$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150206.roa File: AS150206.roa (raw, json) Hash identifier: v4SLS669ANVVhiQly0O5ygGY/MJwPJ8LL4/Be5XPEFI= Subject key identifier: B5:B2:A9:42:47:93:F0:84:9A:0C:47:23:67:3B:1B:3F:9D:B4:AA:64 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 234F67AA074DBD9245EE51CFBEAFD5F1F7EFDF86 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150206.roa Signing time: Thu 15 May 2025 07:00:00 +0000 ROA not before: Thu 15 May 2025 06:55:00 +0000 ROA not after: Thu 14 May 2026 07:00:00 +0000 asID: 150206 IP address blocks: 2401:85e0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 06:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:4f:67:aa:07:4d:bd:92:45:ee:51:cf:be:af:d5:f1:f7:ef:df:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 15 06:55:00 2025 GMT Not After : May 14 07:00:00 2026 GMT Subject: CN=B5B2A9424793F0849A0C4723673B1B3F9DB4AA64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:12:9c:32:fa:fd:53:07:5d:67:25:2a:2f:ec: 62:9b:74:1a:be:03:e2:56:df:5d:6e:c9:a9:10:4f: 3c:1d:db:a8:4b:ff:ac:02:3b:69:99:2e:f0:c6:c8: e2:dd:a4:50:d2:72:93:83:be:03:32:38:bc:6e:c8: 70:ee:07:b9:58:fe:ec:d3:51:a8:c1:34:7e:56:73: a0:c2:f1:cf:a6:f0:0b:ae:d6:16:59:ae:f0:e8:8d: 4a:c3:b7:0e:3f:42:f0:97:d2:3c:94:c9:6b:83:ea: b9:1d:df:74:60:3f:83:90:0a:dc:dd:30:dc:a5:d0: c4:0e:ca:5b:93:78:ae:f3:58:7f:39:d2:13:4d:c3: fb:ac:2d:a5:7a:c7:2e:dd:6d:ea:ff:1b:c9:0f:ad: a4:c4:36:7d:59:32:64:3c:63:3c:ae:ef:e5:81:d9: e8:a6:70:6b:0e:6d:e5:31:13:e2:cb:d4:95:63:30: 5f:62:f2:aa:bc:a4:bc:45:59:22:f0:af:00:a1:0f: bc:32:5e:90:91:cc:14:95:d9:b9:05:65:6c:33:13: 32:6e:5d:25:0a:ad:53:a2:86:c6:ee:1f:ca:02:15: 03:a1:8e:c2:34:94:ca:1e:2a:ba:b8:19:a8:19:d6: 3e:67:33:b5:10:44:c2:df:0f:27:26:92:12:9f:b4: e9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B2:A9:42:47:93:F0:84:9A:0C:47:23:67:3B:1B:3F:9D:B4:AA:64 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150206.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:85e0::/32 Signature Algorithm: sha256WithRSAEncryption 0d:f1:41:86:98:74:0f:ed:dd:eb:51:d8:a1:67:f3:7b:a1:fd: ab:d6:94:2c:fc:5c:62:37:28:a9:1b:7a:ac:02:dc:9e:28:05: df:85:20:e3:98:74:c3:d0:35:29:2c:dc:c5:02:f6:e5:16:94: 92:54:02:86:20:47:5b:4d:0b:b7:0a:1d:ba:d7:95:4c:d8:c7: 24:d4:c6:80:6a:8c:bf:36:fb:d6:6c:10:a8:39:9c:e9:7c:98: b6:c6:33:44:ce:5e:55:11:2b:7d:8e:e1:88:26:34:45:3f:f5: 71:af:8e:02:fb:91:ab:4b:d8:1d:a1:53:d9:97:f6:72:f6:21: a6:6c:65:63:e6:ac:be:d1:7d:11:24:7c:54:48:60:e4:7f:fe: 41:c4:b2:85:09:69:83:76:b9:76:59:97:3a:a1:0a:31:8d:a7: 11:03:68:1f:7c:99:e7:56:d4:84:ce:6b:c3:92:70:f3:b3:ed: 8c:10:47:b4:e0:b3:7e:ea:fe:14:e1:3d:12:82:13:9e:b2:be: a4:17:70:62:39:88:ff:cd:49:3a:d1:87:ba:f2:7b:cc:90:96: d7:af:1e:b6:a8:7e:b6:64:25:47:7d:e0:69:f8:2e:b1:31:e8: 18:76:55:e1:2d:5e:9a:cf:4f:6b:87:7e:4b:8e:b5:67:74:c5: 4f:7b:0a:b1 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUI09nqgdNvZJF7lHPvq/V8ffv34YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUxNTA2NTUwMFoX DTI2MDUxNDA3MDAwMFowMzExMC8GA1UEAxMoQjVCMkE5NDI0NzkzRjA4NDlBMEM0 NzIzNjczQjFCM0Y5REI0QUE2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ4SnDL6/VMHXWclKi/sYpt0Gr4D4lbfXW7JqRBPPB3bqEv/rAI7aZku8MbI 4t2kUNJyk4O+AzI4vG7IcO4HuVj+7NNRqME0flZzoMLxz6bwC67WFlmu8OiNSsO3 Dj9C8JfSPJTJa4PquR3fdGA/g5AK3N0w3KXQxA7KW5N4rvNYfznSE03D+6wtpXrH Lt1t6v8byQ+tpMQ2fVkyZDxjPK7v5YHZ6KZwaw5t5TET4svUlWMwX2LyqrykvEVZ IvCvAKEPvDJekJHMFJXZuQVlbDMTMm5dJQqtU6KGxu4fygIVA6GOwjSUyh4qurgZ qBnWPmcztRBEwt8PJyaSEp+06S0CAwEAAaOCAdEwggHNMB0GA1UdDgQWBBS1sqlC R5PwhJoMRyNnOxs/nbSqZDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDIwNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQBheAwDQYJKoZIhvcNAQELBQADggEBAA3xQYaYdA/t3etR2KFn 83uh/avWlCz8XGI3KKkbeqwC3J4oBd+FIOOYdMPQNSks3MUC9uUWlJJUAoYgR1tN C7cKHbrXlUzYxyTUxoBqjL82+9ZsEKg5nOl8mLbGM0TOXlURK32O4YgmNEU/9XGv jgL7katL2B2hU9mX9nL2IaZsZWPmrL7RfREkfFRIYOR//kHEsoUJaYN2uXZZlzqh CjGNpxEDaB98medW1ITOa8OScPOz7YwQR7Tgs37q/hThPRKCE56yvqQXcGI5iP/N STrRh7rye8yQltevHraofrZkJUd94Gn4LrEx6Bh2VeEtXprPT2uHfkuOtWd0xU97 CrE= -----END CERTIFICATE-----Generated at Mon Jun 2 06:13:02 2025 by rpki-client