$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150559.roa File: AS150559.roa (raw, json) Hash identifier: kR3ULVR0/khwUwpLQT8ZiMgSj5a2ow8lfmSVDhotoDM= Subject key identifier: 11:52:C9:C6:AA:4A:6B:5E:FB:F6:3C:A3:0D:A0:C5:1A:A9:4E:36:BE Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1DCC08A76C26E501F917DE4715DF768A4C52288F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150559.roa Signing time: Wed 30 Apr 2025 04:41:59 +0000 ROA not before: Wed 30 Apr 2025 04:36:59 +0000 ROA not after: Wed 29 Apr 2026 04:41:59 +0000 asID: 150559 IP address blocks: 103.95.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 14:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:cc:08:a7:6c:26:e5:01:f9:17:de:47:15:df:76:8a:4c:52:28:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 30 04:36:59 2025 GMT Not After : Apr 29 04:41:59 2026 GMT Subject: CN=1152C9C6AA4A6B5EFBF63CA30DA0C51AA94E36BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a5:1f:ef:4c:4d:8d:48:86:d8:f9:1f:53:6a: 86:b0:21:9c:cc:e2:8d:ea:96:78:7d:a8:06:c4:a5: ea:aa:dd:ea:9d:97:6d:5b:5b:c2:c0:7c:40:b8:a5: 52:e8:5c:1e:eb:8f:07:ee:fa:a3:b5:d5:2f:e7:3d: 54:24:09:2f:1f:f6:4a:2b:2c:b2:2b:5c:22:8b:aa: e8:d3:d7:c3:52:12:73:03:50:fb:f2:33:71:98:a0: 8c:13:76:32:b9:d2:68:9a:12:3b:71:7a:81:5d:9f: 32:6b:9c:17:a8:13:8e:b4:81:2b:cd:95:7a:4c:e9: 4c:8d:47:24:4f:a3:4e:7f:b9:b5:d5:04:7a:38:58: a2:3f:ee:8f:d1:fa:b7:2e:cf:7b:78:0f:ea:27:cb: dc:09:72:3d:99:d7:20:b4:c6:e9:bb:f6:87:15:f2: 02:39:ee:59:59:f4:78:c6:9e:8e:04:be:8e:38:ad: 38:4f:12:59:18:f7:56:43:da:01:8b:0a:e2:23:02: 4b:75:c7:13:a0:b9:2a:f5:d0:ff:c0:59:dd:3a:1d: d8:28:56:e7:4b:f6:2c:05:16:54:d3:a5:5f:86:b9: 3b:84:9e:9b:80:bf:ff:33:d4:46:ff:2d:39:9f:28: 25:8e:0f:78:51:89:8c:5d:e0:2a:88:1e:d9:ce:a9: 5b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:52:C9:C6:AA:4A:6B:5E:FB:F6:3C:A3:0D:A0:C5:1A:A9:4E:36:BE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150559.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.95.20.0/23 Signature Algorithm: sha256WithRSAEncryption 04:cf:83:a0:87:a7:3d:f5:dc:4c:21:0b:81:98:64:cc:53:52: 8d:6b:51:73:40:c4:d9:7b:aa:f4:35:55:13:57:0d:b1:49:ae: f6:80:76:58:3f:51:97:20:c4:6d:1d:74:b2:c2:3e:e3:b6:a8: 2b:8f:8c:ee:95:04:35:b1:31:e5:80:89:e6:23:72:0b:75:1c: 26:70:cb:66:79:6b:8d:fe:cb:28:e8:c7:bc:80:c7:e8:4d:35: 28:96:6b:9d:38:b6:0c:84:76:92:7a:24:db:89:ce:03:16:74: a1:0b:11:c9:76:e7:82:d7:d9:e0:4d:49:c0:4e:95:71:d0:22: af:76:c9:0c:1c:a7:5e:48:36:d4:ed:bc:11:18:69:cd:6c:0b: 6f:57:7b:b5:9c:d6:e7:45:59:fb:de:d3:9a:97:6e:e2:d3:a2: e5:f3:c6:a0:a2:d0:ba:b6:68:31:ad:60:6f:3b:11:e6:be:e7: 1e:f8:77:08:60:8c:f3:f8:6f:7e:27:5e:2d:db:ea:51:05:ff: 18:d5:7a:40:35:2a:3a:05:84:b3:18:99:1e:7b:5f:01:fe:7a: ca:1e:20:fd:32:7a:08:f9:15:16:f1:ac:b2:ff:d4:34:cc:a6: f1:8b:2f:86:b2:c6:ff:60:e7:d7:94:f8:95:cb:c2:4b:0c:bc: f1:4c:80:06 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUHcwIp2wm5QH5F95HFd92ikxSKI8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQzMDA0MzY1OVoX DTI2MDQyOTA0NDE1OVowMzExMC8GA1UEAxMoMTE1MkM5QzZBQTRBNkI1RUZCRjYz Q0EzMERBMEM1MUFBOTRFMzZCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMClH+9MTY1Ihtj5H1NqhrAhnMzijeqWeH2oBsSl6qrd6p2XbVtbwsB8QLil UuhcHuuPB+76o7XVL+c9VCQJLx/2SisssitcIouq6NPXw1IScwNQ+/IzcZigjBN2 MrnSaJoSO3F6gV2fMmucF6gTjrSBK82VekzpTI1HJE+jTn+5tdUEejhYoj/uj9H6 ty7Pe3gP6ifL3AlyPZnXILTG6bv2hxXyAjnuWVn0eMaejgS+jjitOE8SWRj3VkPa AYsK4iMCS3XHE6C5KvXQ/8BZ3Tod2ChW50v2LAUWVNOlX4a5O4Sem4C//zPURv8t OZ8oJY4PeFGJjF3gKoge2c6pW/ECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQRUsnG qkprXvv2PKMNoMUaqU42vjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDU1OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWdfFDANBgkqhkiG9w0BAQsFAAOCAQEABM+DoIenPfXcTCELgZhk zFNSjWtRc0DE2Xuq9DVVE1cNsUmu9oB2WD9RlyDEbR10ssI+47aoK4+M7pUENbEx 5YCJ5iNyC3UcJnDLZnlrjf7LKOjHvIDH6E01KJZrnTi2DIR2knok24nOAxZ0oQsR yXbngtfZ4E1JwE6VcdAir3bJDBynXkg21O28ERhpzWwLb1d7tZzW50VZ+97Tmpdu 4tOi5fPGoKLQurZoMa1gbzsR5r7nHvh3CGCM8/hvfideLdvqUQX/GNV6QDUqOgWE sxiZHntfAf56yh4g/TJ6CPkVFvGssv/UNMym8YsvhrLG/2Dn15T4lcvCSwy88UyA Bg== -----END CERTIFICATE-----Generated at Mon May 5 19:05:20 2025 by rpki-client