$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS150516.roa File: AS150516.roa (raw, json) Hash identifier: ZMajrtnoRNm4re/4j4RnXfXSw8hbM1vsgo3Nyr/7Dew= Subject key identifier: AF:C3:FF:1D:16:F8:5D:FA:15:78:BB:4E:CD:20:03:4E:6B:83:2A:B1 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 4477B06EEC164F1C53D491EBDA8345B5F4A7E102 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS150516.roa Signing time: Fri 14 Aug 2026 06:47:01 +0000 ROA not before: Fri 14 Aug 2026 06:42:01 +0000 ROA not after: Fri 13 Aug 2027 06:47:01 +0000 asID: 150516 IP address blocks: 160.236.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:77:b0:6e:ec:16:4f:1c:53:d4:91:eb:da:83:45:b5:f4:a7:e1:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Aug 14 06:42:01 2026 GMT Not After : Aug 13 06:47:01 2027 GMT Subject: CN=AFC3FF1D16F85DFA1578BB4ECD20034E6B832AB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:38:de:25:c5:15:e4:3b:5b:a6:36:e2:ff:0d: 7a:4f:f5:a5:35:b9:a4:74:fc:08:f6:94:6f:b1:9c: a3:c4:14:4f:e1:7c:a6:c2:1f:3e:05:7e:d2:72:eb: 71:46:3b:69:16:76:74:be:91:b4:72:b9:91:7c:5c: 21:9d:d2:5b:78:b4:84:fb:07:82:14:ee:56:7f:e8: 13:9f:5a:7d:3e:2d:28:cd:41:9f:a3:53:dd:d1:c1: 63:44:ea:8c:9d:c3:d8:db:58:7c:a3:c4:d5:3b:b3: de:02:94:c5:52:2c:65:72:19:78:a8:17:03:57:db: 19:ff:17:fb:65:f2:04:d0:68:b8:40:42:8e:28:6e: e2:54:0f:72:b6:9f:27:4f:d6:e2:4c:3f:f4:82:4c: 5a:75:38:03:55:4e:41:f6:2e:6c:79:82:71:ac:09: 4f:06:1a:a3:15:4a:8d:09:71:db:d1:3b:c4:59:9c: c0:3a:e1:0b:f8:f1:6a:8c:08:b3:5d:c5:53:96:67: c9:9d:e2:f0:4e:28:5c:ed:7a:3a:31:17:48:30:81: 7c:99:61:57:6d:95:e7:ee:58:57:ff:29:d1:ff:59: fb:1f:31:0b:37:75:8b:53:5c:41:e7:3e:0a:72:5a: c1:ca:9b:60:18:53:fb:0a:a3:58:15:20:df:90:08: db:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C3:FF:1D:16:F8:5D:FA:15:78:BB:4E:CD:20:03:4E:6B:83:2A:B1 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS150516.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.153.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:31:93:8c:2f:de:79:79:57:c1:4e:83:e5:28:10:23:0a:17: 58:9c:ce:be:b8:eb:01:55:bc:46:1e:3b:46:7b:d5:1b:4b:31: a7:24:d6:ee:0e:d9:f3:7c:65:5c:d5:33:13:cc:f7:73:0b:f6: e0:65:11:b9:45:ec:3e:70:9b:88:57:68:14:f2:e4:89:4c:39: bf:6f:65:c3:e0:6d:06:d3:a1:5b:92:2b:47:82:1e:d9:e1:83: e8:e6:a4:6c:e0:ca:66:92:9c:92:56:97:a7:b8:f2:4c:0a:09: 85:fa:2e:d1:8a:e6:44:f8:95:ae:50:55:f5:bf:d2:ae:34:b9: a3:d7:cc:5a:75:54:cf:91:c1:ca:e5:e0:70:48:f4:f9:f4:9f: 37:81:3d:eb:40:7b:7b:3f:79:9f:c8:bf:a4:48:16:30:7e:96: b1:39:7a:5c:97:23:34:68:6e:6c:76:9a:07:49:c2:ff:78:47: ef:44:61:60:74:18:07:02:6d:ab:a0:72:96:d4:3e:88:ab:0a: 55:f7:7a:31:38:91:c3:c2:09:2f:85:0f:4c:37:ac:7f:2f:ee: 9f:cf:2d:d3:a5:5b:dc:bb:b6:dc:af:d2:d5:3c:dc:6a:ae:c7: d0:c3:74:d8:e7:85:8d:79:d1:de:15:de:0f:22:df:72:15:31: e2:0f:b2:66 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIURHewbuwWTxxT1JHr2oNFtfSn4QIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDgxNDA2NDIwMVoX DTI3MDgxMzA2NDcwMVowMzExMC8GA1UEAxMoQUZDM0ZGMUQxNkY4NURGQTE1NzhC QjRFQ0QyMDAzNEU2QjgzMkFCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALE43iXFFeQ7W6Y24v8Nek/1pTW5pHT8CPaUb7Gco8QUT+F8psIfPgV+0nLr cUY7aRZ2dL6RtHK5kXxcIZ3SW3i0hPsHghTuVn/oE59afT4tKM1Bn6NT3dHBY0Tq jJ3D2NtYfKPE1Tuz3gKUxVIsZXIZeKgXA1fbGf8X+2XyBNBouEBCjihu4lQPcraf J0/W4kw/9IJMWnU4A1VOQfYubHmCcawJTwYaoxVKjQlx29E7xFmcwDrhC/jxaowI s13FU5ZnyZ3i8E4oXO16OjEXSDCBfJlhV22V5+5YV/8p0f9Z+x8xCzd1i1NcQec+ CnJawcqbYBhT+wqjWBUg35AI20sCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSvw/8d Fvhd+hV4u07NIANOa4MqsTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUwNTE2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOyZMA0GCSqGSIb3DQEBCwUAA4IBAQBbMZOML955eVfBToPlKBAjChdY nM6+uOsBVbxGHjtGe9UbSzGnJNbuDtnzfGVc1TMTzPdzC/bgZRG5Rew+cJuIV2gU 8uSJTDm/b2XD4G0G06FbkitHgh7Z4YPo5qRs4MpmkpySVpenuPJMCgmF+i7RiuZE +JWuUFX1v9KuNLmj18xadVTPkcHK5eBwSPT59J83gT3rQHt7P3mfyL+kSBYwfpax OXpclyM0aG5sdpoHScL/eEfvRGFgdBgHAm2roHKW1D6IqwpV93oxOJHDwgkvhQ9M N6x/L+6fzy3TpVvcu7bcr9LVPNxqrsfQw3TY54WNedHeFd4PIt9yFTHiD7Jm -----END CERTIFICATE-----Generated at Thu Sep 3 03:11:18 2026 by rpki-client