$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150986.roa File: AS150986.roa (raw, json) Hash identifier: LZPFLGRf6cz9hH60DMOlrQAZrR95pcNR/L29/8Asg2w= Subject key identifier: EE:47:E0:00:C4:FD:16:07:8B:5F:11:45:B3:18:BD:F4:39:80:5E:36 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7708F3EA1F09676CE8F678C870090A68F4B769D1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150986.roa Signing time: Tue 10 Mar 2026 09:00:00 +0000 ROA not before: Tue 10 Mar 2026 08:55:00 +0000 ROA not after: Tue 09 Mar 2027 09:00:00 +0000 asID: 150986 IP address blocks: 103.193.146.0/23 maxlen: 24 2001:df2:afc0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:08:f3:ea:1f:09:67:6c:e8:f6:78:c8:70:09:0a:68:f4:b7:69:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 10 08:55:00 2026 GMT Not After : Mar 9 09:00:00 2027 GMT Subject: CN=EE47E000C4FD16078B5F1145B318BDF439805E36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5a:e4:60:11:96:9d:bc:eb:e6:4e:5d:98:67: 6c:99:6d:6b:b8:58:75:a6:08:33:ec:cf:89:12:40: cd:77:4a:ea:66:a1:65:6f:cc:b9:00:3b:5e:76:0e: f7:7c:d2:a8:86:3f:f1:bb:92:63:76:b5:28:e2:39: f4:3a:4f:6a:30:e4:4d:c7:52:5c:62:24:41:b7:04: 44:f2:de:5b:f6:80:a0:bd:31:2e:09:dc:81:12:75: 99:d5:27:fb:be:7b:55:1d:35:ee:51:aa:08:91:a0: fa:ab:78:80:d5:4e:d8:34:41:5a:96:10:84:93:ab: 2c:87:c1:d6:46:c6:44:e4:d3:d4:fe:34:d6:c1:c2: 1d:a5:96:1a:1a:af:d6:01:2b:82:6c:73:03:f5:08: d7:2c:2f:4e:d0:8b:0b:45:a0:75:49:94:c9:eb:89: 09:82:19:bc:05:b6:df:3c:5b:71:5f:e8:07:1c:66: 81:e6:9c:7b:04:8e:3e:cc:89:2e:8b:f5:ae:a7:4e: b8:0f:c6:1c:44:42:b0:fb:06:a3:e8:b3:46:e8:3f: 87:fc:6c:7d:33:20:b1:b6:70:73:c6:7f:47:e7:65: b0:a8:74:09:c6:92:08:88:04:4e:d5:00:b2:4d:bc: c6:b5:67:7f:07:ae:c9:bd:6a:c6:a0:70:24:4d:40: 6c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:47:E0:00:C4:FD:16:07:8B:5F:11:45:B3:18:BD:F4:39:80:5E:36 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150986.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.193.146.0/23 IPv6: 2001:df2:afc0::/48 Signature Algorithm: sha256WithRSAEncryption 3f:bd:35:e2:fb:aa:e7:07:47:26:14:60:20:23:49:7b:27:4d: 9b:f6:c0:7b:94:ba:04:e5:35:c7:5d:9b:4f:a7:a4:5d:02:8e: 87:0d:82:da:5f:83:d8:3e:9c:f2:ba:39:ff:42:a1:b1:90:5a: 76:b3:81:64:a6:0b:0e:78:e6:1c:6c:ba:6e:57:b9:f5:23:db: d6:7b:67:67:5d:3a:ca:bc:7a:03:4f:1c:a3:2b:56:5b:f2:84: 09:c8:9f:9c:34:4b:aa:4e:94:38:67:90:6b:0e:f3:ad:d3:6d: df:fa:f4:d5:f5:db:c2:24:9b:82:6f:1c:b0:96:1a:ee:8c:ed: fc:51:5a:e6:45:66:e1:41:11:47:c3:9d:3a:24:c0:43:f7:e2: 42:00:c3:a1:81:28:f9:e3:d8:cf:e1:56:27:db:ae:8e:4d:bb: b5:30:7b:a7:a0:c4:10:03:19:04:78:a1:dc:12:5b:b8:97:18: 7d:85:28:8d:89:1e:ec:5c:04:b5:3c:f0:92:5f:5f:4b:8d:50: 6c:79:c9:a0:fd:1c:9d:3c:82:d5:52:6b:99:ed:20:df:d3:99: 19:f3:ab:8c:cd:eb:a3:81:34:ba:1f:ba:e6:15:de:91:be:b4: 5f:56:84:7a:fd:07:df:33:7d:de:57:43:09:fc:a8:1c:81:c3: 6f:f9:e9:1d -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUdwjz6h8JZ2zo9njIcAkKaPS3adEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxMDA4NTUwMFoX DTI3MDMwOTA5MDAwMFowMzExMC8GA1UEAxMoRUU0N0UwMDBDNEZEMTYwNzhCNUYx MTQ1QjMxOEJERjQzOTgwNUUzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM9a5GARlp286+ZOXZhnbJlta7hYdaYIM+zPiRJAzXdK6mahZW/MuQA7XnYO 93zSqIY/8buSY3a1KOI59DpPajDkTcdSXGIkQbcERPLeW/aAoL0xLgncgRJ1mdUn +757VR017lGqCJGg+qt4gNVO2DRBWpYQhJOrLIfB1kbGROTT1P401sHCHaWWGhqv 1gErgmxzA/UI1ywvTtCLC0WgdUmUyeuJCYIZvAW23zxbcV/oBxxmgeacewSOPsyJ Lov1rqdOuA/GHERCsPsGo+izRug/h/xsfTMgsbZwc8Z/R+dlsKh0CcaSCIgETtUA sk28xrVnfweuyb1qxqBwJE1AbDUCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBTuR+AA xP0WB4tfEUWzGL30OYBeNjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDk4Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAWfBkjAPBAIAAjAJAwcAIAEN8q/AMA0GCSqGSIb3DQEBCwUAA4IB AQA/vTXi+6rnB0cmFGAgI0l7J02b9sB7lLoE5TXHXZtPp6RdAo6HDYLaX4PYPpzy ujn/QqGxkFp2s4FkpgsOeOYcbLpuV7n1I9vWe2dnXTrKvHoDTxyjK1Zb8oQJyJ+c NEuqTpQ4Z5BrDvOt023f+vTV9dvCJJuCbxywlhrujO38UVrmRWbhQRFHw506JMBD 9+JCAMOhgSj549jP4VYn266OTbu1MHunoMQQAxkEeKHcElu4lxh9hSiNiR7sXAS1 PPCSX19LjVBsecmg/RydPILVUmuZ7SDf05kZ86uMzeujgTS6H7rmFd6RvrRfVoR6 /QffM33eV0MJ/KgcgcNv+ekd -----END CERTIFICATE-----Generated at Thu Mar 26 04:01:51 2026 by rpki-client