$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150554.roa File: AS150554.roa (raw, json) Hash identifier: /mwj31+VMmxpTD23SeEhpU0i/eloHOkkY6Tq2JS2sFw= Subject key identifier: D8:38:16:79:0C:65:D6:E2:63:64:66:4D:FD:FE:6E:DD:E1:77:7B:F9 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1B977750289658E0918F8FCD910057882ABB427C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150554.roa Signing time: Tue 05 Mar 2024 03:01:12 +0000 ROA not before: Tue 05 Mar 2024 02:56:12 +0000 ROA not after: Tue 04 Mar 2025 03:01:12 +0000 asID: 150554 IP address blocks: 2001:df3:83c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:97:77:50:28:96:58:e0:91:8f:8f:cd:91:00:57:88:2a:bb:42:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 5 02:56:12 2024 GMT Not After : Mar 4 03:01:12 2025 GMT Subject: CN=D83816790C65D6E26364664DFDFE6EDDE1777BF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:51:b2:7b:6c:c8:3a:08:04:0c:b6:2b:3c:5c: dc:8d:6c:f8:d9:5e:23:f8:bc:06:77:16:36:d5:1a: b9:2d:d3:36:8f:b7:ca:ee:e3:45:b2:76:dd:83:3f: 20:c3:ed:44:ea:7c:04:c3:75:4c:34:84:f5:33:de: 72:7e:8f:96:85:0e:86:1b:2c:c8:d9:02:0a:bb:14: 92:bb:12:a5:b6:86:5e:46:86:75:89:89:31:b7:bf: aa:79:e3:c7:1e:e2:6f:23:08:9c:07:2b:1c:72:90: 35:38:02:8c:db:37:73:e2:78:f9:1f:d5:fb:bd:63: e4:9d:40:43:c3:42:d2:d4:84:4b:9f:e4:b1:45:85: 27:a0:a2:c8:da:3b:f7:a8:96:c3:fc:4f:79:df:5b: 0d:ea:8d:b5:fc:65:62:cc:4e:eb:ac:11:58:02:30: ba:47:29:13:21:85:11:af:72:3f:bf:de:59:6f:61: 9f:9f:d3:f9:11:98:6b:56:0b:4b:49:13:15:21:79: 04:93:af:4e:3c:99:00:0d:fe:bb:93:b5:0f:50:83: 3c:75:f1:33:21:df:ca:b5:09:ad:1b:90:6a:01:35: cf:7e:31:1e:80:27:71:18:de:7e:e7:d2:65:cf:a4: 3b:87:8c:a7:3a:c5:5f:49:05:60:28:82:d5:1a:b5: 81:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:38:16:79:0C:65:D6:E2:63:64:66:4D:FD:FE:6E:DD:E1:77:7B:F9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150554.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:83c0::/48 Signature Algorithm: sha256WithRSAEncryption 87:50:8c:1d:00:eb:94:ae:0c:fd:77:d8:65:f4:9a:4e:dd:20: 8b:2c:32:a2:81:7c:c5:4b:52:32:62:21:9e:46:a1:4f:f6:51: 48:e6:c5:21:72:f6:92:8a:fb:3c:5d:a8:7b:6d:17:39:a1:f6: 51:e7:39:ee:ea:c8:b4:a0:d1:af:77:26:01:a4:86:dc:8e:6b: c6:f7:0b:c6:59:2d:5a:d3:85:00:42:50:c8:e2:ca:d6:cc:36: 6a:62:e5:e1:34:d5:38:3f:69:19:55:49:a4:bc:e5:94:48:4a: 91:cd:4d:40:e7:5b:a4:77:9b:33:23:71:5d:65:01:ff:37:e5: f7:7d:8e:1b:67:14:c6:1b:26:6a:0d:6e:37:a2:28:9d:17:53: 35:42:b6:d7:1c:0b:ba:47:13:5e:8a:39:b1:a6:e1:74:78:b6: b7:e9:1f:67:c1:ae:3b:71:3d:17:c8:de:74:28:95:8f:ce:47: af:bb:50:dc:ff:90:f2:d7:3d:e9:4d:e1:9c:8f:6b:e8:78:58: ea:dd:17:a3:d1:2c:68:cf:a1:df:89:ed:34:c9:1f:51:91:fd: a8:79:12:91:aa:c0:be:3e:db:13:b9:69:bd:1c:61:7e:3c:a6: 9f:b5:88:93:b7:49:54:81:4d:7b:cd:50:a3:9f:d2:e1:09:75: 27:1b:17:2a -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUG5d3UCiWWOCRj4/NkQBXiCq7QnwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMwNTAyNTYxMloX DTI1MDMwNDAzMDExMlowMzExMC8GA1UEAxMoRDgzODE2NzkwQzY1RDZFMjYzNjQ2 NjRERkRGRTZFRERFMTc3N0JGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANNRsntsyDoIBAy2Kzxc3I1s+NleI/i8BncWNtUauS3TNo+3yu7jRbJ23YM/ IMPtROp8BMN1TDSE9TPecn6PloUOhhssyNkCCrsUkrsSpbaGXkaGdYmJMbe/qnnj xx7ibyMInAcrHHKQNTgCjNs3c+J4+R/V+71j5J1AQ8NC0tSES5/ksUWFJ6CiyNo7 96iWw/xPed9bDeqNtfxlYsxO66wRWAIwukcpEyGFEa9yP7/eWW9hn5/T+RGYa1YL S0kTFSF5BJOvTjyZAA3+u5O1D1CDPHXxMyHfyrUJrRuQagE1z34xHoAncRjefufS Zc+kO4eMpzrFX0kFYCiC1Rq1gb0CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBTYOBZ5 DGXW4mNkZk39/m7d4Xd7+TAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDU1NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfODwDANBgkqhkiG9w0BAQsFAAOCAQEAh1CMHQDrlK4M/XfY ZfSaTt0giywyooF8xUtSMmIhnkahT/ZRSObFIXL2kor7PF2oe20XOaH2Uec57urI tKDRr3cmAaSG3I5rxvcLxlktWtOFAEJQyOLK1sw2amLl4TTVOD9pGVVJpLzllEhK kc1NQOdbpHebMyNxXWUB/zfl932OG2cUxhsmag1uN6IonRdTNUK21xwLukcTXoo5 sabhdHi2t+kfZ8GuO3E9F8jedCiVj85Hr7tQ3P+Q8tc96U3hnI9r6HhY6t0Xo9Es aM+h34ntNMkfUZH9qHkSkarAvj7bE7lpvRxhfjymn7WIk7dJVIFNe81Qo5/S4Ql1 JxsXKg== -----END CERTIFICATE-----Generated at Wed May 8 18:12:17 2024 by rpki-client on console-fra.rpki-client.org