$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150228.roa File: AS150228.roa (raw, json) Hash identifier: MBmog9OGav66i+ecWNaRTAQZdgFwdkK/QHI6N/Zb1kA= Subject key identifier: 6C:5B:37:DB:94:3F:EE:2C:21:9D:DE:27:78:7B:FA:A9:3F:F4:CB:EB Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0E9F5C5EE8CA9D7A01DD5257BF92930F248FDFE8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150228.roa Signing time: Sun 09 Feb 2025 07:15:31 +0000 ROA not before: Sun 09 Feb 2025 07:10:31 +0000 ROA not after: Sun 08 Feb 2026 07:15:31 +0000 asID: 150228 IP address blocks: 202.47.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 10:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:9f:5c:5e:e8:ca:9d:7a:01:dd:52:57:bf:92:93:0f:24:8f:df:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 9 07:10:31 2025 GMT Not After : Feb 8 07:15:31 2026 GMT Subject: CN=6C5B37DB943FEE2C219DDE27787BFAA93FF4CBEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:72:8e:00:c8:d7:d8:12:e0:21:9f:cd:4b:e1: 44:c4:86:52:13:ea:a5:02:21:1e:a4:32:78:6d:74: 76:70:1b:80:5f:55:f0:cc:14:9b:49:aa:90:c8:dd: 5d:6c:cf:f9:25:a5:c2:c5:e5:51:96:4d:90:ab:74: 89:7f:c0:d4:d0:3c:c2:98:41:3b:6a:7a:91:6c:1c: bf:4c:37:8d:72:a4:f7:4f:4d:f5:e3:05:20:3f:7f: c6:5a:ff:2b:64:22:e3:ce:70:3b:17:a4:31:92:fa: b9:11:f4:ac:20:73:b5:76:05:30:3c:88:ea:bd:08: ea:45:18:d1:c8:39:dd:93:db:87:47:cf:e3:db:51: 69:13:89:8f:42:4a:64:70:b1:eb:6f:ff:57:8c:31: e1:e0:bf:37:18:b8:03:88:7e:ef:f0:04:9d:c3:4b: fa:7f:9e:42:9f:ea:bd:b0:8b:ee:2f:e2:c4:bc:fe: 5c:f1:20:03:6a:f5:e5:67:b6:3a:02:5b:95:dc:cf: fd:9e:6e:1f:8a:eb:37:98:89:76:b5:ca:f1:8c:db: 39:83:f6:45:8d:44:b5:a6:6d:48:52:af:14:51:35: 81:00:13:ed:db:78:59:a2:23:40:0d:0f:93:36:57: ea:d6:4a:c8:de:5c:29:ad:a3:b1:d7:98:52:c7:7e: f6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5B:37:DB:94:3F:EE:2C:21:9D:DE:27:78:7B:FA:A9:3F:F4:CB:EB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150228.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.66.0/24 Signature Algorithm: sha256WithRSAEncryption 81:94:32:61:34:11:22:27:6f:ac:c6:ce:93:d0:9a:c7:96:58: 9e:1a:c4:47:aa:72:ab:34:61:75:5c:97:13:86:ba:4b:55:d0: 49:7c:96:57:70:95:27:0e:db:49:39:88:79:d9:be:72:03:05: 2a:a0:23:c6:a8:ed:c6:84:8d:d3:61:70:59:2a:17:37:4d:19: aa:b8:d1:3f:57:16:db:76:0e:e9:86:87:e0:cf:ff:1b:ad:22: ea:5f:37:9d:85:af:b6:ef:76:53:44:2b:83:49:f8:c9:e7:b2: ed:4a:91:31:1f:d2:39:48:91:28:a6:40:22:04:11:a9:ec:77: c2:04:5e:88:41:57:9c:7d:bc:5a:5e:fc:2d:ca:cd:b9:56:e3: 31:66:de:bd:d1:0c:ef:58:3a:df:46:3e:e2:a5:0f:59:d1:d7: 1c:e9:90:12:23:46:7e:69:50:2f:52:ac:53:fc:91:27:02:45: 46:4b:6e:de:74:5d:64:ab:4c:47:f1:cd:dd:8d:39:4c:25:cf: c4:fe:54:89:35:d2:ae:2c:c0:68:b0:01:e3:fb:0a:4e:5a:bc: be:c7:97:95:4e:63:d2:76:8a:04:ff:f6:d8:3e:32:e5:a9:0e: 1e:61:ab:5e:f2:16:2b:f1:09:43:77:d8:ed:63:86:ee:c4:65: 74:48:e1:f6 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUDp9cXujKnXoB3VJXv5KTDySP3+gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIwOTA3MTAzMVoX DTI2MDIwODA3MTUzMVowMzExMC8GA1UEAxMoNkM1QjM3REI5NDNGRUUyQzIxOURE RTI3Nzg3QkZBQTkzRkY0Q0JFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJxyjgDI19gS4CGfzUvhRMSGUhPqpQIhHqQyeG10dnAbgF9V8MwUm0mqkMjd XWzP+SWlwsXlUZZNkKt0iX/A1NA8wphBO2p6kWwcv0w3jXKk909N9eMFID9/xlr/ K2Qi485wOxekMZL6uRH0rCBztXYFMDyI6r0I6kUY0cg53ZPbh0fP49tRaROJj0JK ZHCx62//V4wx4eC/Nxi4A4h+7/AEncNL+n+eQp/qvbCL7i/ixLz+XPEgA2r15We2 OgJbldzP/Z5uH4rrN5iJdrXK8YzbOYP2RY1EtaZtSFKvFFE1gQAT7dt4WaIjQA0P kzZX6tZKyN5cKa2jsdeYUsd+9lsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRsWzfb lD/uLCGd3id4e/qpP/TL6zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDIyOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMovQjANBgkqhkiG9w0BAQsFAAOCAQEAgZQyYTQRIidvrMbOk9Ca x5ZYnhrER6pyqzRhdVyXE4a6S1XQSXyWV3CVJw7bSTmIedm+cgMFKqAjxqjtxoSN 02FwWSoXN00ZqrjRP1cW23YO6YaH4M//G60i6l83nYWvtu92U0Qrg0n4yeey7UqR MR/SOUiRKKZAIgQRqex3wgReiEFXnH28Wl78LcrNuVbjMWbevdEM71g630Y+4qUP WdHXHOmQEiNGfmlQL1KsU/yRJwJFRktu3nRdZKtMR/HN3Y05TCXPxP5UiTXSrizA aLAB4/sKTlq8vseXlU5j0naKBP/22D4y5akOHmGrXvIWK/EJQ3fY7WOG7sRldEjh 9g== -----END CERTIFICATE-----Generated at Thu Oct 30 05:42:03 2025 by rpki-client