$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150266.roa File: AS150266.roa (raw, json) Hash identifier: AAlOIKn7I8i88eSpiypMg67v/vV66nr0PSRZeHdHwjo= Subject key identifier: 0D:14:8A:A7:5F:FD:55:DA:6E:F3:39:E9:49:2B:4E:52:86:B9:32:10 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 09288A6F2A044D3448FB6C9925CB664DB76DA68F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150266.roa Signing time: Mon 23 Mar 2026 05:00:00 +0000 ROA not before: Mon 23 Mar 2026 04:55:00 +0000 ROA not after: Mon 22 Mar 2027 05:00:00 +0000 asID: 150266 IP address blocks: 103.91.137.0/24 maxlen: 24 103.218.183.0/24 maxlen: 24 2001:df2:7b40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:28:8a:6f:2a:04:4d:34:48:fb:6c:99:25:cb:66:4d:b7:6d:a6:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 23 04:55:00 2026 GMT Not After : Mar 22 05:00:00 2027 GMT Subject: CN=0D148AA75FFD55DA6EF339E9492B4E5286B93210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:83:be:cc:26:8f:65:fe:bc:17:de:f0:fd:20: ca:be:41:ed:6b:af:3c:d8:d9:48:57:7d:86:99:4f: 02:07:92:6d:bb:be:38:d2:9e:74:c9:10:c4:26:15: 32:65:99:09:80:a9:a8:7f:15:d9:a1:84:e3:ae:7f: 4d:67:9c:b0:db:07:6f:85:a6:b2:dd:01:cc:74:4c: e3:42:f3:05:d6:64:1f:e7:7b:70:cb:9f:ca:91:4b: c1:97:06:95:53:0e:92:31:94:74:d5:c8:38:ca:5d: 12:64:47:8b:19:d2:1a:18:da:b5:3b:f2:cc:f8:17: 71:f5:5f:ee:67:d4:7f:40:b3:2e:95:c7:29:e9:ce: 83:7d:27:59:c8:a0:23:71:c2:a5:43:9b:6c:95:22: ce:50:2c:a2:3c:e3:40:dc:f0:49:0b:22:a6:b4:65: 62:2a:2a:f5:b1:c5:0a:f7:ee:fd:7b:9e:be:d9:57: ef:fb:13:93:4e:76:57:b9:43:a2:f3:31:ed:67:77: 1b:68:26:f4:1d:cf:2a:57:b8:58:0d:06:59:83:c9: 51:ef:12:09:28:d0:66:48:7f:c6:24:c3:2b:47:29: f7:bc:eb:d1:bb:50:73:f0:ce:cf:50:0d:57:59:c3: d7:c5:a6:d0:21:e8:0e:eb:c8:bb:8a:ef:a0:62:5a: c1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:14:8A:A7:5F:FD:55:DA:6E:F3:39:E9:49:2B:4E:52:86:B9:32:10 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150266.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.91.137.0/24 103.218.183.0/24 IPv6: 2001:df2:7b40::/48 Signature Algorithm: sha256WithRSAEncryption 46:56:4d:77:ec:c7:97:e0:7e:b4:a8:16:f2:7a:72:3e:e4:8e: 07:ff:d2:ec:43:65:a0:24:64:86:85:01:48:fa:bf:2a:8c:bf: 08:12:e8:b8:00:a2:14:be:f3:9a:43:d0:e5:13:f0:26:d5:eb: e0:49:40:b2:29:49:19:88:80:00:ca:f7:11:52:cf:df:b9:02: 5f:32:2d:8a:4f:61:5a:ac:5f:c6:99:ea:a5:42:db:d5:a2:9c: 8b:d5:b8:41:e7:06:a9:be:02:f2:6e:2a:d9:30:91:fc:92:ae: 04:ff:f2:f7:37:07:ef:bf:5c:8a:7e:e8:a6:fb:4c:64:4a:96: ec:f4:ab:e8:99:c7:4e:45:af:e6:df:57:f5:c1:63:f1:26:5a: 23:b8:22:eb:bf:e1:da:42:59:a7:91:f6:f5:89:f6:27:4f:7e: 2b:db:56:1d:8f:14:16:33:8f:dd:13:33:3a:85:b7:a7:2b:84: 1a:7f:66:5e:f6:09:1b:7a:18:c6:d4:f3:5f:05:60:11:fb:c6: 37:8c:8d:3b:b5:13:02:1f:a8:0d:3d:6a:df:0d:f1:c8:0e:3f: e5:be:4a:6f:ab:db:38:2a:e2:bc:07:ea:b8:ba:cf:4a:16:ce: 91:e6:1f:44:f0:b1:ef:4a:26:8b:67:f0:ba:75:ff:e9:ca:75: c8:31:20:0e -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUCSiKbyoETTRI+2yZJctmTbdtpo8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMyMzA0NTUwMFoX DTI3MDMyMjA1MDAwMFowMzExMC8GA1UEAxMoMEQxNDhBQTc1RkZENTVEQTZFRjMz OUU5NDkyQjRFNTI4NkI5MzIxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqDvswmj2X+vBfe8P0gyr5B7WuvPNjZSFd9hplPAgeSbbu+ONKedMkQxCYV MmWZCYCpqH8V2aGE465/TWecsNsHb4Wmst0BzHRM40LzBdZkH+d7cMufypFLwZcG lVMOkjGUdNXIOMpdEmRHixnSGhjatTvyzPgXcfVf7mfUf0CzLpXHKenOg30nWcig I3HCpUObbJUizlAsojzjQNzwSQsiprRlYioq9bHFCvfu/XuevtlX7/sTk052V7lD ovMx7Wd3G2gm9B3PKle4WA0GWYPJUe8SCSjQZkh/xiTDK0cp97zr0btQc/DOz1AN V1nD18Wm0CHoDuvIu4rvoGJawekCAwEAAaOCAecwggHjMB0GA1UdDgQWBBQNFIqn X/1V2m7zOelJK05ShrkyEDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDI2Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQnMCUw EgQCAAEwDAMEAGdbiQMEAGfatzAPBAIAAjAJAwcAIAEN8ntAMA0GCSqGSIb3DQEB CwUAA4IBAQBGVk137MeX4H60qBbyenI+5I4H/9LsQ2WgJGSGhQFI+r8qjL8IEui4 AKIUvvOaQ9DlE/Am1evgSUCyKUkZiIAAyvcRUs/fuQJfMi2KT2FarF/GmeqlQtvV opyL1bhB5wapvgLybirZMJH8kq4E//L3Nwfvv1yKfuim+0xkSpbs9KvomcdORa/m 31f1wWPxJlojuCLrv+HaQlmnkfb1ifYnT34r21YdjxQWM4/dEzM6hbenK4Qaf2Ze 9gkbehjG1PNfBWAR+8Y3jI07tRMCH6gNPWrfDfHIDj/lvkpvq9s4KuK8B+q4us9K Fs6R5h9E8LHvSiaLZ/C6df/pynXIMSAO -----END CERTIFICATE-----Generated at Thu Mar 26 04:01:35 2026 by rpki-client