$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150949.roa File: AS150949.roa (raw, json) Hash identifier: PSAHaH6sN+XF798z55es3UaqhrFbgpFMcGQJj5UhWbQ= Subject key identifier: 84:8C:76:55:DB:04:A8:09:44:13:BC:8C:51:86:3A:97:F1:ED:20:83 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 435F544366C6C66904277B453629A1A17254A3A1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150949.roa Signing time: Tue 08 Apr 2025 08:00:00 +0000 ROA not before: Tue 08 Apr 2025 07:55:00 +0000 ROA not after: Tue 07 Apr 2026 08:00:00 +0000 asID: 150949 IP address blocks: 103.79.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:5f:54:43:66:c6:c6:69:04:27:7b:45:36:29:a1:a1:72:54:a3:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 8 07:55:00 2025 GMT Not After : Apr 7 08:00:00 2026 GMT Subject: CN=848C7655DB04A8094413BC8C51863A97F1ED2083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:77:41:fa:27:38:e5:ea:e9:fd:5f:04:6e:5b: 29:34:d6:9c:ed:3b:e8:f8:b5:a1:e5:08:75:63:4a: 17:29:81:b3:06:3b:80:25:7e:c1:28:c4:03:d2:73: a2:6b:6d:16:07:84:6e:8f:b0:88:c5:63:73:b4:d8: ac:f3:60:70:75:e3:38:53:7e:3a:d1:25:2f:32:3c: 56:65:35:fb:af:bf:9e:f3:25:de:52:76:27:cf:bf: e2:8c:a1:83:8e:07:96:c7:fd:96:00:21:94:10:5e: 72:3d:1b:bd:3c:7b:77:63:d5:8d:34:bd:55:e7:99: 91:b5:04:c1:bd:65:e4:a0:e7:1d:b8:dc:33:93:ce: 61:2c:1c:cd:a5:65:6c:62:16:f5:e3:bc:f0:e6:f7: a6:73:87:04:4d:16:f3:9d:3b:98:53:d6:6e:51:d9: 33:35:d7:c9:c3:b2:c3:44:89:cd:55:a5:9b:f3:88: 26:61:c0:dd:26:08:ea:c1:27:97:1d:a9:2a:f8:38: e9:e2:25:cc:81:8e:0c:a2:05:d4:80:be:af:7a:7e: 2d:4d:81:c0:11:76:9c:44:1e:30:48:2f:0c:24:ed: 01:b6:bd:b4:60:58:5b:24:9c:07:54:ba:c1:79:4f: db:ae:04:87:ed:83:95:be:a3:d4:dc:a7:8e:d0:6e: bf:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8C:76:55:DB:04:A8:09:44:13:BC:8C:51:86:3A:97:F1:ED:20:83 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150949.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.79.244.0/23 Signature Algorithm: sha256WithRSAEncryption 92:59:db:88:f5:b0:56:df:08:44:50:cf:1c:21:7a:69:24:4e: 9e:e2:38:4b:ea:a5:94:4c:36:c5:c5:f4:ec:03:9a:21:c2:21: 87:68:e5:61:f4:b8:ec:5c:2a:a6:47:d5:da:16:a2:94:e9:5f: 05:1e:c0:cd:64:50:81:1e:7e:ef:d4:59:73:05:4b:26:8d:d5: 0e:cd:b6:e4:2e:58:a1:bf:63:93:69:55:7e:b3:0d:0e:83:7f: 38:39:26:67:e4:03:f3:f0:9a:c9:7c:63:77:91:42:df:6a:aa: b1:90:b6:65:fd:12:ee:41:68:f9:b8:b5:50:2f:83:df:40:0f: 67:ba:19:9a:30:fd:e8:eb:7e:34:5a:12:b7:71:3b:4e:cf:81: ee:3c:b0:f8:37:fb:9f:e0:31:13:06:98:d1:a4:6f:bc:15:8a: 0a:60:25:22:fc:74:69:8c:86:67:f1:b2:87:6f:8b:ba:1b:59: 13:ec:dc:d7:ad:8b:33:a7:16:ba:ac:b7:fe:93:bf:f0:d0:38: 4f:56:66:f8:32:32:16:ea:47:e2:a9:4d:50:cb:a1:2e:06:c3: 13:d3:d3:ca:ba:74:9f:b4:56:b3:97:c2:24:6a:fa:fc:68:fb: 93:fb:ab:ef:c7:b0:f9:72:47:ce:7c:80:d5:5a:de:e2:ea:df: f5:c1:87:34 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUQ19UQ2bGxmkEJ3tFNimhoXJUo6EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQwODA3NTUwMFoX DTI2MDQwNzA4MDAwMFowMzExMC8GA1UEAxMoODQ4Qzc2NTVEQjA0QTgwOTQ0MTNC QzhDNTE4NjNBOTdGMUVEMjA4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALt3QfonOOXq6f1fBG5bKTTWnO076Pi1oeUIdWNKFymBswY7gCV+wSjEA9Jz omttFgeEbo+wiMVjc7TYrPNgcHXjOFN+OtElLzI8VmU1+6+/nvMl3lJ2J8+/4oyh g44Hlsf9lgAhlBBecj0bvTx7d2PVjTS9VeeZkbUEwb1l5KDnHbjcM5POYSwczaVl bGIW9eO88Ob3pnOHBE0W8507mFPWblHZMzXXycOyw0SJzVWlm/OIJmHA3SYI6sEn lx2pKvg46eIlzIGODKIF1IC+r3p+LU2BwBF2nEQeMEgvDCTtAba9tGBYWyScB1S6 wXlP264Eh+2Dlb6j1NynjtBuvxUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSEjHZV 2wSoCUQTvIxRhjqX8e0ggzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDk0OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWdP9DANBgkqhkiG9w0BAQsFAAOCAQEAklnbiPWwVt8IRFDPHCF6 aSROnuI4S+qllEw2xcX07AOaIcIhh2jlYfS47FwqpkfV2hailOlfBR7AzWRQgR5+ 79RZcwVLJo3VDs225C5Yob9jk2lVfrMNDoN/ODkmZ+QD8/CayXxjd5FC32qqsZC2 Zf0S7kFo+bi1UC+D30APZ7oZmjD96Ot+NFoSt3E7Ts+B7jyw+Df7n+AxEwaY0aRv vBWKCmAlIvx0aYyGZ/Gyh2+LuhtZE+zc162LM6cWuqy3/pO/8NA4T1Zm+DIyFupH 4qlNUMuhLgbDE9PTyrp0n7RWs5fCJGr6/Gj7k/ur78ew+XJHznyA1Vre4urf9cGH NA== -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:58 2025 by rpki-client