$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150467.roa File: AS150467.roa (raw, json) Hash identifier: VvEYxPDBY6F7MhsEupM8PdfiK+Z0AiP50z122LisR+Q= Subject key identifier: 4B:5A:8F:A4:03:45:29:5B:B0:87:E4:A8:5E:84:10:6E:E9:DF:0E:28 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 69B9F493ED896BC190A22075773FB049A6327EEA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150467.roa Signing time: Sat 02 May 2026 09:19:15 +0000 ROA not before: Sat 02 May 2026 09:14:15 +0000 ROA not after: Sat 01 May 2027 09:19:15 +0000 asID: 150467 IP address blocks: 103.103.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:b9:f4:93:ed:89:6b:c1:90:a2:20:75:77:3f:b0:49:a6:32:7e:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:14:15 2026 GMT Not After : May 1 09:19:15 2027 GMT Subject: CN=4B5A8FA40345295BB087E4A85E84106EE9DF0E28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1d:f1:42:45:fd:b3:5b:97:84:cb:1d:b8:9e: 33:3c:8e:7d:43:d8:e1:1d:9c:7f:70:e3:a9:35:33: 40:fa:9f:fb:64:70:47:bf:9e:8b:8e:ec:bf:0a:4e: 52:b2:09:a4:3a:f1:55:21:c8:0f:e4:7a:ae:43:4b: 8e:82:6b:67:05:16:38:07:b4:20:f4:6c:5b:75:46: 45:c3:ec:4a:0b:39:51:e0:0a:c0:c5:f4:18:e8:58: ed:b5:d0:2d:3d:eb:69:7b:10:b5:6a:aa:31:45:91: 27:36:14:23:27:44:52:c4:7f:00:cd:67:60:33:44: fc:70:44:41:15:74:b1:51:fc:13:c1:9b:ba:a6:be: b1:a8:2a:77:8c:8c:70:12:b8:95:ff:a0:5c:ff:4a: b6:25:5e:a2:1f:34:dd:a0:ae:e8:0d:b1:41:ed:31: 0b:aa:ca:af:51:5a:df:3c:d7:53:1e:bd:6e:86:43: b0:21:a7:3a:bd:f4:a3:64:27:47:8c:b6:cf:80:74: cf:7e:99:bc:60:b6:a9:d8:1e:cd:43:e0:4f:3c:0e: c3:36:1f:b7:ee:f0:94:35:0c:31:a1:05:d5:92:df: f0:70:2f:ae:7b:05:1d:24:7b:29:c8:d3:b3:5d:4b: 2b:68:a4:e9:f0:b2:63:4c:08:91:8e:dc:8e:64:5d: e9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5A:8F:A4:03:45:29:5B:B0:87:E4:A8:5E:84:10:6E:E9:DF:0E:28 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150467.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.103.115.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:7e:4c:3d:43:21:fd:f8:88:07:f2:7d:fa:ac:c5:85:25:db: ae:60:a7:b8:c8:10:f7:4f:42:5a:ed:97:44:b6:95:e9:9e:90: c8:16:68:27:4c:3a:2c:cb:ae:e5:ff:ed:af:09:0a:fd:e8:89: cb:1b:32:f0:b0:27:2c:01:e7:ba:4b:5c:4d:77:9c:d6:a5:3d: 36:8d:c6:53:cb:be:90:82:23:78:a0:88:1c:e9:ca:a7:63:a2: 9b:ed:7a:4f:a9:64:00:02:ff:62:71:69:cf:0c:35:06:7c:4c: cb:e1:f6:7c:34:5f:29:74:3d:66:a5:d3:b1:21:34:0b:2a:5a: e5:e6:03:ab:ec:90:28:6f:79:a0:03:37:9b:73:d4:82:99:48: 73:39:e3:ef:d4:b8:54:cf:82:0e:36:67:dd:12:21:5d:bb:f6: 76:39:11:15:dd:52:88:34:7b:87:4c:61:6f:ba:e5:19:82:e2: 8c:0b:a4:49:b9:95:41:e1:59:a2:d0:b5:2b:5d:dd:53:26:bb: d8:57:69:64:ac:0b:4c:48:1d:7e:9a:60:c1:7b:79:59:b3:89: ec:d0:0a:34:fb:5f:b8:bf:cf:04:a9:a0:48:c3:7e:90:f0:1d: 08:9d:49:10:ff:fe:87:12:62:38:74:38:00:eb:90:68:fc:69: ac:b7:32:4b -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUabn0k+2Ja8GQoiB1dz+wSaYyfuowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTQxNVoX DTI3MDUwMTA5MTkxNVowMzExMC8GA1UEAxMoNEI1QThGQTQwMzQ1Mjk1QkIwODdF NEE4NUU4NDEwNkVFOURGMEUyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANYd8UJF/bNbl4TLHbieMzyOfUPY4R2cf3DjqTUzQPqf+2RwR7+ei47svwpO UrIJpDrxVSHID+R6rkNLjoJrZwUWOAe0IPRsW3VGRcPsSgs5UeAKwMX0GOhY7bXQ LT3raXsQtWqqMUWRJzYUIydEUsR/AM1nYDNE/HBEQRV0sVH8E8Gbuqa+sagqd4yM cBK4lf+gXP9KtiVeoh803aCu6A2xQe0xC6rKr1Fa3zzXUx69boZDsCGnOr30o2Qn R4y2z4B0z36ZvGC2qdgezUPgTzwOwzYft+7wlDUMMaEF1ZLf8HAvrnsFHSR7KcjT s11LK2ik6fCyY0wIkY7cjmRd6XUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRLWo+k A0UpW7CH5KhehBBu6d8OKDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwNDY3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ2dzMA0GCSqGSIb3DQEBCwUAA4IBAQAefkw9QyH9+IgH8n36rMWFJduu YKe4yBD3T0Ja7ZdEtpXpnpDIFmgnTDosy67l/+2vCQr96InLGzLwsCcsAee6S1xN d5zWpT02jcZTy76QgiN4oIgc6cqnY6Kb7XpPqWQAAv9icWnPDDUGfEzL4fZ8NF8p dD1mpdOxITQLKlrl5gOr7JAob3mgAzebc9SCmUhzOePv1LhUz4IONmfdEiFdu/Z2 OREV3VKINHuHTGFvuuUZguKMC6RJuZVB4Vmi0LUrXd1TJrvYV2lkrAtMSB1+mmDB e3lZs4ns0Ao0+1+4v88EqaBIw36Q8B0InUkQ//6HEmI4dDgA65Bo/GmstzJL -----END CERTIFICATE-----Generated at Sun May 3 00:42:35 2026 by rpki-client