$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150487.roa File: AS150487.roa (raw, json) Hash identifier: BAhUTZo1209KE9aiaM64AtZyV9hUfVBNwoukHiJ5LyY= Subject key identifier: 0B:D1:40:5C:F9:24:66:A6:FB:64:BF:8B:45:2B:2F:2D:E9:6C:89:10 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3AAD50DEFE4675B7CAFAE3380E37707362AE98E0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150487.roa Signing time: Fri 08 Nov 2024 07:00:00 +0000 ROA not before: Fri 08 Nov 2024 06:55:00 +0000 ROA not after: Fri 07 Nov 2025 07:00:00 +0000 asID: 150487 IP address blocks: 2001:df1:b9c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ad:50:de:fe:46:75:b7:ca:fa:e3:38:0e:37:70:73:62:ae:98:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 8 06:55:00 2024 GMT Not After : Nov 7 07:00:00 2025 GMT Subject: CN=0BD1405CF92466A6FB64BF8B452B2F2DE96C8910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7b:c1:c6:0a:4e:32:73:02:af:a3:b7:78:1b: d4:5a:55:ef:1f:0f:b6:f1:a5:5d:d1:89:07:0b:81: 6b:4a:ac:c7:c5:df:e9:8d:0c:39:83:41:d7:c0:d2: 82:e7:b3:a4:66:cf:52:6a:00:9b:37:41:7c:a4:95: 96:31:67:2b:dc:c8:a7:af:d8:8a:02:98:4a:47:c1: 4e:5f:d7:32:98:0a:b5:14:54:4c:e9:8c:c8:fb:c8: 22:56:b4:48:21:be:75:cb:72:27:e9:1b:d4:96:aa: 86:8b:13:16:8a:ed:d6:34:96:4c:b6:3f:57:2e:99: 84:1a:92:af:34:70:47:d7:88:7f:22:cf:ef:df:55: 59:fd:82:ac:3e:4f:78:d5:4d:9c:ef:32:22:d7:60: 5c:26:20:f4:36:2c:37:ea:13:28:78:e5:b1:30:45: 49:a2:3c:2a:b1:e5:0d:36:1b:e3:92:c2:69:f0:de: 20:58:44:6b:0e:12:74:8c:ab:02:ce:f7:2e:05:44: 34:27:08:88:5d:32:5e:6f:84:e3:25:40:8c:24:14: 3a:36:b9:8b:4d:e9:17:55:bd:89:76:95:93:af:50: 2e:ae:82:f5:bc:c4:2e:46:46:41:90:68:60:8f:01: 14:54:0a:9c:15:57:fd:ea:4c:04:94:1b:c7:35:65: a2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D1:40:5C:F9:24:66:A6:FB:64:BF:8B:45:2B:2F:2D:E9:6C:89:10 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150487.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:b9c0::/48 Signature Algorithm: sha256WithRSAEncryption 7b:9c:f2:40:60:a0:23:16:6f:d4:44:2a:ca:82:9d:1e:47:e7: 94:77:ed:af:f7:d9:43:86:e1:73:ba:39:50:f9:3c:6e:47:cc: c9:2a:9e:a5:b6:1a:3d:08:83:70:b5:1b:8b:43:d0:14:c6:fb: df:e1:10:ef:fc:10:f0:45:3e:a9:3b:99:80:31:5f:89:ab:9b: 17:ec:c1:11:ea:95:bf:1b:ef:70:1b:24:94:c7:73:e9:81:b8: 59:13:6b:e2:42:28:65:95:d6:49:cd:f3:d7:b0:ed:99:00:c0: a0:8c:cc:f0:5a:76:c7:81:66:ef:09:09:b9:40:23:df:13:dc: 0f:65:1d:0a:de:f1:ea:e3:8b:87:c0:22:0f:46:c0:20:38:3b: 94:75:fe:25:7b:85:06:47:1b:8c:6b:2e:c7:3b:f3:7d:b3:9a: cf:50:87:c3:90:83:a8:ac:b4:51:8a:ee:8a:bf:07:aa:50:fa: 0b:0e:4f:5a:aa:c5:e1:de:a4:30:6e:76:54:5a:47:6b:40:cc: 97:fe:0d:42:09:b8:cd:38:7b:41:a3:6b:a2:17:5b:c2:ce:6a: 3d:3b:54:a8:e8:bc:22:a1:b1:be:ea:bd:b2:c6:b1:28:9e:1e: a0:1e:8e:b1:b6:a9:c4:55:1c:3b:dd:2c:21:e4:33:8d:08:36: ce:70:41:c0 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUOq1Q3v5GdbfK+uM4Djdwc2KumOAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTEwODA2NTUwMFoX DTI1MTEwNzA3MDAwMFowMzExMC8GA1UEAxMoMEJEMTQwNUNGOTI0NjZBNkZCNjRC RjhCNDUyQjJGMkRFOTZDODkxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMB7wcYKTjJzAq+jt3gb1FpV7x8PtvGlXdGJBwuBa0qsx8Xf6Y0MOYNB18DS guezpGbPUmoAmzdBfKSVljFnK9zIp6/YigKYSkfBTl/XMpgKtRRUTOmMyPvIIla0 SCG+dctyJ+kb1JaqhosTFort1jSWTLY/Vy6ZhBqSrzRwR9eIfyLP799VWf2CrD5P eNVNnO8yItdgXCYg9DYsN+oTKHjlsTBFSaI8KrHlDTYb45LCafDeIFhEaw4SdIyr As73LgVENCcIiF0yXm+E4yVAjCQUOja5i03pF1W9iXaVk69QLq6C9bzELkZGQZBo YI8BFFQKnBVX/epMBJQbxzVlovUCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQL0UBc +SRmpvtkv4tFKy8t6WyJEDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDQ4Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfG5wDANBgkqhkiG9w0BAQsFAAOCAQEAe5zyQGCgIxZv1EQq yoKdHkfnlHftr/fZQ4bhc7o5UPk8bkfMySqepbYaPQiDcLUbi0PQFMb73+EQ7/wQ 8EU+qTuZgDFfiaubF+zBEeqVvxvvcBsklMdz6YG4WRNr4kIoZZXWSc3z17DtmQDA oIzM8Fp2x4Fm7wkJuUAj3xPcD2UdCt7x6uOLh8AiD0bAIDg7lHX+JXuFBkcbjGsu xzvzfbOaz1CHw5CDqKy0UYruir8HqlD6Cw5PWqrF4d6kMG52VFpHa0DMl/4NQgm4 zTh7QaNrohdbws5qPTtUqOi8IqGxvuq9ssaxKJ4eoB6OsbapxFUcO90sIeQzjQg2 znBBwA== -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:57 2024 by rpki-client on console-fra.rpki-client.org