
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS150187.roa
File: AS150187.roa (raw, json)
Hash identifier: 03WeV12VFTgzEOcTq7mPviaSXutlOXaCsDsqzdDiTW0=
Subject key identifier: AD:1D:83:1D:28:41:40:8B:A9:04:46:07:97:61:2F:B5:38:6D:B3:79
Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Certificate serial: 6EB60BE846EADFC12F2339885123686CBD851BFE
Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS150187.roa
Signing time: Sat 02 May 2026 09:23:27 +0000
ROA not before: Sat 02 May 2026 09:18:27 +0000
ROA not after: Sat 01 May 2027 09:23:27 +0000
asID: 150187
IP address blocks: 157.15.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 20:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:b6:0b:e8:46:ea:df:c1:2f:23:39:88:51:23:68:6c:bd:85:1b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Validity
Not Before: May 2 09:18:27 2026 GMT
Not After : May 1 09:23:27 2027 GMT
Subject: CN=AD1D831D2841408BA904460797612FB5386DB379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:97:68:d4:81:33:2a:47:c2:15:1c:1e:4d:4c:
20:0a:08:01:05:ea:a6:63:6c:11:b3:94:08:65:16:
0d:4a:e9:f3:a0:93:fd:a8:03:05:24:83:14:83:3d:
a5:8f:4f:3e:9c:30:9b:a4:37:80:2b:dd:a1:88:b3:
fd:82:f4:fa:29:0e:5c:c5:51:60:c1:7d:e1:78:b6:
6b:0d:34:9f:b8:08:c8:cb:36:85:6e:29:b6:40:7b:
a7:77:e4:7c:22:5d:1c:63:bb:c9:d1:a6:bf:6d:ab:
e5:f0:3f:e9:75:e5:6d:74:bf:4b:f5:e8:82:cd:7a:
0b:26:14:e6:c0:f1:2a:74:92:4a:44:6e:7a:4f:d3:
c3:f9:9f:82:3b:7e:5a:17:b9:6b:f3:a0:72:49:aa:
b9:61:72:4f:b9:5a:c9:9e:f1:0e:b1:64:ce:bb:5a:
ac:c3:ca:95:4f:f9:4e:72:0f:2c:d0:7e:e5:68:e9:
95:c3:a1:fc:49:2f:87:74:08:0b:9c:89:a1:ac:53:
d0:b9:55:cf:6b:04:13:49:61:ef:50:40:ae:d6:1a:
bf:cd:08:b1:4b:0c:4f:53:63:84:2a:13:64:ce:cc:
f9:0a:85:3c:9e:53:9d:6a:13:7e:f0:bf:36:f5:e9:
3e:c9:cd:e6:8c:f5:f2:58:2d:c2:6f:26:37:d0:97:
73:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1D:83:1D:28:41:40:8B:A9:04:46:07:97:61:2F:B5:38:6D:B3:79
X509v3 Authority Key Identifier:
keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS150187.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.73.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:82:78:50:66:95:f2:ea:ac:6a:40:8c:a0:b1:04:c7:68:94:
0a:7a:ae:d0:04:31:e2:ee:1f:18:53:64:5a:2a:63:12:cf:b3:
9d:dc:4f:0a:7d:71:7f:f9:3c:b1:7b:69:a7:3f:27:59:8a:86:
62:3a:20:67:d5:62:f2:b3:7f:4e:ad:8c:e5:34:14:fc:dc:b1:
e5:6e:00:f5:b9:b8:7a:f0:65:62:89:f2:d3:8e:0a:ec:65:ce:
94:20:1e:3d:cd:6b:bb:84:b0:fc:f6:f0:14:be:d9:01:9f:6b:
22:14:72:a9:f1:4e:1b:45:4c:c7:95:da:24:de:e1:c4:3d:79:
ab:a7:3c:db:1a:a1:79:62:f0:85:53:f1:61:7a:82:17:8c:7c:
e1:3a:3b:44:d7:d2:bb:ce:e9:e3:8c:8f:51:8e:fe:cb:83:59:
d9:34:d9:75:9d:19:88:ef:6d:66:a4:45:06:fe:b5:33:9f:f1:
57:49:3d:7b:9b:da:fb:fc:25:89:df:57:b3:9d:9c:fd:66:f4:
f7:17:0d:6b:08:9c:6e:ae:20:13:5a:13:a4:bd:0f:45:44:b7:
18:01:6f:00:38:ab:db:d2:b1:da:6d:8c:f4:22:40:4c:33:1b:
93:8a:d8:19:c6:d5:b7:3b:b8:03:e3:42:3d:25:b7:f0:22:f6:
47:40:23:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 21:03:46 2026 by rpki-client