$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS150690.roa File: AS150690.roa (raw, json) Hash identifier: mDuM/tDzVCy3K4puqrksWTa5yULdIOuxtpqeXkbGqsE= Subject key identifier: 03:6F:69:DD:1A:C4:B1:E2:45:A0:33:84:BE:F8:65:C0:C6:B3:1D:1B Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 2461E0C9041061D4EDEF9FCF5B5B1CE2B4B4F658 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS150690.roa Signing time: Mon 21 Jul 2025 02:06:51 +0000 ROA not before: Mon 21 Jul 2025 02:01:51 +0000 ROA not after: Mon 20 Jul 2026 02:06:51 +0000 asID: 150690 IP address blocks: 165.101.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 14:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:61:e0:c9:04:10:61:d4:ed:ef:9f:cf:5b:5b:1c:e2:b4:b4:f6:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 21 02:01:51 2025 GMT Not After : Jul 20 02:06:51 2026 GMT Subject: CN=036F69DD1AC4B1E245A03384BEF865C0C6B31D1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1d:87:fe:75:14:d1:22:78:07:b4:1d:7c:4e: 94:76:db:2c:a5:89:ca:3e:23:93:1e:30:b7:11:37: 2a:93:9f:18:2c:39:a0:30:b1:30:3e:0a:71:94:47: 26:b2:55:4b:42:52:59:75:66:24:c2:36:2d:b6:6f: 3e:4b:e3:1c:fe:e5:ed:36:a2:89:d3:ec:2f:b9:7e: 91:77:5d:12:70:4e:84:15:5d:63:b8:94:25:50:50: b9:9c:e8:13:0e:f8:b6:c5:95:1e:1f:82:06:fa:38: c9:a5:77:7b:fb:28:aa:e2:b6:55:11:c0:31:ac:aa: 08:d4:6e:e0:5b:f1:89:7d:87:fd:fd:18:da:f4:e8: 10:15:9f:65:a3:7e:1c:3b:01:46:d8:c6:ef:5c:78: 5e:46:2d:d9:91:25:04:05:1d:f3:66:bb:d1:2c:70: 21:30:14:a7:d6:31:72:d0:d9:27:a2:67:0e:48:52: e4:09:9c:c1:4d:69:00:a8:65:33:97:ae:93:22:05: ea:0e:b1:77:c5:5d:cd:60:06:4a:72:8d:54:f3:bf: e9:3f:ae:5d:c7:50:79:02:71:98:f0:71:11:58:82: 09:1a:50:f4:88:3d:1b:a7:49:d9:9b:17:91:ec:16: 85:0c:d6:33:8b:9f:5a:44:03:71:e8:a8:be:e9:fe: d2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:6F:69:DD:1A:C4:B1:E2:45:A0:33:84:BE:F8:65:C0:C6:B3:1D:1B X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS150690.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.101.30.0/24 Signature Algorithm: sha256WithRSAEncryption 31:f2:9c:5b:91:92:22:39:0f:e6:9d:5f:83:73:c0:d8:52:c5: d8:0c:2b:85:7c:0e:ca:03:43:41:e0:7d:52:27:85:02:ea:f6: 81:e4:cf:c0:0e:96:1e:9c:eb:31:7b:1b:db:46:1e:68:31:64: 03:36:07:91:fa:60:d4:bf:01:d9:e7:28:55:00:14:9b:98:45: 56:2b:3f:60:57:ec:3d:d8:cf:95:a2:75:05:da:0f:0b:5a:50: 7b:43:90:5b:10:49:b5:c0:17:a2:fb:6d:fc:de:52:51:f6:f6: 64:e2:51:7e:fa:9b:b4:0b:aa:3c:0e:98:ce:1f:16:ea:99:61: 54:d9:ac:b2:a3:5f:fe:a0:07:38:28:24:e2:8d:0f:03:43:9a: ec:ef:c9:dd:9d:82:5f:69:0c:1d:6c:93:0e:1a:ae:b8:3c:e4: 17:16:f1:d9:25:94:14:81:a7:0e:54:99:8d:dc:31:ea:2d:4e: 29:dd:73:e2:6b:5f:b3:be:ad:86:7b:40:48:d9:20:d2:f5:97: 9b:32:ab:c8:df:ee:9f:5c:5f:df:11:26:a9:13:77:97:73:41: f8:f1:b0:6a:45:00:9f:a0:b1:cf:be:a3:ef:ef:2c:c1:b9:76: 69:52:65:e6:2b:7e:b3:e3:db:85:95:58:15:b0:c0:53:29:dd: da:74:1b:e9 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUJGHgyQQQYdTt75/PW1sc4rS09lgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDcyMTAyMDE1MVoX DTI2MDcyMDAyMDY1MVowMzExMC8GA1UEAxMoMDM2RjY5REQxQUM0QjFFMjQ1QTAz Mzg0QkVGODY1QzBDNkIzMUQxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANcdh/51FNEieAe0HXxOlHbbLKWJyj4jkx4wtxE3KpOfGCw5oDCxMD4KcZRH JrJVS0JSWXVmJMI2LbZvPkvjHP7l7TaiidPsL7l+kXddEnBOhBVdY7iUJVBQuZzo Ew74tsWVHh+CBvo4yaV3e/soquK2VRHAMayqCNRu4FvxiX2H/f0Y2vToEBWfZaN+ HDsBRtjG71x4XkYt2ZElBAUd82a70SxwITAUp9YxctDZJ6JnDkhS5AmcwU1pAKhl M5eukyIF6g6xd8VdzWAGSnKNVPO/6T+uXcdQeQJxmPBxEViCCRpQ9Ig9G6dJ2ZsX kewWhQzWM4ufWkQDceiovun+0uUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQDb2nd GsSx4kWgM4S++GXAxrMdGzAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MDY5MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKVlHjANBgkqhkiG9w0BAQsFAAOCAQEAMfKcW5GSIjkP5p1fg3PA 2FLF2AwrhXwOygNDQeB9UieFAur2geTPwA6WHpzrMXsb20YeaDFkAzYHkfpg1L8B 2ecoVQAUm5hFVis/YFfsPdjPlaJ1BdoPC1pQe0OQWxBJtcAXovtt/N5SUfb2ZOJR fvqbtAuqPA6Yzh8W6plhVNmssqNf/qAHOCgk4o0PA0Oa7O/J3Z2CX2kMHWyTDhqu uDzkFxbx2SWUFIGnDlSZjdwx6i1OKd1z4mtfs76thntASNkg0vWXmzKryN/un1xf 3xEmqRN3l3NB+PGwakUAn6Cxz76j7+8swbl2aVJl5it+s+PbhZVYFbDAUynd2nQb 6Q== -----END CERTIFICATE-----Generated at Thu Jul 24 04:51:25 2025 by rpki-client