$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150989.roa File: AS150989.roa (raw, json) Hash identifier: +0jzUqX0ahGMGRpwwU4Brkjhkb5lGPRj+pWfZLlws6o= Subject key identifier: DE:CD:F4:16:23:FB:91:26:FF:A7:1D:47:B9:C8:1B:2A:E0:49:5D:EC Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5801E475FCFEFA822863C862826933900C8C384B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150989.roa Signing time: Wed 02 Jul 2025 03:00:00 +0000 ROA not before: Wed 02 Jul 2025 02:55:00 +0000 ROA not after: Wed 01 Jul 2026 03:00:00 +0000 asID: 150989 IP address blocks: 2001:df2:dcc0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:01:e4:75:fc:fe:fa:82:28:63:c8:62:82:69:33:90:0c:8c:38:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 2 02:55:00 2025 GMT Not After : Jul 1 03:00:00 2026 GMT Subject: CN=DECDF41623FB9126FFA71D47B9C81B2AE0495DEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:05:50:fa:5a:9f:26:2b:77:65:8e:12:53:6f: bb:51:0f:bc:f2:db:d4:68:94:59:b8:6f:44:2e:ff: 2f:d5:9b:93:e1:e9:53:b1:2f:0c:12:13:62:74:f0: 2f:3b:26:b6:3d:a9:3f:37:eb:d0:6f:92:8d:d9:37: 2d:6b:15:2a:ff:3a:8c:7b:35:80:6a:c4:cb:01:9b: 2e:a4:54:4f:41:8e:c4:4b:5e:da:e4:bf:73:e7:62: 00:4e:dc:9b:1b:59:db:0f:7b:13:ee:75:41:67:1a: c9:41:23:43:de:59:8f:2f:82:e2:53:a5:6d:c2:5e: 4f:8c:6d:f6:58:01:63:d8:3b:90:45:e1:4a:4a:91: 7e:18:0e:83:f6:b8:7c:be:9f:5f:09:61:25:1c:b7: 0b:07:da:7c:b2:19:db:f6:8a:58:a0:c2:d6:a8:11: 1a:b9:28:89:c4:a8:34:89:06:bf:47:07:fb:ca:53: e1:d6:f3:88:c0:84:b7:57:42:fd:2b:f3:f4:72:19: 1b:73:0a:e3:d2:2c:4c:bc:5b:e5:44:17:dd:99:f9: 4f:5b:13:d8:c3:07:55:95:12:1b:d3:cc:4e:d0:87: 79:5c:f9:b5:4f:cf:52:c2:1e:f8:03:42:60:35:a6: 7b:92:7d:7d:7d:e8:4f:08:2f:2b:7e:f0:4f:47:e0: 1b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CD:F4:16:23:FB:91:26:FF:A7:1D:47:B9:C8:1B:2A:E0:49:5D:EC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150989.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:dcc0::/48 Signature Algorithm: sha256WithRSAEncryption 16:7f:fc:15:b7:bb:31:19:f8:a3:93:e9:80:d1:61:8e:a9:b0: 69:56:00:f2:c0:d6:9a:11:49:a1:7e:71:0f:75:55:67:a2:6a: 2e:ba:87:32:ab:1f:9e:ac:7d:1e:ad:50:50:a3:66:32:cc:21: c2:34:d7:72:91:5d:54:2f:a7:cf:97:5c:b4:95:9b:91:3b:45: 55:83:b9:c7:47:29:85:18:92:55:2a:f8:a4:07:9f:a2:b5:02: 85:45:38:f3:14:71:00:8d:76:6e:ae:26:80:1f:05:10:a2:04: e9:dd:4a:b8:d4:39:08:81:39:dd:90:c7:04:50:f5:a5:5a:b4: d0:4c:c6:6a:c6:b0:d3:ee:44:b7:54:82:f0:f3:39:73:11:c2: 87:2c:53:f8:bb:69:9a:37:d7:36:1d:e1:77:3b:e7:2b:30:ab: bd:d0:f4:ab:50:8a:80:da:10:8f:d0:c1:78:72:da:d7:c6:d8: 34:c2:51:1b:c5:18:34:18:04:25:e5:7e:3c:9b:8e:47:3a:30: 85:d0:cb:cc:1e:76:2c:9f:9d:d8:a8:86:4e:39:ae:db:35:47: 1b:07:f6:6b:a2:5c:cb:5d:b3:26:11:20:32:f9:54:c6:f7:56: ff:7e:2e:0b:69:07:f5:f6:43:2b:27:a8:18:67:3d:56:93:5f: e9:5f:e7:ab -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUWAHkdfz++oIoY8higmkzkAyMOEswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcwMjAyNTUwMFoX DTI2MDcwMTAzMDAwMFowMzExMC8GA1UEAxMoREVDREY0MTYyM0ZCOTEyNkZGQTcx RDQ3QjlDODFCMkFFMDQ5NURFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIFUPpanyYrd2WOElNvu1EPvPLb1GiUWbhvRC7/L9Wbk+HpU7EvDBITYnTw Lzsmtj2pPzfr0G+Sjdk3LWsVKv86jHs1gGrEywGbLqRUT0GOxEte2uS/c+diAE7c mxtZ2w97E+51QWcayUEjQ95Zjy+C4lOlbcJeT4xt9lgBY9g7kEXhSkqRfhgOg/a4 fL6fXwlhJRy3CwfafLIZ2/aKWKDC1qgRGrkoicSoNIkGv0cH+8pT4dbziMCEt1dC /Svz9HIZG3MK49IsTLxb5UQX3Zn5T1sT2MMHVZUSG9PMTtCHeVz5tU/PUsIe+ANC YDWme5J9fX3oTwgvK37wT0fgG8UCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBTezfQW I/uRJv+nHUe5yBsq4Eld7DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDk4OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfLcwDANBgkqhkiG9w0BAQsFAAOCAQEAFn/8Fbe7MRn4o5Pp gNFhjqmwaVYA8sDWmhFJoX5xD3VVZ6JqLrqHMqsfnqx9Hq1QUKNmMswhwjTXcpFd VC+nz5dctJWbkTtFVYO5x0cphRiSVSr4pAeforUChUU48xRxAI12bq4mgB8FEKIE 6d1KuNQ5CIE53ZDHBFD1pVq00EzGasaw0+5Et1SC8PM5cxHChyxT+LtpmjfXNh3h dzvnKzCrvdD0q1CKgNoQj9DBeHLa18bYNMJRG8UYNBgEJeV+PJuORzowhdDLzB52 LJ+d2KiGTjmu2zVHGwf2a6Jcy12zJhEgMvlUxvdW/34uC2kH9fZDKyeoGGc9VpNf 6V/nqw== -----END CERTIFICATE-----Generated at Mon Jul 21 00:02:34 2025 by rpki-client