$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152045.roa File: AS152045.roa (raw, json) Hash identifier: whWejBQTYZHymrm+ia4CiGwhBfuPe7+c5ivVJ/ZooNA= Subject key identifier: 43:75:A0:59:D3:90:A1:1B:C0:5B:F8:A2:5B:8F:2C:F4:FF:90:E1:78 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2E81ED878598EFF599980F75616A0F0BAA89DFD0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152045.roa Signing time: Fri 01 Nov 2024 07:00:00 +0000 ROA not before: Fri 01 Nov 2024 06:55:00 +0000 ROA not after: Fri 31 Oct 2025 07:00:00 +0000 asID: 152045 IP address blocks: 210.79.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:81:ed:87:85:98:ef:f5:99:98:0f:75:61:6a:0f:0b:aa:89:df:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 1 06:55:00 2024 GMT Not After : Oct 31 07:00:00 2025 GMT Subject: CN=4375A059D390A11BC05BF8A25B8F2CF4FF90E178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e4:1d:96:ed:95:6e:c0:20:fe:0c:51:e4:1c: fa:dc:aa:82:e3:91:38:13:89:8b:66:da:d1:15:ab: a1:54:21:74:3b:0a:5d:e4:d9:b3:56:ac:a2:0d:2b: 4f:15:9e:f0:58:ee:a7:3c:d0:99:aa:fe:36:5d:19: 96:e6:ee:61:66:ad:4e:36:38:16:33:65:88:9b:d4: b7:87:2b:7d:b2:9b:56:f1:78:c9:9d:08:b9:db:3f: fb:47:13:14:18:ba:2e:13:00:95:54:89:88:b7:d4: 51:dd:58:bc:d8:ff:85:ce:c9:d8:82:aa:d8:3d:88: c3:53:52:63:40:5c:92:cf:52:81:99:c7:0f:57:3b: 56:ff:84:12:89:86:29:f6:3b:70:78:a3:43:ed:70: 68:18:8f:8e:82:b6:5e:05:4c:10:4c:c6:49:f8:83: dc:3c:63:fc:31:09:e2:90:06:3c:68:bf:6b:08:5f: ac:b4:7b:ba:ce:47:0e:d4:55:c6:41:85:01:05:dd: 34:c0:64:11:60:bc:b4:e1:5b:54:12:7e:49:9d:19: 68:69:db:10:da:c9:13:d0:11:ff:ba:ef:ac:b4:ab: 50:f2:8f:1a:86:13:db:de:fd:1a:b5:43:37:bc:d7: 16:fe:07:7b:c0:d9:1a:69:28:fc:d3:c0:7a:05:4f: 6e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:75:A0:59:D3:90:A1:1B:C0:5B:F8:A2:5B:8F:2C:F4:FF:90:E1:78 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152045.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.79.146.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:7c:13:71:91:cd:7f:c3:f9:75:b6:0a:f1:9f:27:7f:7e:17: ee:b4:8f:01:ca:d4:38:c3:e2:bf:c9:83:1b:1d:e5:89:db:1b: 7e:ee:5a:e9:4a:3b:96:47:9a:1a:61:90:41:63:75:f4:a0:9e: ba:97:1a:d8:9a:30:fe:ea:8c:7e:ca:6f:51:e2:fc:40:5c:f3: 2d:41:3e:dc:51:c7:ef:b2:e1:73:a8:c8:87:ca:6e:22:22:37: dd:21:cb:40:7b:e6:6a:b8:0a:37:88:28:31:b5:a1:2a:60:2f: 0e:f9:80:4e:79:97:f1:e7:07:c5:70:d2:68:38:eb:68:4a:04: 1a:d5:ad:32:6a:92:f8:4e:c2:a0:04:f6:51:5d:71:9f:f6:ba: 4b:4f:e2:56:8a:b4:96:66:2f:94:4a:b4:36:6d:8e:62:15:30: 6d:3c:5b:57:09:81:9d:81:5b:93:b2:4a:e5:1e:d1:35:84:d6: 90:4c:a5:e7:b1:00:02:54:b4:12:2a:d7:39:94:4b:b2:a7:a8: a7:a7:5c:69:95:f7:ea:f2:6a:2b:38:e2:23:03:4d:43:7d:ef: 04:43:01:95:7d:fe:8e:d9:30:7d:ae:d2:66:10:fb:7b:9f:52: ce:e9:e5:9f:4f:65:e4:49:7d:03:37:85:34:e9:29:5d:85:9d: f5:9f:c4:c3 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIULoHth4WY7/WZmA91YWoPC6qJ39AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTEwMTA2NTUwMFoX DTI1MTAzMTA3MDAwMFowMzExMC8GA1UEAxMoNDM3NUEwNTlEMzkwQTExQkMwNUJG OEEyNUI4RjJDRjRGRjkwRTE3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMvkHZbtlW7AIP4MUeQc+tyqguOROBOJi2ba0RWroVQhdDsKXeTZs1asog0r TxWe8FjupzzQmar+Nl0ZlubuYWatTjY4FjNliJvUt4crfbKbVvF4yZ0Iuds/+0cT FBi6LhMAlVSJiLfUUd1YvNj/hc7J2IKq2D2Iw1NSY0Bcks9SgZnHD1c7Vv+EEomG KfY7cHijQ+1waBiPjoK2XgVMEEzGSfiD3Dxj/DEJ4pAGPGi/awhfrLR7us5HDtRV xkGFAQXdNMBkEWC8tOFbVBJ+SZ0ZaGnbENrJE9AR/7rvrLSrUPKPGoYT2979GrVD N7zXFv4He8DZGmko/NPAegVPbs8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRDdaBZ 05ChG8Bb+KJbjyz0/5DheDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MjA0NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAdJPkjANBgkqhkiG9w0BAQsFAAOCAQEAGnwTcZHNf8P5dbYK8Z8n f34X7rSPAcrUOMPiv8mDGx3lidsbfu5a6Uo7lkeaGmGQQWN19KCeupca2Jow/uqM fspvUeL8QFzzLUE+3FHH77Lhc6jIh8puIiI33SHLQHvmargKN4goMbWhKmAvDvmA TnmX8ecHxXDSaDjraEoEGtWtMmqS+E7CoAT2UV1xn/a6S0/iVoq0lmYvlEq0Nm2O YhUwbTxbVwmBnYFbk7JK5R7RNYTWkEyl57EAAlS0EirXOZRLsqeop6dcaZX36vJq KzjiIwNNQ33vBEMBlX3+jtkwfa7SZhD7e59Szunln09l5El9AzeFNOkpXYWd9Z/E ww== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:49 2024 by rpki-client on console-ams.rpki-client.org