$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150482.roa File: AS150482.roa (raw, json) Hash identifier: HAkqfQ/m4sIkkIiuD1nxBwjIFGHjePZROiVnOMCkDv8= Subject key identifier: FC:57:23:91:8C:F3:68:B6:3F:7A:08:C4:0A:26:1C:BA:7F:BC:4B:7F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1909754099E22111BBEDDAA457EE484BBA21DECE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150482.roa Signing time: Wed 01 Oct 2025 03:01:57 +0000 ROA not before: Wed 01 Oct 2025 02:56:57 +0000 ROA not after: Wed 30 Sep 2026 03:01:57 +0000 asID: 150482 IP address blocks: 2001:df1:b740::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:09:75:40:99:e2:21:11:bb:ed:da:a4:57:ee:48:4b:ba:21:de:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 1 02:56:57 2025 GMT Not After : Sep 30 03:01:57 2026 GMT Subject: CN=FC5723918CF368B63F7A08C40A261CBA7FBC4B7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:61:c1:cf:0f:77:62:1b:60:cd:dd:07:59:f3: 40:b4:ea:10:11:fe:03:81:41:1f:65:9b:84:40:96: 3a:11:96:7d:a4:be:d3:1b:c1:0d:b2:db:b7:c9:26: 38:63:e0:16:71:53:3e:09:5c:11:40:71:75:51:94: 4e:fd:b0:f2:c2:c9:b0:22:90:a2:5b:57:ac:06:a5: 1b:52:30:32:8d:43:a6:ed:c0:ee:86:38:c8:39:08: 4b:20:81:ed:05:79:20:24:57:2e:c2:96:7a:20:b5: b2:67:a5:f0:a3:b4:56:94:6c:68:78:d3:bc:94:5f: 40:66:25:5c:42:0c:53:cc:bd:29:bc:cd:32:91:c2: 9e:67:0f:97:7b:7d:8d:a3:96:ac:48:df:59:c9:ab: 80:3e:14:17:90:12:5c:e6:b6:b9:e6:3f:df:d7:c3: 73:ff:7b:fa:3f:15:65:09:08:6e:88:c0:95:ef:16: 30:59:fc:26:4a:ac:b1:5b:aa:9d:36:2f:31:8f:19: 60:1c:3f:ea:b4:cd:4e:d0:1d:40:a7:1a:31:f9:89: 38:9b:6c:d0:97:38:07:f5:d3:11:0a:0c:f7:69:f6: 70:36:d9:9e:76:f3:c8:41:5f:c3:3c:0a:f9:e9:48: ec:18:e1:c9:e5:e4:7e:0d:3a:c1:62:8b:4b:09:a4: 89:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:57:23:91:8C:F3:68:B6:3F:7A:08:C4:0A:26:1C:BA:7F:BC:4B:7F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150482.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:b740::/48 Signature Algorithm: sha256WithRSAEncryption 14:66:da:0d:b9:a7:b5:db:16:a8:0e:db:f7:a7:6b:90:5f:1b: 8f:84:4b:ed:7a:1a:1a:e2:c8:49:9d:2e:f1:fa:4d:56:5f:24: ea:27:1f:75:ef:bb:a6:b8:07:76:50:5c:9e:69:23:c6:2f:81: dd:d5:f6:c8:8d:c5:dd:34:23:3f:6d:be:ea:14:a4:c9:80:57: bb:0e:bf:a8:5f:6e:ee:58:9f:2d:74:fb:27:44:b6:f9:a2:33: 76:7b:d3:78:80:a0:c5:11:55:83:97:cc:dd:95:28:0e:48:0e: fe:c5:56:5a:64:72:10:f3:11:d4:0b:91:18:45:cf:70:eb:d5: 52:94:bc:39:02:60:56:bb:4f:57:5e:f1:c0:5c:8d:07:c9:e9: e9:4e:09:2c:7c:3b:0e:64:e8:17:ba:ab:fc:2f:04:a2:c5:de: 26:b9:13:b2:b6:85:c6:2a:9c:cf:2a:31:22:7c:09:c1:c2:2f: 7d:41:fe:c2:7f:7d:a8:12:f8:66:7b:7e:d1:05:1d:ea:bf:34: 75:d1:ed:95:6a:9d:24:09:00:65:c2:ed:f8:a3:b1:a9:bf:52: fb:66:5a:c7:1c:65:10:f6:13:da:5a:92:d7:40:48:0b:7e:73: 1a:77:46:e1:9a:db:07:8e:c0:a2:6e:8f:28:52:e6:1e:43:a0: 50:b7:89:94 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUGQl1QJniIRG77dqkV+5IS7oh3s4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAwMTAyNTY1N1oX DTI2MDkzMDAzMDE1N1owMzExMC8GA1UEAxMoRkM1NzIzOTE4Q0YzNjhCNjNGN0Ew OEM0MEEyNjFDQkE3RkJDNEI3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANthwc8Pd2IbYM3dB1nzQLTqEBH+A4FBH2WbhECWOhGWfaS+0xvBDbLbt8km OGPgFnFTPglcEUBxdVGUTv2w8sLJsCKQoltXrAalG1IwMo1Dpu3A7oY4yDkISyCB 7QV5ICRXLsKWeiC1smel8KO0VpRsaHjTvJRfQGYlXEIMU8y9KbzNMpHCnmcPl3t9 jaOWrEjfWcmrgD4UF5ASXOa2ueY/39fDc/97+j8VZQkIbojAle8WMFn8JkqssVuq nTYvMY8ZYBw/6rTNTtAdQKcaMfmJOJts0Jc4B/XTEQoM92n2cDbZnnbzyEFfwzwK +elI7BjhyeXkfg06wWKLSwmkiQ0CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBT8VyOR jPNotj96CMQKJhy6f7xLfzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDQ4Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfG3QDANBgkqhkiG9w0BAQsFAAOCAQEAFGbaDbmntdsWqA7b 96drkF8bj4RL7XoaGuLISZ0u8fpNVl8k6icfde+7prgHdlBcnmkjxi+B3dX2yI3F 3TQjP22+6hSkyYBXuw6/qF9u7lifLXT7J0S2+aIzdnvTeICgxRFVg5fM3ZUoDkgO /sVWWmRyEPMR1AuRGEXPcOvVUpS8OQJgVrtPV17xwFyNB8np6U4JLHw7DmToF7qr /C8EosXeJrkTsraFxiqczyoxInwJwcIvfUH+wn99qBL4Znt+0QUd6r80ddHtlWqd JAkAZcLt+KOxqb9S+2ZaxxxlEPYT2lqS10BIC35zGndG4ZrbB47Aom6PKFLmHkOg ULeJlA== -----END CERTIFICATE-----Generated at Mon Oct 20 05:59:21 2025 by rpki-client