$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150979.roa File: AS150979.roa (raw, json) Hash identifier: kHy3NoVFHv7M3ueKrMdLKEL2o1RLXDPh6p2WqMW5bsc= Subject key identifier: 65:6B:2F:F4:41:F4:4F:63:AE:7B:09:10:77:CD:F4:E6:3C:2D:C0:AC Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4D73B29AA8CC42FCD592F8F95E9A83A30B005E86 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150979.roa Signing time: Mon 02 Mar 2026 02:17:40 +0000 ROA not before: Mon 02 Mar 2026 02:12:40 +0000 ROA not after: Mon 01 Mar 2027 02:17:40 +0000 asID: 150979 IP address blocks: 103.70.120.0/24 maxlen: 24 103.70.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 09:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:73:b2:9a:a8:cc:42:fc:d5:92:f8:f9:5e:9a:83:a3:0b:00:5e:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 2 02:12:40 2026 GMT Not After : Mar 1 02:17:40 2027 GMT Subject: CN=656B2FF441F44F63AE7B091077CDF4E63C2DC0AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7e:c0:32:48:1b:91:b2:40:cb:ed:a7:b0:71: e5:f6:72:91:c6:78:a9:d6:92:6d:7e:d7:58:ab:bf: 0e:80:8c:18:a4:56:3f:ba:bc:51:7f:de:58:32:3c: 89:f8:81:54:aa:cc:76:66:89:c9:9a:64:27:83:7f: e4:16:0c:6e:37:2c:ae:42:82:27:ae:e6:fd:9c:39: d9:b3:ca:39:4d:b5:e5:ad:21:25:29:a8:e9:00:0f: 5d:46:9d:fe:35:4a:8f:9a:20:b9:6a:63:95:79:05: d9:ca:9e:47:d4:4b:80:70:dd:7e:6f:1b:73:a0:c9: 71:ce:d1:b4:2a:de:88:3c:eb:34:52:86:e4:bd:a9: 07:79:f9:96:e9:5f:10:71:1e:cb:cd:ca:56:3d:58: 6f:5f:d7:da:d9:7d:bf:0e:e2:e6:b5:30:a7:69:ce: 95:2e:17:c3:2b:54:4f:c9:77:38:27:e0:a1:65:be: 36:52:2a:7d:19:a5:62:91:a8:15:59:05:4f:c3:a6: db:d0:2b:fe:04:bc:d6:06:8a:8c:91:bc:7c:f8:b2: 7d:f4:9f:61:70:cf:69:fa:f3:13:db:c1:65:59:3c: ed:97:40:c8:1e:e9:83:bd:7f:f6:2f:9f:72:4e:98: d3:df:0f:13:fa:93:fe:3d:bb:6f:fe:a7:18:7d:d3: 29:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6B:2F:F4:41:F4:4F:63:AE:7B:09:10:77:CD:F4:E6:3C:2D:C0:AC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150979.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.70.120.0/23 Signature Algorithm: sha256WithRSAEncryption 49:c5:fc:75:7e:a1:06:45:6d:fd:2d:44:07:a9:f5:bb:5c:cf: 78:41:c6:2c:a1:b0:ff:68:97:d7:4d:13:e9:58:2d:76:56:4c: cd:c5:b6:ff:34:7c:47:e0:78:d4:bf:7d:87:7d:2d:c3:a5:a5: e2:f5:02:8e:fa:9c:14:74:a6:33:8a:d1:51:77:ea:c3:30:2c: 4d:7b:cd:e7:9a:88:b0:28:62:cb:7d:58:fa:a6:aa:33:da:1f: 8e:81:30:61:14:b6:b5:e7:ce:e7:75:01:ab:fa:17:83:f1:ba: 9c:32:53:9d:de:75:70:53:ba:d4:af:93:6f:ba:99:1d:85:80: 5b:81:90:f5:74:19:36:3b:97:7a:d1:dc:66:49:7b:67:88:93: 06:1a:0c:22:aa:05:35:0d:fb:83:89:c5:46:33:3f:44:ed:36: 61:38:7d:62:8b:ec:1b:cf:c4:a0:25:3f:a3:9f:69:37:63:86: e5:ae:22:bd:54:80:ac:e5:86:1f:13:4e:48:91:0a:cf:bf:ee: 2e:39:d7:51:23:a4:e7:1d:c0:ea:a8:da:1f:b8:9e:94:6c:02: 36:19:45:7d:e8:86:82:da:59:f7:ad:93:4a:ad:af:1f:1f:5b: 3e:6f:9e:07:92:24:2a:61:6e:d1:62:fa:ea:1b:5d:7b:11:3f: b8:a6:06:35 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUTXOymqjMQvzVkvj5XpqDowsAXoYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMwMjAyMTI0MFoX DTI3MDMwMTAyMTc0MFowMzExMC8GA1UEAxMoNjU2QjJGRjQ0MUY0NEY2M0FFN0Iw OTEwNzdDREY0RTYzQzJEQzBBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMp+wDJIG5GyQMvtp7Bx5fZykcZ4qdaSbX7XWKu/DoCMGKRWP7q8UX/eWDI8 ifiBVKrMdmaJyZpkJ4N/5BYMbjcsrkKCJ67m/Zw52bPKOU215a0hJSmo6QAPXUad /jVKj5oguWpjlXkF2cqeR9RLgHDdfm8bc6DJcc7RtCreiDzrNFKG5L2pB3n5lulf EHEey83KVj1Yb1/X2tl9vw7i5rUwp2nOlS4XwytUT8l3OCfgoWW+NlIqfRmlYpGo FVkFT8Om29Ar/gS81gaKjJG8fPiyffSfYXDPafrzE9vBZVk87ZdAyB7pg71/9i+f ck6Y098PE/qT/j27b/6nGH3TKakCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRlay/0 QfRPY657CRB3zfTmPC3ArDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDk3OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWdGeDANBgkqhkiG9w0BAQsFAAOCAQEAScX8dX6hBkVt/S1EB6n1 u1zPeEHGLKGw/2iX100T6VgtdlZMzcW2/zR8R+B41L99h30tw6Wl4vUCjvqcFHSm M4rRUXfqwzAsTXvN55qIsChiy31Y+qaqM9ofjoEwYRS2tefO53UBq/oXg/G6nDJT nd51cFO61K+Tb7qZHYWAW4GQ9XQZNjuXetHcZkl7Z4iTBhoMIqoFNQ37g4nFRjM/ RO02YTh9YovsG8/EoCU/o59pN2OG5a4ivVSArOWGHxNOSJEKz7/uLjnXUSOk5x3A 6qjaH7ielGwCNhlFfeiGgtpZ962TSq2vHx9bPm+eB5IkKmFu0WL66htdexE/uKYG NQ== -----END CERTIFICATE-----Generated at Thu Mar 19 08:11:53 2026 by rpki-client