$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150241.roa File: AS150241.roa (raw, json) Hash identifier: wBaKM/h4S2Ejevnl1kuNACtuEP7T6cxS0rvpRSi/tnQ= Subject key identifier: CF:60:14:7B:3B:C6:00:83:8B:9B:AB:FD:0A:5C:30:27:DA:C0:FB:D7 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0712E3DEE02E24CA0892AEC84F642F750596A176 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150241.roa Signing time: Tue 04 Jul 2023 06:18:00 +0000 ROA not before: Tue 04 Jul 2023 06:13:00 +0000 ROA not after: Tue 02 Jul 2024 06:18:00 +0000 asID: 150241 IP address blocks: 2001:df1:a6c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:12:e3:de:e0:2e:24:ca:08:92:ae:c8:4f:64:2f:75:05:96:a1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 4 06:13:00 2023 GMT Not After : Jul 2 06:18:00 2024 GMT Subject: CN=CF60147B3BC600838B9BABFD0A5C3027DAC0FBD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b3:10:ab:f2:35:5f:0e:e5:be:30:65:98:08: a4:de:2c:9c:73:a5:5c:e3:d5:b6:4b:9d:f5:b2:48: a8:0c:c4:e0:f8:aa:2d:a5:02:5c:81:2b:89:8e:e9: 9e:b6:04:d6:6a:4c:20:11:a7:ed:d1:95:4b:ec:ca: 2b:33:cb:4f:94:48:60:3f:d9:56:3c:9e:66:c7:f3: 1f:ab:a6:a0:ac:ad:11:27:72:e6:53:02:8b:dc:59: 01:66:72:12:f7:3d:5c:f9:06:b0:4a:56:87:a0:1a: e4:d9:99:ed:0b:e7:ab:89:79:6a:f3:48:ce:25:91: be:79:b3:0b:28:4a:25:fa:d2:70:5b:d5:78:78:c4: 35:f7:59:ec:97:25:12:de:48:d2:a9:49:a2:7b:8a: 8c:af:54:e4:9f:8f:53:d3:9d:ca:2f:bc:96:09:73: 13:fb:41:99:d5:2d:16:e1:0f:4f:0e:ec:91:bc:06: cb:0b:6f:49:92:5f:b8:3a:35:fd:cb:c6:ee:44:fb: 8c:09:7d:0d:2c:e6:8d:b5:95:4f:b3:5a:1d:94:d8: 55:16:b2:b9:6a:48:24:a3:69:e9:b3:f0:34:11:b1: 98:29:b2:9a:75:c9:4e:65:0c:13:f9:7d:d5:40:8c: 16:df:ac:73:c2:82:53:fc:02:1c:91:a8:5c:d6:f1: 24:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:60:14:7B:3B:C6:00:83:8B:9B:AB:FD:0A:5C:30:27:DA:C0:FB:D7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150241.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:a6c0::/48 Signature Algorithm: sha256WithRSAEncryption 56:90:e6:af:8d:7c:0d:e4:b6:c9:99:8b:0a:15:36:eb:7a:37: f0:01:cb:2a:ff:1b:1c:33:f3:e8:85:39:4a:48:fd:ee:b8:52: 09:b9:3c:80:f0:36:a2:a7:17:ba:18:76:d8:67:6b:eb:a3:ad: 6e:b5:92:33:54:1f:f1:26:de:88:57:19:bc:78:3f:79:9e:7f: ad:94:b6:52:69:7e:6d:ab:e6:0f:51:98:28:df:ed:8d:06:8e: a8:ee:0f:b4:9d:99:91:72:87:b4:15:a3:ab:44:60:b4:4b:36: c5:89:99:37:cc:b5:53:18:f7:6e:0d:16:f2:2a:ee:16:bb:0c: 9c:ef:5b:8b:02:9c:3d:ae:0e:15:0f:39:1f:f2:a1:0b:44:e6: c6:5c:c3:76:b6:3a:d8:e7:aa:aa:b5:66:b0:31:2a:f2:ba:37: 14:2c:5b:80:aa:6d:88:e2:89:ca:a6:eb:40:76:75:b4:3b:fc: 92:f3:bf:02:91:13:e5:32:82:4d:b4:37:16:aa:4a:2c:f2:f8: cd:27:51:43:39:bb:31:93:10:1b:a9:85:0a:85:cd:70:66:6d: f9:0f:21:d8:d1:23:d9:8c:14:3c:05:8b:0a:00:d8:24:1a:7c: 83:81:fc:52:bf:75:92:41:99:1b:e5:3c:16:a8:7d:69:67:d5: 92:eb:ab:91 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUBxLj3uAuJMoIkq7IT2QvdQWWoXYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDcwNDA2MTMwMFoX DTI0MDcwMjA2MTgwMFowMzExMC8GA1UEAxMoQ0Y2MDE0N0IzQkM2MDA4MzhCOUJB QkZEMEE1QzMwMjdEQUMwRkJENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOzEKvyNV8O5b4wZZgIpN4snHOlXOPVtkud9bJIqAzE4PiqLaUCXIEriY7p nrYE1mpMIBGn7dGVS+zKKzPLT5RIYD/ZVjyeZsfzH6umoKytESdy5lMCi9xZAWZy Evc9XPkGsEpWh6Aa5NmZ7Qvnq4l5avNIziWRvnmzCyhKJfrScFvVeHjENfdZ7Jcl Et5I0qlJonuKjK9U5J+PU9Odyi+8lglzE/tBmdUtFuEPTw7skbwGywtvSZJfuDo1 /cvG7kT7jAl9DSzmjbWVT7NaHZTYVRayuWpIJKNp6bPwNBGxmCmymnXJTmUME/l9 1UCMFt+sc8KCU/wCHJGoXNbxJKMCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBTPYBR7 O8YAg4ubq/0KXDAn2sD71zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDI0MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfGmwDANBgkqhkiG9w0BAQsFAAOCAQEAVpDmr418DeS2yZmL ChU263o38AHLKv8bHDPz6IU5Skj97rhSCbk8gPA2oqcXuhh22Gdr66OtbrWSM1Qf 8SbeiFcZvHg/eZ5/rZS2Uml+bavmD1GYKN/tjQaOqO4PtJ2ZkXKHtBWjq0RgtEs2 xYmZN8y1Uxj3bg0W8iruFrsMnO9biwKcPa4OFQ85H/KhC0TmxlzDdrY62OeqqrVm sDEq8ro3FCxbgKptiOKJyqbrQHZ1tDv8kvO/ApET5TKCTbQ3FqpKLPL4zSdRQzm7 MZMQG6mFCoXNcGZt+Q8h2NEj2YwUPAWLCgDYJBp8g4H8Ur91kkGZG+U8Fqh9aWfV kuurkQ== -----END CERTIFICATE-----Generated at Thu May 9 00:29:16 2024 by rpki-client on console-ams.rpki-client.org