$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150206.roa File: AS150206.roa (raw, json) Hash identifier: hi89oKi5UywOpimnqwM78iAqjNqRHYG0xxnGtvcuk4c= Subject key identifier: 9F:D0:24:95:AA:F0:F2:F8:30:24:2C:A3:64:A7:8B:33:BD:5D:6C:CE Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 07351A1B483D90C200BD3FF4D36DF5A1574FD447 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150206.roa Signing time: Thu 13 Jun 2024 06:10:11 +0000 ROA not before: Thu 13 Jun 2024 06:05:11 +0000 ROA not after: Thu 12 Jun 2025 06:10:11 +0000 asID: 150206 IP address blocks: 2401:85e0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 03:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:35:1a:1b:48:3d:90:c2:00:bd:3f:f4:d3:6d:f5:a1:57:4f:d4:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 13 06:05:11 2024 GMT Not After : Jun 12 06:10:11 2025 GMT Subject: CN=9FD02495AAF0F2F830242CA364A78B33BD5D6CCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3a:24:cf:c2:94:87:c4:d6:3f:9e:1c:ac:ee: fd:66:8f:fe:20:10:b8:22:80:e6:c4:38:4c:4f:11: b8:c1:db:d6:e4:72:d3:f1:eb:84:da:c3:74:fb:b4: a7:28:53:60:b3:3c:09:d2:19:ad:4c:47:f6:88:76: 71:52:a8:e5:ea:8e:ad:d6:78:76:f5:b8:1b:25:48: 66:20:1e:93:c5:7a:ff:db:64:21:0b:33:29:cd:2b: 2a:22:75:ca:f2:fe:01:86:15:c0:39:c0:ea:d7:42: 21:c2:43:4b:1e:f4:89:0e:c9:db:78:78:96:3c:d9: 7a:06:f0:d9:1b:8f:12:59:2e:8e:37:f5:52:2e:ab: ed:49:64:37:22:ec:86:6f:fe:fc:8a:f8:04:7c:f8: b5:ca:f2:d0:d8:f1:8a:32:5f:48:c5:6e:06:5a:bf: 04:b6:ef:f8:4a:e7:cc:2f:0b:ea:d2:02:d2:0f:2e: 77:db:0c:2a:6c:01:56:69:b9:05:99:f6:1a:d8:ab: 31:97:15:9f:c0:8a:fa:1b:ed:8e:61:e1:59:e5:6f: 0e:d9:23:72:3b:31:54:b7:6e:8b:4b:ca:49:b3:e5: f1:48:0d:db:4e:83:4f:5e:ea:55:fa:95:38:c7:9a: 3d:38:18:1f:f3:cd:72:44:e0:62:9c:db:73:93:6d: 60:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D0:24:95:AA:F0:F2:F8:30:24:2C:A3:64:A7:8B:33:BD:5D:6C:CE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150206.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:85e0::/32 Signature Algorithm: sha256WithRSAEncryption 7a:d8:ca:9a:95:23:1d:de:7f:9b:90:98:0a:ef:a7:45:7c:2b: df:68:0e:f7:71:ff:04:06:48:3f:3e:2f:24:8e:2f:84:ae:f2: 87:08:ca:44:8d:ad:36:a8:72:2d:9c:95:e0:91:e5:0f:45:d9: a2:65:79:e9:76:e4:4f:dd:2f:fd:3f:83:6c:68:93:f5:09:50: 64:d9:cc:f7:29:75:5d:e6:45:5f:5a:a3:48:0b:75:97:f4:4a: 48:15:39:3d:2c:2a:70:a8:ae:3d:82:13:b6:8d:b3:98:15:55: 0d:f5:7f:2c:11:bd:d9:33:e0:1a:ec:c9:05:cd:84:fd:3d:bd: df:69:14:42:26:f4:6d:87:af:ee:38:1b:e5:4a:6c:c4:87:d4: c5:7a:e3:2d:8c:39:eb:73:96:71:5f:76:52:1b:b7:44:6a:7f: af:f7:e1:4a:42:98:03:0e:44:1b:fb:99:8f:b0:10:f5:ff:20: d1:bc:f2:a2:63:05:c6:08:09:75:06:db:61:22:d2:e1:3c:09: 3a:61:89:da:ed:56:9e:0f:2b:32:13:fd:67:01:f1:1f:35:f7: 5c:a6:d0:f8:c9:cf:d5:d3:ed:cc:0f:0f:ab:df:e7:d7:05:38: a5:cd:2b:ec:88:0f:ff:e9:f0:5b:b2:61:d5:99:a9:17:60:97: 04:7c:7c:67 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUBzUaG0g9kMIAvT/00231oVdP1EcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDYxMzA2MDUxMVoX DTI1MDYxMjA2MTAxMVowMzExMC8GA1UEAxMoOUZEMDI0OTVBQUYwRjJGODMwMjQy Q0EzNjRBNzhCMzNCRDVENkNDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ86JM/ClIfE1j+eHKzu/WaP/iAQuCKA5sQ4TE8RuMHb1uRy0/HrhNrDdPu0 pyhTYLM8CdIZrUxH9oh2cVKo5eqOrdZ4dvW4GyVIZiAek8V6/9tkIQszKc0rKiJ1 yvL+AYYVwDnA6tdCIcJDSx70iQ7J23h4ljzZegbw2RuPElkujjf1Ui6r7UlkNyLs hm/+/Ir4BHz4tcry0NjxijJfSMVuBlq/BLbv+ErnzC8L6tIC0g8ud9sMKmwBVmm5 BZn2GtirMZcVn8CK+hvtjmHhWeVvDtkjcjsxVLdui0vKSbPl8UgN206DT17qVfqV OMeaPTgYH/PNckTgYpzbc5NtYC0CAwEAAaOCAdEwggHNMB0GA1UdDgQWBBSf0CSV qvDy+DAkLKNkp4szvV1szjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDIwNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQBheAwDQYJKoZIhvcNAQELBQADggEBAHrYypqVIx3ef5uQmArv p0V8K99oDvdx/wQGSD8+LySOL4Su8ocIykSNrTaoci2cleCR5Q9F2aJleel25E/d L/0/g2xok/UJUGTZzPcpdV3mRV9ao0gLdZf0SkgVOT0sKnCorj2CE7aNs5gVVQ31 fywRvdkz4BrsyQXNhP09vd9pFEIm9G2Hr+44G+VKbMSH1MV64y2MOetzlnFfdlIb t0Rqf6/34UpCmAMORBv7mY+wEPX/ING88qJjBcYICXUG22Ei0uE8CTphidrtVp4P KzIT/WcB8R8191ym0PjJz9XT7cwPD6vf59cFOKXNK+yID//p8FuyYdWZqRdglwR8 fGc= -----END CERTIFICATE-----Generated at Sun Jun 23 00:04:04 2024 by rpki-client on console-ams.rpki-client.org