$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150204.roa File: AS150204.roa (raw, json) Hash identifier: 3KExtAgIdGNBF52AW/+AwMqOszu4hT7hTVnKocg7B0o= Subject key identifier: E1:6E:AA:C1:D0:90:5D:98:C3:88:87:36:E2:AE:76:EB:59:7B:4F:A5 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0CA95AACD6802470427D3688713C673AF6E600 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150204.roa Signing time: Wed 19 Feb 2025 07:00:00 +0000 ROA not before: Wed 19 Feb 2025 06:55:00 +0000 ROA not after: Wed 18 Feb 2026 07:00:00 +0000 asID: 150204 IP address blocks: 119.47.93.0/24 maxlen: 24 119.47.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:a9:5a:ac:d6:80:24:70:42:7d:36:88:71:3c:67:3a:f6:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 19 06:55:00 2025 GMT Not After : Feb 18 07:00:00 2026 GMT Subject: CN=E16EAAC1D0905D98C3888736E2AE76EB597B4FA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ab:a0:30:4f:0c:81:e4:59:5c:84:ad:bc:34: 3a:d3:fe:97:0b:75:fc:49:8b:86:38:ff:60:11:ab: 37:7c:ca:c4:38:52:e3:06:9b:f2:f1:0e:0f:04:fe: a0:23:71:ec:3d:1f:8e:f6:4e:81:7d:31:87:42:11: d6:f3:8b:67:32:16:20:f1:74:b0:1e:ba:c8:fc:60: f6:44:1b:a9:ff:1a:57:94:4d:3f:d5:03:9c:68:63: 11:80:09:8b:5f:cd:83:b0:38:f2:db:84:6a:35:7c: 38:48:d4:9a:c1:97:fd:e3:16:80:3f:fd:ed:8e:29: 8f:fd:fe:f1:cd:30:4c:dc:93:7b:c3:5e:17:90:7d: 62:83:b2:5e:c7:22:37:81:a6:aa:f7:d9:7c:91:4d: a1:bd:f8:1f:9e:0d:98:c7:7c:c8:e5:9f:28:e8:69: 78:b8:fe:25:57:ff:ca:3f:9a:87:97:21:7b:85:70: 20:53:85:02:d4:f6:12:db:e6:dc:82:44:33:ca:97: a8:29:55:8d:59:d1:5d:26:18:e0:77:49:0b:b2:1b: e5:bc:1c:7e:cd:a1:3f:31:e0:9c:13:93:00:fe:e6: a2:7c:2b:e2:db:ef:22:7b:b4:25:9a:89:0f:47:30: cd:7f:8e:b0:5c:9d:0d:f4:8c:5f:2b:dd:4b:1b:5b: 67:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:6E:AA:C1:D0:90:5D:98:C3:88:87:36:E2:AE:76:EB:59:7B:4F:A5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150204.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.47.93.0-119.47.94.255 Signature Algorithm: sha256WithRSAEncryption 44:f9:bb:6d:8d:cd:55:e0:3c:e3:46:45:14:0a:8f:8f:0d:7b: 46:eb:42:4e:3e:bb:ab:05:e9:36:09:35:d4:0a:0d:a1:05:4a: 5c:46:3d:22:c9:e6:3b:f2:77:c9:e4:ba:41:97:3d:6d:5c:20: aa:e1:c6:b9:a2:6b:ef:74:09:42:1a:92:0e:2c:e8:15:c3:a7: 8a:aa:ac:d7:da:e1:bc:4d:10:d4:2d:b2:43:cb:1c:ed:d3:b0: eb:9c:14:6e:98:23:55:6b:00:b2:0f:fb:6d:1d:a5:35:62:99: 84:db:6b:d7:0b:af:ef:48:b2:ac:4b:a1:ee:4c:84:7f:e8:b6: fb:63:84:56:f4:db:bb:94:17:fa:51:af:63:dc:10:95:e0:53: fa:ce:bd:cc:28:0c:2e:77:f3:c7:89:9a:0b:8e:bc:a7:28:5c: 53:47:ac:38:b4:c3:74:17:26:e1:7f:89:a9:b4:e0:2a:a2:ce: b1:92:48:06:a5:73:ee:f4:9d:d5:d0:66:88:73:30:69:f3:ea: da:fc:81:b4:f7:d6:af:7e:03:db:15:96:46:9a:92:d3:25:c3: ab:5e:53:12:a4:3f:63:a0:ef:bd:98:40:7e:01:ae:98:a8:0e: b3:00:46:fa:d0:04:ed:89:89:e6:fe:a3:dd:1d:64:60:90:42: a2:18:55:f6 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgITDKlarNaAJHBCfTaIcTxnOvbmADANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKEJBOEY3N0QyMUU1 OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIwHhcNMjUwMjE5MDY1NTAwWhcN MjYwMjE4MDcwMDAwWjAzMTEwLwYDVQQDEyhFMTZFQUFDMUQwOTA1RDk4QzM4ODg3 MzZFMkFFNzZFQjU5N0I0RkE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3augME8MgeRZXIStvDQ60/6XC3X8SYuGOP9gEas3fMrEOFLjBpvy8Q4PBP6g I3HsPR+O9k6BfTGHQhHW84tnMhYg8XSwHrrI/GD2RBup/xpXlE0/1QOcaGMRgAmL X82DsDjy24RqNXw4SNSawZf94xaAP/3tjimP/f7xzTBM3JN7w14XkH1ig7JexyI3 gaaq99l8kU2hvfgfng2Yx3zI5Z8o6Gl4uP4lV//KP5qHlyF7hXAgU4UC1PYS2+bc gkQzypeoKVWNWdFdJhjgd0kLshvlvBx+zaE/MeCcE5MA/uaifCvi2+8ie7QlmokP RzDNf46wXJ0N9IxfK91LG1tn1QIDAQABo4IB2DCCAdQwHQYDVR0OBBYEFOFuqsHQ kF2Yw4iHNuKudutZe0+lMB8GA1UdIwQYMBaAFLqPd9IeWP6ck5prcOJYVhfhgzdr MA4GA1UdDwEB/wQEAwIHgDBpBgNVHR8EYjBgMF6gXKBahlhyc3luYzovL3JlcG8t cnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0JBOEY3N0QyMUU1OEZFOUM5 MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggr BgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdF RjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3VvOTMwaDVZX3B5VG1tdHc0bGhX Ri1HRE4ycy5jZXIwVAYIKwYBBQUHAQsESDBGMEQGCCsGAQUFBzALhjhyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FTMTUwMjA0LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBAB3L10DBAB3L14wDQYJKoZIhvcNAQELBQADggEBAET5u22NzVXg PONGRRQKj48Ne0brQk4+u6sF6TYJNdQKDaEFSlxGPSLJ5jvyd8nkukGXPW1cIKrh xrmia+90CUIakg4s6BXDp4qqrNfa4bxNENQtskPLHO3TsOucFG6YI1VrALIP+20d pTVimYTba9cLr+9IsqxLoe5MhH/otvtjhFb027uUF/pRr2PcEJXgU/rOvcwoDC53 88eJmguOvKcoXFNHrDi0w3QXJuF/iam04CqizrGSSAalc+70ndXQZohzMGnz6tr8 gbT31q9+A9sVlkaaktMlw6teUxKkP2Og772YQH4BrpioDrMARvrQBO2Jieb+o90d ZGCQQqIYVfY= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:19 2025 by rpki-client on console.sobornost.net