$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150226.roa File: AS150226.roa (raw, json) Hash identifier: FdNiGtAv2K2NdL83rWKgD8UOlAS/Ek83rDV6JvpC28Y= Subject key identifier: 9E:F1:DD:E7:01:B0:2F:2B:79:CD:A5:FD:B6:7C:82:58:85:63:49:C7 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5306C4D00AC6F801F8D2F6AAB62907A494207584 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150226.roa Signing time: Fri 14 Feb 2025 04:00:00 +0000 ROA not before: Fri 14 Feb 2025 03:55:00 +0000 ROA not after: Fri 13 Feb 2026 04:00:00 +0000 asID: 150226 IP address blocks: 103.17.178.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:06:c4:d0:0a:c6:f8:01:f8:d2:f6:aa:b6:29:07:a4:94:20:75:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 14 03:55:00 2025 GMT Not After : Feb 13 04:00:00 2026 GMT Subject: CN=9EF1DDE701B02F2B79CDA5FDB67C8258856349C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:78:91:ce:d8:de:0a:77:36:99:97:6c:66:36: 66:08:1c:02:21:ff:a9:6c:25:33:b6:f6:53:fd:c3: 3a:24:f5:d6:2b:c0:1e:cc:c2:9e:20:2a:ee:2e:d5: b1:cf:7f:74:f0:1e:47:d0:29:54:8c:a2:8f:a5:2c: a4:d7:11:e1:79:6a:08:0e:6d:8c:1e:7a:88:f7:c0: b6:6c:16:bc:77:49:5c:a3:ee:31:76:bb:a6:c4:6a: 36:d9:c2:ed:98:a7:84:cb:8d:e6:ef:ee:7d:f4:d8: bc:69:89:65:1a:cc:fe:22:20:a5:14:d3:f5:88:c3: d9:4e:b7:6d:20:f6:2a:e5:67:49:eb:eb:63:30:74: 0a:f2:a7:9c:08:98:b8:8b:0f:65:f0:db:e7:0b:4f: 09:92:df:3a:3d:aa:01:f3:16:22:6a:e5:bf:5c:77: 07:0e:05:ae:55:81:9d:09:4c:f3:55:fb:d0:05:35: 56:e8:ea:ce:b4:b7:cb:4a:81:cd:f6:cb:8d:28:24: 00:9d:d3:c4:94:48:29:27:64:51:95:32:16:50:f9: ed:65:aa:0d:0a:e3:62:6a:6e:3e:b8:bb:30:33:5a: 4a:24:bd:86:d6:dc:98:91:61:7d:bf:c2:4d:60:c2: 38:18:d1:77:62:58:2a:bd:28:54:d9:9c:f4:ca:50: 56:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F1:DD:E7:01:B0:2F:2B:79:CD:A5:FD:B6:7C:82:58:85:63:49:C7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150226.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.17.178.0/23 Signature Algorithm: sha256WithRSAEncryption 46:18:1d:63:cb:e5:ef:67:04:a5:c0:39:4e:ee:59:1b:1b:49: da:53:3a:45:79:0a:15:92:40:16:d9:26:66:65:38:9b:89:08: 08:b8:a2:38:94:1b:b1:c8:61:db:02:bc:23:f7:23:dd:04:26: af:e4:78:28:29:68:dd:ff:24:7e:c1:b9:1e:d5:cd:04:75:4d: d3:c1:e6:75:72:8f:fe:b7:f7:20:4a:36:da:6d:1a:ed:82:35: d1:2b:a9:8d:98:5f:68:b2:41:ed:2d:9c:92:98:00:20:1f:76: d1:05:39:da:63:ef:2b:87:b8:16:aa:1c:c2:8d:c1:6b:dc:4d: bf:82:0e:d0:ab:32:24:95:30:15:0a:3f:79:29:5e:a2:e7:8f: 15:06:07:e9:4d:bc:3c:56:83:2e:3f:37:0e:21:50:b4:d1:31: 0e:2c:75:33:74:e0:15:7c:36:07:a2:36:b0:7d:b5:ab:08:53: 8e:b3:53:0e:09:2a:e7:53:cf:d4:a1:c9:fc:52:7e:6f:c3:69: 07:4f:1a:7a:b4:79:96:11:53:e3:83:49:7c:c6:19:93:7b:5a: b5:db:44:10:2f:9e:e8:02:f3:2d:c0:9f:8c:42:04:f8:ad:69: ee:1d:e7:5b:72:f7:ac:1c:41:2c:c3:17:b2:b4:1a:17:90:b1: b5:f9:a9:a3 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUUwbE0ArG+AH40vaqtikHpJQgdYQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIxNDAzNTUwMFoX DTI2MDIxMzA0MDAwMFowMzExMC8GA1UEAxMoOUVGMURERTcwMUIwMkYyQjc5Q0RB NUZEQjY3QzgyNTg4NTYzNDlDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKh4kc7Y3gp3NpmXbGY2ZggcAiH/qWwlM7b2U/3DOiT11ivAHszCniAq7i7V sc9/dPAeR9ApVIyij6UspNcR4XlqCA5tjB56iPfAtmwWvHdJXKPuMXa7psRqNtnC 7ZinhMuN5u/uffTYvGmJZRrM/iIgpRTT9YjD2U63bSD2KuVnSevrYzB0CvKnnAiY uIsPZfDb5wtPCZLfOj2qAfMWImrlv1x3Bw4FrlWBnQlM81X70AU1VujqzrS3y0qB zfbLjSgkAJ3TxJRIKSdkUZUyFlD57WWqDQrjYmpuPri7MDNaSiS9htbcmJFhfb/C TWDCOBjRd2JYKr0oVNmc9MpQVisCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSe8d3n AbAvK3nNpf22fIJYhWNJxzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDIyNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWcRsjANBgkqhkiG9w0BAQsFAAOCAQEARhgdY8vl72cEpcA5Tu5Z GxtJ2lM6RXkKFZJAFtkmZmU4m4kICLiiOJQbschh2wK8I/cj3QQmr+R4KClo3f8k fsG5HtXNBHVN08HmdXKP/rf3IEo22m0a7YI10SupjZhfaLJB7S2ckpgAIB920QU5 2mPvK4e4Fqocwo3Ba9xNv4IO0KsyJJUwFQo/eSleouePFQYH6U28PFaDLj83DiFQ tNExDix1M3TgFXw2B6I2sH21qwhTjrNTDgkq51PP1KHJ/FJ+b8NpB08aerR5lhFT 44NJfMYZk3tatdtEEC+e6ALzLcCfjEIE+K1p7h3nW3L3rBxBLMMXsrQaF5Cxtfmp ow== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:19 2025 by rpki-client on console.sobornost.net