$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150241.roa File: AS150241.roa (raw, json) Hash identifier: LMr8hor1zSDmrDjpVv2gcN3MMw2+YWwTnyUPEESbxL8= Subject key identifier: D6:44:95:4C:D5:F0:E0:3D:E7:AC:73:40:C5:64:F0:39:33:5E:37:68 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 099C69434D7F8077A0A39C76DE03F268D5749DD8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150241.roa Signing time: Tue 06 May 2025 07:00:00 +0000 ROA not before: Tue 06 May 2025 06:55:00 +0000 ROA not after: Tue 05 May 2026 07:00:00 +0000 asID: 150241 IP address blocks: 2001:df1:a6c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:9c:69:43:4d:7f:80:77:a0:a3:9c:76:de:03:f2:68:d5:74:9d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 6 06:55:00 2025 GMT Not After : May 5 07:00:00 2026 GMT Subject: CN=D644954CD5F0E03DE7AC7340C564F039335E3768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d2:53:29:35:e3:f7:80:7a:49:b1:aa:bc:61: 11:dc:84:34:a4:46:cf:15:6f:f7:ba:f1:bc:46:4c: 40:90:ed:1e:4a:5d:6f:00:12:6a:00:80:8c:d3:3c: 9e:5d:b2:0b:ee:04:60:c2:63:1e:6d:cd:28:b7:32: 08:9e:14:84:45:08:25:3e:39:ef:d2:c7:de:a4:41: a3:f6:9f:76:23:35:a2:0d:03:e9:9a:ff:e8:fa:28: 35:28:6c:a7:5b:e7:52:49:36:ba:b9:ea:4c:ff:e6: 67:12:15:bc:13:9e:e6:58:0c:76:a1:f4:72:61:2e: 27:09:1a:f5:80:47:90:08:f7:1b:3a:65:f4:ab:98: 6c:6c:66:42:49:fe:28:4b:c3:fe:de:a1:97:e8:be: c5:5e:8b:8e:55:c2:8d:18:f8:b1:25:b3:f4:65:14: 44:9e:21:4e:b2:c4:11:05:22:20:b7:81:c3:0c:1f: 40:90:17:39:93:0e:5c:86:91:fb:72:32:53:38:93: 7d:c8:d9:90:d2:0d:b5:fd:2b:16:30:2c:3b:de:c7: 25:e1:4d:dc:26:11:1e:b1:0e:8c:ca:8a:2e:3d:38: 84:00:74:97:a1:2b:77:5a:88:9c:74:02:20:f6:8c: 0b:7d:60:fd:00:de:37:cc:8c:18:6c:6e:dc:8b:98: 27:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:44:95:4C:D5:F0:E0:3D:E7:AC:73:40:C5:64:F0:39:33:5E:37:68 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150241.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:a6c0::/48 Signature Algorithm: sha256WithRSAEncryption 93:7a:39:72:99:77:7b:be:28:41:39:49:bc:7b:4f:b2:4e:c6: d2:be:7f:dd:a3:62:29:1d:f3:d2:6d:a2:d1:85:66:5f:1d:a9: d9:4a:bd:74:61:e4:85:97:5c:90:51:d6:41:24:b8:fc:9b:30: a8:ea:83:6f:34:ba:40:57:d1:f9:4b:99:2c:3d:4f:30:58:b0: b9:c1:25:a8:5b:df:b9:d5:c6:16:65:59:8a:3e:e9:9d:af:f4: cc:98:9a:8f:2e:3b:bb:80:76:bc:ab:34:09:8f:03:96:7a:65: ce:84:29:25:71:a6:97:fa:89:44:95:d2:82:57:52:66:7d:56: 62:f6:82:87:b0:1b:c6:54:76:ce:ac:06:53:cc:dc:54:39:a7: f7:56:7c:ee:31:e9:3b:78:60:04:02:23:56:2a:22:a2:4f:92: 88:ad:ef:d3:38:70:31:82:27:10:d6:95:d5:07:49:cd:6a:39: b7:bc:02:ad:82:84:b2:81:54:b5:c1:95:ae:44:5c:77:1d:25: db:97:26:80:7b:cf:a6:cf:9c:f4:6d:a5:05:c6:0b:98:14:7f: 91:c9:6d:1d:7c:cc:58:2d:14:34:85:b8:b0:0d:9c:d0:03:96: b0:52:68:83:a1:d9:8b:51:8c:23:f4:73:b9:89:6e:57:36:fb: ce:ad:08:4a -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUCZxpQ01/gHego5x23gPyaNV0ndgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUwNjA2NTUwMFoX DTI2MDUwNTA3MDAwMFowMzExMC8GA1UEAxMoRDY0NDk1NENENUYwRTAzREU3QUM3 MzQwQzU2NEYwMzkzMzVFMzc2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHSUyk14/eAekmxqrxhEdyENKRGzxVv97rxvEZMQJDtHkpdbwASagCAjNM8 nl2yC+4EYMJjHm3NKLcyCJ4UhEUIJT4579LH3qRBo/afdiM1og0D6Zr/6PooNShs p1vnUkk2urnqTP/mZxIVvBOe5lgMdqH0cmEuJwka9YBHkAj3Gzpl9KuYbGxmQkn+ KEvD/t6hl+i+xV6LjlXCjRj4sSWz9GUURJ4hTrLEEQUiILeBwwwfQJAXOZMOXIaR +3IyUziTfcjZkNINtf0rFjAsO97HJeFN3CYRHrEOjMqKLj04hAB0l6Erd1qInHQC IPaMC31g/QDeN8yMGGxu3IuYJw0CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBTWRJVM 1fDgPeesc0DFZPA5M143aDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDI0MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfGmwDANBgkqhkiG9w0BAQsFAAOCAQEAk3o5cpl3e74oQTlJ vHtPsk7G0r5/3aNiKR3z0m2i0YVmXx2p2Uq9dGHkhZdckFHWQSS4/JswqOqDbzS6 QFfR+UuZLD1PMFiwucElqFvfudXGFmVZij7pna/0zJiajy47u4B2vKs0CY8Dlnpl zoQpJXGml/qJRJXSgldSZn1WYvaCh7AbxlR2zqwGU8zcVDmn91Z87jHpO3hgBAIj Vioiok+SiK3v0zhwMYInENaV1QdJzWo5t7wCrYKEsoFUtcGVrkRcdx0l25cmgHvP ps+c9G2lBcYLmBR/kcltHXzMWC0UNIW4sA2c0AOWsFJog6HZi1GMI/RzuYluVzb7 zq0ISg== -----END CERTIFICATE-----Generated at Sun Jun 8 01:41:25 2025 by rpki-client