$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150257.roa File: AS150257.roa (raw, json) Hash identifier: vyfQrw5OVzBNaZkaQydqgec8TRKax6q5GDHm+IjS5cc= Subject key identifier: 0A:93:B2:59:EE:7D:BE:BC:04:43:07:83:7E:4E:1F:B8:7C:69:15:34 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2E3B9315527A62010FAC800A7B618044680760B8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150257.roa Signing time: Wed 02 Oct 2024 08:00:00 +0000 ROA not before: Wed 02 Oct 2024 07:55:00 +0000 ROA not after: Wed 01 Oct 2025 08:00:00 +0000 asID: 150257 IP address blocks: 103.30.192.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:3b:93:15:52:7a:62:01:0f:ac:80:0a:7b:61:80:44:68:07:60:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Oct 2 07:55:00 2024 GMT Not After : Oct 1 08:00:00 2025 GMT Subject: CN=0A93B259EE7DBEBC044307837E4E1FB87C691534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:de:ad:fc:10:65:ba:c3:52:54:a0:5a:5d:7b: 1a:42:35:a4:3a:0c:d9:19:9c:59:f1:ad:66:fc:9a: 4a:53:2a:11:fe:cf:0e:cf:de:2d:b4:01:21:2d:ef: 1d:db:0b:9d:27:20:20:81:55:ac:71:16:5c:d0:ea: 2b:55:69:ed:2e:6d:5c:19:9d:cf:1c:af:63:03:5c: 62:b5:25:1b:c1:78:2d:7f:e6:93:39:5e:87:43:86: 55:2c:79:9f:e2:a2:ac:78:fc:ba:b2:7a:1a:6a:8d: 4e:d1:5e:60:9c:d3:99:63:5a:55:e1:1d:fe:f9:e7: a0:0e:3c:ff:99:13:05:8d:e5:9a:f3:a2:90:b2:ca: c7:e2:60:61:72:6f:29:f3:c4:0a:3b:58:e8:a0:92: 07:fd:71:3c:7c:12:30:3c:a3:52:2f:19:b6:2a:35: 6e:02:32:09:69:8e:a2:a4:89:a5:d6:27:39:04:f0: cb:2e:ea:34:0f:30:98:b3:d0:02:c5:05:e2:07:76: 44:c6:1c:32:4f:88:7d:4a:f2:21:52:71:0b:55:36: c4:bb:45:a9:8e:aa:c5:01:7e:d0:7e:92:c6:b9:85: cd:f2:a5:6d:29:45:54:5f:34:b9:5c:3d:00:59:74: 2b:f8:c5:18:aa:09:e9:45:3a:78:0e:06:76:3d:aa: 7b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:93:B2:59:EE:7D:BE:BC:04:43:07:83:7E:4E:1F:B8:7C:69:15:34 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150257.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.30.192.0/23 Signature Algorithm: sha256WithRSAEncryption 09:7b:70:fa:e5:c4:4c:a1:8b:6f:dd:ae:91:6e:bb:1b:74:4e: 7f:83:07:37:5d:9a:d3:4e:1a:d7:89:85:5c:a6:a3:4b:cd:d3: ca:5c:a6:3b:1e:b6:43:04:b3:a6:2d:3f:b4:1d:1b:e3:49:ec: 64:47:ab:ca:bd:6e:a8:1e:82:d9:a1:2e:06:34:3c:e1:2d:4f: b0:e0:75:98:83:a2:6a:2e:e9:33:19:eb:c9:3c:0f:bd:a1:9f: 32:ec:0d:8a:d3:57:26:1e:de:1c:92:ad:45:55:50:0f:0e:91: 6f:6c:07:b5:4b:cc:dc:55:b2:39:62:03:63:5e:31:00:c1:6e: cc:ab:2a:82:b8:db:1b:e9:25:95:c3:ee:8e:f9:ad:8b:02:fd: d1:17:45:30:78:18:66:ff:f6:40:18:e4:8c:f7:0b:82:85:37: 3c:c5:2f:a4:5c:c4:c6:c7:97:1d:49:88:75:09:7d:13:dc:62: be:05:5b:de:f5:8e:14:51:84:4c:ef:c8:8a:d7:f8:6c:bf:4c: b7:07:a0:20:04:5a:c3:be:9f:b4:92:6c:49:37:9d:9e:83:85: 83:4a:bb:70:00:df:ed:07:b2:0c:d2:20:17:7f:bf:3a:4e:ff: 87:79:40:09:e5:47:df:25:11:4a:d3:69:83:33:1e:16:51:1c: 57:b1:17:20 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIULjuTFVJ6YgEPrIAKe2GARGgHYLgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAwMjA3NTUwMFoX DTI1MTAwMTA4MDAwMFowMzExMC8GA1UEAxMoMEE5M0IyNTlFRTdEQkVCQzA0NDMw NzgzN0U0RTFGQjg3QzY5MTUzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALTerfwQZbrDUlSgWl17GkI1pDoM2RmcWfGtZvyaSlMqEf7PDs/eLbQBIS3v HdsLnScgIIFVrHEWXNDqK1Vp7S5tXBmdzxyvYwNcYrUlG8F4LX/mkzleh0OGVSx5 n+KirHj8urJ6GmqNTtFeYJzTmWNaVeEd/vnnoA48/5kTBY3lmvOikLLKx+JgYXJv KfPECjtY6KCSB/1xPHwSMDyjUi8Ztio1bgIyCWmOoqSJpdYnOQTwyy7qNA8wmLPQ AsUF4gd2RMYcMk+IfUryIVJxC1U2xLtFqY6qxQF+0H6SxrmFzfKlbSlFVF80uVw9 AFl0K/jFGKoJ6UU6eA4Gdj2qe+sCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQKk7JZ 7n2+vARDB4N+Th+4fGkVNDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDI1Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWcewDANBgkqhkiG9w0BAQsFAAOCAQEACXtw+uXETKGLb92ukW67 G3ROf4MHN12a004a14mFXKajS83TylymOx62QwSzpi0/tB0b40nsZEeryr1uqB6C 2aEuBjQ84S1PsOB1mIOiai7pMxnryTwPvaGfMuwNitNXJh7eHJKtRVVQDw6Rb2wH tUvM3FWyOWIDY14xAMFuzKsqgrjbG+kllcPujvmtiwL90RdFMHgYZv/2QBjkjPcL goU3PMUvpFzExseXHUmIdQl9E9xivgVb3vWOFFGETO/Iitf4bL9MtwegIARaw76f tJJsSTednoOFg0q7cADf7QeyDNIgF3+/Ok7/h3lACeVH3yURStNpgzMeFlEcV7EX IA== -----END CERTIFICATE-----Generated at Sun Feb 16 21:06:10 2025 by rpki-client