$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150925.roa File: AS150925.roa (raw, json) Hash identifier: QhPIQoYP0kqpfkLgBiMQPfbcdGcSJSdbObzxRCkOP2s= Subject key identifier: 17:59:D1:BD:ED:80:91:2F:72:F5:8A:06:C4:23:AE:6F:1A:D5:37:36 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5A45AA450092CB660657D72EF7E463EE810E294A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150925.roa Signing time: Wed 22 Jan 2025 00:00:00 +0000 ROA not before: Tue 21 Jan 2025 23:55:00 +0000 ROA not after: Wed 21 Jan 2026 00:00:00 +0000 asID: 150925 IP address blocks: 103.102.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:45:aa:45:00:92:cb:66:06:57:d7:2e:f7:e4:63:ee:81:0e:29:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jan 21 23:55:00 2025 GMT Not After : Jan 21 00:00:00 2026 GMT Subject: CN=1759D1BDED80912F72F58A06C423AE6F1AD53736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b8:69:1c:ae:a7:29:4d:6e:f4:bd:90:f2:c0: 0a:0b:54:70:f4:8a:8d:07:1b:8f:72:62:dd:83:88: eb:83:4a:1a:8b:ad:96:0a:68:36:c3:07:d8:10:7d: be:6e:39:e3:a8:3e:11:e8:67:6f:64:96:cc:db:e9: 6f:d9:06:33:8e:01:1b:63:b0:0a:8d:e3:e2:00:dc: 46:22:cf:1c:1f:12:b3:56:e4:fc:ed:a9:bf:34:f2: 76:13:7e:d3:f3:ed:5f:ef:53:f0:d2:ac:0f:39:67: c0:67:91:34:6d:33:1c:ec:02:ab:68:a0:54:13:e2: 9a:2c:a2:a9:5b:ec:c7:25:76:51:76:18:9b:83:6a: 71:61:d5:24:4b:36:87:f5:9a:3d:ae:45:10:9c:68: 5a:8d:92:f6:9f:8c:ad:4d:5c:9e:80:82:b3:bb:ec: 13:60:37:0b:a6:f1:c6:1a:23:4a:9d:e7:7f:46:b4: 95:79:d5:8b:30:9d:73:0b:7a:9a:18:6f:85:8e:f1: 63:7e:76:43:0b:16:d6:ec:69:3f:04:b4:7b:2a:3e: 0d:e8:6d:cc:0a:20:d8:7e:54:7a:9a:37:dd:1b:f1: cc:a7:7b:f3:7f:4d:37:1c:39:53:63:30:9a:2c:de: ab:61:ad:38:d9:a2:0d:f8:2c:70:2a:39:83:b1:b4: 55:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:59:D1:BD:ED:80:91:2F:72:F5:8A:06:C4:23:AE:6F:1A:D5:37:36 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150925.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.16.0/23 Signature Algorithm: sha256WithRSAEncryption 33:18:98:19:41:1f:04:aa:d6:c7:ef:f5:49:03:54:55:ef:1a: db:6c:06:fe:f0:c0:1a:eb:c7:55:ec:7e:5f:12:42:e5:fd:78: 2f:44:23:ff:a9:42:f6:9a:3c:47:d4:07:df:68:5d:0f:b3:8f: 44:34:7c:52:5d:eb:d6:17:5f:8d:12:33:32:c1:fb:ac:c3:df: 39:32:70:73:e3:43:c8:38:60:d2:86:c6:a6:f4:81:02:78:c7: a7:ce:5f:8c:34:19:aa:5d:9b:4c:5e:d4:94:c4:d2:68:5c:01: 91:94:3f:77:ae:2b:82:cc:14:e5:a3:7c:09:08:a1:ad:dd:ac: 0e:ac:59:d1:21:d0:ff:68:67:b4:23:f6:18:05:f7:30:89:fe: 53:a5:80:60:8b:5d:81:7e:92:34:b9:4a:c1:be:b0:3e:1a:b5: 87:c2:1d:51:7b:fa:b8:ae:a4:4b:72:11:b4:e7:1f:07:fd:48: e5:f2:39:7d:bf:6c:50:fb:1f:d1:18:9e:06:64:2f:44:92:b3: 09:d3:f7:62:d0:58:d3:0a:2a:c3:f6:0c:57:3b:7a:63:32:4c: 3c:09:e9:cf:3e:52:56:64:08:8c:6f:b4:5e:c1:29:6f:e4:4d: a7:39:13:ea:18:95:c0:fe:db:db:e9:0f:00:4b:53:1e:de:b5: 7a:f7:ad:60 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUWkWqRQCSy2YGV9cu9+Rj7oEOKUowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEyMTIzNTUwMFoX DTI2MDEyMTAwMDAwMFowMzExMC8GA1UEAxMoMTc1OUQxQkRFRDgwOTEyRjcyRjU4 QTA2QzQyM0FFNkYxQUQ1MzczNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMq4aRyupylNbvS9kPLACgtUcPSKjQcbj3Ji3YOI64NKGoutlgpoNsMH2BB9 vm4546g+Eehnb2SWzNvpb9kGM44BG2OwCo3j4gDcRiLPHB8Ss1bk/O2pvzTydhN+ 0/PtX+9T8NKsDzlnwGeRNG0zHOwCq2igVBPimiyiqVvsxyV2UXYYm4NqcWHVJEs2 h/WaPa5FEJxoWo2S9p+MrU1cnoCCs7vsE2A3C6bxxhojSp3nf0a0lXnVizCdcwt6 mhhvhY7xY352QwsW1uxpPwS0eyo+DehtzAog2H5Uepo33RvxzKd7839NNxw5U2Mw mizeq2GtONmiDfgscCo5g7G0VV0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQXWdG9 7YCRL3L1igbEI65vGtU3NjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDkyNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWdmEDANBgkqhkiG9w0BAQsFAAOCAQEAMxiYGUEfBKrWx+/1SQNU Ve8a22wG/vDAGuvHVex+XxJC5f14L0Qj/6lC9po8R9QH32hdD7OPRDR8Ul3r1hdf jRIzMsH7rMPfOTJwc+NDyDhg0obGpvSBAnjHp85fjDQZql2bTF7UlMTSaFwBkZQ/ d64rgswU5aN8CQihrd2sDqxZ0SHQ/2hntCP2GAX3MIn+U6WAYItdgX6SNLlKwb6w Phq1h8IdUXv6uK6kS3IRtOcfB/1I5fI5fb9sUPsf0RieBmQvRJKzCdP3YtBY0woq w/YMVzt6YzJMPAnpzz5SVmQIjG+0XsEpb+RNpzkT6hiVwP7b2+kPAEtTHt61evet YA== -----END CERTIFICATE-----Generated at Sun Feb 16 20:53:41 2025 by rpki-client