$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38150.roa File: AS38150.roa (raw, json) Hash identifier: BzrLA7sGnHzS6hNkvVyjpNg/44v2uTGwgzMSLtLDH9M= Subject key identifier: C3:71:C4:6F:4E:F9:BE:6E:24:67:73:D7:B7:26:AD:BC:77:5D:EF:36 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0945C9314C1BDF5FC49028F143D613A97B8AC564 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38150.roa Signing time: Mon 08 Jul 2024 03:00:00 +0000 ROA not before: Mon 08 Jul 2024 02:55:00 +0000 ROA not after: Mon 07 Jul 2025 03:00:00 +0000 asID: 38150 IP address blocks: 103.156.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:45:c9:31:4c:1b:df:5f:c4:90:28:f1:43:d6:13:a9:7b:8a:c5:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 8 02:55:00 2024 GMT Not After : Jul 7 03:00:00 2025 GMT Subject: CN=C371C46F4EF9BE6E246773D7B726ADBC775DEF36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fd:5e:33:38:b5:27:c1:04:78:fd:66:4f:b0: cb:16:34:79:ef:fe:43:c3:d3:12:d7:7f:16:9e:e6: 13:07:56:2e:e7:c9:f1:38:da:a8:f0:21:05:7e:11: 91:b6:e7:2f:6a:c9:57:86:cd:de:fd:0c:aa:a5:f4: 0e:0e:fb:43:0e:2c:c3:2f:97:be:bb:78:24:c8:85: 37:0b:1d:4d:ad:83:c4:08:c6:ec:41:f9:d7:48:78: a3:20:41:c5:e7:31:07:e1:b0:ac:90:4c:b9:20:99: 91:6f:f1:58:68:d9:85:d2:28:aa:a1:81:76:18:75: 5e:de:04:d6:d2:cd:9b:25:8d:cb:d6:db:5c:81:96: 38:bd:8b:10:03:33:49:6e:a9:04:88:da:49:f3:66: d7:9b:27:61:15:1e:0b:62:9b:a2:ed:55:a0:1e:88: 33:d6:cd:9b:05:65:3a:bc:78:6c:73:a6:ad:8a:94: 94:76:6a:f4:e9:bc:27:48:c4:af:f4:13:8b:0e:4e: b9:c5:02:45:70:ac:dd:45:71:d4:41:df:f6:eb:39: 89:bf:21:e6:93:21:e6:e8:0e:af:a6:67:3c:31:3b: c3:3f:a9:22:54:85:df:86:27:65:b9:cf:03:d7:a7: 74:15:59:a5:4a:7b:04:e8:4f:26:65:ca:01:be:07: a0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:71:C4:6F:4E:F9:BE:6E:24:67:73:D7:B7:26:AD:BC:77:5D:EF:36 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38150.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.240.0/23 Signature Algorithm: sha256WithRSAEncryption 25:1a:e5:5e:3c:68:64:67:0e:3e:45:90:71:e7:05:69:2f:c6: 81:f4:a9:75:71:fa:0d:ad:6c:4d:09:98:0a:b7:0b:9c:b9:a5: 60:09:e1:1e:f7:1d:fe:3a:af:05:c9:f1:9f:3c:2a:86:d6:a5: b2:4a:c3:92:80:4c:8b:9a:fc:dd:a5:63:2d:86:3a:10:2d:c2: 45:01:9e:76:a2:12:d8:91:c5:cd:37:52:8d:d1:03:84:25:31: 5c:01:dc:ee:12:f6:fb:05:23:ff:6e:95:66:1c:70:a7:93:7e: 9d:d9:a8:af:fe:2f:e9:5e:53:72:56:46:48:33:64:20:76:6a: 72:71:84:35:e4:3a:e0:24:25:4c:db:99:a8:f6:33:dc:47:fa: b5:d4:b2:a3:87:23:41:36:d1:0e:47:fd:27:88:ba:f4:9f:bc: 0a:89:5e:8d:08:a4:2f:bd:fa:a3:92:00:c1:dc:7c:1f:90:d5: a2:3f:fe:ef:a5:7f:b0:3b:82:e7:e9:88:21:36:63:13:5c:55: 69:0b:fb:a1:01:8a:d2:11:21:ea:8f:1c:2c:11:4c:c1:b3:f3: ab:6f:4f:f6:48:da:93:11:4b:f5:e3:1e:e6:f1:80:4e:b5:2e: 35:50:3b:ef:f6:00:b3:b9:3e:fb:1b:56:5f:df:21:f7:aa:49: 53:47:25:b2 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUCUXJMUwb31/EkCjxQ9YTqXuKxWQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwODAyNTUwMFoX DTI1MDcwNzAzMDAwMFowMzExMC8GA1UEAxMoQzM3MUM0NkY0RUY5QkU2RTI0Njc3 M0Q3QjcyNkFEQkM3NzVERUYzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKP9XjM4tSfBBHj9Zk+wyxY0ee/+Q8PTEtd/Fp7mEwdWLufJ8TjaqPAhBX4R kbbnL2rJV4bN3v0MqqX0Dg77Qw4swy+Xvrt4JMiFNwsdTa2DxAjG7EH510h4oyBB xecxB+GwrJBMuSCZkW/xWGjZhdIoqqGBdhh1Xt4E1tLNmyWNy9bbXIGWOL2LEAMz SW6pBIjaSfNm15snYRUeC2Kbou1VoB6IM9bNmwVlOrx4bHOmrYqUlHZq9Om8J0jE r/QTiw5OucUCRXCs3UVx1EHf9us5ib8h5pMh5ugOr6ZnPDE7wz+pIlSF34YnZbnP A9endBVZpUp7BOhPJmXKAb4HoAcCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBTDccRv Tvm+biRnc9e3Jq28d13vNjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzM4MTUwLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5zwMA0GCSqGSIb3DQEBCwUAA4IBAQAlGuVePGhkZw4+RZBx5wVp L8aB9Kl1cfoNrWxNCZgKtwucuaVgCeEe9x3+Oq8FyfGfPCqG1qWySsOSgEyLmvzd pWMthjoQLcJFAZ52ohLYkcXNN1KN0QOEJTFcAdzuEvb7BSP/bpVmHHCnk36d2aiv /i/pXlNyVkZIM2QgdmpycYQ15DrgJCVM25mo9jPcR/q11LKjhyNBNtEOR/0niLr0 n7wKiV6NCKQvvfqjkgDB3HwfkNWiP/7vpX+wO4Ln6YghNmMTXFVpC/uhAYrSESHq jxwsEUzBs/Orb0/2SNqTEUv14x7m8YBOtS41UDvv9gCzuT77G1Zf3yH3qklTRyWy -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:50 2024 by rpki-client on console-ams.rpki-client.org