$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150266.roa File: AS150266.roa (raw, json) Hash identifier: Ii1Db4FPr3qGsssotdhYcIiowKTcXphqHu9Xc2F9biE= Subject key identifier: DA:EE:B7:20:0E:46:A7:09:5F:27:51:F5:EE:F1:DD:DB:63:12:FF:14 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 71CE33363EFD5204864D8012D04DD3C64C79B2A0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150266.roa Signing time: Mon 20 May 2024 05:00:00 +0000 ROA not before: Mon 20 May 2024 04:55:00 +0000 ROA not after: Mon 19 May 2025 05:00:00 +0000 asID: 150266 IP address blocks: 103.91.137.0/24 maxlen: 24 103.218.183.0/24 maxlen: 24 2001:df2:7b40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ce:33:36:3e:fd:52:04:86:4d:80:12:d0:4d:d3:c6:4c:79:b2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 20 04:55:00 2024 GMT Not After : May 19 05:00:00 2025 GMT Subject: CN=DAEEB7200E46A7095F2751F5EEF1DDDB6312FF14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ad:77:37:2b:bc:b9:41:3b:39:ed:3a:b8:71: 49:8a:db:48:65:2f:11:6f:d2:1f:10:7e:5b:00:e0: 04:0a:ce:88:c5:27:25:e4:9e:64:01:5b:72:75:68: f0:5e:fd:de:5d:2c:01:4e:f4:ab:1f:97:f0:2a:a1: 2a:8d:62:dc:3d:5b:04:76:1d:55:e5:91:5e:46:6a: 66:ce:13:cc:cc:23:f9:7e:38:59:79:5f:f8:e0:d2: c6:00:66:99:ee:76:47:48:6b:5c:55:09:44:f2:41: 67:44:36:50:5a:d4:20:a1:39:6e:84:39:02:52:39: 54:81:33:05:0b:74:3d:b0:40:00:82:b1:12:aa:18: a0:72:c7:df:90:b0:59:41:19:3b:c0:8d:20:f7:95: c6:30:51:2f:0a:05:87:6d:41:e5:86:0c:8a:af:54: 1e:f1:f5:3d:e2:13:68:69:4c:c6:62:98:b0:db:12: c5:65:4a:fb:69:8d:5a:32:ce:52:f0:0b:f7:7f:c5: 71:13:71:a8:32:fa:c0:30:72:e6:7a:1f:d7:27:93: 40:75:01:19:8f:04:88:26:c5:cf:6c:8c:e6:a2:e2: 9f:df:c5:5f:e3:d3:1a:06:79:d4:88:fd:30:d6:1a: b0:c9:9d:2c:f6:68:32:a7:cf:e9:97:95:e8:b8:d0: 8d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:EE:B7:20:0E:46:A7:09:5F:27:51:F5:EE:F1:DD:DB:63:12:FF:14 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150266.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.91.137.0/24 103.218.183.0/24 IPv6: 2001:df2:7b40::/48 Signature Algorithm: sha256WithRSAEncryption 8f:a7:08:dc:28:54:97:fd:ca:17:19:a8:15:3b:90:05:a6:90: 67:53:f2:69:53:dd:3a:95:6d:ee:9a:80:34:41:79:30:36:98: 33:1a:df:84:a3:c1:c5:ad:59:cb:2d:17:a2:af:34:a7:b3:19: db:06:59:e7:eb:f1:e7:fb:60:95:ed:95:b1:dd:93:67:a0:25: 6c:8d:e0:82:c4:9e:21:00:c7:52:23:e7:1b:8e:93:2f:8c:a6: 5f:ee:9b:e5:ce:04:fc:7d:c3:c1:8c:9a:63:04:5a:c5:37:40: 9a:ce:fe:5e:7e:df:e9:12:d5:03:e5:0e:51:32:cd:d3:b2:fb: 77:62:51:57:ff:2c:46:00:db:9c:da:71:34:c1:e0:ab:e4:28: 89:46:9c:f5:70:ce:2d:b8:fd:16:39:e8:ce:7e:97:52:28:38: 3c:f6:c7:54:8b:08:3b:9c:2a:a9:57:d9:de:b2:ac:16:d8:1a: b7:d0:f5:0f:db:57:d4:f1:05:7a:37:0d:92:cd:21:ac:9e:58: ea:b2:67:dc:35:03:e8:63:7a:9e:00:4b:fb:e3:dd:d1:ef:62: 6a:02:8e:ca:0b:b4:82:8b:f8:3c:77:31:d9:13:02:63:6b:09: f6:09:12:bb:38:c6:d7:0b:d3:ad:27:f7:c4:31:15:1f:a4:05: 12:fb:98:c5 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUcc4zNj79UgSGTYAS0E3Txkx5sqAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUyMDA0NTUwMFoX DTI1MDUxOTA1MDAwMFowMzExMC8GA1UEAxMoREFFRUI3MjAwRTQ2QTcwOTVGMjc1 MUY1RUVGMUREREI2MzEyRkYxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMKtdzcrvLlBOzntOrhxSYrbSGUvEW/SHxB+WwDgBArOiMUnJeSeZAFbcnVo 8F793l0sAU70qx+X8CqhKo1i3D1bBHYdVeWRXkZqZs4TzMwj+X44WXlf+ODSxgBm me52R0hrXFUJRPJBZ0Q2UFrUIKE5boQ5AlI5VIEzBQt0PbBAAIKxEqoYoHLH35Cw WUEZO8CNIPeVxjBRLwoFh21B5YYMiq9UHvH1PeITaGlMxmKYsNsSxWVK+2mNWjLO UvAL93/FcRNxqDL6wDBy5nof1yeTQHUBGY8EiCbFz2yM5qLin9/FX+PTGgZ51Ij9 MNYasMmdLPZoMqfP6ZeV6LjQjSkCAwEAAaOCAecwggHjMB0GA1UdDgQWBBTa7rcg DkanCV8nUfXu8d3bYxL/FDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDI2Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQnMCUw EgQCAAEwDAMEAGdbiQMEAGfatzAPBAIAAjAJAwcAIAEN8ntAMA0GCSqGSIb3DQEB CwUAA4IBAQCPpwjcKFSX/coXGagVO5AFppBnU/JpU906lW3umoA0QXkwNpgzGt+E o8HFrVnLLReirzSnsxnbBlnn6/Hn+2CV7ZWx3ZNnoCVsjeCCxJ4hAMdSI+cbjpMv jKZf7pvlzgT8fcPBjJpjBFrFN0Cazv5eft/pEtUD5Q5RMs3Tsvt3YlFX/yxGANuc 2nE0weCr5CiJRpz1cM4tuP0WOejOfpdSKDg89sdUiwg7nCqpV9nesqwW2Bq30PUP 21fU8QV6Nw2SzSGsnljqsmfcNQPoY3qeAEv7493R72JqAo7KC7SCi/g8dzHZEwJj awn2CRK7OMbXC9OtJ/fEMRUfpAUS+5jF -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:56 2024 by rpki-client on console-fra.rpki-client.org