$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152352.roa File: AS152352.roa (raw, json) Hash identifier: YxSuIAVaQyjf8Msyzl5Vdr77vbHT1G9DEm2m/7TO+7M= Subject key identifier: 30:00:AE:6D:E8:D7:BE:E9:C8:C6:56:0E:96:6A:02:7D:A9:A8:EF:35 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2147D7569792C342BF78E04AD841F101833428C4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152352.roa Signing time: Fri 10 Jan 2025 10:43:01 +0000 ROA not before: Fri 10 Jan 2025 10:38:01 +0000 ROA not after: Fri 09 Jan 2026 10:43:01 +0000 asID: 152352 IP address blocks: 103.184.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:47:d7:56:97:92:c3:42:bf:78:e0:4a:d8:41:f1:01:83:34:28:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 10 10:38:01 2025 GMT Not After : Jan 9 10:43:01 2026 GMT Subject: CN=3000AE6DE8D7BEE9C8C6560E966A027DA9A8EF35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:73:cc:e1:11:dd:69:9a:3f:3d:15:57:ad:7f: 00:ed:f0:7c:27:fe:25:33:f4:37:fb:dd:87:a4:8b: 11:b1:22:9c:9d:6f:34:0f:3f:2c:d4:49:da:7c:82: df:33:12:86:08:86:5b:3b:18:af:3b:8c:39:7e:d4: 76:b4:44:0c:d5:1f:7c:d8:06:13:6d:da:30:34:87: 2d:8d:de:8f:e1:35:1e:6b:e8:e7:af:ba:61:7a:d4: c3:a1:97:87:80:64:41:97:15:3b:c3:48:86:07:bb: fa:a7:1b:05:0b:b0:78:7d:cf:08:ec:a0:be:6d:0a: 1a:ea:7f:72:eb:d2:ed:74:22:54:9e:ac:19:37:9a: 19:eb:74:d7:f8:07:d9:36:72:d9:2d:c3:af:fa:75: fa:5b:a9:3d:46:66:48:53:4c:4a:3a:c6:19:60:c6: 93:9b:75:2a:d6:b5:bc:a1:cf:17:fe:dd:19:55:0b: c3:92:35:0c:96:30:e8:b8:84:04:12:9e:99:99:71: ce:19:39:11:bb:7c:89:5b:23:c1:f0:59:ee:cb:c7: 10:37:89:fa:d3:4c:e0:e2:db:e0:58:2b:03:08:fa: 37:92:e2:94:7a:90:82:8c:5d:c2:90:16:76:5e:be: 0d:49:29:c9:8f:25:53:d0:d7:6d:3d:ab:6a:43:d0: 26:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:00:AE:6D:E8:D7:BE:E9:C8:C6:56:0E:96:6A:02:7D:A9:A8:EF:35 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152352.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.57.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:f7:a2:96:5b:a9:e2:2a:d4:7b:be:62:2f:ad:9d:e6:a2:26: 76:56:72:f7:38:1c:df:27:9e:25:4f:ab:44:92:77:f0:eb:b9: be:9f:f0:58:4c:1a:83:25:32:11:e3:91:6c:0b:53:b7:d4:81: b9:d6:7b:b6:76:a3:d6:fa:2f:70:d8:a2:5e:b5:a1:35:44:76: 46:f1:41:9b:07:cc:00:d2:49:6d:3e:38:63:f2:4d:79:11:45: aa:d8:18:07:b0:af:fd:05:a0:a3:3d:b3:43:d3:85:c9:0f:26: 5c:37:a6:1b:b9:2e:73:a9:7c:88:b4:64:8a:b4:5a:44:21:57: d5:75:49:cd:f8:b2:27:94:cd:ab:94:e1:7b:86:db:21:e2:f4: b3:be:e8:ef:13:e6:29:b2:06:14:a3:48:a9:80:07:31:ad:08: a4:4b:7a:44:89:59:8a:df:5f:0b:53:9f:55:06:26:2e:b4:d2: 31:fb:62:08:91:a0:bc:bb:97:c8:3d:53:e0:f1:44:48:3e:e6: d3:9c:c3:28:1f:0d:10:ee:3a:4e:93:3e:73:0e:b7:40:41:84: a9:05:e7:e2:a3:b2:06:0e:0b:c9:a8:e7:bd:5f:aa:e7:0c:6d: 9a:86:e4:69:19:86:33:1f:e3:d9:2b:29:7e:d5:6c:0b:e3:49: fe:98:68:17 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUIUfXVpeSw0K/eOBK2EHxAYM0KMQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDExMDEwMzgwMVoX DTI2MDEwOTEwNDMwMVowMzExMC8GA1UEAxMoMzAwMEFFNkRFOEQ3QkVFOUM4QzY1 NjBFOTY2QTAyN0RBOUE4RUYzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANdzzOER3WmaPz0VV61/AO3wfCf+JTP0N/vdh6SLEbEinJ1vNA8/LNRJ2nyC 3zMShgiGWzsYrzuMOX7UdrREDNUffNgGE23aMDSHLY3ej+E1Hmvo56+6YXrUw6GX h4BkQZcVO8NIhge7+qcbBQuweH3PCOygvm0KGup/cuvS7XQiVJ6sGTeaGet01/gH 2TZy2S3Dr/p1+lupPUZmSFNMSjrGGWDGk5t1Kta1vKHPF/7dGVULw5I1DJYw6LiE BBKemZlxzhk5Ebt8iVsjwfBZ7svHEDeJ+tNM4OLb4FgrAwj6N5LilHqQgoxdwpAW dl6+DUkpyY8lU9DXbT2rakPQJmsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQwAK5t 6Ne+6cjGVg6WagJ9qajvNTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MjM1Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGe4OTANBgkqhkiG9w0BAQsFAAOCAQEASveillup4irUe75iL62d 5qImdlZy9zgc3yeeJU+rRJJ38Ou5vp/wWEwagyUyEeORbAtTt9SBudZ7tnaj1vov cNiiXrWhNUR2RvFBmwfMANJJbT44Y/JNeRFFqtgYB7Cv/QWgoz2zQ9OFyQ8mXDem G7kuc6l8iLRkirRaRCFX1XVJzfiyJ5TNq5The4bbIeL0s77o7xPmKbIGFKNIqYAH Ma0IpEt6RIlZit9fC1OfVQYmLrTSMftiCJGgvLuXyD1T4PFESD7m05zDKB8NEO46 TpM+cw63QEGEqQXn4qOyBg4LyajnvV+q5wxtmobkaRmGMx/j2SspftVsC+NJ/pho Fw== -----END CERTIFICATE-----Generated at Tue Jun 3 23:12:03 2025 by rpki-client