
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150478.roa
File:                     AS150478.roa (raw, json)
Hash identifier:          lOePzTLQ8NoZKoSOjvjf/engN4arefeifyklubPr1Yo=
Subject key identifier:   5F:B0:AC:86:64:ED:F0:4B:A5:18:A2:EF:A2:0D:CF:01:66:4D:78:2E
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6C8198839DF200FE7B6E988B0C4C5165E0611805
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150478.roa
Signing time:             Fri 24 Oct 2025 08:00:00 +0000
ROA not before:           Fri 24 Oct 2025 07:55:00 +0000
ROA not after:            Fri 23 Oct 2026 08:00:00 +0000
asID:                     150478
IP address blocks:        180.131.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Nov 2025 07:01:36 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:81:98:83:9d:f2:00:fe:7b:6e:98:8b:0c:4c:51:65:e0:61:18:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 24 07:55:00 2025 GMT
            Not After : Oct 23 08:00:00 2026 GMT
        Subject: CN=5FB0AC8664EDF04BA518A2EFA20DCF01664D782E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0a:f3:e2:36:0f:57:ad:a2:70:be:62:87:02:
                    d1:32:97:0a:d8:ef:54:e0:e6:28:72:b3:02:ff:eb:
                    92:2d:5f:84:0e:db:94:55:b8:94:c9:2b:1d:11:b4:
                    85:85:cf:ee:0d:1c:82:99:4a:37:b7:b8:2f:93:82:
                    d6:5e:85:35:f8:14:f2:67:c2:27:54:e7:b0:66:15:
                    fe:a2:19:0b:6b:7a:1e:af:af:16:83:51:61:87:d7:
                    29:fd:8a:46:84:7e:89:a1:42:ec:ed:26:65:03:56:
                    f0:46:3b:df:94:44:46:74:21:8a:89:6d:2e:e3:87:
                    f4:4c:58:45:57:01:48:1c:9a:1c:41:35:61:0b:6a:
                    b3:53:5f:69:51:36:a5:5f:71:cc:4f:ef:29:1c:9e:
                    26:93:38:00:82:0b:a8:24:2b:18:91:1d:c6:7e:21:
                    87:25:f4:89:bc:6a:cb:d6:13:b1:20:3f:cf:bc:d3:
                    84:08:56:b6:1d:e7:b5:df:52:f0:ba:00:72:5f:92:
                    71:05:23:2a:e7:ae:df:ee:ac:29:6c:e8:48:64:ac:
                    c6:7d:5b:77:aa:e4:71:7a:4c:fc:8e:cd:8c:4d:b9:
                    bb:10:e7:c3:9e:7d:78:c4:ad:f3:bd:9e:4a:86:e8:
                    41:f9:5e:23:a7:21:67:0e:f2:3a:62:fe:1e:ec:5f:
                    bb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B0:AC:86:64:ED:F0:4B:A5:18:A2:EF:A2:0D:CF:01:66:4D:78:2E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150478.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.131.0/24
    Signature Algorithm: sha256WithRSAEncryption
         57:c9:b3:04:73:8c:6b:02:3e:55:1a:24:9a:e9:fe:fc:00:ce:
         cf:c5:80:a5:bf:56:30:10:b2:a2:9b:e1:28:0d:42:bd:07:1d:
         33:4c:ec:98:a8:79:b3:6b:60:0f:c6:75:23:62:d3:64:91:97:
         4b:89:d5:00:20:dd:8d:0d:2f:3c:13:36:e4:4a:09:0e:a1:44:
         ff:8b:ae:69:79:cf:57:53:e9:90:80:39:cf:d0:d7:a5:c6:1a:
         7e:9b:49:2c:a2:70:29:ae:83:62:03:f4:57:e4:9c:1e:30:be:
         a9:4f:2c:1b:9b:1f:8b:ec:4a:bb:cf:b5:1b:ca:0e:52:2f:ab:
         1b:29:67:7a:15:44:bc:43:9d:ef:08:c9:f7:37:93:c5:79:48:
         b1:be:f3:68:8d:fc:42:fd:3d:a5:02:13:b0:dd:16:af:65:69:
         4d:eb:d6:5a:fd:c0:07:e5:df:c0:dd:7c:db:30:49:08:d2:5e:
         d3:97:2b:7a:3f:6f:04:7e:e7:ed:7f:bd:6c:2a:99:a5:cd:21:
         14:46:d2:af:45:ec:8a:32:a9:0b:13:ff:23:60:ca:bc:a9:5d:
         d5:37:01:22:c7:43:6e:14:1f:19:55:70:d4:ff:b2:6e:35:eb:
         5c:fa:b1:8c:ff:95:ac:4b:a8:3a:ad:c6:17:f8:d1:9f:a5:4b:
         89:21:51:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 01:58:44 2025 by rpki-client