$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150923.roa File: AS150923.roa (raw, json) Hash identifier: tITd1554exrSc+lE9hWvFgWw7GU7pB2UQwgMYIQK9LM= Subject key identifier: 4C:B7:86:21:D0:FE:C0:BD:C9:AB:B3:FF:B1:77:BC:0C:15:75:7D:63 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3EDF0A98E65EDC2625E64CF6DAF22F41B538DAF6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150923.roa Signing time: Sun 03 May 2026 05:56:04 +0000 ROA not before: Sun 03 May 2026 05:51:04 +0000 ROA not after: Sun 02 May 2027 05:56:04 +0000 asID: 150923 IP address blocks: 103.97.224.0/24 maxlen: 24 103.97.225.0/24 maxlen: 24 2001:df2:ffc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:df:0a:98:e6:5e:dc:26:25:e6:4c:f6:da:f2:2f:41:b5:38:da:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 05:51:04 2026 GMT Not After : May 2 05:56:04 2027 GMT Subject: CN=4CB78621D0FEC0BDC9ABB3FFB177BC0C15757D63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5d:53:a5:e2:6b:db:ce:ad:42:94:f9:61:70: de:cb:f2:03:47:56:27:6f:97:0e:fc:80:24:17:99: 61:dd:ab:e3:67:8a:b0:61:fe:44:8e:00:b3:a0:dd: 23:2a:24:d3:9a:52:23:1d:d8:56:df:7e:d0:0e:5b: 61:36:be:90:5b:7d:39:b2:ef:63:ad:67:f5:d1:f2: 97:5f:e4:e3:f0:61:b0:e7:99:6a:5c:7a:bd:84:bc: 2a:00:6a:a1:f0:69:ac:8b:08:f6:ea:88:22:6b:5e: 6c:66:b2:64:33:c0:00:79:42:74:2b:aa:fa:f6:af: 0d:6d:a6:71:b4:32:fd:df:fa:91:43:a9:cb:7a:00: 19:9d:e7:06:4a:62:72:24:1a:25:d3:fb:5c:2b:23: 06:6c:1c:53:a2:59:db:a9:7b:be:eb:e2:b8:07:c4: de:67:67:84:73:89:9f:97:07:c9:da:e1:78:fe:97: 0c:1a:79:fc:e7:01:00:bf:8d:7e:7d:e4:6c:fa:73: b0:5c:93:e1:ad:54:3d:af:e9:a6:e6:91:60:cb:85: ec:15:c6:0a:2f:65:bd:cf:c6:12:74:f8:a8:c8:cf: 94:86:6f:14:cf:8a:44:f9:de:26:63:f8:9f:13:01: 12:12:52:f9:30:9b:d1:d6:92:d1:d3:93:5a:ad:16: a4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B7:86:21:D0:FE:C0:BD:C9:AB:B3:FF:B1:77:BC:0C:15:75:7D:63 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150923.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.97.224.0/23 IPv6: 2001:df2:ffc0::/48 Signature Algorithm: sha256WithRSAEncryption 56:30:83:73:88:33:b2:c2:db:75:56:d9:69:09:8e:9f:a6:a1: bf:c9:65:f9:e4:ca:76:59:18:ee:a5:84:a8:fa:b9:3a:2d:e7: b3:4c:50:b6:44:4c:0e:17:c7:a0:9c:9f:d3:ab:29:6b:14:e7: db:6d:51:be:15:12:ff:10:ea:28:10:e2:9d:e9:aa:22:55:ef: 79:55:63:63:27:72:f8:3d:14:be:e6:df:7c:00:a1:d8:09:91: 44:95:2e:c3:b7:ac:91:6f:13:9e:18:2a:b2:5a:28:82:80:76: ef:c7:3f:58:c1:32:cf:2e:e1:e7:17:e9:a2:42:3c:f8:20:23: 27:8f:cb:af:2a:9b:3f:d3:af:9c:09:54:1a:8f:b1:a4:46:b8: 5e:c1:9a:40:ab:81:00:27:b7:50:b3:a2:07:24:b1:2a:f0:18: e4:81:33:f0:d6:58:c3:68:e7:da:d7:92:6f:8c:60:8e:3a:fd: 1e:df:f1:06:bc:92:05:1a:76:05:e5:11:ac:52:1d:14:f5:20: 84:4a:fd:f9:91:eb:12:e9:ad:5e:8d:53:51:36:34:f6:06:46: d8:32:b4:6f:01:be:8d:92:ee:56:69:0d:68:2f:dc:ca:9f:57: 36:07:e4:9f:6a:ea:50:66:61:b3:2a:cc:d2:5b:cb:2c:73:0f: 5d:06:31:6e -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUPt8KmOZe3CYl5kz22vIvQbU42vYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzA1NTEwNFoX DTI3MDUwMjA1NTYwNFowMzExMC8GA1UEAxMoNENCNzg2MjFEMEZFQzBCREM5QUJC M0ZGQjE3N0JDMEMxNTc1N0Q2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKZdU6Xia9vOrUKU+WFw3svyA0dWJ2+XDvyAJBeZYd2r42eKsGH+RI4As6Dd Iyok05pSIx3YVt9+0A5bYTa+kFt9ObLvY61n9dHyl1/k4/BhsOeZalx6vYS8KgBq ofBprIsI9uqIImtebGayZDPAAHlCdCuq+vavDW2mcbQy/d/6kUOpy3oAGZ3nBkpi ciQaJdP7XCsjBmwcU6JZ26l7vuviuAfE3mdnhHOJn5cHydrheP6XDBp5/OcBAL+N fn3kbPpzsFyT4a1UPa/ppuaRYMuF7BXGCi9lvc/GEnT4qMjPlIZvFM+KRPneJmP4 nxMBEhJS+TCb0daS0dOTWq0WpMMCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBRMt4Yh 0P7Avcmrs/+xd7wMFXV9YzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwOTIzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBZ2HgMA8EAgACMAkDBwAgAQ3y/8AwDQYJKoZIhvcNAQELBQADggEBAFYw g3OIM7LC23VW2WkJjp+mob/JZfnkynZZGO6lhKj6uTot57NMULZETA4Xx6Ccn9Or KWsU59ttUb4VEv8Q6igQ4p3pqiJV73lVY2Mncvg9FL7m33wAodgJkUSVLsO3rJFv E54YKrJaKIKAdu/HP1jBMs8u4ecX6aJCPPggIyePy68qmz/Tr5wJVBqPsaRGuF7B mkCrgQAnt1CzogcksSrwGOSBM/DWWMNo59rXkm+MYI46/R7f8Qa8kgUadgXlEaxS HRT1IIRK/fmR6xLprV6NU1E2NPYGRtgytG8Bvo2S7lZpDWgv3MqfVzYH5J9q6lBm YbMqzNJbyyxzD10GMW4= -----END CERTIFICATE-----Generated at Tue May 12 22:56:53 2026 by rpki-client