$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150206.roa File: AS150206.roa (raw, json) Hash identifier: Y/Z+i4Muv1BE/ZgmmQcrtEPG0nOX0Q2H6516aHYlnLg= Subject key identifier: C7:A5:A2:80:00:9D:9B:56:07:8C:EB:4B:54:EF:BF:61:58:15:2A:7F Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 32ECBCA476D3238F8766C4483FBEF1FACC0C2126 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150206.roa Signing time: Sat 02 May 2026 21:32:30 +0000 ROA not before: Sat 02 May 2026 21:27:30 +0000 ROA not after: Sat 01 May 2027 21:32:30 +0000 asID: 150206 IP address blocks: 2401:85e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ec:bc:a4:76:d3:23:8f:87:66:c4:48:3f:be:f1:fa:cc:0c:21:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:27:30 2026 GMT Not After : May 1 21:32:30 2027 GMT Subject: CN=C7A5A280009D9B56078CEB4B54EFBF6158152A7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b7:14:f9:30:b3:2f:07:f3:a9:4a:9d:f2:d7: 9b:63:51:d7:97:d7:58:65:5f:92:33:c6:75:8a:25: 69:80:f1:39:22:65:8f:89:4d:2f:ab:d5:0e:4f:fc: 21:36:ec:5a:99:ec:d6:d4:d6:10:04:f7:46:ec:c3: e5:2e:43:50:35:4a:89:7b:08:f0:a6:f2:2f:7f:77: ba:70:5f:4e:68:5b:80:d3:e5:8f:73:ae:59:2b:54: 01:88:14:6e:1e:de:b8:28:5e:37:ef:9d:0c:f5:4f: 4a:e9:8c:66:2c:43:bd:3d:a2:92:cf:e9:9f:84:7d: 34:e7:67:ec:5f:12:37:3b:59:19:19:fb:b4:46:15: 2f:be:90:88:a1:dc:c7:9c:bf:2f:38:26:47:7c:30: f1:0f:db:1d:4c:88:55:f7:41:36:62:e5:9a:e0:53: 4c:82:53:02:56:3f:19:dd:66:b2:97:57:62:5d:f4: c3:18:14:fc:fa:2e:0e:f3:e5:d0:4d:c2:66:05:2d: 66:3c:86:54:e9:e0:ac:92:14:61:0b:98:a3:c3:97: 8b:ec:ed:9b:f1:e6:66:0e:58:10:20:0e:13:e0:18: e0:6d:6c:02:d9:9d:fc:7e:e6:87:04:9a:7d:82:6e: c5:1b:e2:d7:68:54:b7:bd:db:94:22:f9:6c:f0:a1: dc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A5:A2:80:00:9D:9B:56:07:8C:EB:4B:54:EF:BF:61:58:15:2A:7F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150206.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:85e0::/32 Signature Algorithm: sha256WithRSAEncryption 0b:e3:9d:54:cc:91:26:41:36:2e:03:e2:a4:13:4c:c2:dc:2d: e8:14:43:2c:ca:e9:92:c4:ee:e2:2f:e6:bc:56:69:d8:cf:6b: 42:4e:0c:11:ec:ec:25:2d:7c:85:0d:64:47:32:0b:61:ac:91: e6:02:c6:e2:1d:63:b7:cf:bf:1e:94:c1:68:2e:05:4a:62:9b: 11:7c:62:55:90:8b:e2:6a:68:57:03:50:cd:54:9b:fc:d3:e0: 36:52:54:38:97:93:ca:f8:32:4b:13:e8:52:c7:cb:1e:64:c7: a7:06:3e:d0:d6:d4:c4:3d:22:bc:2a:35:3f:ec:27:72:0e:01: e4:93:28:2a:9d:41:44:e0:0f:02:a2:0a:ef:ef:ba:8c:5d:9c: ee:45:5d:be:26:c6:5f:0f:56:b8:5c:a7:69:87:8c:96:bc:f1: 68:2b:2c:45:0b:e1:42:e7:05:27:65:d8:c4:80:91:84:f3:4d: a1:7a:21:19:8a:35:54:91:68:c5:85:cb:4a:aa:ee:75:cd:4a: eb:aa:d0:e6:e8:b3:02:3c:c8:e9:4b:db:cf:ac:4f:95:af:3b: d8:7b:8a:60:aa:c0:ed:ee:db:bb:92:e2:4f:68:70:e8:89:a8: 82:e2:a0:de:f7:75:e4:2c:f0:a1:94:00:9d:f0:c6:09:41:1a: 91:d4:9d:57 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUMuy8pHbTI4+HZsRIP77x+swMISYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjczMFoX DTI3MDUwMTIxMzIzMFowMzExMC8GA1UEAxMoQzdBNUEyODAwMDlEOUI1NjA3OENF QjRCNTRFRkJGNjE1ODE1MkE3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKS3FPkwsy8H86lKnfLXm2NR15fXWGVfkjPGdYolaYDxOSJlj4lNL6vVDk/8 ITbsWpns1tTWEAT3RuzD5S5DUDVKiXsI8KbyL393unBfTmhbgNPlj3OuWStUAYgU bh7euCheN++dDPVPSumMZixDvT2iks/pn4R9NOdn7F8SNztZGRn7tEYVL76QiKHc x5y/LzgmR3ww8Q/bHUyIVfdBNmLlmuBTTIJTAlY/Gd1mspdXYl30wxgU/PouDvPl 0E3CZgUtZjyGVOngrJIUYQuYo8OXi+ztm/HmZg5YECAOE+AY4G1sAtmd/H7mhwSa fYJuxRvi12hUt73blCL5bPCh3N8CAwEAAaOCAc0wggHJMB0GA1UdDgQWBBTHpaKA AJ2bVgeM60tU779hWBUqfzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwMjA2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA AjAHAwUAJAGF4DANBgkqhkiG9w0BAQsFAAOCAQEAC+OdVMyRJkE2LgPipBNMwtwt 6BRDLMrpksTu4i/mvFZp2M9rQk4MEezsJS18hQ1kRzILYayR5gLG4h1jt8+/HpTB aC4FSmKbEXxiVZCL4mpoVwNQzVSb/NPgNlJUOJeTyvgySxPoUsfLHmTHpwY+0NbU xD0ivCo1P+wncg4B5JMoKp1BROAPAqIK7++6jF2c7kVdvibGXw9WuFynaYeMlrzx aCssRQvhQucFJ2XYxICRhPNNoXohGYo1VJFoxYXLSqrudc1K66rQ5uizAjzI6Uvb z6xPla872HuKYKrA7e7bu5LiT2hw6ImoguKg3vd15CzwoZQAnfDGCUEakdSdVw== -----END CERTIFICATE-----Generated at Sun May 3 00:41:12 2026 by rpki-client