$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150257.roa File: AS150257.roa (raw, json) Hash identifier: gHplWi2bvIkknoyKJXBEdhG/YmDsX96YE3Koh7fx+pk= Subject key identifier: F8:DC:6C:C9:7C:C6:3D:DF:98:BC:52:F5:CC:13:20:92:B1:FD:A0:52 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 405B7F96DFDF219DF53F8E29CD3A602187812E30 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150257.roa Signing time: Wed 01 Nov 2023 08:00:00 +0000 ROA not before: Wed 01 Nov 2023 07:55:00 +0000 ROA not after: Wed 30 Oct 2024 08:00:00 +0000 asID: 150257 IP address blocks: 103.30.192.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:5b:7f:96:df:df:21:9d:f5:3f:8e:29:cd:3a:60:21:87:81:2e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 1 07:55:00 2023 GMT Not After : Oct 30 08:00:00 2024 GMT Subject: CN=F8DC6CC97CC63DDF98BC52F5CC132092B1FDA052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:90:11:82:e2:7e:24:c0:37:e3:8b:98:0a:b9: 4c:68:35:ec:ed:4e:6d:c1:07:a3:c3:ae:bb:e5:59: 5e:be:e0:18:20:78:47:e9:da:f6:d4:c0:89:e1:b3: 9d:35:7c:76:62:09:4f:9d:ba:42:0f:57:5d:bb:30: ed:ba:ab:c2:21:3e:e0:d6:58:24:99:e5:2c:71:20: 4b:f4:29:49:b9:14:79:e3:67:0e:3b:e8:b4:95:3c: 2d:2f:d2:25:af:05:f0:94:08:07:08:f8:e6:25:e1: 6f:5f:8c:50:ce:50:cd:1d:44:91:8a:b0:a0:65:02: 8b:46:1a:55:cb:79:cc:30:37:99:22:9e:e3:88:10: 8a:9b:be:6a:b5:99:9a:19:89:1c:c5:4e:62:d0:0d: 84:b2:50:bc:08:ac:87:be:f0:a9:81:82:61:c1:d0: da:c7:be:a6:cc:b0:6b:a5:8a:e8:fa:c5:64:36:c5: c4:c9:7d:2a:34:66:83:c3:03:0d:ac:a7:51:e2:26: f2:42:b1:fb:d2:bc:f5:80:3e:58:01:53:8f:25:5c: de:3e:bf:5a:f1:4b:2c:25:de:d3:dd:3b:d9:75:19: 7c:2b:06:79:ea:fe:54:d5:75:95:5c:29:b6:7a:1e: b3:13:a6:f0:6a:88:ea:0c:f4:08:aa:ae:ed:e4:af: 6f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DC:6C:C9:7C:C6:3D:DF:98:BC:52:F5:CC:13:20:92:B1:FD:A0:52 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150257.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.30.192.0/23 Signature Algorithm: sha256WithRSAEncryption 77:bc:2e:d4:84:91:35:41:28:f9:28:91:e3:5d:4d:01:80:84: 51:93:ba:73:a0:6c:fe:d6:d0:40:15:c6:be:a5:a3:cb:2b:58: 9d:a2:ce:f7:4e:a3:4a:1c:9b:3c:35:75:2a:77:16:ce:ca:5a: 1e:48:d5:18:40:7f:c3:97:46:dc:d1:77:18:0c:88:59:54:72: ba:8d:ea:f9:11:f4:03:62:7f:46:ae:64:c8:52:24:41:a4:8c: 5a:11:19:e1:ba:46:88:a2:e0:12:c2:78:c3:b9:e4:e0:ed:e0: 0f:b0:3b:75:88:a0:39:1f:b1:fc:07:4c:31:08:3d:f9:0b:36: ea:f8:b4:1e:c4:aa:1e:9f:fd:50:ac:a0:75:18:ab:b2:a4:7b: 97:ef:0b:f7:1b:ba:48:7e:0c:ed:94:34:f3:4a:28:55:7b:08: e3:3d:19:52:b1:0e:cd:a9:c4:ba:ee:10:22:7b:99:49:61:26: 11:78:d5:ea:9c:3b:6a:b5:00:d7:88:09:d5:4d:47:dc:e2:de: f0:b4:7b:cb:29:9d:ac:f9:48:ee:ae:71:8a:ef:80:18:de:e2: c4:31:01:d2:d0:2d:4f:91:92:b6:a7:91:6f:f4:83:27:a5:24: 59:c0:86:0f:47:a1:cf:9d:15:50:28:9a:eb:46:00:fa:09:f7: 53:5d:f5:52 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUQFt/lt/fIZ31P44pzTpgIYeBLjAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEwMTA3NTUwMFoX DTI0MTAzMDA4MDAwMFowMzExMC8GA1UEAxMoRjhEQzZDQzk3Q0M2M0RERjk4QkM1 MkY1Q0MxMzIwOTJCMUZEQTA1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM2QEYLifiTAN+OLmAq5TGg17O1ObcEHo8Ouu+VZXr7gGCB4R+na9tTAieGz nTV8dmIJT526Qg9XXbsw7bqrwiE+4NZYJJnlLHEgS/QpSbkUeeNnDjvotJU8LS/S Ja8F8JQIBwj45iXhb1+MUM5QzR1EkYqwoGUCi0YaVct5zDA3mSKe44gQipu+arWZ mhmJHMVOYtANhLJQvAish77wqYGCYcHQ2se+psywa6WK6PrFZDbFxMl9KjRmg8MD DaynUeIm8kKx+9K89YA+WAFTjyVc3j6/WvFLLCXe09072XUZfCsGeer+VNV1lVwp tnoesxOm8GqI6gz0CKqu7eSvb0ECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBT43GzJ fMY935i8UvXMEyCSsf2gUjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDI1Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWcewDANBgkqhkiG9w0BAQsFAAOCAQEAd7wu1ISRNUEo+SiR411N AYCEUZO6c6Bs/tbQQBXGvqWjyytYnaLO906jShybPDV1KncWzspaHkjVGEB/w5dG 3NF3GAyIWVRyuo3q+RH0A2J/Rq5kyFIkQaSMWhEZ4bpGiKLgEsJ4w7nk4O3gD7A7 dYigOR+x/AdMMQg9+Qs26vi0HsSqHp/9UKygdRirsqR7l+8L9xu6SH4M7ZQ080oo VXsI4z0ZUrEOzanEuu4QInuZSWEmEXjV6pw7arUA14gJ1U1H3OLe8LR7yymdrPlI 7q5xiu+AGN7ixDEB0tAtT5GStqeRb/SDJ6UkWcCGD0ehz50VUCia60YA+gn3U131 Ug== -----END CERTIFICATE-----Generated at Thu May 9 00:29:16 2024 by rpki-client on console-ams.rpki-client.org