$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152045.roa File: AS152045.roa (raw, json) Hash identifier: GD2WmSGqtc8cOSytyWMkn0RMQ9gOH81QaNKEYMSwzFM= Subject key identifier: E4:AE:53:03:33:EB:9C:0B:87:2D:09:18:67:DF:B8:46:67:82:DC:66 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 702304BA1D618D608D52E621EEC5DAD0BF202493 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152045.roa Signing time: Fri 01 Dec 2023 06:34:41 +0000 ROA not before: Fri 01 Dec 2023 06:29:41 +0000 ROA not after: Fri 29 Nov 2024 06:34:41 +0000 asID: 152045 IP address blocks: 210.79.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:23:04:ba:1d:61:8d:60:8d:52:e6:21:ee:c5:da:d0:bf:20:24:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 1 06:29:41 2023 GMT Not After : Nov 29 06:34:41 2024 GMT Subject: CN=E4AE530333EB9C0B872D091867DFB8466782DC66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:71:7e:b4:9f:84:98:2a:c6:f1:9b:9a:b3:ef: 00:99:db:3c:f6:ab:f1:58:a0:df:d5:ef:67:e2:4e: 8e:5c:44:87:75:41:30:ae:44:18:24:4c:fd:a4:49: 5f:53:14:43:98:c2:44:00:c6:88:2e:3f:75:dd:f7: 6b:ff:2e:a2:43:4c:5f:c5:e9:79:99:e0:60:ee:52: 85:1d:a5:2c:18:3b:07:e0:fa:4e:27:05:31:35:77: 77:35:8e:d4:fd:a8:41:f0:ea:f8:ff:69:a0:5f:51: 9e:93:d6:3f:0d:d9:3a:0c:0f:91:5f:b1:f2:a3:3f: 61:a0:88:d0:e7:f6:31:14:e0:f6:fe:2c:2b:79:da: 59:e6:3e:0e:73:1d:ac:dc:a3:3f:9a:de:24:b5:c6: dd:b7:9a:c4:1b:41:b7:b3:69:ed:b8:b7:0e:47:21: bb:36:ce:16:6c:b5:bf:9d:86:5a:a0:a6:30:85:0a: 34:57:7b:d6:cb:bc:95:07:cd:1a:65:2e:d8:27:98: 12:21:a3:f7:4f:55:cb:2c:96:26:81:82:5a:2e:84: 3f:8b:0a:e9:ca:30:ec:62:e5:96:7b:b6:cd:2f:1e: c4:fe:6d:4a:94:e5:6b:51:8a:4b:2e:2c:5f:f7:40: 97:49:23:bc:68:a8:b3:da:49:eb:3e:71:da:4e:29: 3f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:AE:53:03:33:EB:9C:0B:87:2D:09:18:67:DF:B8:46:67:82:DC:66 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152045.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.79.146.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:3d:79:fd:cd:80:d2:dd:8a:83:29:11:0a:d7:3b:98:df:7f: 52:35:01:83:06:88:86:00:e7:5e:3a:58:de:ee:5d:88:df:46: 3f:f2:e6:07:13:63:2e:d3:35:af:c6:a0:fb:4b:fa:60:0e:21: 92:70:47:b6:c9:57:97:28:98:f0:06:c9:fa:d2:12:e9:1e:89: 64:d2:d5:00:fb:e8:ca:cb:5a:95:23:20:d6:41:b9:72:d5:5e: 1d:d4:1c:42:5f:51:de:10:7e:d8:9b:a7:ae:80:11:dc:5d:71: 9c:e2:22:98:02:ce:40:fd:2e:1a:66:49:e5:9d:90:55:4b:46: 6f:ba:7b:48:6a:e7:c5:56:3a:de:13:8d:e4:7c:15:e9:df:fa: f5:49:6d:9a:28:1b:30:71:bb:33:b4:da:8e:aa:78:9e:4e:87: 18:ed:9b:8a:00:9b:91:67:9b:e5:e5:37:49:b3:47:84:c6:bf: e6:d8:ed:9e:3f:4a:cb:45:59:2b:74:cd:65:c7:e1:3a:aa:d3: c4:b7:14:3d:e8:2a:65:22:84:aa:1e:b9:0e:1f:71:a6:1e:a2: 9d:eb:28:b5:b2:8c:14:4f:2a:cd:73:03:82:d0:94:d5:61:50: 85:15:31:ee:46:90:2e:3e:04:27:48:3f:cc:d6:ce:71:b5:dd: 9f:cd:0d:a6 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUcCMEuh1hjWCNUuYh7sXa0L8gJJMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIwMTA2Mjk0MVoX DTI0MTEyOTA2MzQ0MVowMzExMC8GA1UEAxMoRTRBRTUzMDMzM0VCOUMwQjg3MkQw OTE4NjdERkI4NDY2NzgyREM2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMRxfrSfhJgqxvGbmrPvAJnbPPar8Vig39XvZ+JOjlxEh3VBMK5EGCRM/aRJ X1MUQ5jCRADGiC4/dd33a/8uokNMX8XpeZngYO5ShR2lLBg7B+D6TicFMTV3dzWO 1P2oQfDq+P9poF9RnpPWPw3ZOgwPkV+x8qM/YaCI0Of2MRTg9v4sK3naWeY+DnMd rNyjP5reJLXG3beaxBtBt7Np7bi3DkchuzbOFmy1v52GWqCmMIUKNFd71su8lQfN GmUu2CeYEiGj909VyyyWJoGCWi6EP4sK6cow7GLllnu2zS8exP5tSpTla1GKSy4s X/dAl0kjvGios9pJ6z5x2k4pP2UCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTkrlMD M+ucC4ctCRhn37hGZ4LcZjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MjA0NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAdJPkjANBgkqhkiG9w0BAQsFAAOCAQEAjj15/c2A0t2KgykRCtc7 mN9/UjUBgwaIhgDnXjpY3u5diN9GP/LmBxNjLtM1r8ag+0v6YA4hknBHtslXlyiY 8AbJ+tIS6R6JZNLVAPvoystalSMg1kG5ctVeHdQcQl9R3hB+2JunroAR3F1xnOIi mALOQP0uGmZJ5Z2QVUtGb7p7SGrnxVY63hON5HwV6d/69UltmigbMHG7M7Tajqp4 nk6HGO2bigCbkWeb5eU3SbNHhMa/5tjtnj9Ky0VZK3TNZcfhOqrTxLcUPegqZSKE qh65Dh9xph6inesotbKMFE8qzXMDgtCU1WFQhRUx7kaQLj4EJ0g/zNbOcbXdn80N pg== -----END CERTIFICATE-----Generated at Wed May 8 07:45:28 2024 by rpki-client on console-ams.rpki-client.org