$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150259.roa File: AS150259.roa (raw, json) Hash identifier: T7gEprFiGfKxoCQ8iqcghXtvAmhWwMkzkF7v6iMyuiE= Subject key identifier: 81:28:2E:DB:A2:61:2F:A1:08:54:69:D2:B6:44:9C:09:B6:DB:AC:E8 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2BB2CE07819F473DBB4E6E392996A75AF3694EE1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150259.roa Signing time: Sat 02 May 2026 21:02:25 +0000 ROA not before: Sat 02 May 2026 20:57:25 +0000 ROA not after: Sat 01 May 2027 21:02:25 +0000 asID: 150259 IP address blocks: 103.127.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:b2:ce:07:81:9f:47:3d:bb:4e:6e:39:29:96:a7:5a:f3:69:4e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 20:57:25 2026 GMT Not After : May 1 21:02:25 2027 GMT Subject: CN=81282EDBA2612FA1085469D2B6449C09B6DBACE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8c:17:b3:19:17:b5:33:91:24:cb:29:4e:70: 1a:05:09:68:56:e3:be:c1:d2:c4:8d:1d:b9:8a:92: c5:f7:88:83:ae:01:a1:21:59:8e:d9:15:14:71:cc: 36:27:58:ec:46:3e:bf:d2:c7:8a:af:69:b4:cf:24: 0e:6b:27:73:34:48:08:ec:32:7c:a1:fd:52:1d:20: e8:70:44:07:55:24:19:42:75:97:40:5d:58:7c:d6: d8:f6:ef:17:7d:76:49:58:93:70:74:2d:a4:c8:fd: 51:59:6a:ff:4f:a7:8d:1e:cb:66:6c:44:31:e4:a0: 4a:c9:42:3c:e5:24:8c:53:13:a2:95:56:b3:78:a2: 11:98:9b:7e:89:b5:23:7b:0b:04:5f:94:02:8b:3a: d6:c7:ec:de:97:72:15:2e:4a:18:55:e6:14:5d:b2: d2:0b:37:6e:70:11:02:32:15:16:7f:8a:f3:d5:1f: d3:f3:94:29:17:d9:06:87:9a:05:c2:50:d2:a0:09: 02:81:62:ea:8e:39:43:0b:cb:56:e0:5a:c0:b9:85: ad:2a:96:3b:56:60:a1:ab:cf:89:9c:23:42:f7:eb: 62:1e:82:d7:d3:3f:c5:bb:ba:3a:9a:9d:d9:3f:dc: 31:f9:f5:c3:e6:2a:ec:c4:39:d7:f8:8e:a3:01:29: 54:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:28:2E:DB:A2:61:2F:A1:08:54:69:D2:B6:44:9C:09:B6:DB:AC:E8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150259.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.127.220.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:33:53:34:2c:8a:57:ff:e5:06:7f:bd:a9:b6:86:25:c2:aa: 5e:4e:1a:52:b4:ba:8a:c4:b2:83:69:c9:c2:71:21:cd:cb:16: 40:87:59:fa:ba:3a:10:00:8b:50:bf:ef:dd:c3:42:f0:31:c9: 6a:f2:f9:b6:77:07:8b:4e:d8:33:49:c8:cd:6d:84:77:b1:24: e5:da:4e:81:87:8e:ea:e1:c4:18:17:93:d9:09:a9:ed:d1:17: 18:43:61:21:0b:ef:8d:6d:42:df:c3:1a:0f:b7:ce:5e:18:7e: 81:58:16:2a:3a:f4:32:f7:c5:af:bb:fc:b9:8a:e7:9a:2a:de: 9c:3f:69:70:54:16:7c:3d:dd:6a:ab:3a:c9:41:9c:ea:d4:d9: fd:21:e1:e8:e6:bc:52:c3:9f:49:3c:49:81:e3:cc:d2:ac:b3: 23:09:eb:73:07:6f:6f:d5:f2:c8:d1:fe:b4:bc:cf:16:80:36: a0:45:a5:ea:b2:2c:da:69:5f:98:52:9a:6d:a7:42:44:3b:6f: 21:ab:58:e1:98:24:4b:9d:36:5d:b9:52:ce:b5:9a:d9:73:e6: 66:48:d9:16:ce:a9:e8:6c:fb:e6:21:45:72:79:16:13:35:3c: 61:b3:1f:3e:fe:97:0b:3b:3c:cf:20:13:62:d6:db:85:8a:53: 7d:8a:1c:70 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUK7LOB4GfRz27Tm45KZanWvNpTuEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIwNTcyNVoX DTI3MDUwMTIxMDIyNVowMzExMC8GA1UEAxMoODEyODJFREJBMjYxMkZBMTA4NTQ2 OUQyQjY0NDlDMDlCNkRCQUNFODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM+MF7MZF7UzkSTLKU5wGgUJaFbjvsHSxI0duYqSxfeIg64BoSFZjtkVFHHM NidY7EY+v9LHiq9ptM8kDmsnczRICOwyfKH9Uh0g6HBEB1UkGUJ1l0BdWHzW2Pbv F312SViTcHQtpMj9UVlq/0+njR7LZmxEMeSgSslCPOUkjFMTopVWs3iiEZibfom1 I3sLBF+UAos61sfs3pdyFS5KGFXmFF2y0gs3bnARAjIVFn+K89Uf0/OUKRfZBoea BcJQ0qAJAoFi6o45QwvLVuBawLmFrSqWO1ZgoavPiZwjQvfrYh6C19M/xbu6Opqd 2T/cMfn1w+Yq7MQ51/iOowEpVKkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSBKC7b omEvoQhUadK2RJwJttus6DAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwMjU5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ3/cMA0GCSqGSIb3DQEBCwUAA4IBAQArM1M0LIpX/+UGf72ptoYlwqpe ThpStLqKxLKDacnCcSHNyxZAh1n6ujoQAItQv+/dw0LwMclq8vm2dweLTtgzScjN bYR3sSTl2k6Bh47q4cQYF5PZCant0RcYQ2EhC++NbULfwxoPt85eGH6BWBYqOvQy 98Wvu/y5iueaKt6cP2lwVBZ8Pd1qqzrJQZzq1Nn9IeHo5rxSw59JPEmB48zSrLMj CetzB29v1fLI0f60vM8WgDagRaXqsizaaV+YUpptp0JEO28hq1jhmCRLnTZduVLO tZrZc+ZmSNkWzqnobPvmIUVyeRYTNTxhsx8+/pcLOzzPIBNi1tuFilN9ihxw -----END CERTIFICATE-----Generated at Sun May 3 00:40:39 2026 by rpki-client