$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151993.roa File: AS151993.roa (raw, json) Hash identifier: XZQy4QRYpUV8k4/RozZj5a2KZqV8SgDx9VI5ygKYBAI= Subject key identifier: 5C:B2:47:2A:91:7A:4F:45:73:8E:FF:42:41:B5:BA:43:A3:1D:A5:90 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 705CE05F5DAFA2AA495EB64FC0F426C708B12F47 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151993.roa Signing time: Wed 20 Dec 2023 06:53:19 +0000 ROA not before: Wed 20 Dec 2023 06:48:19 +0000 ROA not after: Wed 18 Dec 2024 06:53:19 +0000 asID: 151993 IP address blocks: 203.111.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:5c:e0:5f:5d:af:a2:aa:49:5e:b6:4f:c0:f4:26:c7:08:b1:2f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 20 06:48:19 2023 GMT Not After : Dec 18 06:53:19 2024 GMT Subject: CN=5CB2472A917A4F45738EFF4241B5BA43A31DA590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:25:a9:ae:6a:37:db:d7:c4:e2:56:30:e0:07: 43:ee:6f:21:e4:0e:ec:63:ce:04:e0:c6:42:c2:c8: b8:ad:ec:d6:af:83:04:ad:a0:16:e8:4b:a5:77:40: 44:fe:41:c1:0c:10:7d:23:41:18:4e:4f:dc:d6:82: 00:1b:be:be:d8:ee:8a:84:c3:ff:e2:b2:ea:b0:9d: 1f:6b:d9:c1:57:54:13:0d:e7:ac:b0:cc:87:39:39: d2:65:09:b6:70:e7:66:46:32:1d:1f:0a:71:56:b1: 3f:52:7c:95:30:b9:31:02:be:18:be:b0:f3:96:86: ba:8d:55:28:f5:a8:44:39:b8:a2:db:f3:2a:41:be: 86:4b:8b:25:1d:33:e5:a5:a7:51:c6:a1:75:11:9b: 2b:f4:f8:4d:60:d7:6f:08:15:11:b2:61:47:0c:dc: da:d1:1f:8d:8f:e7:dc:e1:9a:c9:15:bc:4f:d5:dd: 76:96:fe:66:f5:10:52:e2:dc:2e:c0:29:8a:f1:c3: 4a:34:59:3b:3d:7c:3d:42:10:f1:55:fe:08:8d:a8: 6c:ed:ab:d6:ed:b6:a9:37:a2:30:7d:69:5d:f6:a9: 2b:81:96:c1:36:f8:95:d1:91:e5:89:ee:ec:ba:7d: a7:ff:e5:ae:a2:54:2b:34:65:b8:76:71:4d:db:37: a9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B2:47:2A:91:7A:4F:45:73:8E:FF:42:41:B5:BA:43:A3:1D:A5:90 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151993.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.111.252.0/23 Signature Algorithm: sha256WithRSAEncryption 31:57:5a:ea:16:89:85:67:5d:80:9c:00:ea:42:16:b4:9b:7a: 21:62:68:00:b3:43:66:f6:50:0e:78:40:4b:44:50:82:d3:8d: e3:85:6d:93:ee:dd:c6:06:f6:69:af:47:8f:5b:99:06:dc:7a: cb:d4:c1:3c:73:fc:44:a5:c8:72:a7:f4:0b:b3:9b:d1:ff:de: 00:d5:5a:10:b4:5f:dc:bb:12:02:77:a5:2e:96:08:d7:77:b7: 1c:e7:9f:94:33:7c:a4:33:ba:66:df:37:47:d1:84:ef:01:e0: 62:e2:b9:ef:24:cc:c6:b4:5c:1f:59:9e:d8:62:04:24:4c:29: 14:28:e0:f7:d6:eb:73:9f:b8:69:a8:44:1e:40:11:60:24:90: d5:0e:7e:a6:29:db:9a:44:49:36:fd:fd:f1:89:26:0d:ad:3a: 12:9c:c8:a2:74:0f:de:14:30:c9:55:ca:02:89:fb:f4:29:0f: 6e:de:8a:e9:f2:29:db:69:ae:ca:a2:18:58:1c:49:78:6d:2a: f3:6f:b1:bc:47:95:c3:4b:b9:e0:47:41:93:f7:29:c0:d0:e2: 84:3b:de:69:f2:16:43:d9:28:a4:12:97:db:5d:2e:50:0e:e5: e0:56:c4:82:4d:96:bf:70:a0:79:70:32:a6:c3:1b:72:1c:8d: 9f:33:59:e8 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUcFzgX12voqpJXrZPwPQmxwixL0cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIyMDA2NDgxOVoX DTI0MTIxODA2NTMxOVowMzExMC8GA1UEAxMoNUNCMjQ3MkE5MTdBNEY0NTczOEVG RjQyNDFCNUJBNDNBMzFEQTU5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM8lqa5qN9vXxOJWMOAHQ+5vIeQO7GPOBODGQsLIuK3s1q+DBK2gFuhLpXdA RP5BwQwQfSNBGE5P3NaCABu+vtjuioTD/+Ky6rCdH2vZwVdUEw3nrLDMhzk50mUJ tnDnZkYyHR8KcVaxP1J8lTC5MQK+GL6w85aGuo1VKPWoRDm4otvzKkG+hkuLJR0z 5aWnUcahdRGbK/T4TWDXbwgVEbJhRwzc2tEfjY/n3OGayRW8T9Xddpb+ZvUQUuLc LsApivHDSjRZOz18PUIQ8VX+CI2obO2r1u22qTeiMH1pXfapK4GWwTb4ldGR5Ynu 7Lp9p//lrqJUKzRluHZxTds3qSkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRcskcq kXpPRXOO/0JBtbpDox2lkDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTk5My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEActv/DANBgkqhkiG9w0BAQsFAAOCAQEAMVda6haJhWddgJwA6kIW tJt6IWJoALNDZvZQDnhAS0RQgtON44Vtk+7dxgb2aa9Hj1uZBtx6y9TBPHP8RKXI cqf0C7Ob0f/eANVaELRf3LsSAnelLpYI13e3HOeflDN8pDO6Zt83R9GE7wHgYuK5 7yTMxrRcH1me2GIEJEwpFCjg99brc5+4aahEHkARYCSQ1Q5+pinbmkRJNv398Ykm Da06EpzIonQP3hQwyVXKAon79CkPbt6K6fIp22muyqIYWBxJeG0q82+xvEeVw0u5 4EdBk/cpwNDihDveafIWQ9kopBKX210uUA7l4FbEgk2Wv3CgeXAypsMbchyNnzNZ 6A== -----END CERTIFICATE-----Generated at Wed May 8 21:02:24 2024 by rpki-client on console-fra.rpki-client.org