
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150467.roa
File:                     AS150467.roa (raw, json)
Hash identifier:          YDy1cjdPBsGF0DZxnUZXBk3TDyhIL61I4k6qlTv9OKk=
Subject key identifier:   BF:75:4B:DD:D5:68:E6:F3:44:5C:D2:66:0E:6A:69:54:FB:5E:EE:FA
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       11695D21D6EB034758971C75D7FB089C7348E461
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150467.roa
Signing time:             Thu 23 Oct 2025 03:00:00 +0000
ROA not before:           Thu 23 Oct 2025 02:55:00 +0000
ROA not after:            Thu 22 Oct 2026 03:00:00 +0000
asID:                     150467
IP address blocks:        103.103.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Nov 2025 07:01:36 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:69:5d:21:d6:eb:03:47:58:97:1c:75:d7:fb:08:9c:73:48:e4:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 23 02:55:00 2025 GMT
            Not After : Oct 22 03:00:00 2026 GMT
        Subject: CN=BF754BDDD568E6F3445CD2660E6A6954FB5EEEFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:59:0b:ef:70:d1:e4:cb:16:e9:8b:e1:ec:37:
                    d6:f6:8d:05:70:8c:4f:a6:05:e5:92:75:bd:bb:8f:
                    ac:05:60:f8:25:52:a8:d9:12:8f:eb:c4:07:7b:1b:
                    a2:9a:04:45:95:e4:6a:ea:ec:73:36:67:5b:ec:db:
                    22:5b:93:60:18:aa:ab:cd:a5:fe:de:ad:70:56:f5:
                    3d:0f:83:4e:f6:6f:02:bf:40:ee:68:4b:73:55:5c:
                    02:09:db:3f:91:cb:5b:11:5c:ad:2c:09:02:75:ef:
                    4f:5e:a3:05:72:83:1e:1f:3e:71:ed:33:a5:ab:47:
                    04:db:0b:26:4a:8d:aa:14:1d:b6:94:e4:f1:b4:b3:
                    1a:fb:ff:51:7f:22:75:0e:38:bd:19:9e:78:31:53:
                    ef:e2:21:f2:94:a8:13:01:89:44:71:ef:2d:42:57:
                    81:5f:75:6a:d6:44:ee:54:dd:ed:5d:6a:1a:15:72:
                    ba:78:2f:2e:21:f6:ad:d4:f2:94:54:6b:38:39:d1:
                    4e:2e:24:80:a6:20:6f:04:9b:f4:c6:cd:c7:4a:53:
                    28:d1:c1:28:f1:12:ed:5c:e4:c0:5e:d1:32:da:37:
                    43:0f:3a:3f:89:60:2f:02:6a:d6:2f:ee:49:6d:16:
                    a0:6b:b3:85:80:63:23:c0:5c:61:b7:05:b6:de:5d:
                    ad:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:75:4B:DD:D5:68:E6:F3:44:5C:D2:66:0E:6A:69:54:FB:5E:EE:FA
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150467.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.115.0/24
    Signature Algorithm: sha256WithRSAEncryption
         46:c6:64:bd:b9:f2:04:19:49:3b:36:c2:1a:76:98:7c:60:3c:
         72:ed:74:94:7c:b9:72:1c:81:03:df:a2:23:d8:34:71:b4:c5:
         f5:ac:10:a9:61:9b:0c:98:21:06:c7:85:c8:48:f2:90:d3:ba:
         7c:03:26:ea:1a:1e:f4:37:d1:38:88:45:ce:0e:27:c2:8d:9e:
         56:16:07:c5:24:46:c0:55:01:c6:c6:73:af:b3:c3:25:1e:f5:
         44:4a:86:76:74:08:ef:6c:ed:ff:12:00:d7:c9:fb:b6:84:f4:
         6b:03:3c:2d:2a:f5:fd:82:93:88:92:12:f7:07:fb:a8:a2:fa:
         ab:a7:6e:77:f2:04:fe:51:30:b6:9c:08:c1:e4:95:27:fa:17:
         b7:ae:e4:bd:ca:2e:d1:7f:0e:75:5c:ef:1f:f1:5e:5e:76:a8:
         88:ee:94:39:1b:af:2e:17:01:07:17:03:34:a0:f0:2d:0e:cd:
         32:32:6f:4d:06:04:28:13:d7:78:35:e7:85:42:65:9b:78:0a:
         df:0d:80:33:98:42:f2:7a:c9:c9:a7:24:34:07:04:d0:ba:8c:
         b4:d6:60:1e:85:d7:f1:59:1b:a8:ff:0d:81:72:f3:b1:30:9b:
         66:4d:b4:88:1b:2c:3b:ef:6c:41:20:40:89:a8:53:e1:d4:1c:
         15:39:ae:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 01:58:44 2025 by rpki-client