$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150240.roa File: AS150240.roa (raw, json) Hash identifier: piSQVGgMlQ+etd+vU+/oJI+55JuuNG/g6hUWvLLU04E= Subject key identifier: 08:78:21:80:5D:43:48:B6:CB:DA:0A:A1:EB:0A:73:F8:FA:97:48:32 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 501661FD4CB05FA82558A26AE4F8D07FB2BAD798 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150240.roa Signing time: Mon 08 Sep 2025 08:00:00 +0000 ROA not before: Mon 08 Sep 2025 07:55:00 +0000 ROA not after: Mon 07 Sep 2026 08:00:00 +0000 asID: 150240 IP address blocks: 103.69.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:16:61:fd:4c:b0:5f:a8:25:58:a2:6a:e4:f8:d0:7f:b2:ba:d7:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 8 07:55:00 2025 GMT Not After : Sep 7 08:00:00 2026 GMT Subject: CN=087821805D4348B6CBDA0AA1EB0A73F8FA974832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ce:b6:0c:72:a2:9e:11:d2:3e:fa:9c:2a:98: 7c:dd:ce:1a:c2:6e:b4:93:ca:fd:ba:c5:48:0f:fb: 4b:2a:42:a2:91:a5:c7:00:5c:3e:98:34:67:a7:d5: 02:53:b0:e0:4f:66:f6:2b:a8:1f:de:d9:1c:ac:55: 7c:af:58:16:09:f1:db:1c:3e:7b:48:81:ba:9d:92: 1e:76:06:d1:13:e3:d7:40:5a:de:aa:5c:ba:e2:fb: 5b:79:fa:14:4b:49:28:8f:2b:e2:f1:e0:de:cd:7d: 6e:8b:d1:d1:46:ae:39:e3:78:88:9d:6e:0f:1d:f7: 27:fb:56:8e:86:1d:d6:e6:dc:5f:3d:cf:0d:3c:04: e5:f1:45:ac:f2:5e:60:7b:8b:6a:eb:f2:37:61:01: df:f0:09:2a:75:94:5c:cd:51:fc:60:6d:f7:ea:cf: f8:c3:b9:6c:8a:ee:ca:dc:58:17:0d:8c:d2:8e:40: ec:38:2c:a9:36:6f:b4:d4:76:0e:1c:b6:91:0a:f8: 9e:33:05:02:1a:69:bd:b8:fe:a9:eb:8c:c7:33:70: fa:f2:cf:d6:d9:db:5f:07:f5:3a:ab:5a:10:98:ea: 0a:87:6b:e3:e5:47:2b:94:b3:f4:18:04:19:ac:5c: 41:25:88:61:53:12:1b:d4:e9:19:34:2f:9e:3f:e1: 89:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:78:21:80:5D:43:48:B6:CB:DA:0A:A1:EB:0A:73:F8:FA:97:48:32 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150240.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.69.233.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:65:44:83:8a:2c:fe:32:78:63:ef:ff:25:50:fa:2e:8e:a6: 77:c5:1a:15:e7:da:54:41:a1:a8:bf:9d:d8:25:95:d8:79:b7: 39:8e:1f:d9:b8:42:69:26:db:42:2e:c6:75:e9:d2:a4:49:98: 98:b3:ed:d8:8e:8e:89:fd:4a:d2:27:92:a1:40:9c:80:28:a4: 14:be:c2:e1:ea:18:63:c4:34:b0:4c:50:33:8f:fb:17:4f:43: 0b:89:d2:8f:20:14:74:7d:9c:85:94:21:fb:6b:e2:1a:71:d4: e6:a2:75:55:9a:1a:95:84:b2:72:5f:49:67:be:b5:58:cc:8f: 25:db:2b:f4:14:70:45:08:8b:a9:22:0a:e0:f6:50:9c:95:25: 32:c9:c4:b4:6c:4b:d1:f2:8a:b1:b7:44:c9:b7:a4:96:66:2a: b4:99:69:37:71:40:83:50:a3:c0:f1:2b:2e:f5:65:79:45:3a: 21:6f:37:d2:7a:ad:18:61:7a:1c:d4:fd:50:1d:55:46:8c:eb: 3c:8e:28:d3:42:08:90:74:4b:77:96:a0:f7:f8:2c:5e:77:06: df:32:1e:c8:3e:62:66:98:da:44:1f:40:d8:8e:35:69:49:58: 5b:c9:9e:67:28:31:8b:9f:06:f1:e4:fb:e3:b5:8d:85:3d:09: 63:3e:f5:a0 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUUBZh/UywX6glWKJq5PjQf7K615gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkwODA3NTUwMFoX DTI2MDkwNzA4MDAwMFowMzExMC8GA1UEAxMoMDg3ODIxODA1RDQzNDhCNkNCREEw QUExRUIwQTczRjhGQTk3NDgzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALrOtgxyop4R0j76nCqYfN3OGsJutJPK/brFSA/7SypCopGlxwBcPpg0Z6fV AlOw4E9m9iuoH97ZHKxVfK9YFgnx2xw+e0iBup2SHnYG0RPj10Ba3qpcuuL7W3n6 FEtJKI8r4vHg3s19bovR0UauOeN4iJ1uDx33J/tWjoYd1ubcXz3PDTwE5fFFrPJe YHuLauvyN2EB3/AJKnWUXM1R/GBt9+rP+MO5bIruytxYFw2M0o5A7DgsqTZvtNR2 Dhy2kQr4njMFAhppvbj+qeuMxzNw+vLP1tnbXwf1OqtaEJjqCodr4+VHK5Sz9BgE GaxcQSWIYVMSG9TpGTQvnj/hiQ8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQIeCGA XUNItsvaCqHrCnP4+pdIMjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDI0MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGdF6TANBgkqhkiG9w0BAQsFAAOCAQEAfWVEg4os/jJ4Y+//JVD6 Lo6md8UaFefaVEGhqL+d2CWV2Hm3OY4f2bhCaSbbQi7GdenSpEmYmLPt2I6Oif1K 0ieSoUCcgCikFL7C4eoYY8Q0sExQM4/7F09DC4nSjyAUdH2chZQh+2viGnHU5qJ1 VZoalYSycl9JZ761WMyPJdsr9BRwRQiLqSIK4PZQnJUlMsnEtGxL0fKKsbdEybek lmYqtJlpN3FAg1CjwPErLvVleUU6IW830nqtGGF6HNT9UB1VRozrPI4o00IIkHRL d5ag9/gsXncG3zIeyD5iZpjaRB9A2I41aUlYW8meZygxi58G8eT747WNhT0JYz71 oA== -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:33 2025 by rpki-client