$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150259.roa File: AS150259.roa (raw, json) Hash identifier: 2Yk2qOhswJON6PIeshaBVbccjJ7DCdJhVL+hkQ14wFg= Subject key identifier: DD:A0:FA:10:26:B5:1E:3D:31:74:C6:F2:30:7A:EF:5F:0C:37:63:88 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4A075FE9E17FE72AA59FFCCA4EB38E5274F796A9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150259.roa Signing time: Sun 03 May 2026 08:11:22 +0000 ROA not before: Sun 03 May 2026 08:06:22 +0000 ROA not after: Sun 02 May 2027 08:11:22 +0000 asID: 150259 IP address blocks: 103.87.202.0/24 maxlen: 24 103.127.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:07:5f:e9:e1:7f:e7:2a:a5:9f:fc:ca:4e:b3:8e:52:74:f7:96:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 08:06:22 2026 GMT Not After : May 2 08:11:22 2027 GMT Subject: CN=DDA0FA1026B51E3D3174C6F2307AEF5F0C376388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5f:07:73:d9:c3:26:2c:de:76:b6:6e:fc:ec: 71:32:07:f8:e4:aa:c6:cb:25:c1:29:b2:5d:6e:19: ec:58:14:25:5c:ea:7f:9a:e0:06:eb:19:de:53:f2: 40:e0:11:ae:11:55:d5:78:90:fc:e4:ca:56:bb:cb: 52:05:96:9d:20:84:c7:cf:06:ee:b1:42:43:f5:55: 91:51:a3:a1:cd:bd:8e:ab:c6:b5:b6:7f:b4:cd:fd: 93:52:cb:31:35:cc:c4:03:6f:4d:89:ae:6b:d5:65: 8d:1e:b6:74:ab:ea:1b:1d:c9:4e:b2:52:72:48:70: 02:6b:e3:4e:a1:1b:60:9b:a2:79:ce:4d:bf:e6:6c: ab:1a:92:c9:c2:05:f4:7b:be:7e:42:1e:72:5b:e3: dc:4c:b1:0f:c0:d8:5a:91:23:e5:09:06:c1:16:27: c7:1d:5d:0a:5b:2c:dc:94:ae:c9:34:16:8c:ec:45: ca:41:1a:97:94:46:2e:13:f3:e3:39:c5:c6:9d:b5: 14:90:04:89:74:24:74:0b:b1:93:ec:f4:8e:a9:c5: 69:dc:d0:c9:da:17:2d:a5:08:39:42:2b:eb:e3:64: 44:a2:cf:99:2d:09:70:d2:aa:38:21:75:19:67:8e: fc:68:47:b4:8b:70:3f:f8:2c:41:9a:d9:e0:07:b7: c6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A0:FA:10:26:B5:1E:3D:31:74:C6:F2:30:7A:EF:5F:0C:37:63:88 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150259.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.87.202.0/24 103.127.220.0/24 Signature Algorithm: sha256WithRSAEncryption 12:dc:8a:5f:a7:48:e3:18:51:d3:f6:7d:07:56:b9:e0:6c:3e: 29:6b:fd:d2:67:62:f8:ec:3b:76:05:3b:dd:a0:f3:30:ed:06: 88:95:e6:85:76:51:fc:6f:2a:10:69:d8:33:bd:b2:2c:19:ab: 29:81:f8:5a:4a:de:17:1c:26:81:ab:9c:fc:78:40:e6:dc:97: 81:ef:54:79:8b:b6:a6:5e:f3:90:d9:d0:52:03:be:ca:52:49: ee:d2:4d:3a:3d:1a:13:e9:a3:3d:42:fa:6e:d4:5a:0c:f0:3b: a4:04:2b:cf:70:13:38:c1:29:29:b5:3d:1a:79:8d:c3:d4:69: 04:57:57:eb:01:67:07:df:be:3d:fc:b2:24:da:a4:b1:a2:09: 0c:96:54:8b:fe:dc:60:ce:3d:1c:f5:29:a3:cd:c0:92:97:f6: 0a:ab:a2:8a:a3:58:3c:67:44:6b:14:69:8c:d5:3a:14:43:35: 72:50:f1:4f:da:9f:38:c7:f5:45:6a:b4:22:23:04:4a:be:a3: c6:a6:c5:ea:67:0c:0a:b9:ac:11:d5:c4:2b:de:8e:ce:5a:62: 42:b3:a3:ec:96:4f:a0:92:52:41:22:dc:7e:67:6a:3b:cc:1b: d2:4a:22:f8:12:26:95:7a:b0:7f:63:f6:76:60:b0:db:b3:01: 65:6b:5d:b6 -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUSgdf6eF/5yqln/zKTrOOUnT3lqkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzA4MDYyMloX DTI3MDUwMjA4MTEyMlowMzExMC8GA1UEAxMoRERBMEZBMTAyNkI1MUUzRDMxNzRD NkYyMzA3QUVGNUYwQzM3NjM4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKZfB3PZwyYs3na2bvzscTIH+OSqxsslwSmyXW4Z7FgUJVzqf5rgBusZ3lPy QOARrhFV1XiQ/OTKVrvLUgWWnSCEx88G7rFCQ/VVkVGjoc29jqvGtbZ/tM39k1LL MTXMxANvTYmua9VljR62dKvqGx3JTrJSckhwAmvjTqEbYJuiec5Nv+ZsqxqSycIF 9Hu+fkIeclvj3EyxD8DYWpEj5QkGwRYnxx1dClss3JSuyTQWjOxFykEal5RGLhPz 4znFxp21FJAEiXQkdAuxk+z0jqnFadzQydoXLaUIOUIr6+NkRKLPmS0JcNKqOCF1 GWeO/GhHtItwP/gsQZrZ4Ae3xhUCAwEAAaOCAdIwggHOMB0GA1UdDgQWBBTdoPoQ JrUePTF0xvIweu9fDDdjiDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwMjU5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQAZ1fKAwQAZ3/cMA0GCSqGSIb3DQEBCwUAA4IBAQAS3Ipfp0jjGFHT9n0H VrngbD4pa/3SZ2L47Dt2BTvdoPMw7QaIleaFdlH8byoQadgzvbIsGaspgfhaSt4X HCaBq5z8eEDm3JeB71R5i7amXvOQ2dBSA77KUknu0k06PRoT6aM9Qvpu1FoM8Duk BCvPcBM4wSkptT0aeY3D1GkEV1frAWcH3749/LIk2qSxogkMllSL/txgzj0c9Smj zcCSl/YKq6KKo1g8Z0RrFGmM1ToUQzVyUPFP2p84x/VFarQiIwRKvqPGpsXqZwwK uawR1cQr3o7OWmJCs6Pslk+gklJBItx+Z2o7zBvSSiL4EiaVerB/Y/Z2YLDbswFl a122 -----END CERTIFICATE-----Generated at Tue May 12 22:42:14 2026 by rpki-client