$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150493.roa File: AS150493.roa (raw, json) Hash identifier: 9P8cnpqVgZrkzouGAs8VGVJcPOcEohG0NxrRv22bMfo= Subject key identifier: 68:A9:D0:CE:E6:15:C4:6F:78:3D:F4:BF:01:46:6C:FA:A3:FD:49:99 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5761CAE37C7C5857AFB7BF3689AEDDFCB2E10BC2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150493.roa Signing time: Mon 28 Oct 2024 05:00:00 +0000 ROA not before: Mon 28 Oct 2024 04:55:00 +0000 ROA not after: Mon 27 Oct 2025 05:00:00 +0000 asID: 150493 IP address blocks: 2001:df1:e8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:61:ca:e3:7c:7c:58:57:af:b7:bf:36:89:ae:dd:fc:b2:e1:0b:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 28 04:55:00 2024 GMT Not After : Oct 27 05:00:00 2025 GMT Subject: CN=68A9D0CEE615C46F783DF4BF01466CFAA3FD4999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ba:7b:f3:33:7d:50:be:18:ea:9f:11:d2:12: e5:44:e1:b8:15:d5:1c:0d:f1:ac:dc:ca:62:4a:91: d2:e9:1c:60:bd:7d:2e:6d:bb:46:f9:50:70:de:a6: f0:9b:9d:f1:64:28:55:7d:a3:57:f2:db:60:b3:d8: ae:05:ac:41:72:55:3b:33:2c:74:40:a6:08:b4:ae: e4:2d:da:18:7a:24:a2:20:58:8b:e1:16:fd:3f:e5: 13:93:5f:2b:61:f5:00:42:d1:4b:55:f4:a0:5a:9d: 5e:85:49:c8:2e:c9:49:96:82:6e:60:9a:c6:cd:1d: da:95:1c:29:c6:c9:08:e7:86:b4:73:3b:75:9b:f9: 47:07:56:ff:69:6f:cf:8c:3d:e6:bf:8a:d0:c4:11: 4e:03:77:1a:64:e8:d2:d5:76:e3:68:6c:72:df:e1: c9:27:7e:3a:82:0e:45:aa:e7:55:7a:69:ac:4a:1c: 94:41:49:d2:56:fb:ba:69:60:8b:d0:34:25:2e:37: a4:5d:b0:12:85:a0:8d:52:17:58:75:b1:80:aa:48: 83:53:f8:37:70:f2:12:58:73:dc:2b:5d:8d:b0:1c: 12:e3:4e:17:36:9c:d9:04:4f:01:de:02:3c:ac:01: ce:9a:58:4b:aa:42:e3:c4:cd:dc:f2:e7:3f:7a:a2: 72:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A9:D0:CE:E6:15:C4:6F:78:3D:F4:BF:01:46:6C:FA:A3:FD:49:99 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150493.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:e8c0::/48 Signature Algorithm: sha256WithRSAEncryption 44:3a:36:93:51:8c:2f:82:a7:99:44:3e:15:d4:57:6f:fb:50: 67:e5:c2:4c:bd:91:b5:aa:3c:26:70:45:98:88:91:27:e8:f8: 96:48:bd:f6:c0:e3:a1:31:1d:c3:4f:c2:61:eb:7f:11:8e:c0: 44:ec:23:6d:ec:fb:94:eb:1e:a1:64:54:af:fb:08:1a:62:86: 61:7d:70:70:0d:c6:3f:15:f4:19:64:84:fa:8f:0e:6b:7b:93: 21:65:03:bf:84:dd:09:22:b1:ef:29:d3:34:02:f5:35:23:6b: 6b:0f:41:f8:67:84:78:72:70:5e:2f:d8:b3:e5:46:5c:35:2e: cc:da:f3:bd:18:11:c7:65:06:49:f2:82:88:cb:bf:9b:c2:57: 6a:ca:a8:19:12:13:57:0a:43:7c:d2:e2:f4:8a:c5:15:ca:c8: 0c:3d:2b:4e:3a:94:0f:fa:f4:b4:53:36:4b:05:32:a5:e3:71: e8:d9:3c:7e:60:ba:0b:7f:63:c9:8c:53:dd:cd:85:81:0d:da: 6b:59:de:ae:26:de:a6:f7:ec:2a:a5:3a:6f:79:09:d8:3a:0d: 0c:90:79:72:b9:f1:51:a2:40:44:8c:21:c7:2b:47:91:83:bd: f6:17:0a:97:5d:50:c8:8e:b1:dc:f7:bb:d9:7d:3d:01:19:e4: 02:83:07:1b -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUV2HK43x8WFevt782ia7d/LLhC8IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAyODA0NTUwMFoX DTI1MTAyNzA1MDAwMFowMzExMC8GA1UEAxMoNjhBOUQwQ0VFNjE1QzQ2Rjc4M0RG NEJGMDE0NjZDRkFBM0ZENDk5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALm6e/MzfVC+GOqfEdIS5UThuBXVHA3xrNzKYkqR0ukcYL19Lm27RvlQcN6m 8Jud8WQoVX2jV/LbYLPYrgWsQXJVOzMsdECmCLSu5C3aGHokoiBYi+EW/T/lE5Nf K2H1AELRS1X0oFqdXoVJyC7JSZaCbmCaxs0d2pUcKcbJCOeGtHM7dZv5RwdW/2lv z4w95r+K0MQRTgN3GmTo0tV242hsct/hySd+OoIORarnVXpprEoclEFJ0lb7umlg i9A0JS43pF2wEoWgjVIXWHWxgKpIg1P4N3DyElhz3CtdjbAcEuNOFzac2QRPAd4C PKwBzppYS6pC48TN3PLnP3qicusCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBRoqdDO 5hXEb3g99L8BRmz6o/1JmTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDQ5My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfHowDANBgkqhkiG9w0BAQsFAAOCAQEARDo2k1GML4KnmUQ+ FdRXb/tQZ+XCTL2Rtao8JnBFmIiRJ+j4lki99sDjoTEdw0/CYet/EY7AROwjbez7 lOseoWRUr/sIGmKGYX1wcA3GPxX0GWSE+o8Oa3uTIWUDv4TdCSKx7ynTNAL1NSNr aw9B+GeEeHJwXi/Ys+VGXDUuzNrzvRgRx2UGSfKCiMu/m8JXasqoGRITVwpDfNLi 9IrFFcrIDD0rTjqUD/r0tFM2SwUypeNx6Nk8fmC6C39jyYxT3c2FgQ3aa1neribe pvfsKqU6b3kJ2DoNDJB5crnxUaJARIwhxytHkYO99hcKl11QyI6x3Pe72X09ARnk AoMHGw== -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:29 2024 by rpki-client on console-ams.rpki-client.org