$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150240.roa File: AS150240.roa (raw, json) Hash identifier: mVICfmJg7Oarkc6E7VDoB5/QYJjoRz9RXa5b+Z2xXJk= Subject key identifier: 07:57:91:DF:BC:D4:44:E1:79:EC:FD:D3:54:DB:C4:60:F2:7D:A6:82 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 04441BEDD659B5F675C549A4F3190A6EDEDA6C2D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150240.roa Signing time: Sat 02 May 2026 21:19:31 +0000 ROA not before: Sat 02 May 2026 21:14:31 +0000 ROA not after: Sat 01 May 2027 21:19:31 +0000 asID: 150240 IP address blocks: 103.69.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:44:1b:ed:d6:59:b5:f6:75:c5:49:a4:f3:19:0a:6e:de:da:6c:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:14:31 2026 GMT Not After : May 1 21:19:31 2027 GMT Subject: CN=075791DFBCD444E179ECFDD354DBC460F27DA682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:52:64:06:86:d6:0d:59:54:00:3a:32:a9:81: 17:ee:bb:12:67:0b:f2:53:ac:a3:a2:35:ae:3c:cb: 31:1f:b9:70:fa:57:87:1e:5e:75:35:3b:7a:4b:69: be:f6:cd:53:f4:06:9b:ff:21:83:e0:6e:5f:ad:69: cd:0f:9c:63:57:70:c3:35:ab:9b:ca:62:0f:07:f9: cb:d7:06:99:cd:33:a1:6f:aa:fd:c3:04:0b:ef:88: 10:44:ef:69:47:43:5f:09:cb:d7:fa:0d:b7:2c:b7: 5f:12:aa:71:b9:02:77:76:8c:cf:09:31:67:14:ef: f0:24:80:8b:4d:15:2d:48:4c:8e:0c:83:c7:0e:09: 09:d8:ce:d5:9f:2d:f5:af:13:3f:41:55:1b:88:53: cd:49:0f:6e:c6:fb:4a:5e:70:ee:2e:18:39:87:16: 6b:7a:11:06:0d:06:bc:66:2c:92:1d:31:e6:86:88: 29:c8:63:20:55:a3:60:4f:3f:48:7d:d9:6a:d6:f8: b7:ca:cd:16:f9:f5:14:7a:5f:c8:70:99:ad:a3:11: 1c:0a:c3:b8:82:96:e0:b9:20:28:dd:c2:20:45:56: 31:23:14:3c:ef:7d:10:24:f6:e5:23:ab:a0:4b:34: 6c:d6:6b:65:99:93:14:52:52:f1:a9:7f:4b:c0:50: 68:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:57:91:DF:BC:D4:44:E1:79:EC:FD:D3:54:DB:C4:60:F2:7D:A6:82 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150240.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.69.233.0/24 Signature Algorithm: sha256WithRSAEncryption 53:14:cb:fa:59:86:0a:eb:b4:23:68:1f:24:b4:83:9b:7c:ae: 86:27:21:f4:fd:bb:58:58:cb:7b:71:33:c5:4c:4c:07:15:22: 78:71:45:e3:68:ac:aa:a0:25:db:d3:2b:de:64:e2:f9:da:69: 2f:e7:51:b6:3b:fd:ba:a7:99:a5:c3:ad:89:0c:96:19:77:40: 8c:b8:43:bb:6d:8e:60:c0:d2:41:8e:38:fe:f6:93:b5:4e:eb: 75:9f:10:37:2d:8b:a8:94:82:19:19:2c:19:c9:03:cd:75:e1: 44:0f:e1:5c:4c:ef:6b:7a:e1:0c:7d:44:34:a1:ba:aa:80:ac: 6d:ff:1b:43:4c:89:c3:5d:e8:e5:70:44:04:0a:c7:f9:19:a8: 8f:6b:2f:c3:f0:af:e4:4f:26:0b:01:16:ca:a0:5a:30:bd:02: b1:32:3c:97:27:3b:89:ca:ea:30:7b:85:1d:4a:3d:82:70:8d: 1b:41:ef:8b:e9:a5:15:2d:7b:14:8c:38:65:19:3a:36:71:98: 92:f9:f6:ad:48:29:58:c8:55:6a:1a:07:2b:eb:3a:b1:83:ac: eb:34:c1:71:1f:56:45:0a:43:d3:51:79:35:d7:5d:19:61:0f: 67:17:4a:72:ce:44:5f:f6:2b:23:16:9d:c8:0f:76:61:9f:19: fe:a3:a1:3d -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUBEQb7dZZtfZ1xUmk8xkKbt7abC0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTQzMVoX DTI3MDUwMTIxMTkzMVowMzExMC8GA1UEAxMoMDc1NzkxREZCQ0Q0NDRFMTc5RUNG REQzNTREQkM0NjBGMjdEQTY4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALBSZAaG1g1ZVAA6MqmBF+67EmcL8lOso6I1rjzLMR+5cPpXhx5edTU7ektp vvbNU/QGm/8hg+BuX61pzQ+cY1dwwzWrm8piDwf5y9cGmc0zoW+q/cMEC++IEETv aUdDXwnL1/oNtyy3XxKqcbkCd3aMzwkxZxTv8CSAi00VLUhMjgyDxw4JCdjO1Z8t 9a8TP0FVG4hTzUkPbsb7Sl5w7i4YOYcWa3oRBg0GvGYskh0x5oaIKchjIFWjYE8/ SH3Zatb4t8rNFvn1FHpfyHCZraMRHArDuIKW4LkgKN3CIEVWMSMUPO99ECT25SOr oEs0bNZrZZmTFFJS8al/S8BQaDkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQHV5Hf vNRE4Xns/dNU28Rg8n2mgjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwMjQwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ0XpMA0GCSqGSIb3DQEBCwUAA4IBAQBTFMv6WYYK67QjaB8ktIObfK6G JyH0/btYWMt7cTPFTEwHFSJ4cUXjaKyqoCXb0yveZOL52mkv51G2O/26p5mlw62J DJYZd0CMuEO7bY5gwNJBjjj+9pO1Tut1nxA3LYuolIIZGSwZyQPNdeFED+FcTO9r euEMfUQ0obqqgKxt/xtDTInDXejlcEQECsf5GaiPay/D8K/kTyYLARbKoFowvQKx MjyXJzuJyuowe4UdSj2CcI0bQe+L6aUVLXsUjDhlGTo2cZiS+fatSClYyFVqGgcr 6zqxg6zrNMFxH1ZFCkPTUXk1110ZYQ9nF0pyzkRf9isjFp3ID3Zhnxn+o6E9 -----END CERTIFICATE-----Generated at Sun May 3 01:44:04 2026 by rpki-client