$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150222.roa File: AS150222.roa (raw, json) Hash identifier: 8Vh7Dm15l+OPLWrGRKDD/ISdJ61C4/BxNGdmtwJJliM= Subject key identifier: A6:76:08:3F:C2:1B:2D:19:7F:4A:0A:4A:92:7A:FE:B3:A9:5A:D5:72 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 662F0990ED1F4508B83402B009E64F70CA6CD862 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150222.roa Signing time: Sat 02 May 2026 09:25:42 +0000 ROA not before: Sat 02 May 2026 09:20:42 +0000 ROA not after: Sat 01 May 2027 09:25:42 +0000 asID: 150222 IP address blocks: 2001:df2:9240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:2f:09:90:ed:1f:45:08:b8:34:02:b0:09:e6:4f:70:ca:6c:d8:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:20:42 2026 GMT Not After : May 1 09:25:42 2027 GMT Subject: CN=A676083FC21B2D197F4A0A4A927AFEB3A95AD572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:aa:16:50:da:26:27:d8:34:b0:ff:e8:8e:e5: 16:ed:78:82:0d:cc:71:d1:29:75:3b:6f:2e:85:a0: a1:fc:22:74:34:ec:4d:5c:71:10:0b:c9:05:3f:21: 16:a5:6c:7f:0e:0f:51:da:f7:85:4e:23:86:a5:02: db:f9:91:e5:39:25:ac:63:25:f8:12:95:90:d6:c7: c8:cf:8d:9e:91:ee:1b:08:01:1b:66:be:b5:f5:4b: 71:0e:46:d1:22:8c:6d:77:34:c7:fe:91:84:31:d2: 28:d6:bd:9c:e0:8a:eb:47:59:2a:54:76:40:04:2a: 9b:6a:32:f9:66:b8:c8:98:38:a0:ee:81:80:d5:d1: 2a:cf:66:81:4e:01:07:61:a2:97:3a:6f:76:86:cc: 1a:a3:f9:53:d7:ec:78:3f:be:af:b0:02:89:8c:fe: cd:9c:75:50:46:f8:98:8f:2a:62:d0:c8:3f:36:c9: ef:61:cb:a7:22:32:e6:36:f8:c9:1e:01:8c:58:40: c4:77:90:8e:60:f0:39:94:fb:d2:64:f3:e0:49:2e: 2d:4e:48:e3:04:52:1c:bd:c4:4a:a8:5a:c4:37:07: 3e:2f:5a:8e:cd:9b:61:07:35:82:57:e1:52:e4:1d: 3c:45:fc:60:59:1f:50:04:60:f3:75:2a:56:d8:39: 81:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:76:08:3F:C2:1B:2D:19:7F:4A:0A:4A:92:7A:FE:B3:A9:5A:D5:72 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150222.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:9240::/48 Signature Algorithm: sha256WithRSAEncryption 38:e7:c9:e4:b9:ac:ef:1a:7c:f2:f3:e0:ea:73:6f:aa:5d:c4: 6c:5e:96:12:6b:25:25:8b:d1:2f:86:2a:93:9c:c8:0a:06:8f: ab:22:49:84:22:a6:61:38:2b:26:bf:79:f4:11:a7:6b:1a:ec: cf:c1:f0:1a:c1:a8:8e:37:2f:db:88:13:e1:a3:48:e6:7e:e8: 5f:97:bd:77:0f:4a:f0:6a:8f:bf:03:05:26:1b:ca:0d:02:c0: 97:56:ec:ba:c2:46:43:91:03:14:57:07:5d:7b:6f:7e:82:df: 88:8e:69:61:dd:76:0f:09:15:0e:5e:5a:13:57:ee:55:58:9c: b4:0c:d2:45:d6:2d:d1:51:96:e5:eb:f5:c8:ad:b9:ce:7a:a9: 62:e8:05:ea:7f:8b:61:d9:98:67:0e:c7:a8:f5:25:b6:11:07: 9d:b7:51:41:c6:e1:d7:6a:38:6a:4a:81:58:26:b9:3b:4c:8b: 82:28:06:8d:fa:62:c3:8d:2e:00:35:96:d1:8c:e7:76:de:b0: 42:61:ed:db:0d:ef:b8:27:a4:79:04:8e:c8:36:b1:5a:06:e2: 2e:21:b6:5f:80:b4:d3:69:f1:e1:41:c8:12:dc:f1:84:17:eb: 22:55:96:3b:b0:af:06:ec:ad:c1:5d:9e:7f:7e:20:66:13:00: 5b:ec:c7:65 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUZi8JkO0fRQi4NAKwCeZPcMps2GIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjA0MloX DTI3MDUwMTA5MjU0MlowMzExMC8GA1UEAxMoQTY3NjA4M0ZDMjFCMkQxOTdGNEEw QTRBOTI3QUZFQjNBOTVBRDU3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIuqFlDaJifYNLD/6I7lFu14gg3McdEpdTtvLoWgofwidDTsTVxxEAvJBT8h FqVsfw4PUdr3hU4jhqUC2/mR5TklrGMl+BKVkNbHyM+NnpHuGwgBG2a+tfVLcQ5G 0SKMbXc0x/6RhDHSKNa9nOCK60dZKlR2QAQqm2oy+Wa4yJg4oO6BgNXRKs9mgU4B B2GilzpvdobMGqP5U9fseD++r7ACiYz+zZx1UEb4mI8qYtDIPzbJ72HLpyIy5jb4 yR4BjFhAxHeQjmDwOZT70mTz4EkuLU5I4wRSHL3ESqhaxDcHPi9ajs2bYQc1glfh UuQdPEX8YFkfUARg83UqVtg5geUCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBSmdgg/ whstGX9KCkqSev6zqVrVcjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwMjIyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8pJAMA0GCSqGSIb3DQEBCwUAA4IBAQA458nkuazvGnzy8+Dqc2+q XcRsXpYSayUli9EvhiqTnMgKBo+rIkmEIqZhOCsmv3n0EadrGuzPwfAawaiONy/b iBPho0jmfuhfl713D0rwao+/AwUmG8oNAsCXVuy6wkZDkQMUVwdde29+gt+Ijmlh 3XYPCRUOXloTV+5VWJy0DNJF1i3RUZbl6/XIrbnOeqli6AXqf4th2ZhnDseo9SW2 EQedt1FBxuHXajhqSoFYJrk7TIuCKAaN+mLDjS4ANZbRjOd23rBCYe3bDe+4J6R5 BI7INrFaBuIuIbZfgLTTafHhQcgS3PGEF+siVZY7sK8G7K3BXZ5/fiBmEwBb7Mdl -----END CERTIFICATE-----Generated at Sun May 3 00:41:48 2026 by rpki-client