$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150226.roa File: AS150226.roa (raw, json) Hash identifier: 6+SXehGLqnIz+4TJh2xryianhi1tM1f43IA8pVMAeis= Subject key identifier: 06:2D:A9:28:88:3E:9A:32:27:49:D6:A5:3B:96:F4:C1:46:B7:70:EE Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 372D21B479C7AB1BCDC736371F286AD8DC856AF9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150226.roa Signing time: Fri 15 Mar 2024 03:05:05 +0000 ROA not before: Fri 15 Mar 2024 03:00:05 +0000 ROA not after: Fri 14 Mar 2025 03:05:05 +0000 asID: 150226 IP address blocks: 103.17.178.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:2d:21:b4:79:c7:ab:1b:cd:c7:36:37:1f:28:6a:d8:dc:85:6a:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 15 03:00:05 2024 GMT Not After : Mar 14 03:05:05 2025 GMT Subject: CN=062DA928883E9A322749D6A53B96F4C146B770EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2f:21:44:30:13:98:3f:83:57:ad:aa:94:1a: ef:1e:45:19:e5:be:be:b4:cc:9d:f0:b3:91:11:a5: 05:25:73:6f:41:bf:f7:32:ad:40:ea:8b:dd:23:37: 42:ff:6e:03:ac:7e:a2:4d:55:66:9c:a4:bd:27:0d: a7:10:fd:56:91:4e:c3:b0:ad:ea:00:0c:d9:d9:8f: ea:f9:04:b3:6b:10:da:e5:8a:fe:56:bb:c2:c0:2f: ff:8a:60:66:47:03:eb:ad:2b:8f:9e:89:a2:4f:bd: fa:c9:12:7a:fd:ce:1f:1d:de:02:69:79:02:bc:b2: 42:82:9e:9f:5e:90:71:cc:97:38:fc:94:c8:1d:55: ae:ba:90:a2:f1:57:59:a6:d0:ab:62:cb:f7:2a:dc: f1:9e:3f:71:67:2a:bb:dc:2e:a4:d4:22:36:0b:4e: 64:d0:c2:32:77:60:78:d9:3d:7e:56:52:77:46:e7: b1:97:b1:2e:66:2c:77:69:9c:59:48:82:61:40:63: cc:7f:4b:73:08:cc:f9:c7:57:3e:cb:bd:33:69:a3: e9:2f:01:d3:0b:32:ec:bf:46:fe:8e:e1:a4:e3:64: 38:da:93:47:77:5d:9b:c4:cb:20:db:26:fb:6d:9f: 98:ca:09:5b:de:82:01:4d:72:a1:32:91:bd:9a:ed: 7b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:2D:A9:28:88:3E:9A:32:27:49:D6:A5:3B:96:F4:C1:46:B7:70:EE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150226.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.17.178.0/23 Signature Algorithm: sha256WithRSAEncryption 99:06:f0:c9:57:a0:4e:d3:3d:18:cc:87:bd:16:13:4d:ff:94: 24:c2:f6:32:5c:a6:79:f6:36:1b:e9:3b:1c:bf:94:41:e9:c9: ad:1e:aa:bf:59:60:6f:e2:23:dc:09:0e:bb:2c:dc:fe:f9:7b: 67:5f:9e:e6:cf:0e:75:b8:a6:32:c0:cc:21:d8:90:1d:d9:40: b1:31:18:c5:1a:4d:4a:cb:46:47:76:70:e3:d6:6e:52:e3:22: b5:b2:1a:d8:3b:da:5e:a4:e6:c9:ec:ca:72:bb:24:23:6c:38: 94:5e:a2:f6:f9:fc:e4:a3:d2:89:24:f3:78:30:f8:0b:d1:e7: 82:1a:39:85:69:e5:6a:00:56:b7:77:88:c7:e7:d6:dd:e6:4d: 85:6b:06:c5:ba:4f:35:91:cc:d9:66:8c:6f:4f:af:ca:15:14: f8:6e:f9:49:ce:36:d5:0b:93:18:a0:76:43:31:f5:a1:6a:6e: a2:f2:16:1e:2a:2b:59:29:e7:d4:6b:ce:55:40:78:05:f5:e5: c4:e1:1f:85:af:3d:16:f8:e7:79:1d:5e:a0:62:3d:d4:7a:12: a3:b0:c7:48:c3:1d:6b:01:d6:d6:9f:8c:05:18:89:3c:5d:92: cf:7c:20:40:9c:fd:52:37:be:e6:9e:3e:ea:2c:ab:24:e1:5d: 28:37:91:e1 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUNy0htHnHqxvNxzY3Hyhq2NyFavkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMxNTAzMDAwNVoX DTI1MDMxNDAzMDUwNVowMzExMC8GA1UEAxMoMDYyREE5Mjg4ODNFOUEzMjI3NDlE NkE1M0I5NkY0QzE0NkI3NzBFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANYvIUQwE5g/g1etqpQa7x5FGeW+vrTMnfCzkRGlBSVzb0G/9zKtQOqL3SM3 Qv9uA6x+ok1VZpykvScNpxD9VpFOw7Ct6gAM2dmP6vkEs2sQ2uWK/la7wsAv/4pg ZkcD660rj56Jok+9+skSev3OHx3eAml5AryyQoKen16QccyXOPyUyB1VrrqQovFX WabQq2LL9yrc8Z4/cWcqu9wupNQiNgtOZNDCMndgeNk9flZSd0bnsZexLmYsd2mc WUiCYUBjzH9LcwjM+cdXPsu9M2mj6S8B0wsy7L9G/o7hpONkONqTR3ddm8TLINsm +22fmMoJW96CAU1yoTKRvZrte2UCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQGLako iD6aMidJ1qU7lvTBRrdw7jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDIyNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWcRsjANBgkqhkiG9w0BAQsFAAOCAQEAmQbwyVegTtM9GMyHvRYT Tf+UJML2MlymefY2G+k7HL+UQenJrR6qv1lgb+Ij3AkOuyzc/vl7Z1+e5s8Odbim MsDMIdiQHdlAsTEYxRpNSstGR3Zw49ZuUuMitbIa2DvaXqTmyezKcrskI2w4lF6i 9vn85KPSiSTzeDD4C9Hngho5hWnlagBWt3eIx+fW3eZNhWsGxbpPNZHM2WaMb0+v yhUU+G75Sc421QuTGKB2QzH1oWpuovIWHiorWSnn1GvOVUB4BfXlxOEfha89Fvjn eR1eoGI91HoSo7DHSMMdawHW1p+MBRiJPF2Sz3wgQJz9Uje+5p4+6iyrJOFdKDeR 4Q== -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:56 2024 by rpki-client on console-fra.rpki-client.org