$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150238.roa File: AS150238.roa (raw, json) Hash identifier: 8X+iT6r9giBJSXptLKdXTJiNpj8F3y3aHrsxtpPuyjw= Subject key identifier: 3F:ED:6D:A6:D5:DE:DF:68:7A:90:24:00:8B:4D:48:E8:90:70:A7:E1 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5883E08E6A9825C2672B50847B3EF248D6FEF01F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150238.roa Signing time: Thu 31 Jul 2025 10:00:00 +0000 ROA not before: Thu 31 Jul 2025 09:55:00 +0000 ROA not after: Thu 30 Jul 2026 10:00:00 +0000 asID: 150238 IP address blocks: 2001:df1:70c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:83:e0:8e:6a:98:25:c2:67:2b:50:84:7b:3e:f2:48:d6:fe:f0:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 09:55:00 2025 GMT Not After : Jul 30 10:00:00 2026 GMT Subject: CN=3FED6DA6D5DEDF687A9024008B4D48E89070A7E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b0:bd:9a:5e:91:da:34:34:67:43:03:72:66: 8a:22:2c:0d:9f:05:9d:7d:5a:d1:f4:87:52:46:47: 60:50:75:36:47:17:d9:b9:70:85:c9:33:d2:f5:8d: 54:92:13:e6:31:23:33:f7:be:94:a9:f4:70:13:d9: ab:ea:ba:43:83:7f:99:6e:72:f1:c2:0b:ea:e8:4c: a9:47:ba:1f:51:0b:81:32:a5:8a:2a:0f:22:52:7a: 59:6d:ed:2c:be:2c:9c:fc:c4:d5:a2:44:6b:98:78: 6a:3c:9a:e5:0e:6f:08:46:f5:76:1c:fe:32:de:42: 19:c0:fc:23:cc:08:c9:54:12:91:3f:a4:2c:e6:2b: 21:9f:7e:a0:3f:40:cf:e9:81:41:9e:54:c1:88:5e: 4c:38:c1:4a:d8:76:ce:72:d4:55:19:5f:c4:c9:56: 10:e1:2c:a5:f4:08:e7:3b:a8:f7:6b:e0:7f:a8:e0: 7e:72:5f:26:d6:ee:1c:7e:34:3f:c4:67:fb:66:92: 47:d4:f4:f8:b5:39:5a:33:aa:da:5e:a9:e0:c1:06: af:fe:68:07:d7:02:20:94:fb:6a:27:60:27:42:08: 8d:7d:de:b9:f4:b4:54:3a:10:f0:b2:d4:21:57:0b: a8:7d:a8:9d:51:93:4f:21:2f:fd:74:7d:91:ab:d9: e3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:ED:6D:A6:D5:DE:DF:68:7A:90:24:00:8B:4D:48:E8:90:70:A7:E1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:70c0::/48 Signature Algorithm: sha256WithRSAEncryption 0e:4b:fe:a2:61:a2:a4:d5:96:21:e8:57:e6:32:b1:d2:d2:a4: c6:65:6f:30:5d:fb:a1:c3:52:db:83:9b:a4:76:48:c9:69:57: a1:72:c9:ce:43:76:31:42:02:38:01:57:c2:6b:f9:8d:8d:14: 31:12:93:6c:95:cd:6b:2a:0d:22:c7:a5:65:5b:5d:00:2c:1c: 36:a1:ea:82:ab:f4:9a:ec:86:22:6f:d6:1b:83:f8:66:d1:b7: 87:f0:ac:1c:a7:ac:db:30:e0:d5:90:df:a7:99:4a:26:f8:34: df:0c:31:dd:b3:85:f9:da:11:72:66:ae:95:68:6b:97:f9:61: ea:27:2f:a9:87:c4:0b:af:1a:cd:e8:76:0f:e6:fa:c4:31:1f: c1:9c:fd:66:b7:9b:59:4a:03:75:bb:ac:2f:d6:10:98:f5:78: 76:82:df:52:14:27:4d:14:9d:22:62:13:33:54:04:83:a6:ec: 26:af:bc:25:b8:8a:fc:26:1f:a7:a3:c7:aa:ee:72:cb:53:62: 71:98:6e:ae:46:7a:6f:40:4c:f6:d5:cf:7c:2a:de:ff:f7:57: 82:8a:7c:96:41:e0:4b:4f:db:39:b9:52:6e:0b:3b:db:db:2b: 8a:45:e7:dc:67:e5:b8:24:05:0e:a8:18:39:5d:ed:91:2e:4e: 90:b3:44:f2 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUWIPgjmqYJcJnK1CEez7ySNb+8B8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDczMTA5NTUwMFoX DTI2MDczMDEwMDAwMFowMzExMC8GA1UEAxMoM0ZFRDZEQTZENURFREY2ODdBOTAy NDAwOEI0RDQ4RTg5MDcwQTdFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJOwvZpekdo0NGdDA3JmiiIsDZ8FnX1a0fSHUkZHYFB1NkcX2blwhckz0vWN VJIT5jEjM/e+lKn0cBPZq+q6Q4N/mW5y8cIL6uhMqUe6H1ELgTKliioPIlJ6WW3t LL4snPzE1aJEa5h4ajya5Q5vCEb1dhz+Mt5CGcD8I8wIyVQSkT+kLOYrIZ9+oD9A z+mBQZ5UwYheTDjBSth2znLUVRlfxMlWEOEspfQI5zuo92vgf6jgfnJfJtbuHH40 P8Rn+2aSR9T0+LU5WjOq2l6p4MEGr/5oB9cCIJT7aidgJ0IIjX3eufS0VDoQ8LLU IVcLqH2onVGTTyEv/XR9kavZ4ysCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQ/7W2m 1d7faHqQJACLTUjokHCn4TAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDIzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfFwwDANBgkqhkiG9w0BAQsFAAOCAQEADkv+omGipNWWIehX 5jKx0tKkxmVvMF37ocNS24ObpHZIyWlXoXLJzkN2MUICOAFXwmv5jY0UMRKTbJXN ayoNIselZVtdACwcNqHqgqv0muyGIm/WG4P4ZtG3h/CsHKes2zDg1ZDfp5lKJvg0 3wwx3bOF+doRcmaulWhrl/lh6icvqYfEC68azeh2D+b6xDEfwZz9ZrebWUoDdbus L9YQmPV4doLfUhQnTRSdImITM1QEg6bsJq+8JbiK/CYfp6PHqu5yy1NicZhurkZ6 b0BM9tXPfCre//dXgop8lkHgS0/bOblSbgs729srikXn3GfluCQFDqgYOV3tkS5O kLNE8g== -----END CERTIFICATE-----Generated at Wed Aug 6 10:01:43 2025 by rpki-client