$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150478.roa File: AS150478.roa (raw, json) Hash identifier: 14PxIDd5HTDSUBYbBwo4O4NL1T06tpqGeK4xnvFI5RQ= Subject key identifier: 7F:D9:98:37:3B:80:3F:C2:86:32:4F:33:0A:12:0C:BD:62:91:66:1C Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 030D88AC5795C077583F21ED5E2BCAF201A6D2A1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150478.roa Signing time: Fri 22 Dec 2023 07:18:14 +0000 ROA not before: Fri 22 Dec 2023 07:13:14 +0000 ROA not after: Fri 20 Dec 2024 07:18:14 +0000 asID: 150478 IP address blocks: 180.131.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:0d:88:ac:57:95:c0:77:58:3f:21:ed:5e:2b:ca:f2:01:a6:d2:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 22 07:13:14 2023 GMT Not After : Dec 20 07:18:14 2024 GMT Subject: CN=7FD998373B803FC286324F330A120CBD6291661C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:65:99:5f:c4:71:ed:fc:00:e3:f0:88:90:96: 04:46:dc:51:27:8e:b5:fd:4d:7e:24:f6:a1:c2:dd: db:e7:b0:07:4a:fe:87:36:39:8c:9d:a0:bb:51:73: 22:f6:1f:82:be:67:6f:71:d3:21:9d:b6:67:95:14: 67:b5:87:4b:ae:04:60:94:04:a0:23:cc:78:fa:f8: a5:b8:8f:e8:d8:fb:41:45:8a:36:31:6f:37:af:a8: 52:25:32:2f:37:02:ef:7a:bd:9a:fa:83:99:29:4c: d1:5f:b7:44:00:53:d1:33:e1:3f:ca:73:bb:7f:66: 3c:bd:03:d2:c4:ba:1f:b3:88:72:93:85:07:62:3a: d0:a8:85:2b:40:25:de:7d:89:b9:9b:5d:1a:77:cc: 52:b0:24:c0:03:76:7d:02:47:1b:f6:e7:a2:9d:5b: 1e:db:37:a7:39:88:50:b5:f1:8b:d1:de:29:ce:97: 9b:16:f5:f4:9f:53:53:4b:d9:03:dc:38:b2:91:eb: b2:a7:5d:a7:c2:c6:fd:44:c8:c3:4a:2a:16:5c:b7: eb:63:84:83:d5:3c:9d:c7:49:5f:b9:34:ab:d9:5e: 80:1e:7a:c7:89:41:02:e2:01:3b:e6:4a:15:45:5b: 5f:db:74:c9:71:9b:f2:df:5c:6d:dc:f1:6a:d2:62: 7a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D9:98:37:3B:80:3F:C2:86:32:4F:33:0A:12:0C:BD:62:91:66:1C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150478.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.131.131.0/24 Signature Algorithm: sha256WithRSAEncryption 07:a3:64:8e:9a:21:fd:27:cc:0a:e9:23:be:09:2b:d4:2f:18: e9:a4:77:50:9f:c7:dc:cb:d7:56:8b:04:34:3b:eb:1e:38:23: 27:ba:2c:47:64:0a:cc:53:f4:ab:09:6e:fe:be:10:be:04:25: 2e:d0:29:9b:01:f9:ef:b8:50:40:97:cc:ad:34:4a:f4:d3:15: 8b:ff:98:51:cd:85:2a:cb:4a:1c:2a:42:e8:e4:ca:34:39:f1: 28:2b:7f:a0:13:7b:c6:5a:a7:b9:3d:21:75:9e:de:3e:86:3f: 49:d4:7e:6a:db:d0:88:26:fc:4a:42:44:6d:de:97:05:47:3a: 84:71:e2:07:80:74:b3:db:82:04:4b:81:53:4b:fc:5b:3d:53: d5:ab:0a:cf:37:e5:71:0f:56:97:e3:04:cd:8d:88:53:c9:ec: 26:77:d6:99:d6:0b:3f:94:90:a5:87:32:95:ad:c8:15:29:29: d3:4a:ec:d3:20:11:e7:86:57:73:d7:53:b3:54:8d:ba:ae:0a: 1e:51:12:25:4f:cf:c3:da:29:9e:37:08:9a:a6:92:1a:87:9c: d6:6a:9e:93:75:08:8d:cb:a5:b1:f4:77:cc:4b:c5:c9:e8:e4: b7:10:ad:e1:c0:50:ea:06:5a:ff:08:ff:ec:6a:ca:2c:2a:82: 96:23:e8:bf -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUAw2IrFeVwHdYPyHtXivK8gGm0qEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIyMjA3MTMxNFoX DTI0MTIyMDA3MTgxNFowMzExMC8GA1UEAxMoN0ZEOTk4MzczQjgwM0ZDMjg2MzI0 RjMzMEExMjBDQkQ2MjkxNjYxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK5lmV/Ece38AOPwiJCWBEbcUSeOtf1NfiT2ocLd2+ewB0r+hzY5jJ2gu1Fz IvYfgr5nb3HTIZ22Z5UUZ7WHS64EYJQEoCPMePr4pbiP6Nj7QUWKNjFvN6+oUiUy LzcC73q9mvqDmSlM0V+3RABT0TPhP8pzu39mPL0D0sS6H7OIcpOFB2I60KiFK0Al 3n2JuZtdGnfMUrAkwAN2fQJHG/bnop1bHts3pzmIULXxi9HeKc6Xmxb19J9TU0vZ A9w4spHrsqddp8LG/UTIw0oqFly362OEg9U8ncdJX7k0q9legB56x4lBAuIBO+ZK FUVbX9t0yXGb8t9cbdzxatJiehkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBR/2Zg3 O4A/woYyTzMKEgy9YpFmHDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDQ3OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEALSDgzANBgkqhkiG9w0BAQsFAAOCAQEAB6Nkjpoh/SfMCukjvgkr 1C8Y6aR3UJ/H3MvXVosENDvrHjgjJ7osR2QKzFP0qwlu/r4QvgQlLtApmwH577hQ QJfMrTRK9NMVi/+YUc2FKstKHCpC6OTKNDnxKCt/oBN7xlqnuT0hdZ7ePoY/SdR+ atvQiCb8SkJEbd6XBUc6hHHiB4B0s9uCBEuBU0v8Wz1T1asKzzflcQ9Wl+MEzY2I U8nsJnfWmdYLP5SQpYcyla3IFSkp00rs0yAR54ZXc9dTs1SNuq4KHlESJU/Pw9op njcImqaSGoec1mqek3UIjculsfR3zEvFyejktxCt4cBQ6gZa/wj/7GrKLCqCliPo vw== -----END CERTIFICATE-----Generated at Tue May 7 18:07:19 2024 by rpki-client on console-fra.rpki-client.org