$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150515.roa File: AS150515.roa (raw, json) Hash identifier: 9RIeQxxJHs65eT2wyC6R2Hu6fyZMPZyV2fN09kDo13k= Subject key identifier: 68:79:56:6F:B8:89:30:4D:E2:D6:2A:40:3E:10:29:96:D0:48:9B:CC Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 03E9248118A4B5A6D1475E030192A438DF35AA35 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150515.roa Signing time: Tue 31 Dec 2024 03:00:00 +0000 ROA not before: Tue 31 Dec 2024 02:55:00 +0000 ROA not after: Tue 30 Dec 2025 03:00:00 +0000 asID: 150515 IP address blocks: 103.61.6.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:e9:24:81:18:a4:b5:a6:d1:47:5e:03:01:92:a4:38:df:35:aa:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 31 02:55:00 2024 GMT Not After : Dec 30 03:00:00 2025 GMT Subject: CN=6879566FB889304DE2D62A403E102996D0489BCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e8:56:cf:c5:d3:c0:cb:24:7c:20:0b:bb:54: 86:a0:d8:f9:81:46:eb:79:ef:2f:17:92:14:b0:4c: a1:cc:16:9b:19:0b:19:d9:ff:5f:c8:b2:31:7d:03: 5c:b2:2b:96:38:d8:70:f4:78:70:7b:95:bb:6f:a9: ee:a4:69:7a:80:90:47:a0:fd:b2:8c:26:43:4b:64: 04:28:25:e8:7b:1e:8f:6a:70:0d:fa:9c:62:eb:9b: 74:c2:6a:f3:62:7c:ac:dd:ef:05:08:db:5c:5f:44: 5a:87:5f:cb:f8:71:7c:51:17:6c:e9:6a:e2:4a:a9: 6b:da:8e:89:53:00:b8:65:c1:28:8d:8a:5f:f1:34: cf:62:ec:1f:52:ce:5a:b9:98:84:a4:dc:76:2c:75: cc:38:1e:09:f0:f3:1a:06:f8:9e:e3:22:f5:06:3e: eb:2a:98:82:57:09:24:bb:f8:fe:ab:d5:c7:67:e2: f5:ef:7b:33:ac:78:9d:64:30:fc:3d:05:f5:7d:de: 9e:25:fa:75:3f:1d:21:21:0f:1b:4d:23:10:36:04: b4:d9:29:be:17:f3:e7:2f:0f:4a:54:8e:08:90:b5: 59:7f:9e:98:79:1a:9a:bc:c6:0c:24:50:39:e5:a6: 63:74:f2:2b:d0:a8:c1:1c:1b:7e:43:ba:27:f6:77: ae:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:79:56:6F:B8:89:30:4D:E2:D6:2A:40:3E:10:29:96:D0:48:9B:CC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150515.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.61.6.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:97:3b:36:44:fc:c6:aa:f5:9b:62:34:6d:53:b9:ba:99:36: 0f:95:0a:51:d3:dd:a5:9e:2e:35:29:3a:dd:81:9b:b1:3d:14: 89:02:19:f0:e5:a7:d6:dc:b1:7b:b4:6b:87:e5:5b:02:dd:65: a8:e4:c2:3c:9b:88:e8:24:12:92:3e:7a:90:e4:17:9c:fa:76: 7e:07:9d:b8:71:79:92:30:47:1d:3c:81:16:32:78:b1:7e:87: 4b:dd:2c:97:2e:6a:1c:9d:0c:c8:69:b3:12:d5:ef:17:55:32: 54:54:42:aa:f2:fb:ac:c8:75:e0:b7:ae:f3:d1:7f:75:7a:b2: 43:b9:c2:c9:8e:71:38:93:d6:0f:f7:f1:29:0b:84:1f:94:53: 5e:d1:6c:ac:02:4a:9e:15:4d:7b:86:91:6b:e2:3f:78:4e:c8: d3:8f:5f:af:41:7a:c2:32:fe:aa:fa:30:c4:f6:55:fc:9e:5b: d2:3f:21:01:e4:f5:99:6d:fd:db:a5:a3:aa:b7:e5:74:0d:76: 72:47:9c:7f:ae:72:1c:47:15:14:17:06:73:f9:08:9c:57:f8: 9d:a6:ee:e0:99:cf:45:60:44:cf:b5:1b:99:3b:bb:9a:75:e8: 46:b5:5c:9b:5b:59:8b:57:0d:43:37:9c:ff:03:9b:d2:5d:60: 47:dd:3b:17 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUA+kkgRiktabRR14DAZKkON81qjUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIzMTAyNTUwMFoX DTI1MTIzMDAzMDAwMFowMzExMC8GA1UEAxMoNjg3OTU2NkZCODg5MzA0REUyRDYy QTQwM0UxMDI5OTZEMDQ4OUJDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOvoVs/F08DLJHwgC7tUhqDY+YFG63nvLxeSFLBMocwWmxkLGdn/X8iyMX0D XLIrljjYcPR4cHuVu2+p7qRpeoCQR6D9sowmQ0tkBCgl6Hsej2pwDfqcYuubdMJq 82J8rN3vBQjbXF9EWodfy/hxfFEXbOlq4kqpa9qOiVMAuGXBKI2KX/E0z2LsH1LO WrmYhKTcdix1zDgeCfDzGgb4nuMi9QY+6yqYglcJJLv4/qvVx2fi9e97M6x4nWQw /D0F9X3eniX6dT8dISEPG00jEDYEtNkpvhfz5y8PSlSOCJC1WX+emHkamrzGDCRQ OeWmY3TyK9CowRwbfkO6J/Z3rkMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRoeVZv uIkwTeLWKkA+ECmW0EibzDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDUxNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWc9BjANBgkqhkiG9w0BAQsFAAOCAQEAbZc7NkT8xqr1m2I0bVO5 upk2D5UKUdPdpZ4uNSk63YGbsT0UiQIZ8OWn1tyxe7Rrh+VbAt1lqOTCPJuI6CQS kj56kOQXnPp2fgeduHF5kjBHHTyBFjJ4sX6HS90sly5qHJ0MyGmzEtXvF1UyVFRC qvL7rMh14Leu89F/dXqyQ7nCyY5xOJPWD/fxKQuEH5RTXtFsrAJKnhVNe4aRa+I/ eE7I049fr0F6wjL+qvowxPZV/J5b0j8hAeT1mW3926WjqrfldA12ckecf65yHEcV FBcGc/kInFf4nabu4JnPRWBEz7UbmTu7mnXoRrVcm1tZi1cNQzec/wOb0l1gR907 Fw== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:19 2025 by rpki-client on console.sobornost.net