$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150946.roa File: AS150946.roa (raw, json) Hash identifier: TMw+wDYMTPJX8le4iR6h8otO+WHiKPYuD2jDpwGJ/Bc= Subject key identifier: 38:83:FA:8E:BC:6D:F7:76:D1:2C:D5:0C:F1:65:62:4C:01:C2:FC:D9 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0EDE718D460A62574A7C268CAEBFB6A2A80B1D38 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150946.roa Signing time: Tue 10 Mar 2026 03:00:00 +0000 ROA not before: Tue 10 Mar 2026 02:55:00 +0000 ROA not after: Tue 09 Mar 2027 03:00:00 +0000 asID: 150946 IP address blocks: 2001:df2:8ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:de:71:8d:46:0a:62:57:4a:7c:26:8c:ae:bf:b6:a2:a8:0b:1d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 10 02:55:00 2026 GMT Not After : Mar 9 03:00:00 2027 GMT Subject: CN=3883FA8EBC6DF776D12CD50CF165624C01C2FCD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:68:42:5c:4c:cd:d3:ec:b0:84:96:c3:8a:47: c0:6e:6d:13:d6:2d:da:4f:b9:e7:e0:73:04:0c:25: 56:6f:96:25:df:f3:e1:e8:b5:d0:14:7f:8f:fb:f4: b9:97:df:94:8c:b7:36:fa:13:50:77:cc:4f:9a:99: 34:f5:82:d9:fc:b1:83:eb:c1:2a:b4:4e:5d:90:7a: 3a:9d:68:86:41:6e:f7:33:4d:b0:b4:6e:7c:2e:d1: b2:31:09:62:c0:ec:8c:1f:e3:e3:67:a1:28:29:94: 31:c1:76:87:fe:5f:69:07:45:3a:f4:9d:cc:66:ac: 84:14:95:dd:c2:00:90:a4:b3:a9:1a:be:06:2e:5a: e2:c4:bf:1e:f2:7b:d3:8d:ff:4b:c3:1b:cd:ff:1d: d6:da:9f:86:e4:3f:27:cd:53:69:ab:6a:ef:bc:97: a5:2b:22:aa:e6:9c:30:5a:a7:11:99:22:9d:7d:95: 8c:3b:ac:f9:dc:7a:96:91:73:55:ff:5c:d0:18:17: 19:90:77:08:2c:b3:ec:8f:bc:63:23:9c:11:87:1d: e3:a4:5f:18:68:fe:16:fb:b4:11:d2:cd:7c:8c:35: 31:aa:f1:97:0e:9b:20:bc:b8:92:5f:d0:21:48:d8: 8e:fd:a5:60:73:01:d5:d9:f0:2c:d6:b8:3d:f9:88: ae:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:83:FA:8E:BC:6D:F7:76:D1:2C:D5:0C:F1:65:62:4C:01:C2:FC:D9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150946.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:8ac0::/48 Signature Algorithm: sha256WithRSAEncryption 84:80:11:cd:06:3a:90:ed:57:68:d6:08:74:cb:ba:d8:a9:74: 2e:cf:d7:04:bc:1d:af:e7:1e:6e:fd:ba:0a:0a:50:6f:6f:3c: e5:42:55:d2:90:6d:e3:51:74:8b:a2:51:68:3c:12:eb:6b:86: 7e:a9:dd:42:3c:0a:e2:02:19:68:53:79:94:0f:65:3d:cf:60: ea:d9:3e:95:b6:68:5d:50:c9:aa:4f:fd:7e:b3:ee:c1:70:ab: 55:43:a6:98:61:6d:c1:db:a1:0e:52:b3:87:c9:b8:80:b8:9b: a7:eb:b9:eb:3e:f1:d0:0d:4f:35:e3:9c:48:80:54:5a:c8:1a: ac:04:c6:b5:b7:2d:4d:3e:26:67:1d:3c:73:74:83:59:0a:0a: 25:f4:63:50:a8:22:3d:2f:10:69:7e:49:a2:81:67:45:40:b2: c3:38:55:e8:33:3a:18:a8:9e:5b:0f:da:b4:41:ca:f0:49:5a: b8:9d:ad:2d:0d:67:90:f1:62:2a:e4:c1:3b:d3:fb:75:2a:d6: 2b:7a:0c:15:9b:6d:c4:fa:dd:4a:73:c5:70:15:2b:34:bc:bd: ad:47:d8:b3:41:34:45:11:df:a5:71:ff:c8:82:42:33:57:32: 8b:6a:e3:27:e3:7d:c6:11:4e:38:00:5e:d0:95:26:e5:d8:24: 08:13:88:32 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUDt5xjUYKYldKfCaMrr+2oqgLHTgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxMDAyNTUwMFoX DTI3MDMwOTAzMDAwMFowMzExMC8GA1UEAxMoMzg4M0ZBOEVCQzZERjc3NkQxMkNE NTBDRjE2NTYyNEMwMUMyRkNEOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMFoQlxMzdPssISWw4pHwG5tE9Yt2k+55+BzBAwlVm+WJd/z4ei10BR/j/v0 uZfflIy3NvoTUHfMT5qZNPWC2fyxg+vBKrROXZB6Op1ohkFu9zNNsLRufC7RsjEJ YsDsjB/j42ehKCmUMcF2h/5faQdFOvSdzGashBSV3cIAkKSzqRq+Bi5a4sS/HvJ7 043/S8Mbzf8d1tqfhuQ/J81Taatq77yXpSsiquacMFqnEZkinX2VjDus+dx6lpFz Vf9c0BgXGZB3CCyz7I+8YyOcEYcd46RfGGj+Fvu0EdLNfIw1Marxlw6bILy4kl/Q IUjYjv2lYHMB1dnwLNa4PfmIrpMCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQ4g/qO vG33dtEs1QzxZWJMAcL82TAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDk0Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfKKwDANBgkqhkiG9w0BAQsFAAOCAQEAhIARzQY6kO1XaNYI dMu62Kl0Ls/XBLwdr+cebv26CgpQb2885UJV0pBt41F0i6JRaDwS62uGfqndQjwK 4gIZaFN5lA9lPc9g6tk+lbZoXVDJqk/9frPuwXCrVUOmmGFtwduhDlKzh8m4gLib p+u56z7x0A1PNeOcSIBUWsgarATGtbctTT4mZx08c3SDWQoKJfRjUKgiPS8QaX5J ooFnRUCywzhV6DM6GKieWw/atEHK8ElauJ2tLQ1nkPFiKuTBO9P7dSrWK3oMFZtt xPrdSnPFcBUrNLy9rUfYs0E0RRHfpXH/yIJCM1cyi2rjJ+N9xhFOOABe0JUm5dgk CBOIMg== -----END CERTIFICATE-----Generated at Thu Mar 26 05:31:36 2026 by rpki-client