
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150464.roa
File: AS150464.roa (raw, json)
Hash identifier: PMUD851nTSZyoTZSVHwKYPM9D/iEv+SDAekkaSW+Lko=
Subject key identifier: 28:78:E8:2D:CA:23:6C:5B:26:31:A5:45:AD:92:89:B2:51:0B:3E:57
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 53B607A787FDD8ABB361D21D6D74235E3A1A3D94
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150464.roa
Signing time: Sat 02 May 2026 08:35:17 +0000
ROA not before: Sat 02 May 2026 08:30:17 +0000
ROA not after: Sat 01 May 2027 08:35:17 +0000
asID: 150464
IP address blocks: 103.170.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:b6:07:a7:87:fd:d8:ab:b3:61:d2:1d:6d:74:23:5e:3a:1a:3d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 08:30:17 2026 GMT
Not After : May 1 08:35:17 2027 GMT
Subject: CN=2878E82DCA236C5B2631A545AD9289B2510B3E57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7c:5d:3b:81:c4:13:e2:c8:2c:64:f8:20:5b:
f8:79:72:17:fb:27:1b:88:13:64:1b:5d:62:84:69:
4b:a5:08:48:ff:41:11:eb:a3:6d:3d:88:ab:a9:cc:
4b:f0:90:4d:db:33:85:a1:9e:8a:0f:0b:08:02:41:
61:95:35:36:5a:14:87:e4:7b:f0:f9:f5:8f:1b:e9:
63:0f:69:7c:ab:91:fb:f3:cf:b7:80:4f:43:df:89:
33:9d:87:ce:da:14:9c:23:d3:a3:a7:58:d3:df:8e:
d8:58:bc:19:eb:b0:25:b8:9d:a0:b7:53:a0:fe:81:
d7:25:da:e8:04:71:97:54:7c:23:63:30:48:cd:83:
a6:b9:bc:cf:47:83:c1:0a:75:7f:27:e8:5b:ba:63:
7b:7c:99:01:fc:a8:59:7b:91:05:f1:00:97:d6:ba:
4c:85:47:9a:41:bf:6a:0e:0f:eb:53:1c:01:85:d4:
f7:68:7b:f8:11:bf:1f:3c:80:52:ac:a2:f5:df:e3:
6f:f5:a5:b5:4d:71:23:06:38:fb:aa:27:ea:24:13:
ef:2e:01:b1:cf:c0:e7:54:aa:4a:4a:bf:92:5f:a9:
2a:85:80:71:b5:b7:91:a5:70:23:cd:7b:39:60:f1:
9b:cd:92:2b:e2:6b:e0:87:89:a3:a5:97:42:77:0e:
f7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:78:E8:2D:CA:23:6C:5B:26:31:A5:45:AD:92:89:B2:51:0B:3E:57
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150464.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.170.198.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:1e:c6:bf:1c:05:a5:ee:dc:1e:b5:7a:68:ea:c2:d1:e2:49:
fc:97:70:fa:e0:71:47:97:0b:53:73:06:37:f6:3c:3e:56:c2:
ee:c2:02:c6:8f:82:cc:5b:ba:1e:3c:61:3b:9d:17:c5:c0:fc:
c1:ca:c8:b1:a7:bc:c1:e2:26:d9:87:30:56:a0:3c:51:4d:3a:
c4:d3:78:14:ce:f3:88:f3:26:1f:3a:3b:48:93:40:45:b3:0a:
ef:80:a1:b9:e1:06:8e:35:47:ee:04:03:91:17:4b:f5:2e:e8:
ed:f6:4d:5e:a2:59:9a:d4:93:13:40:62:3a:c6:1c:33:69:21:
f7:9d:38:73:21:ca:78:ab:1a:28:d6:b9:0a:97:98:8f:d5:29:
0f:8f:8d:6c:39:33:69:4d:ac:70:3e:96:3c:92:eb:2f:db:a8:
bd:dd:12:b4:00:25:de:f8:6b:4e:bb:a8:2f:0e:45:e9:94:b5:
40:a4:bf:2f:ff:2f:ed:72:be:5a:4d:5c:0a:34:a3:0c:f1:9a:
98:91:74:c8:47:b6:58:da:7c:09:e9:06:ff:e4:ac:96:a6:4e:
bc:aa:8b:ae:10:19:39:4b:2f:bd:cc:eb:56:26:55:2a:27:8c:
5c:fc:17:a8:ea:ed:10:50:25:a7:bb:65:11:fd:87:b8:0f:52:
3b:c4:2f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:40:31 2026 by rpki-client