$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS150235.roa File: AS150235.roa (raw, json) Hash identifier: osBvpGePqPaOYQhhjkB0GGXgjW5Gz53r780EANzllck= Subject key identifier: 57:03:3F:96:B6:50:68:FF:C8:B7:57:84:9F:06:9E:7C:44:2D:A1:06 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 4A1AEE9749F1EC8D6232D752721F7421636053AA Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS150235.roa Signing time: Sat 02 May 2026 09:24:22 +0000 ROA not before: Sat 02 May 2026 09:19:22 +0000 ROA not after: Sat 01 May 2027 09:24:22 +0000 asID: 150235 IP address blocks: 161.248.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:1a:ee:97:49:f1:ec:8d:62:32:d7:52:72:1f:74:21:63:60:53:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:19:22 2026 GMT Not After : May 1 09:24:22 2027 GMT Subject: CN=57033F96B65068FFC8B757849F069E7C442DA106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0e:f1:1c:db:d9:2f:ed:87:59:4c:fa:a4:3e: 2b:83:62:0d:70:fc:fc:41:52:aa:a8:7b:58:e1:94: 34:d5:d4:86:54:9b:73:53:59:4a:d2:d3:8b:3f:2b: 98:b2:49:67:db:39:a6:1d:0e:64:e8:0e:46:17:3b: fb:2b:7f:4c:41:46:f8:63:63:de:70:c0:70:08:4a: cb:b6:4c:2e:91:ab:ff:3b:33:75:c2:b2:3b:40:29: b5:d9:81:91:ed:7b:3b:ea:12:58:2c:47:22:24:d3: fb:c4:dc:90:c3:e2:f1:9a:e2:04:fc:cc:d2:cd:03: d7:96:e1:56:a9:5d:34:ae:7f:36:4f:00:05:26:ce: 30:1d:57:97:58:96:c8:84:25:3f:ea:9c:53:ef:54: b2:61:5f:fb:1d:04:82:b1:3e:93:45:9a:1c:3f:3b: b2:a7:6c:89:0f:28:ea:fd:82:c5:c2:4a:e7:49:4d: 43:43:ed:4c:a0:95:74:9f:bb:b7:62:9b:3a:b1:78: da:c8:35:5b:1f:53:0f:d7:db:67:f7:86:a2:de:74: e9:2b:3b:2c:51:02:e6:cc:d4:98:77:6b:9c:f5:81: 88:01:43:98:06:48:82:8e:71:f5:d4:df:9c:3f:00: 53:31:3d:fa:7e:cd:c0:8b:b4:c3:09:72:de:d1:3a: 58:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:03:3F:96:B6:50:68:FF:C8:B7:57:84:9F:06:9E:7C:44:2D:A1:06 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS150235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.248.222.0/24 Signature Algorithm: sha256WithRSAEncryption 62:c4:3e:92:77:83:75:54:08:cf:e1:04:24:36:3d:16:65:da: d2:32:35:0d:a2:74:e2:a6:27:3e:56:44:4c:f3:37:2c:fd:3d: 33:d0:9f:52:57:fb:d5:29:b3:8b:06:10:07:ef:66:38:cb:56: 4c:9d:14:8b:a6:53:1f:51:7d:48:ce:fb:f6:4f:65:0b:b6:67: 63:70:6b:33:6f:36:85:d9:f9:1d:38:59:d6:f6:84:41:d0:80: e5:6d:cd:c2:cf:7f:e2:05:6d:10:bb:21:bd:0c:e3:18:d9:fc: d8:2c:ae:62:51:0f:80:11:73:3a:f1:fd:8d:56:db:ea:a4:98: 0a:10:83:34:74:f7:f2:a5:fc:88:a4:54:be:f4:2b:ba:42:ea: 36:ca:bb:73:78:67:9f:53:5a:66:28:fb:a1:64:01:4f:1d:7f: c2:0b:1c:db:be:aa:e3:b6:87:f2:b2:eb:e7:18:e8:02:e0:dc: 59:07:2d:18:07:02:5b:2a:45:b3:14:d4:0d:3f:fc:12:bc:78: 37:74:f2:06:01:90:7d:24:84:ae:7e:f8:b9:11:2d:6a:5e:8e: 21:33:7f:98:4f:c7:40:c2:32:65:50:df:43:d4:cc:28:84:ae: 37:e4:33:7c:26:36:c1:49:05:e4:4d:29:15:c7:2d:2b:2e:84: b2:5f:74:e4 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUShrul0nx7I1iMtdSch90IWNgU6owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTkyMloX DTI3MDUwMTA5MjQyMlowMzExMC8GA1UEAxMoNTcwMzNGOTZCNjUwNjhGRkM4Qjc1 Nzg0OUYwNjlFN0M0NDJEQTEwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMAO8Rzb2S/th1lM+qQ+K4NiDXD8/EFSqqh7WOGUNNXUhlSbc1NZStLTiz8r mLJJZ9s5ph0OZOgORhc7+yt/TEFG+GNj3nDAcAhKy7ZMLpGr/zszdcKyO0AptdmB ke17O+oSWCxHIiTT+8TckMPi8ZriBPzM0s0D15bhVqldNK5/Nk8ABSbOMB1Xl1iW yIQlP+qcU+9UsmFf+x0EgrE+k0WaHD87sqdsiQ8o6v2CxcJK50lNQ0PtTKCVdJ+7 t2KbOrF42sg1Wx9TD9fbZ/eGot506Ss7LFEC5szUmHdrnPWBiAFDmAZIgo5x9dTf nD8AUzE9+n7NwIu0wwly3tE6WLcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRXAz+W tlBo/8i3V4SfBp58RC2hBjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUwMjM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAofjeMA0GCSqGSIb3DQEBCwUAA4IBAQBixD6Sd4N1VAjP4QQkNj0WZdrS MjUNonTipic+VkRM8zcs/T0z0J9SV/vVKbOLBhAH72Y4y1ZMnRSLplMfUX1Izvv2 T2ULtmdjcGszbzaF2fkdOFnW9oRB0IDlbc3Cz3/iBW0QuyG9DOMY2fzYLK5iUQ+A EXM68f2NVtvqpJgKEIM0dPfypfyIpFS+9Cu6Quo2yrtzeGefU1pmKPuhZAFPHX/C CxzbvqrjtofysuvnGOgC4NxZBy0YBwJbKkWzFNQNP/wSvHg3dPIGAZB9JISufvi5 ES1qXo4hM3+YT8dAwjJlUN9D1MwohK435DN8JjbBSQXkTSkVxy0rLoSyX3Tk -----END CERTIFICATE-----Generated at Sat May 2 21:05:07 2026 by rpki-client