$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150549.roa File: AS150549.roa (raw, json) Hash identifier: E/twOG4ysb5yyPL4R5KyBPbB+8QPy+UdlGF3g6VKlOE= Subject key identifier: 87:5E:45:CE:46:AF:A1:59:9B:21:3B:75:B8:F9:28:46:3B:17:F8:06 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 23CB6FE7ED884389D5B8D0A891274A903FBA69D7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150549.roa Signing time: Tue 10 Mar 2026 07:00:00 +0000 ROA not before: Tue 10 Mar 2026 06:55:00 +0000 ROA not after: Tue 09 Mar 2027 07:00:00 +0000 asID: 150549 IP address blocks: 2001:df2:24c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:cb:6f:e7:ed:88:43:89:d5:b8:d0:a8:91:27:4a:90:3f:ba:69:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 10 06:55:00 2026 GMT Not After : Mar 9 07:00:00 2027 GMT Subject: CN=875E45CE46AFA1599B213B75B8F928463B17F806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dd:99:f8:db:68:52:83:9e:8f:ca:2b:02:51: d5:c1:25:14:6d:8b:b4:7a:3d:7f:7b:c1:87:f7:a7: 55:97:a5:b1:0e:db:c5:7d:ff:6b:b5:94:29:85:80: ff:c6:21:6a:32:a1:e5:f9:95:a1:6d:c9:51:a6:50: 63:d4:04:64:36:38:ff:9e:65:a7:83:30:03:7f:29: 8b:a5:ad:f1:49:dd:6c:17:ab:6f:7e:8f:98:3f:3c: e9:ab:71:63:38:6e:34:d0:3d:ee:75:e1:ed:03:85: c9:8f:b1:24:f3:ee:f5:d7:6a:0a:79:43:6e:c0:3a: a9:a5:86:a6:cd:34:95:0d:c2:23:d1:14:af:0a:22: b9:ca:68:6d:79:d9:c0:51:b2:04:2c:75:5d:7f:90: cc:52:fb:74:f9:a8:fc:c3:dd:00:a7:95:aa:92:15: 0f:2f:1a:92:42:86:ee:03:28:4d:40:b8:2b:57:17: 7d:eb:9a:a8:1f:d1:c9:a1:e3:62:9f:31:5c:9d:92: 97:e4:e8:ad:46:ee:82:5b:44:d6:41:1e:53:80:bd: 5a:fc:dd:40:43:4b:85:8d:e6:78:66:3d:e6:42:62: 0d:e5:80:3e:cd:40:cb:62:d5:13:dd:6f:39:00:55: 98:31:ea:32:81:f8:79:1e:f3:bd:95:27:26:71:75: 56:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5E:45:CE:46:AF:A1:59:9B:21:3B:75:B8:F9:28:46:3B:17:F8:06 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150549.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:24c0::/48 Signature Algorithm: sha256WithRSAEncryption 47:d3:d5:19:cf:97:36:fd:cf:10:39:4f:95:e1:b9:f3:76:9f: 15:6e:c2:81:81:15:b1:1b:48:82:b5:e2:ae:8a:57:24:53:b8: d9:ba:25:39:e5:b9:a3:29:09:64:0b:5d:d4:a6:20:1c:e2:6d: e8:fe:e8:98:81:cb:ec:23:e9:9a:1c:f1:08:74:56:18:7f:7e: e8:5e:f9:e1:2a:95:ef:f3:8b:32:a8:3e:ed:31:69:72:c4:11: c5:d0:6f:84:a5:8b:11:1b:7d:8d:40:9b:75:1b:dd:e7:4b:e8: a7:85:63:bc:7a:de:9a:90:10:b1:da:8f:2b:a1:be:9b:c5:d2: 30:be:42:81:cd:50:2e:9e:25:88:42:06:f0:3b:10:e8:c3:d3: 73:f0:63:48:0a:8b:b3:35:60:d9:5d:19:bd:c2:97:52:2a:13: 5c:3f:19:8b:42:1a:b8:2b:53:1b:19:db:fb:66:c7:6d:3d:36: 5b:53:05:2c:a2:f8:4f:4e:ce:81:a6:43:2c:10:00:cf:b2:b1: 66:83:1f:0c:a9:4e:f8:a2:0f:26:f2:bc:05:d7:4e:56:d7:e1: 36:3c:fd:12:4c:eb:75:ab:dd:5e:05:8d:94:e6:05:be:fb:0a: b7:d7:6e:ac:b5:a4:a7:75:34:11:53:01:96:6e:1e:24:f9:65: cb:2d:5a:bd -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUI8tv5+2IQ4nVuNCokSdKkD+6adcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxMDA2NTUwMFoX DTI3MDMwOTA3MDAwMFowMzExMC8GA1UEAxMoODc1RTQ1Q0U0NkFGQTE1OTlCMjEz Qjc1QjhGOTI4NDYzQjE3RjgwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMLdmfjbaFKDno/KKwJR1cElFG2LtHo9f3vBh/enVZelsQ7bxX3/a7WUKYWA /8YhajKh5fmVoW3JUaZQY9QEZDY4/55lp4MwA38pi6Wt8UndbBerb36PmD886atx YzhuNNA97nXh7QOFyY+xJPPu9ddqCnlDbsA6qaWGps00lQ3CI9EUrwoiucpobXnZ wFGyBCx1XX+QzFL7dPmo/MPdAKeVqpIVDy8akkKG7gMoTUC4K1cXfeuaqB/RyaHj Yp8xXJ2Sl+TorUbugltE1kEeU4C9WvzdQENLhY3meGY95kJiDeWAPs1Ay2LVE91v OQBVmDHqMoH4eR7zvZUnJnF1VkcCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBSHXkXO Rq+hWZshO3W4+ShGOxf4BjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDU0OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfIkwDANBgkqhkiG9w0BAQsFAAOCAQEAR9PVGc+XNv3PEDlP leG583afFW7CgYEVsRtIgrXiropXJFO42bolOeW5oykJZAtd1KYgHOJt6P7omIHL 7CPpmhzxCHRWGH9+6F754SqV7/OLMqg+7TFpcsQRxdBvhKWLERt9jUCbdRvd50vo p4VjvHrempAQsdqPK6G+m8XSML5Cgc1QLp4liEIG8DsQ6MPTc/BjSAqLszVg2V0Z vcKXUioTXD8Zi0IauCtTGxnb+2bHbT02W1MFLKL4T07OgaZDLBAAz7KxZoMfDKlO +KIPJvK8BddOVtfhNjz9EkzrdavdXgWNlOYFvvsKt9durLWkp3U0EVMBlm4eJPll yy1avQ== -----END CERTIFICATE-----Generated at Thu Mar 26 04:01:58 2026 by rpki-client