$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150208.roa File: AS150208.roa (raw, json) Hash identifier: DwUgWPR7rOtv9r7nzS4db92JzfPpOLxP1nH7bztYjgg= Subject key identifier: C5:4C:1D:3F:2C:65:99:7A:C3:52:06:26:7C:78:96:85:D4:BD:88:4B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 74DCA1B68CB1F3830E76EE39A2007DB4DD467434 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150208.roa Signing time: Wed 11 Mar 2026 07:00:00 +0000 ROA not before: Wed 11 Mar 2026 06:55:00 +0000 ROA not after: Wed 10 Mar 2027 07:00:00 +0000 asID: 150208 IP address blocks: 2001:df3:c440::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:dc:a1:b6:8c:b1:f3:83:0e:76:ee:39:a2:00:7d:b4:dd:46:74:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 11 06:55:00 2026 GMT Not After : Mar 10 07:00:00 2027 GMT Subject: CN=C54C1D3F2C65997AC35206267C789685D4BD884B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e6:de:93:24:e1:03:05:18:23:ac:e5:35:dc: 9f:84:86:05:ce:18:f7:6b:bc:f8:70:fb:08:df:1f: f1:5d:1f:b1:f7:dd:7a:e2:60:8d:e5:c3:89:6b:75: 78:1e:a8:f1:1b:c7:e8:c7:7c:0b:1f:2f:fb:7a:57: 62:58:29:be:ff:d0:a1:a1:15:0c:ec:ea:b4:15:10: 70:27:e8:ea:ea:59:5e:a8:af:9c:e0:df:3d:c6:39: 1b:21:6d:a1:56:29:ff:6f:e6:9c:8b:f0:70:f7:e0: 06:36:21:80:c1:0d:a8:1e:f8:6c:85:27:14:f6:d9: b9:b0:91:7c:64:a5:7a:9c:a3:b2:bc:ab:fa:89:97: 02:3a:57:7a:3c:90:90:ce:48:c7:76:72:40:2c:eb: 85:f6:86:13:d5:d3:69:92:84:4b:39:2c:64:3e:04: 10:03:15:b6:3d:9f:9a:c2:d2:b0:2a:1d:df:3d:f6: ed:f5:28:5d:20:89:47:bd:c4:96:bf:a5:59:37:fc: cb:2c:d9:1f:5f:a0:1b:24:da:7b:e7:0d:6c:a6:9f: 45:f4:28:0c:dc:af:d1:17:6b:97:f7:b3:a0:00:0c: 05:5b:b4:6d:e0:a1:9e:b1:8b:38:90:87:44:30:5e: 22:0b:98:d7:b9:f8:b0:be:16:ae:23:3c:c8:8e:9f: db:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4C:1D:3F:2C:65:99:7A:C3:52:06:26:7C:78:96:85:D4:BD:88:4B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150208.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:c440::/48 Signature Algorithm: sha256WithRSAEncryption 94:ec:d6:4b:4f:39:44:3d:b5:14:70:59:cd:14:e0:9c:f8:c5: 84:ed:aa:62:c4:7a:18:48:cf:ad:c2:3b:5c:f1:34:18:13:5d: 8e:05:75:e1:1a:a0:0c:bd:9b:fe:4d:5a:14:6f:a5:02:b6:54: 93:7f:6e:64:82:5b:94:36:dc:7b:38:8d:d2:a9:c6:d5:9b:73: e7:ce:b0:11:4d:c4:97:37:8c:6a:c8:fd:76:11:d1:ea:fd:d6: dd:f4:7f:b9:b3:28:75:2a:15:3f:c5:e4:27:fb:e9:e4:a7:97: 94:1c:44:6c:51:4d:1f:38:7d:af:f8:f6:55:c7:11:f9:93:7a: 96:90:ff:20:40:a3:d5:e7:1b:58:f8:ec:b8:f9:cd:69:f4:ba: 74:9b:fc:f7:d9:96:6a:88:be:a5:e5:b1:4e:dc:91:67:7f:26: dd:06:2b:6e:4f:27:5e:93:a6:4e:f8:40:34:32:12:42:28:59: 83:13:8a:e8:66:ab:3a:75:cb:41:f5:41:c2:09:88:81:d6:4f: b6:b3:16:7c:18:35:f5:3c:96:9f:ee:ba:e9:48:1d:2c:cd:35: 10:7e:f4:97:10:d2:6e:37:e1:e0:19:2a:9a:66:0e:b4:48:1f: cf:8d:35:bf:08:c4:2c:ac:a2:bf:b3:27:a7:16:00:7d:61:86: c7:68:29:f3 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUdNyhtoyx84MOdu45ogB9tN1GdDQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxMTA2NTUwMFoX DTI3MDMxMDA3MDAwMFowMzExMC8GA1UEAxMoQzU0QzFEM0YyQzY1OTk3QUMzNTIw NjI2N0M3ODk2ODVENEJEODg0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANnm3pMk4QMFGCOs5TXcn4SGBc4Y92u8+HD7CN8f8V0fsffdeuJgjeXDiWt1 eB6o8RvH6Md8Cx8v+3pXYlgpvv/QoaEVDOzqtBUQcCfo6upZXqivnODfPcY5GyFt oVYp/2/mnIvwcPfgBjYhgMENqB74bIUnFPbZubCRfGSlepyjsryr+omXAjpXejyQ kM5Ix3ZyQCzrhfaGE9XTaZKESzksZD4EEAMVtj2fmsLSsCod3z327fUoXSCJR73E lr+lWTf8yyzZH1+gGyTae+cNbKafRfQoDNyv0Rdrl/ezoAAMBVu0beChnrGLOJCH RDBeIguY17n4sL4WriM8yI6f22sCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBTFTB0/ LGWZesNSBiZ8eJaF1L2ISzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDIwOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfPEQDANBgkqhkiG9w0BAQsFAAOCAQEAlOzWS085RD21FHBZ zRTgnPjFhO2qYsR6GEjPrcI7XPE0GBNdjgV14RqgDL2b/k1aFG+lArZUk39uZIJb lDbceziN0qnG1Ztz586wEU3ElzeMasj9dhHR6v3W3fR/ubModSoVP8XkJ/vp5KeX lBxEbFFNHzh9r/j2VccR+ZN6lpD/IECj1ecbWPjsuPnNafS6dJv899mWaoi+peWx TtyRZ38m3QYrbk8nXpOmTvhANDISQihZgxOK6GarOnXLQfVBwgmIgdZPtrMWfBg1 9TyWn+666UgdLM01EH70lxDSbjfh4BkqmmYOtEgfz401vwjELKyiv7MnpxYAfWGG x2gp8w== -----END CERTIFICATE-----Generated at Thu Mar 26 04:01:42 2026 by rpki-client