$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150279.roa File: AS150279.roa (raw, json) Hash identifier: rhWpU/M4ApV2G6DCHULjazKSRP//hAzwE6eFKSIhtAU= Subject key identifier: 72:CE:95:AD:C4:C2:5B:42:04:7B:F3:31:64:9A:A9:37:14:12:9F:B7 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1E3EE283E4A94FD6E927A2E46F8C455283F15A93 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150279.roa Signing time: Sat 02 May 2026 08:34:57 +0000 ROA not before: Sat 02 May 2026 08:29:57 +0000 ROA not after: Sat 01 May 2027 08:34:57 +0000 asID: 150279 IP address blocks: 2001:df1:fcc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:3e:e2:83:e4:a9:4f:d6:e9:27:a2:e4:6f:8c:45:52:83:f1:5a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:29:57 2026 GMT Not After : May 1 08:34:57 2027 GMT Subject: CN=72CE95ADC4C25B42047BF331649AA93714129FB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1f:1c:3a:10:b0:46:ac:b8:0a:48:7a:2e:26: b2:98:fb:ff:e9:c4:86:5a:aa:d2:43:27:03:fb:c7: b3:52:5d:3d:06:00:20:7d:dc:ac:f7:17:db:3a:d3: 6e:a9:ad:56:e7:1a:0a:ae:c6:ad:98:57:13:f1:fb: 45:47:7f:67:b2:86:0a:fc:0c:40:61:b3:3c:58:cc: e4:93:49:35:5f:45:16:db:56:57:57:9f:b9:f1:32: e1:35:24:7d:78:c4:e6:e2:12:36:46:a2:05:6d:72: d3:86:1a:27:a3:f5:ed:da:72:eb:26:50:ca:21:1f: 07:df:8f:99:54:79:c8:7a:32:9e:60:b4:41:80:01: f0:ff:22:89:11:df:95:ba:e4:16:ad:ee:a6:6d:57: a5:8c:c6:bd:0a:80:a4:04:9f:dc:6a:07:d6:00:8f: 99:3d:d4:a9:8f:1e:bd:e2:43:5d:30:7c:11:ea:da: a2:55:c5:c9:3a:63:62:5b:c1:93:76:f5:6e:57:ea: ec:30:88:7f:1b:27:0b:1c:61:79:1e:24:40:77:c8: ce:c4:eb:99:43:6a:6b:62:23:9a:b9:ca:4b:e4:49: 33:c3:f4:d5:a8:fc:aa:21:d7:bb:1d:05:bc:69:37: c2:bb:c6:f0:75:cc:d6:4a:3c:b9:d0:7a:b1:b4:88: e3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CE:95:AD:C4:C2:5B:42:04:7B:F3:31:64:9A:A9:37:14:12:9F:B7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150279.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:fcc0::/48 Signature Algorithm: sha256WithRSAEncryption 74:cb:bc:a1:e2:da:54:a7:a6:fb:fe:77:2d:b6:cd:b3:3b:41: bc:c1:b5:36:75:e7:a6:7f:d2:57:f9:d8:03:b3:7f:ad:15:32: 5a:bd:3a:a7:7a:70:b4:31:9a:6b:70:7c:57:a6:59:19:10:b3: 9b:9e:90:6f:c4:66:32:0f:1a:ad:da:71:d4:60:5a:82:b6:96: 31:3b:b0:f2:44:b7:7f:32:e9:01:e8:90:90:b7:e3:93:9f:77: 61:2a:f5:14:eb:0c:59:f6:cc:c0:07:86:05:e5:7a:aa:d5:f6: e2:20:dd:df:52:36:f2:21:e4:33:29:f0:3d:7e:34:02:2d:eb: d1:a1:5b:73:20:46:a8:df:04:68:32:6d:6f:11:79:26:57:a2: 9a:65:90:dc:6c:44:9d:12:51:42:f2:a5:6d:88:e5:ef:12:30: a4:b5:b0:42:78:5b:a9:a1:19:b7:ab:8a:fa:2e:2c:d0:1e:17: ea:8b:ae:36:80:d7:2e:bf:eb:4a:ba:b4:7f:7e:0f:9e:73:87: 66:24:7e:d8:f0:63:92:93:cc:64:80:c1:3b:af:3b:70:09:d7: 40:00:46:24:f8:b4:e4:2f:13:c0:f2:ef:a7:1e:7a:5d:1f:81: 07:08:b4:5e:1b:fd:60:d8:f2:33:79:c2:97:fe:27:b3:00:3a: d5:98:89:de -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUHj7ig+SpT9bpJ6Lkb4xFUoPxWpMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4Mjk1N1oX DTI3MDUwMTA4MzQ1N1owMzExMC8GA1UEAxMoNzJDRTk1QURDNEMyNUI0MjA0N0JG MzMxNjQ5QUE5MzcxNDEyOUZCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALgfHDoQsEasuApIei4mspj7/+nEhlqq0kMnA/vHs1JdPQYAIH3crPcX2zrT bqmtVucaCq7GrZhXE/H7RUd/Z7KGCvwMQGGzPFjM5JNJNV9FFttWV1efufEy4TUk fXjE5uISNkaiBW1y04YaJ6P17dpy6yZQyiEfB9+PmVR5yHoynmC0QYAB8P8iiRHf lbrkFq3upm1XpYzGvQqApASf3GoH1gCPmT3UqY8eveJDXTB8EeraolXFyTpjYlvB k3b1blfq7DCIfxsnCxxheR4kQHfIzsTrmUNqa2IjmrnKS+RJM8P01aj8qiHXux0F vGk3wrvG8HXM1ko8udB6sbSI40MCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRyzpWt xMJbQgR78zFkmqk3FBKftzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwMjc5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8fzAMA0GCSqGSIb3DQEBCwUAA4IBAQB0y7yh4tpUp6b7/nctts2z O0G8wbU2deemf9JX+dgDs3+tFTJavTqnenC0MZprcHxXplkZELObnpBvxGYyDxqt 2nHUYFqCtpYxO7DyRLd/MukB6JCQt+OTn3dhKvUU6wxZ9szAB4YF5Xqq1fbiIN3f UjbyIeQzKfA9fjQCLevRoVtzIEao3wRoMm1vEXkmV6KaZZDcbESdElFC8qVtiOXv EjCktbBCeFupoRm3q4r6LizQHhfqi642gNcuv+tKurR/fg+ec4dmJH7Y8GOSk8xk gME7rztwCddAAEYk+LTkLxPA8u+nHnpdH4EHCLReG/1g2PIzecKX/iezADrVmIne -----END CERTIFICATE-----Generated at Sun May 3 00:42:29 2026 by rpki-client