$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS150752.roa File: AS150752.roa (raw, json) Hash identifier: p03af+uUk7YpP83TavBtQik1Q1Wk+jRJpaHgFrWfSu4= Subject key identifier: A8:CB:3F:C3:4A:3F:68:1E:AD:47:9F:CC:A0:41:D2:16:15:1C:3E:26 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 0F1DE62E861CC6DBA4C54280F806BB98D4675F18 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS150752.roa Signing time: Mon 03 Aug 2026 02:37:56 +0000 ROA not before: Mon 03 Aug 2026 02:32:56 +0000 ROA not after: Mon 02 Aug 2027 02:37:56 +0000 asID: 150752 IP address blocks: 160.236.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:1d:e6:2e:86:1c:c6:db:a4:c5:42:80:f8:06:bb:98:d4:67:5f:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Aug 3 02:32:56 2026 GMT Not After : Aug 2 02:37:56 2027 GMT Subject: CN=A8CB3FC34A3F681EAD479FCCA041D216151C3E26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f8:6f:21:9b:69:f0:6d:df:50:74:97:bf:73: 07:0e:0e:37:90:3a:16:99:f9:28:0e:ae:09:ee:e7: 47:49:07:40:4d:8e:44:3a:38:16:3b:7d:dc:bf:84: c2:f5:16:23:a2:49:90:93:ec:e2:0c:cf:cb:f2:67: 6f:2e:c1:7a:88:68:a9:2a:3f:17:a0:f4:0f:e2:08: 43:0c:81:9a:e6:b5:af:14:5e:ef:8e:2e:64:b1:f8: 75:58:d3:0c:92:00:4d:c5:23:b1:34:e7:97:25:9b: 86:4e:68:93:72:24:64:eb:ab:f2:68:90:1d:84:bd: 92:d7:26:25:db:f5:9e:c4:52:e8:25:51:ac:b3:65: b5:0e:5b:08:14:be:7f:d3:00:aa:e5:87:df:48:6c: a7:e7:53:72:be:73:84:26:30:a8:a6:f4:13:01:48: ea:b7:6f:05:29:a4:90:b2:75:2b:73:93:a8:e3:ee: 6e:f7:c3:c4:1a:fd:09:66:ea:23:eb:c4:f1:1d:b2: 93:d9:0f:4c:b2:36:70:6b:77:a3:33:55:f4:62:39: 87:8c:8a:80:ba:a4:40:39:d3:40:b4:07:af:ad:c4: 5d:d9:43:f0:6a:07:ea:e2:2b:1f:56:fa:4b:fe:f3: 23:3b:52:8b:b7:0b:1e:ad:1c:39:5c:a5:a1:ac:63: ad:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CB:3F:C3:4A:3F:68:1E:AD:47:9F:CC:A0:41:D2:16:15:1C:3E:26 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS150752.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.152.0/24 Signature Algorithm: sha256WithRSAEncryption 66:cc:d0:3e:5c:04:f1:bd:af:f4:4a:93:b6:86:d6:0a:43:92: ac:93:4d:b8:33:29:52:25:56:6b:f5:bc:ce:43:ff:38:6f:0a: dc:9f:56:64:e5:1d:e6:7e:85:7e:3a:1e:13:b9:76:8f:46:5c: b8:09:c5:66:f6:a6:0b:e5:c9:5b:5c:a0:1d:7f:72:6b:6b:62: e8:7d:0f:03:32:28:7a:61:0a:d3:3a:36:e2:8c:d9:3a:a8:3e: 40:3f:29:e9:85:a8:56:df:64:a2:f9:33:2b:f1:63:1b:33:2a: f5:b6:af:12:30:cd:88:8a:7d:92:f1:25:f9:1f:4f:2f:4c:ff: 50:78:76:fc:db:fa:e8:54:55:30:1a:a4:33:d5:fd:f6:6d:8b: fc:78:36:c8:e0:28:47:2a:2c:93:75:d9:7a:c8:c2:c3:f0:5e: d2:4d:71:2d:47:8a:00:4d:30:db:5a:73:5d:72:db:03:aa:ed: 30:8a:dc:9c:31:9b:6b:a1:77:1f:1d:eb:bb:6b:a6:f8:eb:2f: a5:78:fa:ab:91:84:03:ff:9d:80:77:bf:6d:c8:ab:36:81:8b: 92:61:f6:aa:14:7c:03:66:d7:56:67:8b:b8:07:5c:39:bd:dd: 82:3b:42:35:5a:79:bf:af:7c:58:33:fb:94:40:24:79:e2:31: 9b:8d:e6:91 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUDx3mLoYcxtukxUKA+Aa7mNRnXxgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDgwMzAyMzI1NloX DTI3MDgwMjAyMzc1NlowMzExMC8GA1UEAxMoQThDQjNGQzM0QTNGNjgxRUFENDc5 RkNDQTA0MUQyMTYxNTFDM0UyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJz4byGbafBt31B0l79zBw4ON5A6Fpn5KA6uCe7nR0kHQE2ORDo4Fjt93L+E wvUWI6JJkJPs4gzPy/Jnby7BeohoqSo/F6D0D+IIQwyBmua1rxRe744uZLH4dVjT DJIATcUjsTTnlyWbhk5ok3IkZOur8miQHYS9ktcmJdv1nsRS6CVRrLNltQ5bCBS+ f9MAquWH30hsp+dTcr5zhCYwqKb0EwFI6rdvBSmkkLJ1K3OTqOPubvfDxBr9CWbq I+vE8R2yk9kPTLI2cGt3ozNV9GI5h4yKgLqkQDnTQLQHr63EXdlD8GoH6uIrH1b6 S/7zIztSi7cLHq0cOVyloaxjrdECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSoyz/D Sj9oHq1Hn8ygQdIWFRw+JjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUwNzUyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOyYMA0GCSqGSIb3DQEBCwUAA4IBAQBmzNA+XATxva/0SpO2htYKQ5Ks k024MylSJVZr9bzOQ/84bwrcn1Zk5R3mfoV+Oh4TuXaPRly4CcVm9qYL5clbXKAd f3Jra2LofQ8DMih6YQrTOjbijNk6qD5APynphahW32Si+TMr8WMbMyr1tq8SMM2I in2S8SX5H08vTP9QeHb82/roVFUwGqQz1f32bYv8eDbI4ChHKiyTddl6yMLD8F7S TXEtR4oATTDbWnNdctsDqu0witycMZtroXcfHeu7a6b46y+lePqrkYQD/52Ad79t yKs2gYuSYfaqFHwDZtdWZ4u4B1w5vd2CO0I1Wnm/r3xYM/uUQCR54jGbjeaR -----END CERTIFICATE-----Generated at Thu Sep 17 07:26:34 2026 by rpki-client