$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150968.roa File: AS150968.roa (raw, json) Hash identifier: 57r7OPYMyeZ14I7p9jVuDXXAeEVLW3dipljLOIWAlOE= Subject key identifier: E4:FA:74:2C:45:72:BF:39:81:7F:21:5E:93:B5:F3:CA:B2:BD:86:62 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7EA3D18B90CA88A9AD53C8E5D26E140B0E78FD1B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150968.roa Signing time: Mon 14 Jul 2025 04:00:00 +0000 ROA not before: Mon 14 Jul 2025 03:55:00 +0000 ROA not after: Mon 13 Jul 2026 04:00:00 +0000 asID: 150968 IP address blocks: 103.178.14.0/23 maxlen: 24 2001:df2:e340::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:a3:d1:8b:90:ca:88:a9:ad:53:c8:e5:d2:6e:14:0b:0e:78:fd:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 14 03:55:00 2025 GMT Not After : Jul 13 04:00:00 2026 GMT Subject: CN=E4FA742C4572BF39817F215E93B5F3CAB2BD8662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8b:d7:c3:fd:94:d4:38:8f:0a:4c:5f:87:a4: 0c:fd:53:b4:c1:dd:6a:22:70:df:b2:02:20:33:d3: 75:16:06:7c:c8:a7:d0:2e:ff:65:20:dd:e3:35:2a: 8d:63:2e:58:80:b4:47:9b:85:8d:70:bf:ed:19:18: 29:ea:7b:51:28:c4:ce:19:66:83:36:44:38:bf:ae: 61:50:12:0b:db:83:64:f2:52:12:56:ac:a6:3a:9b: 4d:42:c1:cb:8d:43:ab:3c:45:66:91:a2:7a:e3:e0: d8:9c:d6:2a:12:c6:84:ff:03:9c:df:80:fc:0f:62: 8c:82:6c:a8:ed:34:43:f3:97:c7:96:41:1d:c9:02: 1f:ef:bd:ed:e0:94:87:bb:17:3b:53:c7:dc:54:6e: f1:d2:19:33:e5:02:8a:41:94:f9:19:08:89:0c:44: 9f:3c:aa:29:89:2c:8e:69:85:40:34:04:82:10:96: df:02:31:e3:6a:8a:c5:ab:a7:d0:70:e6:03:33:91: 3c:1c:2b:1c:12:a3:55:9b:1c:8a:49:37:01:16:7e: c1:39:9e:ef:4e:3b:42:d4:a0:dc:5d:aa:06:56:46: 89:25:c6:26:de:79:03:9c:e3:73:af:cd:db:e0:c6: df:45:06:23:c6:eb:6f:11:5c:c1:33:22:93:1a:af: eb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FA:74:2C:45:72:BF:39:81:7F:21:5E:93:B5:F3:CA:B2:BD:86:62 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150968.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.14.0/23 IPv6: 2001:df2:e340::/48 Signature Algorithm: sha256WithRSAEncryption 69:43:c0:0d:2b:fa:ff:51:07:9b:32:ce:e7:b4:20:2a:2c:5f: 85:08:40:b9:9c:f7:8b:d6:89:c3:63:f2:78:11:e3:67:66:32: 9e:0e:08:78:ff:67:a9:35:2e:19:78:27:d8:59:a6:46:a0:ae: 65:50:b5:96:3d:02:ac:71:0f:85:85:08:61:79:ff:4e:b7:b0: f1:2f:fc:fe:6e:b1:e8:f7:d3:d1:86:a2:a5:9a:7d:da:c0:05: 0b:55:73:15:a0:ff:2d:3f:45:5d:45:d4:52:87:88:7b:be:3c: 4f:3b:d3:fe:67:61:4f:65:72:20:d3:d6:c4:e3:80:d3:9a:d8: 94:3f:1c:86:f4:ae:6c:82:ec:33:c5:be:d5:2b:64:bf:30:40: 43:a5:14:f5:fa:e4:a3:bb:5c:cc:1e:9a:4b:a5:e0:f5:a5:82: 36:c6:40:8d:2f:1f:37:33:38:ff:98:af:a8:23:03:79:13:93: f0:ac:b0:8b:6a:fd:9b:8c:75:a9:b1:73:ea:c5:3a:45:62:0f: 4b:e4:9c:8b:6c:07:54:88:1c:16:32:b4:41:eb:88:68:65:2b: 90:08:be:25:bb:7d:ec:84:cb:3a:de:7b:51:8f:83:e0:66:38: ff:e8:a7:74:ab:71:f2:3f:34:90:b6:ce:ef:c7:55:88:e9:87: f4:cb:2f:65 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUfqPRi5DKiKmtU8jl0m4UCw54/RswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcxNDAzNTUwMFoX DTI2MDcxMzA0MDAwMFowMzExMC8GA1UEAxMoRTRGQTc0MkM0NTcyQkYzOTgxN0Yy MTVFOTNCNUYzQ0FCMkJEODY2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6L18P9lNQ4jwpMX4ekDP1TtMHdaiJw37ICIDPTdRYGfMin0C7/ZSDd4zUq jWMuWIC0R5uFjXC/7RkYKep7USjEzhlmgzZEOL+uYVASC9uDZPJSElaspjqbTULB y41DqzxFZpGieuPg2JzWKhLGhP8DnN+A/A9ijIJsqO00Q/OXx5ZBHckCH++97eCU h7sXO1PH3FRu8dIZM+UCikGU+RkIiQxEnzyqKYksjmmFQDQEghCW3wIx42qKxaun 0HDmAzORPBwrHBKjVZscikk3ARZ+wTme7047QtSg3F2qBlZGiSXGJt55A5zjc6/N 2+DG30UGI8brbxFcwTMikxqv6/8CAwEAAaOCAeEwggHdMB0GA1UdDgQWBBTk+nQs RXK/OYF/IV6TtfPKsr2GYjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDk2OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAWeyDjAPBAIAAjAJAwcAIAEN8uNAMA0GCSqGSIb3DQEBCwUAA4IB AQBpQ8ANK/r/UQebMs7ntCAqLF+FCEC5nPeL1onDY/J4EeNnZjKeDgh4/2epNS4Z eCfYWaZGoK5lULWWPQKscQ+FhQhhef9Ot7DxL/z+brHo99PRhqKlmn3awAULVXMV oP8tP0VdRdRSh4h7vjxPO9P+Z2FPZXIg09bE44DTmtiUPxyG9K5sguwzxb7VK2S/ MEBDpRT1+uSju1zMHppLpeD1pYI2xkCNLx83Mzj/mK+oIwN5E5PwrLCLav2bjHWp sXPqxTpFYg9L5JyLbAdUiBwWMrRB64hoZSuQCL4lu33shMs63ntRj4PgZjj/6Kd0 q3HyPzSQts7vx1WI6Yf0yy9l -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:45 2025 by rpki-client