$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150480.roa File: AS150480.roa (raw, json) Hash identifier: jCiHbF3uXQA4PVPG6Mvb/ELYXtjA/QnWKR1URZ/mMJM= Subject key identifier: 76:A6:9E:7E:50:CF:47:E5:6D:D9:A2:D1:DC:84:11:22:B8:89:41:C7 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5E58A0249FC443B88BBA8D9A6E0446B21452B44B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150480.roa Signing time: Mon 15 Sep 2025 04:00:00 +0000 ROA not before: Mon 15 Sep 2025 03:55:00 +0000 ROA not after: Mon 14 Sep 2026 04:00:00 +0000 asID: 150480 IP address blocks: 2001:df3:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:58:a0:24:9f:c4:43:b8:8b:ba:8d:9a:6e:04:46:b2:14:52:b4:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 15 03:55:00 2025 GMT Not After : Sep 14 04:00:00 2026 GMT Subject: CN=76A69E7E50CF47E56DD9A2D1DC841122B88941C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bd:65:73:35:d9:4e:09:72:47:1d:0f:83:54: 74:64:12:28:f8:d5:14:31:12:bf:e7:4f:99:17:71: c8:cb:8a:ce:25:32:83:e0:1a:ec:1f:93:9e:cd:5c: 15:58:a2:cf:fc:fa:b5:3f:f5:f6:55:1c:a4:b3:cd: 10:32:82:ef:bd:9f:f7:27:2a:e4:dc:eb:a7:d2:db: 3d:3c:65:92:9d:4a:86:ce:12:72:da:3c:89:6e:ea: 87:04:a1:df:dc:ea:4a:ef:a8:f6:cf:5a:e7:e5:e8: e0:c3:b4:fe:9c:8c:51:4e:24:92:da:3d:f7:19:67: 91:3e:bb:06:23:9b:48:56:39:70:9c:02:d8:00:45: f8:f5:09:00:b4:57:82:e6:ff:e2:0b:c9:25:b6:c0: 59:ad:5c:b0:0c:07:08:17:7c:78:ec:c2:a5:27:74: 36:4e:87:e6:6e:de:08:53:8c:ee:cc:1e:2c:3d:d1: 31:76:2d:1a:da:18:5a:e3:34:3b:e3:d5:1d:a1:67: 5f:0b:cb:56:1a:fd:cf:72:a7:37:c0:48:a3:0c:46: 80:9d:6d:e8:85:ed:8f:4b:27:4f:95:2f:63:54:75: 86:a6:78:fc:c9:1f:c2:79:37:66:5c:5b:20:03:70: e7:93:de:b3:9f:2d:2e:97:2a:29:ec:ee:96:7b:c2: d9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A6:9E:7E:50:CF:47:E5:6D:D9:A2:D1:DC:84:11:22:B8:89:41:C7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150480.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:1040::/48 Signature Algorithm: sha256WithRSAEncryption 95:c0:d3:1a:1e:3e:fa:5f:8c:fd:76:71:57:6e:6e:e1:c7:a3: 0b:4b:d9:79:4c:64:fc:61:08:8b:57:52:aa:b8:8f:16:20:25: a2:69:84:6e:15:fe:2d:e9:d1:1b:9a:fe:9f:f5:7f:6d:12:9c: 71:a3:b7:72:67:89:45:19:c2:63:4b:36:5f:bb:e2:f1:33:05: 30:3f:c9:fc:93:0d:d1:0c:98:27:75:1f:de:b1:df:ba:29:97: e1:c0:2e:0d:1f:ac:b4:23:98:b9:23:bb:1e:e5:25:04:f0:cf: 12:82:1a:3e:14:32:4d:e0:59:50:b9:5a:7a:6b:77:69:a2:e7: 7b:f2:af:6e:54:db:ca:da:ec:8d:e4:fb:ad:29:ca:16:e1:64: 47:30:5b:c8:4e:7d:bc:78:25:58:49:56:33:0f:08:29:c4:e2: 0b:e6:fb:96:82:4a:3a:39:db:ab:11:3f:19:d4:5b:49:9c:d6: 8c:e7:b2:8a:26:b3:03:91:aa:5a:b5:c1:62:a3:21:c0:05:2a: 84:f4:e0:a5:86:be:08:53:fb:6a:60:49:ad:86:d3:7d:19:0e: 6e:39:94:a5:58:5a:30:80:76:d9:f4:f6:d5:a9:9e:f8:88:54: 65:ee:99:8a:55:fe:7b:90:4a:8d:56:c6:c3:2b:fd:a7:69:49: d6:e9:f5:18 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUXligJJ/EQ7iLuo2abgRGshRStEswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkxNTAzNTUwMFoX DTI2MDkxNDA0MDAwMFowMzExMC8GA1UEAxMoNzZBNjlFN0U1MENGNDdFNTZERDlB MkQxREM4NDExMjJCODg5NDFDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANK9ZXM12U4JckcdD4NUdGQSKPjVFDESv+dPmRdxyMuKziUyg+Aa7B+Tns1c FViiz/z6tT/19lUcpLPNEDKC772f9ycq5Nzrp9LbPTxlkp1Khs4Scto8iW7qhwSh 39zqSu+o9s9a5+Xo4MO0/pyMUU4kkto99xlnkT67BiObSFY5cJwC2ABF+PUJALRX gub/4gvJJbbAWa1csAwHCBd8eOzCpSd0Nk6H5m7eCFOM7sweLD3RMXYtGtoYWuM0 O+PVHaFnXwvLVhr9z3KnN8BIowxGgJ1t6IXtj0snT5UvY1R1hqZ4/Mkfwnk3Zlxb IANw55Pes58tLpcqKezulnvC2WECAwEAAaOCAdMwggHPMB0GA1UdDgQWBBR2pp5+ UM9H5W3ZotHchBEiuIlBxzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDQ4MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfMQQDANBgkqhkiG9w0BAQsFAAOCAQEAlcDTGh4++l+M/XZx V25u4cejC0vZeUxk/GEIi1dSqriPFiAlommEbhX+LenRG5r+n/V/bRKccaO3cmeJ RRnCY0s2X7vi8TMFMD/J/JMN0QyYJ3Uf3rHfuimX4cAuDR+stCOYuSO7HuUlBPDP EoIaPhQyTeBZULlaemt3aaLne/KvblTbytrsjeT7rSnKFuFkRzBbyE59vHglWElW Mw8IKcTiC+b7loJKOjnbqxE/GdRbSZzWjOeyiiazA5GqWrXBYqMhwAUqhPTgpYa+ CFP7amBJrYbTfRkObjmUpVhaMIB22fT21ame+IhUZe6ZilX+e5BKjVbGwyv9p2lJ 1un1GA== -----END CERTIFICATE-----Generated at Mon Oct 20 08:51:20 2025 by rpki-client