$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152426.roa File: AS152426.roa (raw, json) Hash identifier: 8+OKk2dK1DNj0lbzEvC2Br8AYNgSzSOXeW6MKpaGXm0= Subject key identifier: E2:F7:FB:74:BC:A7:6D:57:A1:65:A4:3D:DE:8D:49:34:FD:E6:07:14 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 543D1805FC35B4729135353C2319E83B59096932 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152426.roa Signing time: Mon 02 Dec 2024 06:44:55 +0000 ROA not before: Mon 02 Dec 2024 06:39:55 +0000 ROA not after: Mon 01 Dec 2025 06:44:55 +0000 asID: 152426 IP address blocks: 2001:df3:9cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:3d:18:05:fc:35:b4:72:91:35:35:3c:23:19:e8:3b:59:09:69:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 2 06:39:55 2024 GMT Not After : Dec 1 06:44:55 2025 GMT Subject: CN=E2F7FB74BCA76D57A165A43DDE8D4934FDE60714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:31:b2:16:2a:31:40:b4:94:71:51:8e:05:3e: ef:3d:8e:33:35:39:f5:7b:67:78:a9:71:ae:94:e7: 96:22:a3:4b:57:14:8a:63:c8:37:96:84:2f:92:f6: 06:69:4c:d4:96:fb:9f:02:c7:c4:cf:43:42:2b:e2: 41:43:a6:9c:6d:46:07:a0:e7:5e:f8:c0:de:b0:f3: d5:60:81:cf:08:ec:31:31:20:8b:15:76:5b:ca:43: 0d:8c:39:81:14:c1:25:95:fc:5d:ea:6e:19:be:e3: a4:09:25:1c:f1:71:c9:58:0b:5f:47:e8:93:79:12: 61:cc:3f:70:df:e5:e4:88:34:d4:fb:48:a2:1e:52: af:f3:28:be:d3:80:f5:37:6f:1b:cc:c3:c5:c7:f7: 92:99:ba:e7:09:66:ce:97:33:78:e2:db:6c:80:f0: b9:2f:f6:b1:3e:16:9c:8c:e9:54:9e:a8:66:55:a3: 0c:23:58:fd:00:04:01:2f:7f:36:5e:97:ea:77:4e: ae:55:37:dc:ee:fe:19:ec:ca:cc:23:af:88:40:a7: 16:bb:7f:bf:2c:27:40:88:6b:f8:69:a4:25:b9:f2: 85:f8:b4:bf:ab:85:96:44:5e:36:e5:8c:63:67:52: e9:f2:d0:9c:52:14:7e:d5:79:cd:d6:97:f5:45:46: 0d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F7:FB:74:BC:A7:6D:57:A1:65:A4:3D:DE:8D:49:34:FD:E6:07:14 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152426.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:9cc0::/48 Signature Algorithm: sha256WithRSAEncryption 6f:a0:1d:84:dc:5e:7d:de:42:d6:5b:8b:63:8f:cb:d7:46:18: 10:ae:b1:3e:8e:79:bb:43:78:9a:2c:39:2a:87:ca:27:8f:95: cd:c0:15:46:b3:08:8b:d6:6d:40:b9:52:ad:ba:89:4d:85:5f: 7d:a3:4f:df:01:64:4f:fe:11:a1:ab:5e:c0:f2:02:c7:a7:7f: 46:a7:d5:34:13:7d:ba:25:97:29:b5:30:3b:29:60:d2:97:17: be:bc:73:5f:d3:dc:4f:3f:8d:1d:49:e7:aa:27:53:0c:39:75: 1a:e5:4a:38:3f:a5:89:32:2b:46:bc:45:67:96:79:44:6d:04: 64:84:e8:be:4d:75:d8:10:d0:89:0a:ea:f8:03:0f:5d:78:bd: c2:b8:87:a5:81:68:14:53:23:bd:53:be:b5:e9:7d:f7:e2:eb: 02:a6:33:27:8d:aa:78:5f:35:9f:03:6c:64:00:07:b5:e0:db: 43:ba:2e:ef:bc:57:d4:9e:5c:2e:42:48:1c:e4:08:76:7a:02: 1c:f3:fc:5c:68:53:ea:00:c8:e4:d3:e7:5d:92:83:4a:6e:8d: 6e:65:3b:7f:2a:be:49:0b:54:99:cb:d5:4f:9f:66:79:db:13: 1d:fe:aa:ab:fe:e6:b7:25:bb:05:e6:b6:5b:1f:ab:24:9f:6a: 53:b5:d9:f8 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUVD0YBfw1tHKRNTU8IxnoO1kJaTIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIwMjA2Mzk1NVoX DTI1MTIwMTA2NDQ1NVowMzExMC8GA1UEAxMoRTJGN0ZCNzRCQ0E3NkQ1N0ExNjVB NDNEREU4RDQ5MzRGREU2MDcxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMoxshYqMUC0lHFRjgU+7z2OMzU59XtneKlxrpTnliKjS1cUimPIN5aEL5L2 BmlM1Jb7nwLHxM9DQiviQUOmnG1GB6DnXvjA3rDz1WCBzwjsMTEgixV2W8pDDYw5 gRTBJZX8XepuGb7jpAklHPFxyVgLX0fok3kSYcw/cN/l5Ig01PtIoh5Sr/MovtOA 9TdvG8zDxcf3kpm65wlmzpczeOLbbIDwuS/2sT4WnIzpVJ6oZlWjDCNY/QAEAS9/ Nl6X6ndOrlU33O7+GezKzCOviECnFrt/vywnQIhr+GmkJbnyhfi0v6uFlkReNuWM Y2dS6fLQnFIUftV5zdaX9UVGDd8CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBTi9/t0 vKdtV6FlpD3ejUk0/eYHFDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MjQyNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfOcwDANBgkqhkiG9w0BAQsFAAOCAQEAb6AdhNxefd5C1luL Y4/L10YYEK6xPo55u0N4miw5KofKJ4+VzcAVRrMIi9ZtQLlSrbqJTYVffaNP3wFk T/4RoatewPICx6d/RqfVNBN9uiWXKbUwOylg0pcXvrxzX9PcTz+NHUnnqidTDDl1 GuVKOD+liTIrRrxFZ5Z5RG0EZITovk112BDQiQrq+AMPXXi9wriHpYFoFFMjvVO+ tel99+LrAqYzJ42qeF81nwNsZAAHteDbQ7ou77xX1J5cLkJIHOQIdnoCHPP8XGhT 6gDI5NPnXZKDSm6NbmU7fyq+SQtUmcvVT59medsTHf6qq/7mtyW7Bea2Wx+rJJ9q U7XZ+A== -----END CERTIFICATE-----Generated at Sat Apr 5 06:24:30 2025 by rpki-client