$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153155.roa File: AS153155.roa (raw, json) Hash identifier: //3HcunTJau2rPKynW6ZsKKo6NnaB5JPdh8nyGOKfWg= Subject key identifier: C2:B3:13:60:66:6C:7B:3C:A6:E4:6A:DE:40:09:4A:03:65:35:1C:42 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4397FAA186023DC46E58D9F4620BFF44CB916008 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153155.roa Signing time: Tue 31 Dec 2024 01:40:50 +0000 ROA not before: Tue 31 Dec 2024 01:35:50 +0000 ROA not after: Tue 30 Dec 2025 01:40:50 +0000 asID: 153155 IP address blocks: 2001:df4:8fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:97:fa:a1:86:02:3d:c4:6e:58:d9:f4:62:0b:ff:44:cb:91:60:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 31 01:35:50 2024 GMT Not After : Dec 30 01:40:50 2025 GMT Subject: CN=C2B31360666C7B3CA6E46ADE40094A0365351C42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:33:73:68:5e:e5:6f:a4:6c:be:b2:9d:23:37: 43:7f:a0:df:26:27:11:51:8e:99:df:28:6a:cf:50: 14:68:2d:8d:51:90:bf:22:9b:53:40:c0:7a:79:b7: 8f:d4:8d:8c:2d:1c:c1:cd:eb:76:94:61:f9:37:3e: 6f:c0:d6:b3:5d:08:db:e6:ba:9a:f2:c4:e0:f1:91: a9:a9:a1:74:e3:1e:2d:70:15:a1:ce:5e:9e:8b:27: f6:be:d3:2b:8b:06:73:fd:87:1d:f9:a0:97:f0:a8: b2:d5:ad:a4:0c:16:45:32:10:b1:b7:63:72:f3:11: a9:b1:48:26:a5:33:3e:0b:65:fe:28:7c:e8:52:fb: 51:ad:d3:90:e1:37:60:42:31:33:af:14:de:cf:80: fe:7d:08:ba:74:1c:89:02:4b:9c:99:c7:97:26:fc: 47:fd:0f:60:fd:8b:d4:a4:2b:a8:a2:ab:33:19:6e: 70:22:cc:a2:e0:a7:9c:3d:9f:ee:e4:dc:e7:52:02: 93:9c:89:f6:77:df:11:b1:1e:b0:04:84:12:23:7d: a0:ec:70:3f:b2:9b:65:54:b6:7c:99:25:55:e6:b3: c6:9c:e5:e5:f7:b1:26:9c:c3:7a:d3:17:25:80:99: f2:3a:22:85:0d:3e:e8:4b:c8:7f:a5:58:6e:ed:d0: f7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B3:13:60:66:6C:7B:3C:A6:E4:6A:DE:40:09:4A:03:65:35:1C:42 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153155.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:8fc0::/48 Signature Algorithm: sha256WithRSAEncryption 6e:d9:1d:79:07:24:f5:cf:16:b7:f6:dd:71:7f:c5:b8:fd:fa: ea:18:92:16:29:40:c1:7b:78:d6:0d:53:f2:62:6b:34:5c:a8: 0b:1b:c4:48:42:e6:9f:b7:2c:54:7d:84:d6:bd:0a:20:a0:1b: 29:2c:dc:f7:23:be:2b:e9:21:e2:6e:c5:75:04:a7:1e:6e:d9: 25:d0:34:67:69:f0:06:73:65:77:04:b3:d6:39:62:31:66:48: bb:9a:b3:b1:bc:2f:ad:a8:ae:05:c6:09:07:b4:a6:8f:a5:b3: d4:5b:27:7b:ad:9e:3b:9a:c7:04:b4:0c:40:f0:0d:72:21:1b: d8:aa:b8:2a:74:42:b0:aa:88:0b:2c:1d:27:7c:69:27:cd:7d: 26:d5:eb:ce:8f:24:73:ab:31:91:79:40:cd:4c:1e:51:e5:b0: 1f:eb:f3:93:96:7d:11:83:0d:4f:8a:96:84:23:18:42:48:94: 0e:cf:fc:33:3c:f8:59:7e:ca:e3:ea:29:2d:ff:d1:cb:12:43: 35:cd:58:9b:3b:71:ba:02:68:8e:40:ac:17:2f:db:2c:d2:04: fa:c1:2e:b1:12:13:05:41:e7:38:8e:34:b3:5f:01:84:39:e7: fe:34:89:c3:79:55:1e:7a:7b:4a:98:f4:bd:35:14:7a:b7:70: ba:87:9d:7f -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUQ5f6oYYCPcRuWNn0Ygv/RMuRYAgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIzMTAxMzU1MFoX DTI1MTIzMDAxNDA1MFowMzExMC8GA1UEAxMoQzJCMzEzNjA2NjZDN0IzQ0E2RTQ2 QURFNDAwOTRBMDM2NTM1MUM0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALwzc2he5W+kbL6ynSM3Q3+g3yYnEVGOmd8oas9QFGgtjVGQvyKbU0DAenm3 j9SNjC0cwc3rdpRh+Tc+b8DWs10I2+a6mvLE4PGRqamhdOMeLXAVoc5enosn9r7T K4sGc/2HHfmgl/CostWtpAwWRTIQsbdjcvMRqbFIJqUzPgtl/ih86FL7Ua3TkOE3 YEIxM68U3s+A/n0IunQciQJLnJnHlyb8R/0PYP2L1KQrqKKrMxlucCLMouCnnD2f 7uTc51ICk5yJ9nffEbEesASEEiN9oOxwP7KbZVS2fJklVeazxpzl5fexJpzDetMX JYCZ8joihQ0+6EvIf6VYbu3Q9wkCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBTCsxNg Zmx7PKbkat5ACUoDZTUcQjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzE1NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfSPwDANBgkqhkiG9w0BAQsFAAOCAQEAbtkdeQck9c8Wt/bd cX/FuP366hiSFilAwXt41g1T8mJrNFyoCxvESELmn7csVH2E1r0KIKAbKSzc9yO+ K+kh4m7FdQSnHm7ZJdA0Z2nwBnNldwSz1jliMWZIu5qzsbwvraiuBcYJB7Smj6Wz 1Fsne62eO5rHBLQMQPANciEb2Kq4KnRCsKqICywdJ3xpJ819JtXrzo8kc6sxkXlA zUweUeWwH+vzk5Z9EYMNT4qWhCMYQkiUDs/8Mzz4WX7K4+opLf/RyxJDNc1Ymztx ugJojkCsFy/bLNIE+sEusRITBUHnOI40s18BhDnn/jSJw3lVHnp7Spj0vTUUerdw uoedfw== -----END CERTIFICATE-----Generated at Sat Apr 5 06:29:44 2025 by rpki-client