$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS150249.roa File: AS150249.roa (raw, json) Hash identifier: DCtq+UQik2gbjXC9OFkEJnmlQHCjyYXJMEQYQ5xuR4Q= Subject key identifier: 99:CD:8B:BE:1F:68:F5:12:87:A9:35:55:5D:1D:40:D2:B3:13:B7:72 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 244B9D0EC47A491B50D4BE814CA2995A0DE4B641 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS150249.roa Signing time: Sat 02 May 2026 09:22:47 +0000 ROA not before: Sat 02 May 2026 09:17:47 +0000 ROA not after: Sat 01 May 2027 09:22:47 +0000 asID: 150249 IP address blocks: 157.10.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:4b:9d:0e:c4:7a:49:1b:50:d4:be:81:4c:a2:99:5a:0d:e4:b6:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:17:47 2026 GMT Not After : May 1 09:22:47 2027 GMT Subject: CN=99CD8BBE1F68F51287A935555D1D40D2B313B772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9f:20:77:a0:39:52:90:73:db:24:d5:d2:00: f6:ea:80:14:98:57:ba:41:d4:15:57:83:4f:3a:24: ee:0a:8c:51:44:0f:06:10:6d:f8:c5:29:06:a7:ac: c4:b4:dd:6c:fd:36:2c:0f:4a:49:c7:65:86:f4:1b: f2:f2:7d:76:82:0d:9f:45:6b:a5:1e:99:9b:f9:d5: 6f:79:5f:f5:09:9c:b4:bd:c1:bc:eb:44:a0:82:93: 50:52:6a:18:e6:63:7a:66:93:62:e6:27:fa:8a:f7: fe:5e:9f:19:9d:f6:cc:55:94:5a:2f:b5:54:90:55: 8a:e1:af:7b:59:58:ec:27:35:99:ef:3d:bf:4d:0a: 70:da:a6:34:10:a4:65:d2:5c:01:b9:a5:3c:ec:48: bb:5b:08:b8:ab:22:21:5b:65:fc:d0:d1:b3:05:02: 52:b7:d5:e6:6e:04:e8:fd:4c:ce:e2:43:dc:d1:1a: f2:e0:a1:6f:e1:e5:0e:b6:a7:a6:96:72:bc:88:6c: ca:fa:be:1f:f7:df:bf:d1:c3:e4:42:b5:d5:ff:7b: 71:e2:7b:01:c1:b6:c5:55:e2:f1:b0:02:fb:fe:07: 4d:03:26:86:0c:20:fc:c5:e4:df:4f:69:92:c2:f7: 94:c8:6b:bd:cc:40:5d:f1:3f:66:1a:91:dd:fa:c9: df:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CD:8B:BE:1F:68:F5:12:87:A9:35:55:5D:1D:40:D2:B3:13:B7:72 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS150249.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.181.0/24 Signature Algorithm: sha256WithRSAEncryption 70:da:61:bc:c2:f9:05:6e:78:80:e1:0e:4e:c1:b8:12:b8:9e: 48:91:79:c3:eb:69:3e:d6:37:22:b0:6a:19:45:fe:be:7d:81: c1:f5:37:16:2a:03:89:0d:ab:7a:00:5a:81:53:30:74:0f:50: 59:a9:24:a4:92:5e:bc:7d:38:ae:a3:af:b4:86:f6:4c:a9:54: c1:ef:2f:87:48:ab:1f:5a:e0:04:3a:35:96:63:0d:04:6d:96: 30:f3:8a:b1:5b:5f:d4:b5:75:01:9e:f0:3d:93:c4:82:e0:c5: a4:7a:15:db:84:c3:51:7c:b2:6e:ff:c9:03:c6:d3:1d:79:59: ad:0b:25:25:60:51:d2:ed:35:26:11:dc:1d:d7:a5:8e:e6:7b: ea:99:c1:90:ab:61:d7:62:87:49:a0:70:fa:87:70:37:67:cb: 0f:45:84:0e:d3:1b:cc:dd:a5:b3:5d:dd:e6:a8:95:02:e9:eb: ee:de:5e:5c:0f:e1:bd:29:54:53:e6:ff:11:9e:e1:92:33:31: 0c:85:66:30:cd:96:fc:2a:72:cb:aa:e9:a0:ab:bf:93:4b:c7: 7a:af:8a:73:ca:bf:36:42:ae:7c:09:29:e7:d2:eb:ca:0d:2a: c5:95:fd:eb:58:63:e6:fd:83:28:15:a2:0e:a3:7c:60:ef:25: 64:2e:0b:45 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUJEudDsR6SRtQ1L6BTKKZWg3ktkEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTc0N1oX DTI3MDUwMTA5MjI0N1owMzExMC8GA1UEAxMoOTlDRDhCQkUxRjY4RjUxMjg3QTkz NTU1NUQxRDQwRDJCMzEzQjc3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKyfIHegOVKQc9sk1dIA9uqAFJhXukHUFVeDTzok7gqMUUQPBhBt+MUpBqes xLTdbP02LA9KScdlhvQb8vJ9doINn0VrpR6Zm/nVb3lf9QmctL3BvOtEoIKTUFJq GOZjemaTYuYn+or3/l6fGZ32zFWUWi+1VJBViuGve1lY7Cc1me89v00KcNqmNBCk ZdJcAbmlPOxIu1sIuKsiIVtl/NDRswUCUrfV5m4E6P1MzuJD3NEa8uChb+HlDran ppZyvIhsyvq+H/ffv9HD5EK11f97ceJ7AcG2xVXi8bAC+/4HTQMmhgwg/MXk309p ksL3lMhrvcxAXfE/ZhqR3frJ36UCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSZzYu+ H2j1EoepNVVdHUDSsxO3cjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUwMjQ5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAnQq1MA0GCSqGSIb3DQEBCwUAA4IBAQBw2mG8wvkFbniA4Q5OwbgSuJ5I kXnD62k+1jcisGoZRf6+fYHB9TcWKgOJDat6AFqBUzB0D1BZqSSkkl68fTiuo6+0 hvZMqVTB7y+HSKsfWuAEOjWWYw0EbZYw84qxW1/UtXUBnvA9k8SC4MWkehXbhMNR fLJu/8kDxtMdeVmtCyUlYFHS7TUmEdwd16WO5nvqmcGQq2HXYodJoHD6h3A3Z8sP RYQO0xvM3aWzXd3mqJUC6evu3l5cD+G9KVRT5v8RnuGSMzEMhWYwzZb8KnLLqumg q7+TS8d6r4pzyr82Qq58CSnn0uvKDSrFlf3rWGPm/YMoFaIOo3xg7yVkLgtF -----END CERTIFICATE-----Generated at Sat May 2 21:05:29 2026 by rpki-client