$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150263.roa File: AS150263.roa (raw, json) Hash identifier: lN1LBpFbPQCueO6vfuXv7ezXua+xzSj76ERKQVN3R6E= Subject key identifier: 08:20:D1:A7:00:6D:C5:A1:68:10:9F:93:18:85:60:68:5B:9B:5E:FE Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5DCD2F48542169AE7E8CF111E506DFA309DFEB78 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150263.roa Signing time: Fri 26 Jun 2026 03:25:33 +0000 ROA not before: Fri 26 Jun 2026 03:20:33 +0000 ROA not after: Fri 25 Jun 2027 03:25:33 +0000 asID: 150263 IP address blocks: 103.31.118.0/23 maxlen: 24 2001:df1:d940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 06:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:cd:2f:48:54:21:69:ae:7e:8c:f1:11:e5:06:df:a3:09:df:eb:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jun 26 03:20:33 2026 GMT Not After : Jun 25 03:25:33 2027 GMT Subject: CN=0820D1A7006DC5A168109F93188560685B9B5EFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:22:49:c4:a4:06:8b:c9:fe:cf:40:19:3b:74: ff:63:7d:0e:e9:40:68:6f:6a:90:6c:7b:ce:c0:b7: 59:90:f6:e1:f0:be:cd:d5:42:4b:9d:24:c5:df:8a: 64:3b:0d:7c:a0:1b:1b:e6:32:c9:e6:4d:99:4d:8f: da:64:bb:e2:ab:e2:ee:7b:ad:4e:08:6b:06:32:9a: 34:db:47:91:8d:fe:06:1d:0f:c3:bf:09:b8:cb:77: 0d:49:e9:de:1d:b3:8a:12:c7:ab:2e:94:ed:95:d0: d2:46:de:d4:83:9b:d8:d3:73:8e:64:bc:9c:64:5e: 72:2a:6c:46:8b:ed:9f:e0:0d:a8:72:68:69:90:03: e9:54:82:50:54:62:a3:2d:18:59:be:6b:66:88:8f: 3b:51:0e:db:4a:72:e2:a3:97:f9:46:4c:34:36:75: d2:41:f0:8b:88:06:54:e4:38:81:97:60:f4:a4:32: cf:18:15:7b:ed:43:a2:72:a4:d7:44:aa:fd:ac:c8: 65:d5:7f:9a:f7:27:f8:53:a7:63:63:56:c5:02:95: c4:d4:7f:f5:68:1d:05:2d:b8:43:67:fe:6e:b2:19: b1:af:5e:9d:bb:9e:eb:00:fd:6d:45:9b:b6:33:bb: 2b:f1:74:eb:78:45:ec:ea:48:b9:00:1e:c8:9d:7c: 42:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:20:D1:A7:00:6D:C5:A1:68:10:9F:93:18:85:60:68:5B:9B:5E:FE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150263.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.118.0/23 IPv6: 2001:df1:d940::/48 Signature Algorithm: sha256WithRSAEncryption 5a:52:2c:a2:6c:1f:65:f0:fd:25:3e:79:c8:f1:38:5d:f4:6a: e8:96:c4:37:4d:52:7a:21:0a:78:21:f6:af:58:fc:70:c0:12: e5:2b:75:75:7b:47:76:0b:c5:db:97:a1:58:69:15:e3:74:50: 1a:ed:a9:cd:92:5f:13:52:a3:08:b1:cf:36:ca:e7:17:b4:65: fd:46:23:ca:11:bc:db:d3:b5:4b:25:bf:6e:bf:1e:cc:e6:00: a4:53:75:7a:1f:b5:a9:8a:4a:dc:ef:17:98:c5:7f:1d:d4:f6: 76:65:d0:43:c8:6e:78:64:e6:1b:a9:cf:e0:f5:6c:2c:35:2e: 94:09:30:1f:bf:c9:33:fb:14:e2:b7:f1:70:fc:af:cf:24:08: 68:0e:53:cd:7c:2d:ce:29:aa:b2:86:6f:3a:2f:69:bb:af:b1: 08:c8:e4:5d:6d:b9:0c:45:15:e4:56:7d:ab:9a:ab:47:3f:19: 46:4c:c6:d9:44:85:9f:52:78:10:df:51:45:63:83:ac:48:ab: 8d:d4:fa:28:8a:e3:61:90:78:6a:99:23:4a:6c:b6:6e:12:e5: 41:62:67:09:d9:cd:df:2c:a6:5a:85:18:4a:c9:9c:a2:09:88: 17:8b:5f:42:4a:72:71:f9:b9:e8:16:e2:14:c4:8a:9e:14:17: 95:d7:a8:3e -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUXc0vSFQhaa5+jPER5Qbfownf63gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDYyNjAzMjAzM1oX DTI3MDYyNTAzMjUzM1owMzExMC8GA1UEAxMoMDgyMEQxQTcwMDZEQzVBMTY4MTA5 RjkzMTg4NTYwNjg1QjlCNUVGRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKwiScSkBovJ/s9AGTt0/2N9DulAaG9qkGx7zsC3WZD24fC+zdVCS50kxd+K ZDsNfKAbG+YyyeZNmU2P2mS74qvi7nutTghrBjKaNNtHkY3+Bh0Pw78JuMt3DUnp 3h2zihLHqy6U7ZXQ0kbe1IOb2NNzjmS8nGRecipsRovtn+ANqHJoaZAD6VSCUFRi oy0YWb5rZoiPO1EO20py4qOX+UZMNDZ10kHwi4gGVOQ4gZdg9KQyzxgVe+1DonKk 10Sq/azIZdV/mvcn+FOnY2NWxQKVxNR/9WgdBS24Q2f+brIZsa9enbue6wD9bUWb tjO7K/F063hF7OpIuQAeyJ18QhkCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQIINGn AG3FoWgQn5MYhWBoW5te/jAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwMjYzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBZx92MA8EAgACMAkDBwAgAQ3x2UAwDQYJKoZIhvcNAQELBQADggEBAFpS LKJsH2Xw/SU+ecjxOF30auiWxDdNUnohCngh9q9Y/HDAEuUrdXV7R3YLxduXoVhp FeN0UBrtqc2SXxNSowixzzbK5xe0Zf1GI8oRvNvTtUslv26/HszmAKRTdXoftamK StzvF5jFfx3U9nZl0EPIbnhk5hupz+D1bCw1LpQJMB+/yTP7FOK38XD8r88kCGgO U818Lc4pqrKGbzovabuvsQjI5F1tuQxFFeRWfauaq0c/GUZMxtlEhZ9SeBDfUUVj g6xIq43U+iiK42GQeGqZI0pstm4S5UFiZwnZzd8splqFGErJnKIJiBeLX0JKcnH5 uegW4hTEip4UF5XXqD4= -----END CERTIFICATE-----Generated at Thu Jul 23 23:49:56 2026 by rpki-client