$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150946.roa File: AS150946.roa (raw, json) Hash identifier: lcKU/BpNY+1KzpdZ0eQzwD5VJ6QUGAf1eJ86shx4sZ4= Subject key identifier: 54:D7:A2:FA:80:5F:79:19:54:79:D3:52:9F:25:DF:5C:F2:70:84:90 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 71510A1C92FD1EAFCFA40B49AE56F6BB534579F6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150946.roa Signing time: Wed 12 Aug 2026 09:50:45 +0000 ROA not before: Wed 12 Aug 2026 09:45:45 +0000 ROA not after: Wed 11 Aug 2027 09:50:45 +0000 asID: 150946 IP address blocks: 153.76.240.0/22 maxlen: 24 2001:df2:8ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:51:0a:1c:92:fd:1e:af:cf:a4:0b:49:ae:56:f6:bb:53:45:79:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 12 09:45:45 2026 GMT Not After : Aug 11 09:50:45 2027 GMT Subject: CN=54D7A2FA805F79195479D3529F25DF5CF2708490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:83:ac:95:17:fd:4e:67:fd:22:95:d2:61:cc: e3:32:d3:87:ef:ae:a8:32:24:d3:a8:77:ee:51:42: 4e:ea:99:da:82:94:d6:82:9e:1e:93:0b:bc:e8:f4: 33:e3:d5:d5:d1:cd:9e:9a:75:c4:5c:18:c1:ff:f2: d1:20:7a:eb:ba:2c:36:11:b5:b6:3e:f0:06:48:36: 16:ce:d7:6d:f9:d9:b8:ea:15:72:b1:79:97:7d:11: 1a:30:05:06:5b:95:36:b5:a3:92:1b:96:a2:75:3b: ee:83:ba:de:7d:cd:82:b2:d9:26:11:9e:90:4c:de: 41:06:da:f2:a4:2b:8a:93:47:65:1b:01:b2:9b:e9: c2:81:22:0d:41:72:e7:b2:0e:3e:af:4d:d7:3f:25: 88:3a:f8:df:e9:06:af:83:f9:c5:b0:b4:cc:08:50: d7:c3:09:e7:fc:06:7a:1d:f3:a9:1c:c9:36:17:5a: 23:7e:b2:d9:32:da:d9:2b:8c:ff:83:2b:69:89:5a: 62:1b:4c:ef:28:c5:51:31:25:81:af:72:c2:3d:60: 61:66:01:91:86:86:eb:75:7c:19:3f:6a:f5:67:69: 2c:5f:94:8e:a3:ef:9e:a8:45:1e:e1:08:7b:cd:f5: fd:1f:2d:43:47:6c:76:31:6f:45:f8:70:f3:4d:0c: bd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D7:A2:FA:80:5F:79:19:54:79:D3:52:9F:25:DF:5C:F2:70:84:90 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150946.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 153.76.240.0/22 IPv6: 2001:df2:8ac0::/48 Signature Algorithm: sha256WithRSAEncryption 32:c7:77:3e:24:ef:c0:38:f8:30:58:0a:ee:d9:59:23:64:3e: 11:5e:d6:57:6c:d2:ba:a5:b4:b4:80:93:e9:f8:77:79:6d:09: 91:c8:57:26:c2:b9:b1:20:d5:86:44:7b:cf:46:d3:10:0e:fb: 4d:50:1e:be:be:97:93:dd:c8:e0:d6:98:7d:e0:3e:3e:01:17: c5:9a:51:4e:0b:39:d7:5c:78:03:ff:dc:55:2a:fd:f6:b1:84: e1:9f:b4:8a:b8:4c:f7:49:9e:0f:3f:5f:e7:d4:00:5e:9d:07: 89:dd:ab:08:9d:c5:bc:42:04:db:da:dd:a9:6b:12:4e:30:b9: 2a:92:ce:bc:a3:06:78:71:f2:18:fa:1a:90:b9:c3:18:f5:86: dd:7a:11:b2:6b:80:d9:39:85:df:a8:35:10:11:de:5a:74:d0: f2:bb:81:01:f4:32:ef:69:dc:66:a3:20:fc:52:13:21:07:8d: 94:d1:41:2c:68:96:a8:ab:6b:d0:c7:b4:68:dd:84:a0:26:2d: 1f:89:82:20:22:a2:fd:87:57:03:a8:0c:43:a3:d3:ee:74:f0: 4f:b4:e9:1d:28:44:4c:50:98:9b:e5:63:d2:1a:a4:4e:67:97: 31:90:0b:2d:29:c4:65:31:c1:f4:39:5d:e9:2a:d9:10:c1:e5: 2b:90:01:d7 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUcVEKHJL9Hq/PpAtJrlb2u1NFefYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgxMjA5NDU0NVoX DTI3MDgxMTA5NTA0NVowMzExMC8GA1UEAxMoNTREN0EyRkE4MDVGNzkxOTU0NzlE MzUyOUYyNURGNUNGMjcwODQ5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMuDrJUX/U5n/SKV0mHM4zLTh++uqDIk06h37lFCTuqZ2oKU1oKeHpMLvOj0 M+PV1dHNnpp1xFwYwf/y0SB667osNhG1tj7wBkg2Fs7XbfnZuOoVcrF5l30RGjAF BluVNrWjkhuWonU77oO63n3NgrLZJhGekEzeQQba8qQripNHZRsBspvpwoEiDUFy 57IOPq9N1z8liDr43+kGr4P5xbC0zAhQ18MJ5/wGeh3zqRzJNhdaI36y2TLa2SuM /4MraYlaYhtM7yjFUTElga9ywj1gYWYBkYaG63V8GT9q9WdpLF+UjqPvnqhFHuEI e831/R8tQ0dsdjFvRfhw800MvZkCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBRU16L6 gF95GVR501KfJd9c8nCEkDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwOTQ2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQCmUzwMA8EAgACMAkDBwAgAQ3yisAwDQYJKoZIhvcNAQELBQADggEBADLH dz4k78A4+DBYCu7ZWSNkPhFe1lds0rqltLSAk+n4d3ltCZHIVybCubEg1YZEe89G 0xAO+01QHr6+l5PdyODWmH3gPj4BF8WaUU4LOddceAP/3FUq/faxhOGftIq4TPdJ ng8/X+fUAF6dB4ndqwidxbxCBNva3alrEk4wuSqSzryjBnhx8hj6GpC5wxj1ht16 EbJrgNk5hd+oNRAR3lp00PK7gQH0Mu9p3GajIPxSEyEHjZTRQSxolqira9DHtGjd hKAmLR+JgiAiov2HVwOoDEOj0+508E+06R0oRExQmJvlY9IapE5nlzGQCy0pxGUx wfQ5Xekq2RDB5SuQAdc= -----END CERTIFICATE-----Generated at Thu Sep 3 12:34:09 2026 by rpki-client