$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150208.roa File: AS150208.roa (raw, json) Hash identifier: +IOz1cjIJJCsy21gfQ34R5r/UlDXM5w86aof16wd8Bw= Subject key identifier: 2B:28:30:E6:54:7D:90:82:90:0A:D6:BD:C3:F4:B5:F1:29:06:16:D3 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 04593AFD3D50FF1522EDE52FCBB96E3691685600 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150208.roa Signing time: Wed 08 May 2024 06:57:15 +0000 ROA not before: Wed 08 May 2024 06:52:15 +0000 ROA not after: Wed 07 May 2025 06:57:15 +0000 asID: 150208 IP address blocks: 2001:df3:c440::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 03:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:59:3a:fd:3d:50:ff:15:22:ed:e5:2f:cb:b9:6e:36:91:68:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 8 06:52:15 2024 GMT Not After : May 7 06:57:15 2025 GMT Subject: CN=2B2830E6547D9082900AD6BDC3F4B5F1290616D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:63:89:61:10:7a:0b:de:fa:b1:ac:79:39:ca: 6b:b1:91:d8:13:e0:bf:f1:51:59:0a:e8:cb:cd:dd: 58:50:41:81:5b:9c:d2:34:80:3d:b4:14:c5:43:98: 05:e6:b0:6a:42:12:90:66:b3:7c:8d:00:a9:a5:72: c5:d1:37:08:05:af:e2:4e:90:62:b9:cd:be:79:9c: 15:49:50:81:1c:3b:92:75:32:dd:83:a7:9a:74:66: 75:67:21:78:d8:a8:72:43:3e:8f:1d:3a:5c:8f:38: 36:aa:db:e1:39:38:9c:71:86:84:e1:0e:de:f9:68: d7:ec:1d:86:ab:cf:79:08:99:0e:fc:09:4d:96:65: b4:5f:2d:b4:e8:8b:8b:43:04:4e:92:1d:c1:38:e0: 2e:f7:2a:0b:68:35:ad:9a:72:8e:0a:f9:48:00:11: 9a:f3:b8:21:f3:53:e4:6d:18:e6:ff:54:16:e3:47: a3:54:46:2b:ac:13:b3:03:c1:57:ad:87:d2:b4:e9: db:d2:df:e6:b3:57:25:67:34:3f:e6:7a:d5:17:45: 1e:2a:23:11:87:61:f8:a6:59:3c:45:15:58:0b:5c: c5:95:80:57:8e:7f:67:c4:61:18:cc:6e:fa:0a:51: fa:d0:d2:6e:40:f6:d3:3c:4e:11:4c:9e:2d:48:be: 31:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:28:30:E6:54:7D:90:82:90:0A:D6:BD:C3:F4:B5:F1:29:06:16:D3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150208.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:c440::/48 Signature Algorithm: sha256WithRSAEncryption 3c:af:7f:48:25:dc:35:7d:23:5b:2c:ff:31:64:3a:6d:1a:78: 05:c2:b1:e5:71:cc:c5:31:64:f7:7d:c9:68:11:d0:7d:90:9d: 02:d9:9d:87:3e:4c:2e:c6:32:d6:46:41:32:63:83:60:35:ec: ac:7d:bb:3f:69:92:5f:8d:11:8a:b2:67:2d:d6:69:6c:4e:3c: 1d:a4:6a:ad:d7:79:bc:51:3e:32:e8:11:0c:d5:80:54:95:6f: 86:cf:a9:33:e4:4e:5f:81:a1:46:d9:f7:ee:ba:c5:c6:40:11: 59:6f:fd:19:20:6b:4c:5e:1e:0e:a0:ea:a2:07:bd:79:10:0e: 98:a0:f3:46:82:cf:e8:37:61:05:a5:59:e8:25:59:4b:7e:f2: e7:32:08:b6:94:aa:dd:5b:94:59:ee:0d:bd:3e:64:ac:32:04: 65:62:dd:94:ba:b3:7f:c8:b0:9c:42:db:d2:b7:8a:70:45:18: 3f:e7:ac:ae:b7:b5:50:22:df:91:46:02:95:01:c2:4c:63:6a: 9f:bb:8d:6b:fe:6c:90:70:05:3a:f0:6e:50:f2:3f:d1:dd:72: e2:16:61:25:26:80:b8:9b:2d:86:7b:40:c3:bd:3e:29:9c:6e: cc:ea:a1:55:c5:b6:76:a0:b5:1b:fe:62:ab:d5:be:29:c3:70: 19:56:4a:d0 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUBFk6/T1Q/xUi7eUvy7luNpFoVgAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUwODA2NTIxNVoX DTI1MDUwNzA2NTcxNVowMzExMC8GA1UEAxMoMkIyODMwRTY1NDdEOTA4MjkwMEFE NkJEQzNGNEI1RjEyOTA2MTZEMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMJjiWEQegve+rGseTnKa7GR2BPgv/FRWQroy83dWFBBgVuc0jSAPbQUxUOY BeawakISkGazfI0AqaVyxdE3CAWv4k6QYrnNvnmcFUlQgRw7knUy3YOnmnRmdWch eNiockM+jx06XI84Nqrb4Tk4nHGGhOEO3vlo1+wdhqvPeQiZDvwJTZZltF8ttOiL i0METpIdwTjgLvcqC2g1rZpyjgr5SAARmvO4IfNT5G0Y5v9UFuNHo1RGK6wTswPB V62H0rTp29Lf5rNXJWc0P+Z61RdFHiojEYdh+KZZPEUVWAtcxZWAV45/Z8RhGMxu +gpR+tDSbkD20zxOEUyeLUi+MTMCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQrKDDm VH2QgpAK1r3D9LXxKQYW0zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDIwOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfPEQDANBgkqhkiG9w0BAQsFAAOCAQEAPK9/SCXcNX0jWyz/ MWQ6bRp4BcKx5XHMxTFk933JaBHQfZCdAtmdhz5MLsYy1kZBMmODYDXsrH27P2mS X40RirJnLdZpbE48HaRqrdd5vFE+MugRDNWAVJVvhs+pM+ROX4GhRtn37rrFxkAR WW/9GSBrTF4eDqDqoge9eRAOmKDzRoLP6DdhBaVZ6CVZS37y5zIItpSq3VuUWe4N vT5krDIEZWLdlLqzf8iwnELb0reKcEUYP+esrre1UCLfkUYClQHCTGNqn7uNa/5s kHAFOvBuUPI/0d1y4hZhJSaAuJsthntAw70+KZxuzOqhVcW2dqC1G/5iq9W+KcNw GVZK0A== -----END CERTIFICATE-----Generated at Sun Jun 23 00:04:04 2024 by rpki-client on console-ams.rpki-client.org