$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150487.roa File: AS150487.roa (raw, json) Hash identifier: R1Mg8WnsUq12g8w96fh2m3g0vtPu887Qm/SPvIVRHb8= Subject key identifier: 8E:2C:87:02:4A:F3:5A:12:DA:46:65:2C:32:5C:79:2D:B3:0B:E5:38 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 13BDDED2374B46CCB052EA19895BFBC40B9D7FBD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150487.roa Signing time: Fri 08 Dec 2023 07:00:00 +0000 ROA not before: Fri 08 Dec 2023 06:55:00 +0000 ROA not after: Fri 06 Dec 2024 07:00:00 +0000 asID: 150487 IP address blocks: 2001:df1:b9c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:bd:de:d2:37:4b:46:cc:b0:52:ea:19:89:5b:fb:c4:0b:9d:7f:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 8 06:55:00 2023 GMT Not After : Dec 6 07:00:00 2024 GMT Subject: CN=8E2C87024AF35A12DA46652C325C792DB30BE538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:70:6c:10:ab:e2:66:5b:97:ec:20:98:0b:6b: da:22:81:cd:9f:18:28:6f:99:dd:6d:62:26:e3:48: 46:74:3f:c5:21:d3:4b:95:99:f3:e7:7b:93:40:f1: 69:09:3e:2c:07:29:e4:62:5b:27:f1:ef:58:f9:9c: 06:a6:f6:af:ba:d8:d6:de:30:eb:49:99:d9:50:a7: 35:96:4f:ba:18:15:17:3b:16:d2:b2:3c:7b:b6:5f: 97:e8:ff:6d:6e:d6:95:dd:f6:3a:74:05:dc:5a:2a: c4:a7:2f:d0:8f:76:3a:72:e0:0d:fc:29:19:96:51: 7d:2c:eb:8d:2b:00:a1:98:8c:17:86:82:f8:1f:dc: 3d:30:0f:9e:7f:9b:38:37:e7:42:68:cd:78:41:de: 00:56:5a:bd:97:ab:64:27:c9:8d:49:a6:e7:d4:53: 9d:a3:48:24:ac:ac:34:d1:e5:3a:ff:09:d3:10:96: 68:f8:1b:e9:ad:5b:b8:8d:47:56:0c:be:8f:ac:b6: bf:b6:0e:45:95:51:c0:7f:21:60:0b:86:28:94:39: c5:8b:8d:87:5c:c0:02:e9:dd:5c:4b:3a:de:4a:b9: 01:12:c0:de:a5:9b:df:17:4d:12:59:8d:ad:d8:34: e4:57:fd:ff:b6:be:67:06:74:ca:e1:fb:66:08:c3: 69:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2C:87:02:4A:F3:5A:12:DA:46:65:2C:32:5C:79:2D:B3:0B:E5:38 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150487.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:b9c0::/48 Signature Algorithm: sha256WithRSAEncryption 2b:01:59:07:06:07:4a:39:54:0e:26:7b:d0:11:53:08:7c:6f: 60:71:c3:11:6e:0a:df:e1:45:67:77:e0:a7:dc:f9:e9:72:a6: f0:f9:a1:c2:ff:f8:c5:6e:ec:56:00:90:6a:4b:d7:eb:35:12: 4d:b7:9c:00:db:c9:d0:6d:5a:46:1f:89:5c:a1:8f:b5:11:5e: 73:27:60:8b:2f:25:67:a1:78:18:c3:93:21:2f:68:ce:4d:83: 80:9d:55:25:14:26:bf:8f:11:c0:38:2a:1c:b5:96:a3:62:f4: d9:f5:39:ad:9b:1a:75:5d:e8:f5:d0:7a:3d:a6:9c:e8:16:91: 3e:f4:84:52:93:b5:19:4d:cb:27:f7:0a:c3:c3:74:23:ee:52: 2a:d4:02:c6:ef:d4:7a:87:48:5e:49:50:3c:7a:ea:a8:c6:71: 38:fe:d5:75:e2:52:26:17:06:ca:0c:76:9a:ce:00:62:6b:75: 40:bb:3d:c8:4c:8f:dd:cb:f7:56:63:49:08:a2:16:72:37:ea: e2:d7:2f:fc:ff:50:36:6e:16:ed:d9:d9:f4:16:da:ca:a6:9f: fb:86:52:63:8f:1c:3e:ea:42:e0:f1:55:aa:55:90:35:42:d5: b0:9f:42:8a:f6:f7:42:10:29:20:8b:dc:e2:d6:99:39:b0:ea: 59:25:7f:ea -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUE73e0jdLRsywUuoZiVv7xAudf70wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIwODA2NTUwMFoX DTI0MTIwNjA3MDAwMFowMzExMC8GA1UEAxMoOEUyQzg3MDI0QUYzNUExMkRBNDY2 NTJDMzI1Qzc5MkRCMzBCRTUzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANhwbBCr4mZbl+wgmAtr2iKBzZ8YKG+Z3W1iJuNIRnQ/xSHTS5WZ8+d7k0Dx aQk+LAcp5GJbJ/HvWPmcBqb2r7rY1t4w60mZ2VCnNZZPuhgVFzsW0rI8e7Zfl+j/ bW7Wld32OnQF3FoqxKcv0I92OnLgDfwpGZZRfSzrjSsAoZiMF4aC+B/cPTAPnn+b ODfnQmjNeEHeAFZavZerZCfJjUmm59RTnaNIJKysNNHlOv8J0xCWaPgb6a1buI1H Vgy+j6y2v7YORZVRwH8hYAuGKJQ5xYuNh1zAAundXEs63kq5ARLA3qWb3xdNElmN rdg05Ff9/7a+ZwZ0yuH7ZgjDaSMCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBSOLIcC SvNaEtpGZSwyXHktswvlODAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDQ4Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfG5wDANBgkqhkiG9w0BAQsFAAOCAQEAKwFZBwYHSjlUDiZ7 0BFTCHxvYHHDEW4K3+FFZ3fgp9z56XKm8Pmhwv/4xW7sVgCQakvX6zUSTbecANvJ 0G1aRh+JXKGPtRFecydgiy8lZ6F4GMOTIS9ozk2DgJ1VJRQmv48RwDgqHLWWo2L0 2fU5rZsadV3o9dB6Paac6BaRPvSEUpO1GU3LJ/cKw8N0I+5SKtQCxu/UeodIXklQ PHrqqMZxOP7VdeJSJhcGygx2ms4AYmt1QLs9yEyP3cv3VmNJCKIWcjfq4tcv/P9Q Nm4W7dnZ9Bbayqaf+4ZSY48cPupC4PFVqlWQNULVsJ9Civb3QhApIIvc4taZObDq WSV/6g== -----END CERTIFICATE-----Generated at Tue May 7 18:07:19 2024 by rpki-client on console-fra.rpki-client.org