$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150235.roa File: AS150235.roa (raw, json) Hash identifier: Y/FIHcYlK8j7me7/VFdgRzKbnRRrf76TSE/iZcoQdYI= Subject key identifier: DD:33:BC:1D:3F:3C:C2:BF:5B:FD:61:8A:E7:39:61:8F:91:A6:DD:51 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1C6453EA73BA22C83B81A379782A8840962AAE6C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150235.roa Signing time: Sat 02 May 2026 08:36:54 +0000 ROA not before: Sat 02 May 2026 08:31:54 +0000 ROA not after: Sat 01 May 2027 08:36:54 +0000 asID: 150235 IP address blocks: 103.72.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:64:53:ea:73:ba:22:c8:3b:81:a3:79:78:2a:88:40:96:2a:ae:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:31:54 2026 GMT Not After : May 1 08:36:54 2027 GMT Subject: CN=DD33BC1D3F3CC2BF5BFD618AE739618F91A6DD51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3f:e5:a6:27:f5:6c:ca:41:a3:98:07:c8:82: c1:d5:22:e5:ed:3f:e4:3a:3a:9c:e0:bb:d8:05:09: b1:30:af:19:21:9f:7f:64:15:00:b5:11:8e:68:bb: cc:eb:dd:78:41:16:7c:f4:19:2c:f2:5b:33:c7:c3: 7c:21:9e:72:d8:a3:9e:97:43:64:62:7f:ca:a5:8b: bc:1e:e0:0b:5f:3e:ec:fc:c5:44:09:6f:8a:f4:bb: 74:6a:a0:56:11:44:93:eb:f5:d8:ee:1c:ee:a6:0a: 01:9a:5e:6d:aa:19:97:fb:f6:40:ce:e4:53:f7:70: c4:10:a1:18:40:ea:ee:04:d1:7d:c9:4b:a2:d6:e1: 0c:52:ac:ed:41:91:b9:74:87:e9:43:fc:54:e6:41: 01:cf:6b:6b:c1:ed:4d:d0:99:e9:13:65:7a:e6:72: 69:39:c7:fc:fe:67:d9:de:53:bb:f8:43:b3:23:c8: 89:cb:bf:8c:22:af:6f:f5:5e:b5:bf:d5:f9:0d:32: 90:68:ae:d4:99:40:9c:43:c1:e9:30:1e:18:36:bf: d1:8f:4d:6c:fb:53:69:3a:0c:c6:ba:2e:2b:03:4a: ab:f4:5a:49:65:5d:c2:da:79:75:08:49:5e:66:67: be:31:9d:e8:a9:1a:9b:a4:d9:17:9e:10:a9:11:e2: 4a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:33:BC:1D:3F:3C:C2:BF:5B:FD:61:8A:E7:39:61:8F:91:A6:DD:51 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.72.89.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:87:15:31:99:15:a5:0d:ed:e7:77:58:ac:c5:e5:dd:43:98: e5:83:2c:83:36:6c:0f:19:de:d3:cf:67:e3:f1:af:0d:e7:8e: 8d:b3:2d:d5:7f:35:83:2c:3e:f2:66:fd:5f:0c:33:66:f5:b7: 72:f6:2b:6b:48:bf:c0:68:48:fb:7c:d3:00:6e:69:98:ec:5d: 05:6d:44:cd:61:bc:5e:d8:cc:7e:29:1d:cf:9f:a5:25:0b:6c: 70:98:a3:7a:23:f1:62:dd:c8:be:05:f1:b7:e3:dd:29:cc:1f: 7c:94:01:38:97:a4:9b:a6:5f:84:71:c0:40:be:1a:4b:7b:2a: ad:85:d4:d9:8d:3f:bd:e6:98:c2:98:e4:e0:4a:9c:d9:47:92: a5:c6:9a:c0:12:16:00:74:ad:4e:c3:aa:11:12:64:31:9c:21: 06:bc:66:1b:88:35:25:56:f2:f9:4d:f2:fe:14:c4:7e:06:96: f7:98:c2:30:3e:43:40:a4:ae:fc:46:70:00:0e:98:64:d4:90: 09:35:d5:64:fd:88:c3:5a:00:5a:6c:7a:6a:9b:bf:b5:e7:1a: 27:b8:a8:bc:01:94:68:29:0f:18:a5:60:f2:6c:14:f3:54:f6: 75:9c:8a:97:71:93:48:77:38:e9:10:ab:23:7a:cb:9d:0f:d3: ec:9a:01:a6 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUHGRT6nO6Isg7gaN5eCqIQJYqrmwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzE1NFoX DTI3MDUwMTA4MzY1NFowMzExMC8GA1UEAxMoREQzM0JDMUQzRjNDQzJCRjVCRkQ2 MThBRTczOTYxOEY5MUE2REQ1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALI/5aYn9WzKQaOYB8iCwdUi5e0/5Do6nOC72AUJsTCvGSGff2QVALURjmi7 zOvdeEEWfPQZLPJbM8fDfCGectijnpdDZGJ/yqWLvB7gC18+7PzFRAlvivS7dGqg VhFEk+v12O4c7qYKAZpebaoZl/v2QM7kU/dwxBChGEDq7gTRfclLotbhDFKs7UGR uXSH6UP8VOZBAc9ra8HtTdCZ6RNleuZyaTnH/P5n2d5Tu/hDsyPIicu/jCKvb/Ve tb/V+Q0ykGiu1JlAnEPB6TAeGDa/0Y9NbPtTaToMxrouKwNKq/RaSWVdwtp5dQhJ XmZnvjGd6Kkam6TZF54QqRHiSvsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTdM7wd PzzCv1v9YYrnOWGPkabdUTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwMjM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ0hZMA0GCSqGSIb3DQEBCwUAA4IBAQB+hxUxmRWlDe3nd1isxeXdQ5jl gyyDNmwPGd7Tz2fj8a8N546Nsy3VfzWDLD7yZv1fDDNm9bdy9itrSL/AaEj7fNMA bmmY7F0FbUTNYbxe2Mx+KR3Pn6UlC2xwmKN6I/Fi3ci+BfG3490pzB98lAE4l6Sb pl+EccBAvhpLeyqthdTZjT+95pjCmOTgSpzZR5KlxprAEhYAdK1Ow6oREmQxnCEG vGYbiDUlVvL5TfL+FMR+Bpb3mMIwPkNApK78RnAADphk1JAJNdVk/YjDWgBabHpq m7+15xonuKi8AZRoKQ8YpWDybBTzVPZ1nIqXcZNIdzjpEKsjesudD9PsmgGm -----END CERTIFICATE-----Generated at Sun May 3 00:41:12 2026 by rpki-client