$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS150690.roa File: AS150690.roa (raw, json) Hash identifier: lAPKTWfyi9Vr9czsaUPZ1u+oImElmREJdTAuPWO4bp8= Subject key identifier: F2:2D:04:B8:6F:1B:12:E9:0A:D4:F5:E3:5E:83:F9:F1:80:82:05:08 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 0C5452FF7BBFDA9661C05E65D2FE41B519814759 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS150690.roa Signing time: Mon 19 Oct 2026 06:28:36 +0000 ROA not before: Mon 19 Oct 2026 06:23:36 +0000 ROA not after: Mon 18 Oct 2027 06:28:36 +0000 asID: 150690 IP address blocks: 165.101.30.0/24 maxlen: 24 198.22.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:54:52:ff:7b:bf:da:96:61:c0:5e:65:d2:fe:41:b5:19:81:47:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Oct 19 06:23:36 2026 GMT Not After : Oct 18 06:28:36 2027 GMT Subject: CN=F22D04B86F1B12E90AD4F5E35E83F9F180820508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0e:6d:07:3c:d2:bd:d3:81:07:30:6e:d4:72: dd:8c:2d:3e:dd:97:3f:f6:79:85:3f:bf:72:19:42: 02:f5:c7:f5:b4:b5:d1:d2:ca:3c:99:40:61:6b:2d: f0:c5:cc:ba:44:3c:ed:25:e1:5b:78:ba:b5:1d:82: 4f:45:79:77:6e:6e:b2:07:8b:a1:03:7d:11:08:34: 18:d0:57:56:18:bb:04:d4:cb:1e:da:62:b7:50:b7: 1f:f5:45:cc:ac:57:42:01:3b:f8:3c:47:6b:fa:09: 11:c6:5b:98:ac:e9:8c:28:92:25:95:90:81:80:1f: 1a:fe:0f:9f:ee:00:0e:81:7d:19:ee:be:97:a3:84: 23:ec:15:f7:b9:11:87:82:74:c3:47:b9:5b:b2:77: e6:eb:89:1a:2d:21:ce:ab:b7:67:d6:93:65:a0:83: 6b:f1:55:2e:b6:18:e6:ac:7f:db:fb:75:43:ff:f4: 17:28:aa:84:cc:4c:cc:cb:44:af:92:0f:55:4d:75: 53:eb:6c:ca:dc:6d:34:a9:11:fd:d3:5a:95:d8:33: 24:d5:55:e1:b6:83:ef:3c:cd:f7:dd:dd:c8:6b:12: 21:90:67:96:ca:38:66:3f:7e:ab:72:a0:9f:9c:ca: 89:cb:54:db:54:a6:3b:88:f1:e3:25:81:fa:f8:1a: 1f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:2D:04:B8:6F:1B:12:E9:0A:D4:F5:E3:5E:83:F9:F1:80:82:05:08 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS150690.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.101.30.0/24 198.22.34.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:8a:59:8e:d7:32:0b:ab:38:db:4e:d4:cb:da:82:83:e1:99: b8:16:b5:f6:24:50:17:00:8b:83:29:f0:03:04:5e:3a:73:c9: 62:a1:37:b9:fb:6b:66:7e:43:ed:6a:33:db:a7:99:cd:98:0f: a6:be:cd:45:5e:da:6e:1a:e6:ae:0c:8f:c2:de:45:45:26:e4: 01:a1:aa:ef:28:46:8e:50:50:a8:b4:f6:7a:1d:11:43:8c:27: 70:b3:b0:99:a8:ec:74:75:0d:1a:4c:1f:eb:4c:aa:8d:2e:73: 03:98:8b:dc:f6:61:3f:a8:67:6f:32:63:cc:02:f9:83:7e:bd: d7:0d:e8:04:c6:81:c0:22:12:56:91:59:45:c3:74:c4:f1:e0: 0f:eb:75:e4:96:0e:e5:2e:33:aa:84:0d:e3:48:4f:8c:9c:2f: 78:84:28:b8:d8:c2:b2:b2:cf:c9:6f:f7:1d:2a:b7:68:8b:e2: b2:c9:c4:e6:96:36:7e:3b:01:cf:3a:70:ee:f3:f2:c7:49:01: 9a:19:12:3a:74:e8:a6:9e:91:05:9d:db:e5:f5:08:c5:9e:10: 00:45:e7:6f:a6:12:f8:4e:bb:51:a0:c2:0b:7c:00:15:0e:5f: 85:2f:6d:c7:0a:99:9b:7f:d6:b0:c2:51:9d:02:4b:8b:17:ca: 10:4a:08:d7 -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUDFRS/3u/2pZhwF5l0v5BtRmBR1kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MTAxOTA2MjMzNloX DTI3MTAxODA2MjgzNlowMzExMC8GA1UEAxMoRjIyRDA0Qjg2RjFCMTJFOTBBRDRG NUUzNUU4M0Y5RjE4MDgyMDUwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALAObQc80r3TgQcwbtRy3YwtPt2XP/Z5hT+/chlCAvXH9bS10dLKPJlAYWst 8MXMukQ87SXhW3i6tR2CT0V5d25usgeLoQN9EQg0GNBXVhi7BNTLHtpit1C3H/VF zKxXQgE7+DxHa/oJEcZbmKzpjCiSJZWQgYAfGv4Pn+4ADoF9Ge6+l6OEI+wV97kR h4J0w0e5W7J35uuJGi0hzqu3Z9aTZaCDa/FVLrYY5qx/2/t1Q//0FyiqhMxMzMtE r5IPVU11U+tsytxtNKkR/dNaldgzJNVV4baD7zzN993dyGsSIZBnlso4Zj9+q3Kg n5zKictU21SmO4jx4yWB+vgaH0kCAwEAAaOCAdIwggHOMB0GA1UdDgQWBBTyLQS4 bxsS6QrU9eNeg/nxgIIFCDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUwNjkwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQApWUeAwQAxhYiMA0GCSqGSIb3DQEBCwUAA4IBAQCailmO1zILqzjbTtTL 2oKD4Zm4FrX2JFAXAIuDKfADBF46c8lioTe5+2tmfkPtajPbp5nNmA+mvs1FXtpu GuauDI/C3kVFJuQBoarvKEaOUFCotPZ6HRFDjCdws7CZqOx0dQ0aTB/rTKqNLnMD mIvc9mE/qGdvMmPMAvmDfr3XDegExoHAIhJWkVlFw3TE8eAP63Xklg7lLjOqhA3j SE+MnC94hCi42MKyss/Jb/cdKrdoi+KyycTmljZ+OwHPOnDu8/LHSQGaGRI6dOim npEFndvl9QjFnhAARedvphL4TrtRoMILfAAVDl+FL23HCpmbf9awwlGdAkuLF8oQ SgjX -----END CERTIFICATE-----Generated at Mon Nov 2 21:07:06 2026 by rpki-client