$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153327.roa File: AS153327.roa (raw, json) Hash identifier: E4FR3whHU8OT4V56rP1mLZyXsfJ83zybZIPUB1Chu+U= Subject key identifier: FA:5A:4C:28:61:0D:F8:46:7F:FF:4A:AD:C3:B0:C7:D2:F1:2B:1C:EA Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5E985DA83985BF58845BEE1239053B223F5707FA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153327.roa Signing time: Tue 05 Nov 2024 06:55:20 +0000 ROA not before: Tue 05 Nov 2024 06:50:20 +0000 ROA not after: Tue 04 Nov 2025 06:55:20 +0000 asID: 153327 IP address blocks: 103.251.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:98:5d:a8:39:85:bf:58:84:5b:ee:12:39:05:3b:22:3f:57:07:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 5 06:50:20 2024 GMT Not After : Nov 4 06:55:20 2025 GMT Subject: CN=FA5A4C28610DF8467FFF4AADC3B0C7D2F12B1CEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bd:4f:ab:1d:f3:d8:2c:e7:35:20:c5:d8:73: 5a:dd:4a:5e:4c:a6:f7:bf:f6:4f:f9:79:c2:69:8e: 23:0a:a2:40:43:2a:39:dc:30:ec:ec:2f:02:6d:22: c2:bc:e6:e3:af:d5:d9:4c:15:c2:6b:4a:26:6b:44: 29:b3:d7:57:24:14:85:b4:d7:a3:3d:c1:da:21:1d: 55:0f:f8:1a:18:a8:2e:50:8c:ed:d3:af:e8:65:fd: 33:9b:e3:f3:17:99:7e:73:12:6a:7a:39:94:5a:89: 45:87:7a:32:e7:e8:f7:b8:00:76:2d:46:43:69:5c: f7:67:20:37:7f:b9:c7:a1:a9:b9:3d:89:8d:19:98: f6:a6:3b:2b:b9:aa:66:a9:1d:f2:4d:83:3a:c5:56: 4f:2c:e0:a8:da:32:05:fd:c3:1a:48:7d:c3:e7:51: 58:09:35:12:75:0e:75:b6:bb:5a:f9:39:1c:66:16: 7c:07:de:78:0e:56:96:b1:65:cb:1d:5d:99:90:09: f3:07:22:44:a7:13:37:72:7b:df:f1:0f:92:aa:4e: 26:a5:80:41:0a:3e:8a:ff:95:6b:4b:20:8d:d1:49: b6:97:50:5d:22:68:b7:f1:fa:8a:36:56:46:cb:bf: 40:b0:f1:2d:8f:8d:a3:47:89:b9:a2:cd:1e:0e:fb: 15:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5A:4C:28:61:0D:F8:46:7F:FF:4A:AD:C3:B0:C7:D2:F1:2B:1C:EA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153327.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.251.152.0/23 Signature Algorithm: sha256WithRSAEncryption 44:4c:f6:47:dc:68:42:09:1e:1f:dd:8f:f5:f8:cd:b4:f3:ec: d5:c0:e4:01:a0:45:bf:55:9b:dd:c3:4c:37:70:1a:78:db:91: ed:c4:92:de:85:94:ab:b5:be:17:83:a3:8b:f0:d2:c0:b8:4c: e4:b4:a2:83:09:1b:b3:10:bf:61:03:7c:76:30:8b:bc:c5:56: 7c:1e:f8:87:1d:bb:5c:42:61:72:e9:bf:a8:bf:c5:18:ab:cd: ee:57:98:5f:a9:2e:71:e9:51:4a:28:bf:e8:4d:f0:50:fa:93: b9:75:07:8a:72:92:4e:09:16:1e:f0:ed:3d:a1:0b:77:bb:b5: e8:8c:80:f3:96:97:cb:c3:b5:67:5c:b6:ae:19:fd:c7:32:87: f5:41:b5:57:ed:82:26:5c:80:64:aa:88:37:8b:e0:aa:01:46: 21:6b:25:df:a7:aa:11:b4:9b:5c:85:04:fb:72:b4:06:bc:86: 49:59:3a:47:4f:d9:22:be:f4:8c:c3:81:3a:fb:7d:65:73:57: 33:44:90:92:e5:fd:fd:22:25:57:9f:19:c3:37:90:97:e9:10: 3b:72:e2:66:30:af:7d:a0:3e:e7:97:a8:18:e1:28:aa:04:e0: 3d:93:09:2d:a9:23:bf:23:d0:e5:a6:94:0d:f3:1c:22:31:99: b5:cf:9a:4b -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUXphdqDmFv1iEW+4SOQU7Ij9XB/owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTEwNTA2NTAyMFoX DTI1MTEwNDA2NTUyMFowMzExMC8GA1UEAxMoRkE1QTRDMjg2MTBERjg0NjdGRkY0 QUFEQzNCMEM3RDJGMTJCMUNFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANG9T6sd89gs5zUgxdhzWt1KXkym97/2T/l5wmmOIwqiQEMqOdww7OwvAm0i wrzm46/V2UwVwmtKJmtEKbPXVyQUhbTXoz3B2iEdVQ/4GhioLlCM7dOv6GX9M5vj 8xeZfnMSano5lFqJRYd6Mufo97gAdi1GQ2lc92cgN3+5x6GpuT2JjRmY9qY7K7mq Zqkd8k2DOsVWTyzgqNoyBf3DGkh9w+dRWAk1EnUOdba7Wvk5HGYWfAfeeA5WlrFl yx1dmZAJ8wciRKcTN3J73/EPkqpOJqWAQQo+iv+Va0sgjdFJtpdQXSJot/H6ijZW Rsu/QLDxLY+No0eJuaLNHg77FWMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBT6Wkwo YQ34Rn//Sq3DsMfS8Ssc6jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzMyNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWf7mDANBgkqhkiG9w0BAQsFAAOCAQEAREz2R9xoQgkeH92P9fjN tPPs1cDkAaBFv1Wb3cNMN3AaeNuR7cSS3oWUq7W+F4Oji/DSwLhM5LSigwkbsxC/ YQN8djCLvMVWfB74hx27XEJhcum/qL/FGKvN7leYX6kucelRSii/6E3wUPqTuXUH inKSTgkWHvDtPaELd7u16IyA85aXy8O1Z1y2rhn9xzKH9UG1V+2CJlyAZKqIN4vg qgFGIWsl36eqEbSbXIUE+3K0BryGSVk6R0/ZIr70jMOBOvt9ZXNXM0SQkuX9/SIl V58ZwzeQl+kQO3LiZjCvfaA+55eoGOEoqgTgPZMJLakjvyPQ5aaUDfMcIjGZtc+a Sw== -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:30 2024 by rpki-client on console-ams.rpki-client.org