$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150554.roa File: AS150554.roa (raw, json) Hash identifier: kauU5DmLOMQfhXfl/BRzFds/2fm4BH0UughGZ6ZqbtQ= Subject key identifier: F3:1B:BE:C5:F6:F4:38:87:C9:9F:66:19:20:17:70:EF:01:F0:F7:E8 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0A38F9BC5F68294CAC5714D43E53A56AE560B794 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150554.roa Signing time: Tue 04 Feb 2025 04:00:00 +0000 ROA not before: Tue 04 Feb 2025 03:55:00 +0000 ROA not after: Tue 03 Feb 2026 04:00:00 +0000 asID: 150554 IP address blocks: 2001:df3:83c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:38:f9:bc:5f:68:29:4c:ac:57:14:d4:3e:53:a5:6a:e5:60:b7:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Feb 4 03:55:00 2025 GMT Not After : Feb 3 04:00:00 2026 GMT Subject: CN=F31BBEC5F6F43887C99F6619201770EF01F0F7E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:19:a0:1c:3b:57:22:65:df:0c:31:08:1c:9f: 4c:b1:c0:12:54:15:24:e6:8e:ec:9b:51:6a:bc:5c: 19:c1:f5:a3:a3:39:5e:b7:60:af:6e:8d:77:79:ec: e5:b9:ee:25:e5:36:29:fd:cf:d9:a1:ea:21:ed:f1: 7a:44:4a:fa:a7:03:a9:92:94:72:5c:75:59:8f:19: 6f:6c:06:ce:29:65:2f:87:a8:3c:a8:bd:3e:3e:a0: 09:14:58:90:94:36:89:8f:bd:a1:d1:aa:59:cd:1d: 6a:c5:42:24:e1:eb:12:68:32:a2:63:b0:67:0d:16: 62:5e:f9:00:1e:eb:81:61:1c:46:a2:6d:2d:89:6d: 9e:27:cd:9b:21:e8:94:11:68:c3:fb:7d:e6:a9:59: 4a:33:00:8e:97:2a:a1:4c:a7:20:ac:97:d7:21:e8: ae:15:2a:7c:11:70:12:6e:f4:75:91:95:49:0b:a1: e1:7c:70:42:5e:53:51:e7:e2:62:55:ce:20:f3:b1: b8:dd:3c:b6:1e:c9:f0:81:34:fa:a0:d8:b9:db:77: 14:46:fb:b0:c8:a1:39:a6:5b:7a:e9:67:6a:48:c1: c5:5b:d9:19:c6:df:05:5a:cb:b4:7c:c7:4f:f5:78: 20:e8:6d:04:91:8b:34:e6:20:a1:86:0c:3e:bd:14: 04:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1B:BE:C5:F6:F4:38:87:C9:9F:66:19:20:17:70:EF:01:F0:F7:E8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150554.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:83c0::/48 Signature Algorithm: sha256WithRSAEncryption 11:22:9b:84:5e:a5:49:53:0b:db:df:84:0f:41:f3:7d:65:9b: 33:f3:e6:e3:2d:3d:a2:26:61:ed:da:09:09:23:68:fa:9f:83: 99:89:5d:73:de:16:ec:73:41:e2:86:56:25:f2:46:a4:94:46: 7b:ee:13:c0:57:a8:df:29:fa:63:f5:79:e6:ed:cb:94:3d:95: 96:0d:ba:07:d3:18:e2:a8:eb:f6:d2:5b:a9:76:14:4b:c4:4d: 54:d9:e1:eb:0e:4a:d9:ab:03:de:f5:d5:aa:2f:c1:4c:7b:19: 00:01:d5:16:fe:c2:25:71:f3:68:98:ba:00:14:4f:ba:43:b4: 74:23:b8:cf:28:e3:50:f6:d4:1f:7e:2e:94:58:10:2d:be:2e: 49:6e:7e:fd:5a:79:b3:fe:a1:16:d0:30:13:80:36:fc:7a:bd: 09:65:3a:66:53:73:a9:5e:0a:e3:30:ce:ec:82:f5:79:67:9a: 13:88:ac:d9:3c:0b:68:79:70:c0:c2:5f:c2:ce:f4:7a:c7:1a: f9:e8:27:b2:fa:1e:b5:1c:24:dc:2c:2b:3b:48:d3:1c:8f:3c: 42:3d:d7:b1:56:28:55:aa:b0:24:95:2c:32:8e:a7:f1:9f:80: 67:18:25:e2:f7:57:bc:b5:10:b7:ed:3d:a0:1d:7c:c1:44:0c: db:73:5a:66 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUCjj5vF9oKUysVxTUPlOlauVgt5QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIwNDAzNTUwMFoX DTI2MDIwMzA0MDAwMFowMzExMC8GA1UEAxMoRjMxQkJFQzVGNkY0Mzg4N0M5OUY2 NjE5MjAxNzcwRUYwMUYwRjdFODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOwZoBw7VyJl3wwxCByfTLHAElQVJOaO7JtRarxcGcH1o6M5Xrdgr26Nd3ns 5bnuJeU2Kf3P2aHqIe3xekRK+qcDqZKUclx1WY8Zb2wGzillL4eoPKi9Pj6gCRRY kJQ2iY+9odGqWc0dasVCJOHrEmgyomOwZw0WYl75AB7rgWEcRqJtLYltnifNmyHo lBFow/t95qlZSjMAjpcqoUynIKyX1yHorhUqfBFwEm70dZGVSQuh4XxwQl5TUefi YlXOIPOxuN08th7J8IE0+qDYudt3FEb7sMihOaZbeulnakjBxVvZGcbfBVrLtHzH T/V4IOhtBJGLNOYgoYYMPr0UBPcCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBTzG77F 9vQ4h8mfZhkgF3DvAfD36DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDU1NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfODwDANBgkqhkiG9w0BAQsFAAOCAQEAESKbhF6lSVML29+E D0HzfWWbM/Pm4y09oiZh7doJCSNo+p+DmYldc94W7HNB4oZWJfJGpJRGe+4TwFeo 3yn6Y/V55u3LlD2Vlg26B9MY4qjr9tJbqXYUS8RNVNnh6w5K2asD3vXVqi/BTHsZ AAHVFv7CJXHzaJi6ABRPukO0dCO4zyjjUPbUH34ulFgQLb4uSW5+/Vp5s/6hFtAw E4A2/Hq9CWU6ZlNzqV4K4zDO7IL1eWeaE4is2TwLaHlwwMJfws70esca+egnsvoe tRwk3CwrO0jTHI88Qj3XsVYoVaqwJJUsMo6n8Z+AZxgl4vdXvLUQt+09oB18wUQM 23NaZg== -----END CERTIFICATE-----Generated at Sat Apr 5 06:24:34 2025 by rpki-client