$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150936.roa File: AS150936.roa (raw, json) Hash identifier: nrlnP4aUG2hqhLZMeCI8t84MKUp721bxoHVe0hiZifQ= Subject key identifier: 58:2E:46:FB:28:9D:4E:3D:DD:2A:65:08:7F:48:62:F8:B8:C9:D9:7F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 73DC49A8CB97EE0CC044EC1879AF8250F2729A61 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150936.roa Signing time: Wed 30 Jul 2025 05:00:00 +0000 ROA not before: Wed 30 Jul 2025 04:55:00 +0000 ROA not after: Wed 29 Jul 2026 05:00:00 +0000 asID: 150936 IP address blocks: 2001:df3:19c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 13:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:dc:49:a8:cb:97:ee:0c:c0:44:ec:18:79:af:82:50:f2:72:9a:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 30 04:55:00 2025 GMT Not After : Jul 29 05:00:00 2026 GMT Subject: CN=582E46FB289D4E3DDD2A65087F4862F8B8C9D97F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:90:a2:62:e4:5a:cf:3c:70:67:55:23:b5:2c: 88:3f:fd:15:44:0d:53:7c:29:0c:4b:95:9a:ed:67: 06:80:1d:33:57:08:f1:43:64:28:bd:1b:64:32:7b: c6:e1:d0:c1:3c:a6:12:24:0c:b9:9b:4a:fc:71:64: 52:70:38:73:c6:36:c1:5b:1c:bb:d8:be:b9:81:24: b8:47:35:e6:37:ed:a7:6c:15:fd:4a:f0:d6:ee:21: 1c:14:2a:74:89:ad:ee:eb:d0:d5:29:f1:48:83:c9: 08:15:2d:43:dd:fd:90:74:d4:48:78:a8:03:a3:5e: 27:33:9e:89:dc:c6:8b:ed:d0:2e:2f:c3:cd:86:7d: 67:2d:be:e1:13:7f:ea:d7:3a:05:13:17:e0:21:8e: 2d:22:95:fd:10:c5:a5:81:1e:a3:69:ed:a6:73:90: 9d:b9:10:02:2a:f8:51:a5:0c:bf:18:8f:ae:2f:23: ea:5b:9a:35:10:31:37:b0:50:5d:7f:af:49:e2:a2: 10:00:f9:7a:f8:8c:14:8e:68:04:92:9e:5c:43:b0: 9c:9c:c4:b6:e3:4b:a5:0c:3a:21:21:81:44:e8:ad: 73:96:bc:ac:df:ba:fd:74:d7:6e:0e:e7:26:b4:4b: 0f:65:10:58:37:dd:dd:8a:18:bf:92:ee:98:96:db: 05:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2E:46:FB:28:9D:4E:3D:DD:2A:65:08:7F:48:62:F8:B8:C9:D9:7F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:19c0::/48 Signature Algorithm: sha256WithRSAEncryption 5d:e4:40:d0:b6:f1:5c:26:1d:e7:9c:a0:db:53:9b:fd:c0:6a: e8:5b:60:61:9f:04:b7:55:22:70:69:d5:86:33:64:63:2f:4f: c5:7e:ac:5c:65:44:cc:88:eb:67:08:c9:6f:b9:67:26:aa:22: a6:6b:5a:9a:6d:4d:2c:f3:53:77:6d:66:45:92:26:68:94:eb: d4:7c:1c:ae:0f:5f:03:4a:d8:18:be:06:c6:17:4b:90:56:ad: 16:c7:4c:56:a9:28:c4:89:9a:29:90:0e:32:2e:a8:22:7a:64: 1d:cc:01:b0:2d:a9:14:03:34:56:30:bd:db:a2:86:07:e0:c3: 5e:7c:07:8c:06:74:1c:d2:7a:2c:37:c2:8b:11:41:09:70:8a: f2:37:b3:28:34:48:f0:62:a9:2e:c6:c2:cd:47:ce:f2:c2:09: 63:ec:22:19:01:a4:fb:6e:b4:fb:ad:46:8d:6d:b4:b3:5f:60: 61:bd:b0:d2:3b:8a:52:ba:86:0a:90:24:6e:f3:6d:64:f1:11: cb:df:36:df:4d:00:d2:5c:ff:68:8c:0f:3e:fc:77:93:37:98: 7e:b4:d7:ca:09:3a:eb:ab:8f:49:c1:aa:b1:12:1f:0e:43:ed: c7:19:c5:bf:53:dd:f8:52:7a:9b:33:bf:ec:f8:1b:5f:db:61: a4:10:95:79 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUc9xJqMuX7gzAROwYea+CUPJymmEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDczMDA0NTUwMFoX DTI2MDcyOTA1MDAwMFowMzExMC8GA1UEAxMoNTgyRTQ2RkIyODlENEUzREREMkE2 NTA4N0Y0ODYyRjhCOEM5RDk3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOeQomLkWs88cGdVI7UsiD/9FUQNU3wpDEuVmu1nBoAdM1cI8UNkKL0bZDJ7 xuHQwTymEiQMuZtK/HFkUnA4c8Y2wVscu9i+uYEkuEc15jftp2wV/Urw1u4hHBQq dImt7uvQ1SnxSIPJCBUtQ939kHTUSHioA6NeJzOeidzGi+3QLi/DzYZ9Zy2+4RN/ 6tc6BRMX4CGOLSKV/RDFpYEeo2ntpnOQnbkQAir4UaUMvxiPri8j6luaNRAxN7BQ XX+vSeKiEAD5eviMFI5oBJKeXEOwnJzEtuNLpQw6ISGBROitc5a8rN+6/XTXbg7n JrRLD2UQWDfd3YoYv5LumJbbBUMCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBRYLkb7 KJ1OPd0qZQh/SGL4uMnZfzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDkzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfMZwDANBgkqhkiG9w0BAQsFAAOCAQEAXeRA0LbxXCYd55yg 21Ob/cBq6FtgYZ8Et1UicGnVhjNkYy9PxX6sXGVEzIjrZwjJb7lnJqoipmtamm1N LPNTd21mRZImaJTr1Hwcrg9fA0rYGL4GxhdLkFatFsdMVqkoxImaKZAOMi6oInpk HcwBsC2pFAM0VjC926KGB+DDXnwHjAZ0HNJ6LDfCixFBCXCK8jezKDRI8GKpLsbC zUfO8sIJY+wiGQGk+260+61GjW20s19gYb2w0juKUrqGCpAkbvNtZPERy982300A 0lz/aIwPPvx3kzeYfrTXygk666uPScGqsRIfDkPtxxnFv1Pd+FJ6mzO/7PgbX9th pBCVeQ== -----END CERTIFICATE-----Generated at Wed Aug 6 03:58:39 2025 by rpki-client