$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150461.roa File: AS150461.roa (raw, json) Hash identifier: 8g2pPcI6mVC/M7FNi+vhQQPN7WLjjx3MDLBD/RuMj1s= Subject key identifier: 12:03:15:A5:13:6E:A8:1B:ED:9A:7C:27:78:EB:28:A0:06:F8:3D:01 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3DA7EB5A8E1840FD6283AD83B36BF1C1F627F421 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150461.roa Signing time: Sun 03 May 2026 08:16:10 +0000 ROA not before: Sun 03 May 2026 08:11:10 +0000 ROA not after: Sun 02 May 2027 08:16:10 +0000 asID: 150461 IP address blocks: 103.93.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a7:eb:5a:8e:18:40:fd:62:83:ad:83:b3:6b:f1:c1:f6:27:f4:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 08:11:10 2026 GMT Not After : May 2 08:16:10 2027 GMT Subject: CN=120315A5136EA81BED9A7C2778EB28A006F83D01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0b:a6:5d:ef:e9:84:7c:a1:1d:d2:e1:fb:8c: 9c:f9:d2:66:28:e1:66:c1:50:1e:de:4c:d5:24:88: 86:f8:c0:b0:3f:b0:df:c4:b4:7b:82:d0:91:67:52: 97:45:a1:32:a7:11:c7:48:6b:09:da:0a:84:c5:e0: 62:cb:de:d3:cf:55:15:00:58:82:41:97:2a:37:fc: 8c:ee:e2:5d:b3:c0:10:6d:ae:3f:25:0f:8f:e6:9a: e1:29:cb:47:34:6a:f9:b8:a0:67:02:20:48:0a:8a: 33:42:f5:bd:8a:f6:57:58:55:3d:ac:f1:53:9d:e3: e6:9e:5b:46:1f:09:2c:c6:41:d2:c6:16:81:df:d4: 52:f7:11:d2:c3:dd:ac:ad:70:41:1f:5c:cb:9b:ae: b5:b7:f2:d4:bb:0b:0e:a6:da:c4:5d:64:d7:ad:8e: c5:59:c5:34:b7:23:72:5e:b9:e7:76:9a:aa:76:15: a0:df:7a:e7:f7:b8:4f:7a:50:07:55:9e:81:06:35: 78:8e:23:ad:a1:74:f9:bf:cc:2f:e1:aa:d9:88:2a: 4c:84:32:d0:b8:d8:04:a9:07:70:33:44:5d:c5:63: 2e:8b:c4:3e:e5:9d:e8:82:45:f7:e9:1d:cb:81:fd: 9f:9b:74:11:d8:e1:31:e4:2b:38:0d:7c:4b:46:99: bb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:03:15:A5:13:6E:A8:1B:ED:9A:7C:27:78:EB:28:A0:06:F8:3D:01 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150461.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.93.121.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:0c:8e:ac:42:51:7e:f1:ec:62:89:13:c3:56:b2:c0:dc:f5: a5:a7:6f:9c:21:8d:a8:18:7d:ec:8e:8d:63:15:1e:31:a5:b7: 0e:34:f4:ad:24:50:39:9c:18:4e:18:72:2f:ab:68:2c:e9:c5: 49:fa:fb:95:2c:ad:a6:b1:c7:4b:d4:2a:b9:b4:5a:14:25:e3: 87:cc:6d:66:33:29:4c:7c:77:b0:12:5a:55:be:c3:3b:fe:53: 3b:69:b5:f6:e0:ee:36:88:df:f1:f0:f0:16:24:eb:28:43:2f: 77:fc:87:76:c4:6d:62:25:15:6e:f4:3d:ae:35:b1:4c:2b:74: e2:2c:d3:e2:e0:ba:9a:67:da:99:86:27:6e:09:6e:be:7e:27: 5c:34:23:88:79:2d:34:6a:1d:5b:62:0f:14:71:17:3e:1e:02: f6:67:0e:09:04:c1:83:81:34:6b:e5:97:21:1f:26:a4:23:b5: 0b:79:44:5e:39:ef:e7:c3:4f:41:69:2c:9a:41:dc:b3:d2:a4: 07:e2:2d:d7:b9:1d:c5:03:91:c7:73:be:92:cc:cf:1c:76:15: be:b6:44:e6:7c:d4:cd:79:44:da:c3:7e:56:7a:76:ad:7d:7d: 0d:db:80:71:e7:0d:41:c3:9e:b3:61:de:27:10:fe:19:9a:ad: 81:33:4d:5b -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUPafrWo4YQP1ig62Ds2vxwfYn9CEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzA4MTExMFoX DTI3MDUwMjA4MTYxMFowMzExMC8GA1UEAxMoMTIwMzE1QTUxMzZFQTgxQkVEOUE3 QzI3NzhFQjI4QTAwNkY4M0QwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALQLpl3v6YR8oR3S4fuMnPnSZijhZsFQHt5M1SSIhvjAsD+w38S0e4LQkWdS l0WhMqcRx0hrCdoKhMXgYsve089VFQBYgkGXKjf8jO7iXbPAEG2uPyUPj+aa4SnL RzRq+bigZwIgSAqKM0L1vYr2V1hVPazxU53j5p5bRh8JLMZB0sYWgd/UUvcR0sPd rK1wQR9cy5uutbfy1LsLDqbaxF1k162OxVnFNLcjcl6553aaqnYVoN965/e4T3pQ B1WegQY1eI4jraF0+b/ML+Gq2YgqTIQy0LjYBKkHcDNEXcVjLovEPuWd6IJF9+kd y4H9n5t0EdjhMeQrOA18S0aZu98CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQSAxWl E26oG+2afCd46yigBvg9ATAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwNDYxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ115MA0GCSqGSIb3DQEBCwUAA4IBAQBaDI6sQlF+8exiiRPDVrLA3PWl p2+cIY2oGH3sjo1jFR4xpbcONPStJFA5nBhOGHIvq2gs6cVJ+vuVLK2mscdL1Cq5 tFoUJeOHzG1mMylMfHewElpVvsM7/lM7abX24O42iN/x8PAWJOsoQy93/Id2xG1i JRVu9D2uNbFMK3TiLNPi4LqaZ9qZhiduCW6+fidcNCOIeS00ah1bYg8UcRc+HgL2 Zw4JBMGDgTRr5ZchHyakI7ULeUReOe/nw09BaSyaQdyz0qQH4i3XuR3FA5HHc76S zM8cdhW+tkTmfNTNeUTaw35WenatfX0N24Bx5w1Bw56zYd4nEP4Zmq2BM01b -----END CERTIFICATE-----Generated at Tue May 12 22:43:06 2026 by rpki-client