$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150464.roa File: AS150464.roa (raw, json) Hash identifier: JY+BpD1mS6HvpDTeBxFhV3AkQmgoylEsIZuGAqKMg/0= Subject key identifier: 7E:2F:0D:E7:2D:0E:EF:D6:E0:C1:A6:A2:42:AA:E8:E9:18:40:F7:20 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 66F03E54545568BFC77B4C31523148C2A8E85816 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150464.roa Signing time: Tue 04 Feb 2025 09:56:51 +0000 ROA not before: Tue 04 Feb 2025 09:51:51 +0000 ROA not after: Tue 03 Feb 2026 09:56:51 +0000 asID: 150464 IP address blocks: 103.170.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:f0:3e:54:54:55:68:bf:c7:7b:4c:31:52:31:48:c2:a8:e8:58:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Feb 4 09:51:51 2025 GMT Not After : Feb 3 09:56:51 2026 GMT Subject: CN=7E2F0DE72D0EEFD6E0C1A6A242AAE8E91840F720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:88:c0:80:b2:cf:53:16:5d:ec:9a:f2:31:67: 72:fd:b8:d2:d1:ef:05:f0:31:ab:14:97:73:87:b7: 30:58:54:68:52:8f:8f:f4:d4:c2:76:be:f7:7c:77: ae:d0:f7:dd:2a:66:72:a5:1d:cf:0f:0f:6c:2f:43: 07:a3:7b:96:7e:59:1c:8c:05:8d:3c:9f:8a:9d:29: 99:6b:2a:8d:51:a7:50:ad:85:01:66:c6:58:99:fc: 90:d8:f8:10:97:7f:bb:c5:5f:0b:fe:8d:d6:6c:92: 50:6f:16:07:f0:58:c4:9f:e8:12:22:f5:41:b4:fd: 37:2b:ca:46:80:c3:0e:f4:52:b0:b8:eb:36:c9:5d: 53:90:af:55:78:2e:c9:16:0f:d8:6d:b6:ed:c8:1f: 1d:67:b0:8e:bb:30:77:b4:b2:6b:c7:b5:30:8e:c8: 1b:db:1e:67:d3:82:1b:11:10:6a:06:3c:b5:8b:fc: ca:74:00:15:54:14:12:8c:5b:3b:7b:ae:93:b4:d7: 59:ce:04:e7:12:7e:8a:ec:38:a9:cc:0e:49:ea:d1: 4a:d1:50:f8:bb:c4:7c:e1:67:53:58:28:22:d0:73: b4:04:18:a7:2b:c0:12:76:af:a9:2e:fb:0e:0b:4c: 02:46:8f:00:09:ff:5a:8d:97:86:6e:88:9c:09:0e: 25:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:2F:0D:E7:2D:0E:EF:D6:E0:C1:A6:A2:42:AA:E8:E9:18:40:F7:20 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150464.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.198.0/24 Signature Algorithm: sha256WithRSAEncryption 84:9c:07:e7:62:2f:a3:9a:51:91:9a:aa:d9:c8:8a:e9:1e:0c: b0:2d:a5:f1:44:f7:d2:9a:f3:9c:f7:86:f2:01:a1:a6:3c:32: 4b:54:d2:da:ce:cd:ed:3e:13:28:bd:56:b7:93:ec:da:dd:7a: 03:20:f7:50:87:4d:cd:3b:9c:db:2d:aa:a6:65:1e:7e:5b:ef: 44:8b:3a:fe:bf:e6:6e:39:ae:46:5d:83:0e:c6:ea:d3:98:09: ba:04:79:bf:90:ca:e6:e2:13:93:d7:6b:d1:9e:ed:3d:2c:7f: ec:d0:f4:a7:4d:b5:6f:29:9a:7b:22:01:d5:b5:0d:f0:55:d3: e3:40:4f:95:87:fd:03:7c:f0:a8:86:82:1c:d8:87:c1:5f:d6: 5e:27:f6:87:92:e1:bf:ce:20:46:a6:6c:e7:31:34:d4:16:4d: 18:af:58:35:66:7b:39:32:1f:c6:a6:f9:50:ae:f7:f2:54:bc: d0:46:48:4f:3a:6e:fa:e9:43:45:8d:f2:1d:5f:48:2b:d6:69: f4:08:de:97:16:a7:06:52:0f:37:59:6a:d5:79:a2:c4:b8:c0: 3c:c8:b0:60:8c:fe:be:c6:02:62:93:35:12:60:5d:ff:e2:ce: 3a:96:9f:32:7a:05:e0:ba:33:1f:53:2f:59:12:96:07:27:ea: 4e:5b:98:02 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUZvA+VFRVaL/He0wxUjFIwqjoWBYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIwNDA5NTE1MVoX DTI2MDIwMzA5NTY1MVowMzExMC8GA1UEAxMoN0UyRjBERTcyRDBFRUZENkUwQzFB NkEyNDJBQUU4RTkxODQwRjcyMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGIwICyz1MWXeya8jFncv240tHvBfAxqxSXc4e3MFhUaFKPj/TUwna+93x3 rtD33SpmcqUdzw8PbC9DB6N7ln5ZHIwFjTyfip0pmWsqjVGnUK2FAWbGWJn8kNj4 EJd/u8VfC/6N1mySUG8WB/BYxJ/oEiL1QbT9NyvKRoDDDvRSsLjrNsldU5CvVXgu yRYP2G227cgfHWewjrswd7Sya8e1MI7IG9seZ9OCGxEQagY8tYv8ynQAFVQUEoxb O3uuk7TXWc4E5xJ+iuw4qcwOSerRStFQ+LvEfOFnU1goItBztAQYpyvAEnavqS77 DgtMAkaPAAn/Wo2Xhm6InAkOJa0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBR+Lw3n LQ7v1uDBpqJCqujpGED3IDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDQ2NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeqxjANBgkqhkiG9w0BAQsFAAOCAQEAhJwH52Ivo5pRkZqq2ciK 6R4MsC2l8UT30prznPeG8gGhpjwyS1TS2s7N7T4TKL1Wt5Ps2t16AyD3UIdNzTuc 2y2qpmUeflvvRIs6/r/mbjmuRl2DDsbq05gJugR5v5DK5uITk9dr0Z7tPSx/7ND0 p021bymaeyIB1bUN8FXT40BPlYf9A3zwqIaCHNiHwV/WXif2h5Lhv84gRqZs5zE0 1BZNGK9YNWZ7OTIfxqb5UK738lS80EZITzpu+ulDRY3yHV9IK9Zp9AjelxanBlIP N1lq1XmixLjAPMiwYIz+vsYCYpM1EmBd/+LOOpafMnoF4LozH1MvWRKWByfqTluY Ag== -----END CERTIFICATE-----Generated at Sat Apr 5 06:20:24 2025 by rpki-client