WRAw+leGbzX6QK6sCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTJTV5x ZrQsaB8Udis9CKQztczgeTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTk5My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEActv/DANBgkqhkiG9w0BAQsFAAOCAQEAey7PzffIlBh9Krl3hdDS tiw2XHE+tk+uLxOhmpQ9CMdDR9PE8Lvt7jFKrwiV65NeYvnwsO9Z5+mRmzDs9jfZ pSp7DVntlzo1Y4EJdmezanr5RXATmdPwqinSPWSA1vxZ4vKzkqk+Ot+7kiZ8bw7C Ln4XHxl41xQUwGgHkvH1Rd2uTgULuaaJGfee7GQR15+w5yA7N5d1qGDAuC2iBrL5 pSqp07KfT14tA7h42OYAjApQ9yG5GalaKMQ8GMglylsDAVohJqwQi2YUALcW9m6N M5qAh04e72J9o8zDZ9bYDg4aQ4Hejg/Ekpd3bZhEvXb38furzUnLAflUsLMXMk90 4g== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:27 2024 by rpki-client on console-fra.rpki-client.org