$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150266.roa File: AS150266.roa (raw, json) Hash identifier: PoLvYPkhZgGLQwhdklUSh8990LbaTGzgf+wbR+PXPt4= Subject key identifier: 3D:73:27:C5:59:93:32:36:79:6E:0A:E2:1B:E4:E3:60:AB:92:09:2B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2C17E247E269A446A52B6D3CFBE0DFB49EFDA8AA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150266.roa Signing time: Mon 21 Apr 2025 05:00:00 +0000 ROA not before: Mon 21 Apr 2025 04:55:00 +0000 ROA not after: Mon 20 Apr 2026 05:00:00 +0000 asID: 150266 IP address blocks: 103.91.137.0/24 maxlen: 24 103.218.183.0/24 maxlen: 24 2001:df2:7b40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 09:49:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:17:e2:47:e2:69:a4:46:a5:2b:6d:3c:fb:e0:df:b4:9e:fd:a8:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 21 04:55:00 2025 GMT Not After : Apr 20 05:00:00 2026 GMT Subject: CN=3D7327C559933236796E0AE21BE4E360AB92092B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:05:c3:51:af:b0:cf:48:96:c7:99:93:46:e2: 69:ac:bc:b3:52:af:bf:78:2c:66:12:04:cc:66:e1: 69:01:c0:31:82:28:22:f6:2f:46:e5:7f:d2:46:94: ca:a4:8c:22:96:d6:3e:86:ba:c9:f1:8b:68:22:2b: 40:80:cd:f6:13:db:b6:80:d9:46:bc:0e:71:f4:c3: 99:b6:0f:5d:25:0e:c7:24:ff:82:01:0a:29:75:91: 47:f4:97:96:d6:23:59:14:d3:9c:46:f4:52:81:59: 44:03:10:c4:f2:b1:4d:26:56:09:42:99:ce:c9:72: e6:07:3c:5d:02:7a:de:92:d4:94:ca:7f:66:ab:0d: 0b:67:b4:96:7a:33:4d:23:e9:8a:e8:c7:42:0a:fd: 30:31:bc:40:64:2c:c7:3d:45:a3:b7:e6:1c:8d:08: a1:76:e8:51:6e:41:46:6d:b8:d2:73:6c:2a:71:7d: 0d:72:ae:51:2f:15:79:85:2b:12:c2:4b:be:cc:25: 6f:9a:db:96:86:ac:d2:3d:0f:bb:d2:17:71:31:38: e2:3a:1a:83:72:cf:46:30:1f:c3:73:9f:11:3f:a6: 77:a8:09:fc:14:ac:9b:62:93:0a:c1:1e:b3:31:2f: fa:46:8b:ab:82:73:6e:64:df:93:4c:55:9b:f4:7b: 49:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:73:27:C5:59:93:32:36:79:6E:0A:E2:1B:E4:E3:60:AB:92:09:2B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150266.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.91.137.0/24 103.218.183.0/24 IPv6: 2001:df2:7b40::/48 Signature Algorithm: sha256WithRSAEncryption 47:d0:95:97:03:ef:72:b9:02:af:78:b8:e1:eb:52:b3:f3:64: c2:dc:2f:2f:99:ee:ec:f5:40:13:f8:4a:b5:8e:ec:80:dc:61: 46:f4:d8:51:83:cb:b3:ea:0a:59:33:17:d1:7a:7c:ba:32:40: f4:87:67:62:22:e1:1f:d0:81:1b:70:30:16:13:e5:df:35:88: 39:ed:79:de:dc:2f:c9:2a:de:7d:83:ee:d6:25:96:98:d9:32: 3c:88:8f:3e:8b:65:17:4c:1e:19:3a:88:e0:9c:a2:57:b0:69: 05:79:22:76:51:11:be:3c:24:82:a2:b5:aa:9e:a9:20:f2:da: 41:3a:a2:66:a5:bc:51:b0:19:d0:ab:39:bf:a2:cf:0e:9c:6f: 3d:51:7a:c5:f2:43:bf:17:84:5d:f0:8e:38:08:c1:f0:e2:f9: b2:dd:45:4d:f3:71:28:78:af:f2:18:79:b2:bd:cb:21:c6:d7: 23:4e:3f:77:e1:b2:c2:70:91:39:13:db:f4:ce:7a:85:a8:7d: de:92:6f:2c:20:8b:fe:58:7f:da:49:4a:0e:7a:f8:99:be:60: 4e:78:3c:6e:82:77:cf:77:cb:b5:c4:ea:72:9b:4a:40:5e:fb: 16:8d:4c:01:23:78:c7:43:b4:eb:75:73:65:4d:70:f7:ce:13: 8c:fa:09:7a -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIULBfiR+JppEalK208++DftJ79qKowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQyMTA0NTUwMFoX DTI2MDQyMDA1MDAwMFowMzExMC8GA1UEAxMoM0Q3MzI3QzU1OTkzMzIzNjc5NkUw QUUyMUJFNEUzNjBBQjkyMDkyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALgFw1GvsM9IlseZk0biaay8s1Kvv3gsZhIEzGbhaQHAMYIoIvYvRuV/0kaU yqSMIpbWPoa6yfGLaCIrQIDN9hPbtoDZRrwOcfTDmbYPXSUOxyT/ggEKKXWRR/SX ltYjWRTTnEb0UoFZRAMQxPKxTSZWCUKZzsly5gc8XQJ63pLUlMp/ZqsNC2e0lnoz TSPpiujHQgr9MDG8QGQsxz1Fo7fmHI0IoXboUW5BRm240nNsKnF9DXKuUS8VeYUr EsJLvswlb5rbloas0j0Pu9IXcTE44joag3LPRjAfw3OfET+md6gJ/BSsm2KTCsEe szEv+kaLq4JzbmTfk0xVm/R7SScCAwEAAaOCAecwggHjMB0GA1UdDgQWBBQ9cyfF WZMyNnluCuIb5ONgq5IJKzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDI2Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQnMCUw EgQCAAEwDAMEAGdbiQMEAGfatzAPBAIAAjAJAwcAIAEN8ntAMA0GCSqGSIb3DQEB CwUAA4IBAQBH0JWXA+9yuQKveLjh61Kz82TC3C8vme7s9UAT+Eq1juyA3GFG9NhR g8uz6gpZMxfReny6MkD0h2diIuEf0IEbcDAWE+XfNYg57Xne3C/JKt59g+7WJZaY 2TI8iI8+i2UXTB4ZOojgnKJXsGkFeSJ2URG+PCSCorWqnqkg8tpBOqJmpbxRsBnQ qzm/os8OnG89UXrF8kO/F4Rd8I44CMHw4vmy3UVN83EoeK/yGHmyvcshxtcjTj93 4bLCcJE5E9v0znqFqH3ekm8sIIv+WH/aSUoOeviZvmBOeDxugnfPd8u1xOpym0pA XvsWjUwBI3jHQ7TrdXNlTXD3zhOM+gl6 -----END CERTIFICATE-----Generated at Wed Apr 30 08:14:04 2025 by rpki-client