$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150468.roa File: AS150468.roa (raw, json) Hash identifier: O9PRINE7/W1Ji8Q0P72CbPgViaFeV5j4kE7rjZ/1Z2w= Subject key identifier: 28:51:5C:B7:CF:97:90:C4:CF:B9:C3:B1:FE:96:94:CC:B8:91:B2:46 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6E697C79F53C6F65FEBEFE1439498271BE502B1D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150468.roa Signing time: Sat 02 May 2026 21:26:20 +0000 ROA not before: Sat 02 May 2026 21:21:20 +0000 ROA not after: Sat 01 May 2027 21:26:20 +0000 asID: 150468 IP address blocks: 2001:df2:1240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:69:7c:79:f5:3c:6f:65:fe:be:fe:14:39:49:82:71:be:50:2b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:21:20 2026 GMT Not After : May 1 21:26:20 2027 GMT Subject: CN=28515CB7CF9790C4CFB9C3B1FE9694CCB891B246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7d:2f:8f:1d:c9:f8:c8:52:ff:31:66:21:6f: 8d:d6:c1:9e:79:1a:10:07:c7:e2:ae:57:cb:77:d1: 20:5f:e3:a5:32:15:1c:bc:53:dd:3a:36:4e:1b:17: 44:5d:5a:96:46:44:28:27:ad:b6:af:49:97:5e:c7: f5:a0:78:29:5a:31:c3:7c:5e:b4:37:3c:57:4a:20: b8:10:ec:63:ff:82:b4:a7:31:19:ba:7e:03:33:ed: 98:0c:1c:b6:8f:6e:7a:d1:db:38:ee:89:85:83:a9: d0:72:2a:5e:33:b3:e5:f2:91:b3:50:ba:12:30:b1: a7:01:99:36:38:cf:23:9d:48:a5:a6:7e:ec:d9:53: 5f:3e:90:99:bf:bd:33:02:60:98:13:45:18:5f:44: f9:37:9d:90:b5:dd:36:ef:19:45:f7:d9:c4:6f:6b: 5b:6a:18:39:aa:16:98:03:d2:c0:6f:39:cb:6c:db: 27:4a:51:a4:2d:b8:eb:81:52:77:7d:7c:3e:74:fc: 84:81:15:3e:0b:7d:32:16:dd:22:4a:dd:27:d6:6f: b3:05:63:a1:89:e4:5d:1e:ed:a3:3e:c2:54:c5:7b: 16:5e:d3:9b:91:53:bd:f1:dd:5d:b0:a9:dd:65:02: dd:11:03:66:b9:6e:1a:61:5f:44:44:eb:65:68:4d: d5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:51:5C:B7:CF:97:90:C4:CF:B9:C3:B1:FE:96:94:CC:B8:91:B2:46 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150468.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:1240::/48 Signature Algorithm: sha256WithRSAEncryption 8c:f2:cd:73:06:68:fc:51:2e:ff:c1:4c:3c:0d:63:50:b1:92: 86:e6:cf:5b:3b:26:92:16:af:eb:8a:17:20:99:d1:e4:f4:74: 32:7b:c4:da:06:a9:06:f4:de:d2:2c:7f:b7:81:2e:1a:8d:bb: 4c:b6:bd:b3:3a:9b:c4:6d:0e:42:27:ef:bd:ed:be:33:9f:68: 1e:8d:4c:b6:f7:fc:f8:3c:95:f8:17:8f:25:5e:8a:d7:2f:5b: 6e:55:13:e1:5f:90:89:4f:49:2b:a0:29:0a:95:bd:64:6b:96: 3b:0f:69:73:5e:fe:44:66:b7:7c:a4:56:76:37:30:7f:e8:8e: 25:d4:bf:71:9b:f7:b8:ab:cb:2e:ef:84:f8:e6:a2:82:27:76: 23:7f:b0:39:e1:7b:46:9d:fb:bc:ac:9c:d3:ae:88:85:ce:ae: 29:61:3c:f3:0e:63:d1:b4:5b:3c:99:47:f2:66:80:e1:7c:f7: 57:be:17:67:31:84:3d:0f:d5:cf:72:9f:a7:8f:c0:15:33:75: 7f:40:ff:ea:4d:7d:1b:09:58:e2:ac:d7:12:8c:10:67:a1:0b: cd:1b:43:99:7d:08:22:32:fe:1d:14:de:8a:a7:9c:d6:13:d3: 7e:29:54:09:86:8a:41:0d:e3:dd:ab:8e:2b:a3:a3:5a:f1:ed: 71:48:41:ac -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUbml8efU8b2X+vv4UOUmCcb5QKx0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjEyMFoX DTI3MDUwMTIxMjYyMFowMzExMC8GA1UEAxMoMjg1MTVDQjdDRjk3OTBDNENGQjlD M0IxRkU5Njk0Q0NCODkxQjI0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK19L48dyfjIUv8xZiFvjdbBnnkaEAfH4q5Xy3fRIF/jpTIVHLxT3To2ThsX RF1alkZEKCettq9Jl17H9aB4KVoxw3xetDc8V0oguBDsY/+CtKcxGbp+AzPtmAwc to9uetHbOO6JhYOp0HIqXjOz5fKRs1C6EjCxpwGZNjjPI51IpaZ+7NlTXz6Qmb+9 MwJgmBNFGF9E+TedkLXdNu8ZRffZxG9rW2oYOaoWmAPSwG85y2zbJ0pRpC2464FS d318PnT8hIEVPgt9MhbdIkrdJ9ZvswVjoYnkXR7toz7CVMV7Fl7Tm5FTvfHdXbCp 3WUC3REDZrluGmFfRETrZWhN1bcCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQoUVy3 z5eQxM+5w7H+lpTMuJGyRjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwNDY4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8hJAMA0GCSqGSIb3DQEBCwUAA4IBAQCM8s1zBmj8US7/wUw8DWNQ sZKG5s9bOyaSFq/rihcgmdHk9HQye8TaBqkG9N7SLH+3gS4ajbtMtr2zOpvEbQ5C J++97b4zn2gejUy29/z4PJX4F48lXorXL1tuVRPhX5CJT0kroCkKlb1ka5Y7D2lz Xv5EZrd8pFZ2NzB/6I4l1L9xm/e4q8su74T45qKCJ3Yjf7A54XtGnfu8rJzTroiF zq4pYTzzDmPRtFs8mUfyZoDhfPdXvhdnMYQ9D9XPcp+nj8AVM3V/QP/qTX0bCVji rNcSjBBnoQvNG0OZfQgiMv4dFN6Kp5zWE9N+KVQJhopBDePdq44ro6Na8e1xSEGs -----END CERTIFICATE-----Generated at Sun May 3 00:42:30 2026 by rpki-client