$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150992.roa File: AS150992.roa (raw, json) Hash identifier: +eucDVX740pW7ani7y165y88lAEvWqfeJoCuDU/Fsw8= Subject key identifier: 52:42:DB:AD:77:EF:8E:22:7F:CA:6E:DB:0C:81:F3:23:61:EC:82:11 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 141F0C87A9612E677FBD74F5DB94CC2EEECDD87F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150992.roa Signing time: Wed 10 Jul 2024 02:39:47 +0000 ROA not before: Wed 10 Jul 2024 02:34:47 +0000 ROA not after: Wed 09 Jul 2025 02:39:47 +0000 asID: 150992 IP address blocks: 2001:df2:b040::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:1f:0c:87:a9:61:2e:67:7f:bd:74:f5:db:94:cc:2e:ee:cd:d8:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jul 10 02:34:47 2024 GMT Not After : Jul 9 02:39:47 2025 GMT Subject: CN=5242DBAD77EF8E227FCA6EDB0C81F32361EC8211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:72:39:ce:1a:6b:8a:8a:37:59:2f:c7:f7:4d: 3f:be:60:70:7d:be:d3:a5:94:f0:8c:e3:ef:ba:95: a6:26:0e:a3:38:c9:42:03:36:94:9e:a8:ee:b7:ce: de:b1:2a:51:72:53:2b:ae:80:90:90:49:bf:be:67: 90:97:94:fa:8c:e6:59:8b:54:a8:ad:9b:8f:fb:25: d3:87:4b:e0:92:f8:45:0d:fc:86:45:63:58:6a:82: b1:35:51:db:8a:d3:c0:f5:4a:e0:6d:9e:6c:9b:77: a3:38:61:ec:0a:68:0e:b9:c5:cb:bf:bd:c6:9a:a1: d4:f6:67:4c:d1:d9:69:21:55:40:28:98:74:50:21: 32:cc:39:29:cc:7b:d4:5a:be:3f:fa:70:6c:b9:11: e5:7e:af:81:a7:f9:b2:ef:19:ca:5a:07:45:23:39: ff:f9:f8:22:c4:4c:b6:b3:61:ab:82:ca:7c:a9:72: df:35:df:ad:ea:b1:96:a6:d8:67:1b:d0:59:cd:d3: b1:c2:45:ad:ab:25:c2:c1:1f:53:77:2f:58:6b:0b: 29:e7:db:d4:20:9e:00:62:1d:31:c9:f2:02:bf:41: 0f:a1:1e:4f:cc:4e:df:20:b7:ea:6f:65:4b:bd:f9: 42:8d:84:3b:15:b0:86:20:62:ea:e9:c8:b1:b9:ab: ce:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:42:DB:AD:77:EF:8E:22:7F:CA:6E:DB:0C:81:F3:23:61:EC:82:11 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150992.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:b040::/48 Signature Algorithm: sha256WithRSAEncryption 4c:96:dc:d1:2f:1e:4a:3f:b1:a6:b3:86:7e:4d:f0:86:e2:9b: 2a:83:c6:1a:07:ed:e5:90:62:30:e9:51:5c:f8:d9:6d:59:f3: b5:09:81:68:d6:1c:e2:85:59:0e:d9:d1:88:40:5c:ab:ac:64: a4:f8:ae:2c:da:b2:4b:74:4f:d8:29:8f:29:5e:e9:43:29:d9: 90:fe:b1:6d:29:eb:61:64:ed:fb:85:ce:33:39:12:53:a0:33: 96:2c:75:b7:bf:33:36:db:f2:8e:a6:55:8d:9d:7b:ff:31:28: 31:64:23:44:d1:30:2c:d0:16:74:e6:46:87:83:37:97:16:d8: 5f:e6:84:f3:9a:01:58:13:51:02:0a:78:6e:64:e0:fe:f5:1b: 95:39:64:b5:9c:98:fa:7b:9d:11:89:10:9b:42:5f:e1:45:4a: 8a:e0:40:d9:ce:6c:e0:ad:f9:ca:fe:42:6f:27:bb:78:71:cf: c8:aa:07:d3:bd:22:30:79:ac:a9:f1:66:02:c9:48:c4:38:40: e2:27:69:2b:e0:d0:56:a0:d6:11:00:b4:0f:8b:29:e3:bb:7b: f7:23:30:59:9e:c7:9c:c0:3f:92:3b:e5:44:a5:43:f8:f8:dc: da:b8:5c:72:bb:eb:3d:7a:1c:84:ef:a0:0a:d1:34:cb:b5:65: ea:de:b0:fb -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUFB8Mh6lhLmd/vXT125TMLu7N2H8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcxMDAyMzQ0N1oX DTI1MDcwOTAyMzk0N1owMzExMC8GA1UEAxMoNTI0MkRCQUQ3N0VGOEUyMjdGQ0E2 RURCMEM4MUYzMjM2MUVDODIxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKRyOc4aa4qKN1kvx/dNP75gcH2+06WU8Izj77qVpiYOozjJQgM2lJ6o7rfO 3rEqUXJTK66AkJBJv75nkJeU+ozmWYtUqK2bj/sl04dL4JL4RQ38hkVjWGqCsTVR 24rTwPVK4G2ebJt3ozhh7ApoDrnFy7+9xpqh1PZnTNHZaSFVQCiYdFAhMsw5Kcx7 1Fq+P/pwbLkR5X6vgaf5su8ZyloHRSM5//n4IsRMtrNhq4LKfKly3zXfreqxlqbY ZxvQWc3TscJFraslwsEfU3cvWGsLKefb1CCeAGIdMcnyAr9BD6EeT8xO3yC36m9l S735Qo2EOxWwhiBi6unIsbmrzscCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBRSQtut d++OIn/KbtsMgfMjYeyCETAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDk5Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfKwQDANBgkqhkiG9w0BAQsFAAOCAQEATJbc0S8eSj+xprOG fk3whuKbKoPGGgft5ZBiMOlRXPjZbVnztQmBaNYc4oVZDtnRiEBcq6xkpPiuLNqy S3RP2CmPKV7pQynZkP6xbSnrYWTt+4XOMzkSU6Azlix1t78zNtvyjqZVjZ17/zEo MWQjRNEwLNAWdOZGh4M3lxbYX+aE85oBWBNRAgp4bmTg/vUblTlktZyY+nudEYkQ m0Jf4UVKiuBA2c5s4K35yv5Cbye7eHHPyKoH070iMHmsqfFmAslIxDhA4idpK+DQ VqDWEQC0D4sp47t79yMwWZ7HnMA/kjvlRKVD+Pjc2rhccrvrPXochO+gCtE0y7Vl 6t6w+w== -----END CERTIFICATE-----Generated at Sun Feb 16 20:37:40 2025 by rpki-client