$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150237.roa File: AS150237.roa (raw, json) Hash identifier: m9iq7zKcN53x7+s46Fb2u/1QBD6mIMP0ibQcXcbJGfM= Subject key identifier: 7A:00:A2:97:31:EE:84:04:D6:5B:70:73:FF:5D:30:8F:48:6C:76:4A Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 41BD387D77C59FE6D97270C63D88CCCD71D8ED89 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150237.roa Signing time: Thu 21 Aug 2025 07:00:00 +0000 ROA not before: Thu 21 Aug 2025 06:55:00 +0000 ROA not after: Thu 20 Aug 2026 07:00:00 +0000 asID: 150237 IP address blocks: 2001:df1:8340::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 23:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:bd:38:7d:77:c5:9f:e6:d9:72:70:c6:3d:88:cc:cd:71:d8:ed:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 21 06:55:00 2025 GMT Not After : Aug 20 07:00:00 2026 GMT Subject: CN=7A00A29731EE8404D65B7073FF5D308F486C764A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b0:9d:5a:b5:a4:d4:ca:f7:92:e6:88:3a:54: 73:14:93:63:08:1e:9b:e8:c7:f1:51:6b:15:dd:83: 1b:fd:23:64:e8:ad:2e:23:6f:4d:78:bd:5d:40:48: 99:f6:f5:4f:e9:51:f5:f6:da:19:1a:a1:54:53:09: 95:0e:30:4a:c8:93:21:1b:58:ce:92:10:b1:aa:70: aa:1b:16:1d:73:7a:38:a5:ef:b0:dc:ea:57:83:17: 66:37:7a:d7:3a:6d:2f:35:cc:4e:4b:54:16:6c:dc: 29:c2:81:b9:ab:90:5f:c7:36:d4:d5:19:84:1c:9f: d4:a0:5e:8f:35:04:66:e5:4c:e3:a4:63:51:5e:84: 04:75:c5:8a:99:6f:43:68:d0:b3:3e:69:8f:6f:b7: ab:17:50:f5:e4:43:d3:d3:f7:d4:a8:9a:62:2a:ec: 9e:0d:ed:c6:f8:ff:fd:c4:98:8b:f1:27:57:39:ac: 85:1c:c1:80:3e:6a:de:61:f0:f7:dd:6d:10:e6:70: 0b:33:11:46:74:13:96:ea:76:1a:c4:0e:5e:7b:71: a0:99:68:2e:b7:44:7d:08:d6:79:9a:4a:4b:80:0b: c0:0f:c1:a6:fa:61:eb:a7:74:4d:6b:82:5e:f7:a0: 67:f0:43:20:81:ee:cb:cf:93:9c:2c:b8:a2:04:59: e2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:00:A2:97:31:EE:84:04:D6:5B:70:73:FF:5D:30:8F:48:6C:76:4A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:8340::/48 Signature Algorithm: sha256WithRSAEncryption 52:83:f4:9c:79:a2:ab:30:6e:a8:0a:09:58:53:42:ee:f6:de: 68:09:54:f7:4a:0c:2b:65:9e:0f:7d:f2:e6:aa:a3:26:5d:8f: 7a:6a:17:88:e0:98:08:5f:10:bd:0f:c3:b6:1c:67:4b:5d:2f: d3:ef:2c:46:2a:2f:eb:bc:1d:27:8d:e8:d7:e7:32:f2:c1:99: e0:67:45:e8:25:55:54:21:e2:33:75:7c:5c:e2:cc:4b:30:32: 28:7d:7f:4f:4a:f3:6f:10:09:0a:3d:0f:c7:38:a5:6f:99:db: f7:db:f9:59:35:02:61:1f:b8:b0:59:fc:53:f5:2e:e3:8f:e9: 31:a9:f8:32:ad:d4:97:fb:d5:aa:ad:a4:f4:63:88:77:8f:fd: 6d:a0:8b:58:f7:72:a9:12:19:9d:5b:3f:b6:4c:99:12:b8:ff: f3:91:da:f2:2d:de:1f:02:9d:a1:d5:96:1b:53:3e:34:82:9c: e2:ff:c3:9b:4d:4a:7f:a4:8f:e2:2c:0b:f4:59:24:db:fb:75: 20:4d:60:87:78:ce:27:61:a6:3e:d4:6e:6a:ca:3f:ee:a0:03: 12:17:35:33:3d:e5:02:33:74:8b:ec:01:0d:40:45:6b:dd:52: 50:c1:b4:5e:f7:f4:1a:ba:98:fe:d1:ce:8d:b6:bd:07:52:45: d3:c8:af:fd -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUQb04fXfFn+bZcnDGPYjMzXHY7YkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgyMTA2NTUwMFoX DTI2MDgyMDA3MDAwMFowMzExMC8GA1UEAxMoN0EwMEEyOTczMUVFODQwNEQ2NUI3 MDczRkY1RDMwOEY0ODZDNzY0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMSwnVq1pNTK95LmiDpUcxSTYwgem+jH8VFrFd2DG/0jZOitLiNvTXi9XUBI mfb1T+lR9fbaGRqhVFMJlQ4wSsiTIRtYzpIQsapwqhsWHXN6OKXvsNzqV4MXZjd6 1zptLzXMTktUFmzcKcKBuauQX8c21NUZhByf1KBejzUEZuVM46RjUV6EBHXFiplv Q2jQsz5pj2+3qxdQ9eRD09P31KiaYirsng3txvj//cSYi/EnVzmshRzBgD5q3mHw 991tEOZwCzMRRnQTlup2GsQOXntxoJloLrdEfQjWeZpKS4ALwA/Bpvph66d0TWuC XvegZ/BDIIHuy8+TnCy4ogRZ4oMCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBR6AKKX Me6EBNZbcHP/XTCPSGx2SjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDIzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfGDQDANBgkqhkiG9w0BAQsFAAOCAQEAUoP0nHmiqzBuqAoJ WFNC7vbeaAlU90oMK2WeD33y5qqjJl2PemoXiOCYCF8QvQ/DthxnS10v0+8sRiov 67wdJ43o1+cy8sGZ4GdF6CVVVCHiM3V8XOLMSzAyKH1/T0rzbxAJCj0Pxzilb5nb 99v5WTUCYR+4sFn8U/Uu44/pMan4Mq3Ul/vVqq2k9GOId4/9baCLWPdyqRIZnVs/ tkyZErj/85Ha8i3eHwKdodWWG1M+NIKc4v/Dm01Kf6SP4iwL9Fkk2/t1IE1gh3jO J2GmPtRuaso/7qADEhc1Mz3lAjN0i+wBDUBFa91SUMG0Xvf0GrqY/tHOjba9B1JF 08iv/Q== -----END CERTIFICATE-----Generated at Sat Aug 23 18:29:52 2025 by rpki-client