$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150257.roa File: AS150257.roa (raw, json) Hash identifier: 9PQ8BQxXAR9EJqNU+IGxrMHAWPYl62ZVRs7tJ4HmoUU= Subject key identifier: 2D:BC:65:C5:76:F1:E4:91:03:CF:A8:78:67:34:15:44:5C:5F:14:85 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 68DBDFAD8131E1624E27B9E147449FD22ADD6F4D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150257.roa Signing time: Sat 02 May 2026 09:21:45 +0000 ROA not before: Sat 02 May 2026 09:16:45 +0000 ROA not after: Sat 01 May 2027 09:21:45 +0000 asID: 150257 IP address blocks: 103.30.192.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:db:df:ad:81:31:e1:62:4e:27:b9:e1:47:44:9f:d2:2a:dd:6f:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:16:45 2026 GMT Not After : May 1 09:21:45 2027 GMT Subject: CN=2DBC65C576F1E49103CFA878673415445C5F1485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9c:49:3a:94:d0:62:5a:86:55:6e:98:0a:56: 2e:a8:87:32:1b:d2:ea:60:cb:72:30:61:f2:2c:ec: d6:cb:43:97:89:bb:05:0d:9a:1e:a9:1f:d9:96:56: ac:a5:83:6d:70:98:2b:3c:51:d8:24:f5:c4:cd:53: 2b:2b:55:5b:69:eb:2e:31:da:4c:49:48:4b:32:9a: 85:39:a5:96:2a:0a:bc:00:2f:4d:ed:f6:00:56:f5: 54:82:2f:b7:3c:ae:f7:e5:87:31:98:8d:cd:28:05: 56:12:26:b1:ea:7f:dd:d4:66:50:f6:c6:88:41:9b: 60:f0:3f:93:0f:7c:d0:f0:af:b8:96:dd:b6:b2:2a: eb:15:b6:64:14:ec:90:da:97:30:a6:5b:e6:90:c8: 1d:72:81:3f:39:4b:0b:01:20:5f:b0:62:c7:73:ca: 3d:f1:4e:3b:a9:0c:86:f1:48:e6:48:7a:1f:c6:53: fc:05:ea:bf:c8:eb:5f:8a:8f:72:8f:54:a9:74:f4: 31:4d:41:e6:96:ec:33:07:36:69:be:95:6b:99:b6: d2:75:5c:13:b6:e3:57:8f:84:22:0b:bc:f4:7f:9e: 5d:74:f1:ba:b5:97:2b:7b:22:08:8a:04:0e:7a:7b: 99:97:f5:f6:64:84:c9:76:4a:8d:7d:0a:5b:01:c9: 38:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BC:65:C5:76:F1:E4:91:03:CF:A8:78:67:34:15:44:5C:5F:14:85 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150257.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.30.192.0/23 Signature Algorithm: sha256WithRSAEncryption a8:03:ac:94:b4:0c:98:e8:0c:ae:05:c4:ce:d6:f6:86:a7:4f: a6:39:c9:e9:c2:42:29:42:a6:ed:1a:06:c0:0b:67:c4:f6:f8: cb:b8:56:ef:d3:70:3b:64:85:7b:d1:a3:2e:5b:18:f7:ec:44: 57:3c:61:5f:7a:8e:fe:17:79:9a:a6:c2:5b:2b:99:51:46:d5: 83:0f:13:18:57:6c:2d:63:27:dd:be:0e:28:87:81:c4:ea:8d: f4:3d:c4:29:e7:78:c9:35:e1:51:4d:58:e2:c9:37:f7:57:b6: b2:1f:8c:a3:a0:77:e6:bd:f7:f1:4b:1e:67:da:7c:b3:1e:c7: 5d:f6:03:44:a6:2c:d1:d4:5b:77:57:0c:60:b6:a6:8d:6b:0c: 45:fb:9a:0c:00:08:8f:16:1d:5e:38:97:8e:6d:1d:62:f4:a9: 3f:16:1a:12:42:b9:e7:6a:15:cb:f3:ff:19:18:b5:ea:84:b9: 27:ef:ad:56:2a:d9:de:fb:89:39:ce:6e:06:0c:85:9a:97:d9: 0a:b2:fe:78:0d:40:d5:4a:15:0d:7b:32:fd:ff:44:0a:f1:73: f9:76:35:89:75:ec:3f:a9:65:ed:e2:89:77:dc:87:ca:9e:71: ed:6c:00:92:e0:dc:77:62:31:69:88:48:7d:a8:9c:8b:fe:e8: f3:f6:e2:75 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUaNvfrYEx4WJOJ7nhR0Sf0irdb00wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTY0NVoX DTI3MDUwMTA5MjE0NVowMzExMC8GA1UEAxMoMkRCQzY1QzU3NkYxRTQ5MTAzQ0ZB ODc4NjczNDE1NDQ1QzVGMTQ4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKqcSTqU0GJahlVumApWLqiHMhvS6mDLcjBh8izs1stDl4m7BQ2aHqkf2ZZW rKWDbXCYKzxR2CT1xM1TKytVW2nrLjHaTElISzKahTmllioKvAAvTe32AFb1VIIv tzyu9+WHMZiNzSgFVhImsep/3dRmUPbGiEGbYPA/kw980PCvuJbdtrIq6xW2ZBTs kNqXMKZb5pDIHXKBPzlLCwEgX7Bix3PKPfFOO6kMhvFI5kh6H8ZT/AXqv8jrX4qP co9UqXT0MU1B5pbsMwc2ab6Va5m20nVcE7bjV4+EIgu89H+eXXTxurWXK3siCIoE Dnp7mZf19mSEyXZKjX0KWwHJOPUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQtvGXF dvHkkQPPqHhnNBVEXF8UhTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwMjU3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZx7AMA0GCSqGSIb3DQEBCwUAA4IBAQCoA6yUtAyY6AyuBcTO1vaGp0+m OcnpwkIpQqbtGgbAC2fE9vjLuFbv03A7ZIV70aMuWxj37ERXPGFfeo7+F3mapsJb K5lRRtWDDxMYV2wtYyfdvg4oh4HE6o30PcQp53jJNeFRTVjiyTf3V7ayH4yjoHfm vffxSx5n2nyzHsdd9gNEpizR1Ft3VwxgtqaNawxF+5oMAAiPFh1eOJeObR1i9Kk/ FhoSQrnnahXL8/8ZGLXqhLkn761WKtne+4k5zm4GDIWal9kKsv54DUDVShUNezL9 /0QK8XP5djWJdew/qWXt4ol33IfKnnHtbACS4Nx3YjFpiEh9qJyL/ujz9uJ1 -----END CERTIFICATE-----Generated at Sun May 3 01:44:38 2026 by rpki-client