$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152050.roa File: AS152050.roa (raw, json) Hash identifier: ZyMRrhufq0cz5kGcuwEJr5dnEzci7kRTnwPto2C83YY= Subject key identifier: B8:88:E7:32:54:A4:73:6F:C4:B6:D8:E8:27:48:08:69:D7:1B:DC:E0 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 59BBE76226A9E1AB21494A1A3894A2BEACB501DF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152050.roa Signing time: Tue 09 Jan 2024 04:12:29 +0000 ROA not before: Tue 09 Jan 2024 04:07:29 +0000 ROA not after: Tue 07 Jan 2025 04:12:29 +0000 asID: 152050 IP address blocks: 210.79.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:bb:e7:62:26:a9:e1:ab:21:49:4a:1a:38:94:a2:be:ac:b5:01:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 9 04:07:29 2024 GMT Not After : Jan 7 04:12:29 2025 GMT Subject: CN=B888E73254A4736FC4B6D8E827480869D71BDCE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f8:46:5a:27:e7:c7:6c:fb:a8:bf:56:8a:1a: 56:4e:13:fd:51:a3:57:5d:0f:f4:b2:04:cc:fc:30: 47:1d:ca:ab:0c:b9:4a:a6:61:d2:f8:50:80:13:98: 5d:5e:21:db:92:14:fa:1d:b1:b0:ac:38:17:62:26: 5b:26:40:db:63:4f:c1:16:b2:ca:96:3d:8b:0a:67: d8:98:65:f5:cb:57:eb:0f:8f:17:b0:0e:e6:31:8e: 37:fd:0c:df:ee:7c:98:69:ea:d1:28:d6:01:53:ca: d1:89:97:69:09:98:c0:e9:e2:3e:01:d0:0d:e5:02: ca:83:6b:42:be:8d:fa:4b:13:cf:38:17:ba:cd:8b: 76:bb:c1:a4:84:cb:81:23:72:90:b3:45:75:c4:7d: a2:f2:d4:4a:cb:27:59:35:37:59:75:e3:dd:04:5f: cf:74:37:99:a4:10:d7:57:8a:21:03:00:8c:db:07: b5:d5:5e:53:c4:67:fe:e2:37:a7:a4:95:18:81:3e: 19:2c:d7:35:e1:e6:78:22:6e:c6:e9:60:a0:f3:09: 7d:a4:08:49:ac:92:ca:23:3d:09:44:c7:47:7c:2d: 52:7b:1b:2e:4c:ab:92:86:20:5a:f9:b1:f0:4d:5d: a1:7d:a6:77:e9:18:34:ed:6a:f1:fe:f8:a1:42:a6: 08:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:88:E7:32:54:A4:73:6F:C4:B6:D8:E8:27:48:08:69:D7:1B:DC:E0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152050.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.79.140.0/24 Signature Algorithm: sha256WithRSAEncryption 31:12:2b:6e:b2:13:76:a9:4b:74:1d:0a:ca:54:1c:25:8d:c2: 0c:f8:86:db:b7:1f:a5:6a:92:41:58:d6:2b:31:64:e2:a6:6b: 04:ea:d4:f8:c5:47:16:c0:fb:c3:72:88:22:af:1c:48:b4:b1: 5b:47:97:80:b6:47:5d:f0:29:76:c0:34:2a:4d:78:4f:63:0d: 02:ca:50:74:ce:99:47:24:51:e9:75:7f:42:c6:f8:5b:ad:8e: e2:9d:8d:e3:9d:49:1d:65:91:d0:0f:56:ea:f8:15:c9:eb:d4: 72:33:5e:1c:f9:2e:4d:82:26:83:6f:99:7a:02:59:b9:f0:25: 01:1c:0a:84:b1:37:95:15:41:6f:3c:7f:e5:42:27:63:c5:26: 57:d6:fe:85:55:de:58:25:e5:ae:b3:87:1b:45:db:31:a1:d2: 23:8e:bf:78:36:d1:38:82:86:0d:75:a0:a5:43:cf:b9:05:ea: ea:49:1d:cf:f9:25:0c:70:8f:25:2d:b4:64:fc:8d:14:b1:0d: 5a:2b:4e:fd:27:58:8e:11:79:58:7f:66:f7:ec:fb:fe:d4:95: 78:94:90:c9:d5:86:76:7e:3e:66:67:1d:e0:71:f8:b3:66:e7: 42:15:a0:9d:8c:38:ed:9c:19:8e:18:fe:ce:d7:14:8f:8f:a8: ae:3b:ef:41 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUWbvnYiap4ashSUoaOJSivqy1Ad8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTA0MDcyOVoX DTI1MDEwNzA0MTIyOVowMzExMC8GA1UEAxMoQjg4OEU3MzI1NEE0NzM2RkM0QjZE OEU4Mjc0ODA4NjlENzFCRENFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJz4Rlon58ds+6i/VooaVk4T/VGjV10P9LIEzPwwRx3Kqwy5SqZh0vhQgBOY XV4h25IU+h2xsKw4F2ImWyZA22NPwRayypY9iwpn2Jhl9ctX6w+PF7AO5jGON/0M 3+58mGnq0SjWAVPK0YmXaQmYwOniPgHQDeUCyoNrQr6N+ksTzzgXus2LdrvBpITL gSNykLNFdcR9ovLUSssnWTU3WXXj3QRfz3Q3maQQ11eKIQMAjNsHtdVeU8Rn/uI3 p6SVGIE+GSzXNeHmeCJuxulgoPMJfaQISaySyiM9CUTHR3wtUnsbLkyrkoYgWvmx 8E1doX2md+kYNO1q8f74oUKmCNcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBS4iOcy VKRzb8S22OgnSAhp1xvc4DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MjA1MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEANJPjDANBgkqhkiG9w0BAQsFAAOCAQEAMRIrbrITdqlLdB0KylQc JY3CDPiG27cfpWqSQVjWKzFk4qZrBOrU+MVHFsD7w3KIIq8cSLSxW0eXgLZHXfAp dsA0Kk14T2MNAspQdM6ZRyRR6XV/Qsb4W62O4p2N451JHWWR0A9W6vgVyevUcjNe HPkuTYImg2+ZegJZufAlARwKhLE3lRVBbzx/5UInY8UmV9b+hVXeWCXlrrOHG0Xb MaHSI46/eDbROIKGDXWgpUPPuQXq6kkdz/klDHCPJS20ZPyNFLENWitO/SdYjhF5 WH9m9+z7/tSVeJSQydWGdn4+Zmcd4HH4s2bnQhWgnYw47ZwZjhj+ztcUj4+orjvv QQ== -----END CERTIFICATE-----Generated at Wed May 8 18:12:18 2024 by rpki-client on console-fra.rpki-client.org