$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150480.roa File: AS150480.roa (raw, json) Hash identifier: VPr+peGB9SitP6Rmo7QxL65hEBYQNIRRTTcc7KGg4KY= Subject key identifier: 18:52:8A:5C:3C:BE:57:E1:CC:17:09:70:DA:96:00:2D:E0:25:7B:60 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3212059CF84D6CD4D6DC893ECC1DD19833B9350E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150480.roa Signing time: Sat 02 May 2026 08:35:54 +0000 ROA not before: Sat 02 May 2026 08:30:54 +0000 ROA not after: Sat 01 May 2027 08:35:54 +0000 asID: 150480 IP address blocks: 2001:df3:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:12:05:9c:f8:4d:6c:d4:d6:dc:89:3e:cc:1d:d1:98:33:b9:35:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:30:54 2026 GMT Not After : May 1 08:35:54 2027 GMT Subject: CN=18528A5C3CBE57E1CC170970DA96002DE0257B60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:34:bb:30:a6:a7:cc:71:8e:59:a6:c1:20:b0: 0a:a4:d3:cd:b7:e6:b3:99:34:c3:37:15:93:58:b5: df:ae:c4:31:b9:4b:a2:25:7d:01:ef:f2:db:08:5e: 43:7f:2a:27:cb:6b:73:5e:1d:96:9c:4e:d0:95:1b: b4:14:14:86:d1:07:b6:a9:56:2a:51:2b:38:50:cc: 27:69:78:6d:95:c6:e3:75:e2:11:e9:49:49:b6:ce: b7:11:ec:52:16:a5:30:04:6d:46:d3:9d:56:4a:c7: a4:93:8f:fb:8d:4a:60:bb:24:17:99:11:9c:1a:b2: b0:d8:ff:60:2a:1f:ca:ca:58:23:25:f4:52:ad:02: 78:e0:97:d5:0b:91:ed:46:0f:7b:ba:28:d5:ea:b0: 5d:6e:23:05:96:12:7c:2a:0d:28:37:93:5f:5d:56: cc:ef:e6:6e:d5:03:a7:f8:d9:b0:ea:dc:a9:1e:70: f3:a1:96:8f:94:40:04:5d:09:ce:9d:a9:2c:0c:0d: 87:89:d0:3f:4e:1f:b3:29:fb:07:79:cb:13:9b:22: 6d:eb:23:73:ba:c3:f1:78:15:70:90:3f:cf:b5:6b: 9d:c7:b2:32:9b:d0:68:30:65:42:2a:27:39:a7:37: ff:15:5a:86:75:eb:86:cd:87:2b:e0:7b:a6:f9:2b: 94:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:52:8A:5C:3C:BE:57:E1:CC:17:09:70:DA:96:00:2D:E0:25:7B:60 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150480.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:1040::/48 Signature Algorithm: sha256WithRSAEncryption 36:c8:de:9c:8c:70:3a:84:a3:e9:d8:36:d2:80:8f:a0:7c:2a: 5a:3f:a9:b4:23:f6:55:fd:e0:0f:03:ae:73:41:f6:81:f5:c3: ec:58:71:32:a1:69:8b:9c:b8:70:22:fa:35:0d:13:d1:41:ee: ad:86:4b:b0:49:08:1c:17:ea:56:78:6a:dd:a9:c8:ec:78:5b: 7e:21:f3:a5:4a:27:a2:0b:71:19:74:23:74:39:83:c8:00:cf: b3:de:39:63:4d:73:b3:cf:8e:6d:75:6f:c9:82:ce:97:79:0e: 8b:15:a1:21:24:72:1c:95:f8:f9:d9:88:6d:bf:50:3f:77:14: 7a:d7:cb:a8:95:47:91:12:1a:af:be:15:34:ec:f0:a6:29:ca: 3d:b4:0a:ce:21:a7:a1:42:ad:b3:fc:8a:44:52:0e:7e:0b:9b: c1:de:74:fd:03:c5:85:43:bb:5e:3f:99:0c:96:d6:13:8c:98: 92:74:02:3b:f2:4d:4e:d8:df:4e:18:c2:89:b6:86:7f:8c:7e: 2e:d2:55:9f:b0:47:5e:a6:31:45:cc:85:ea:e7:dd:ef:7d:1f: 95:24:f6:9b:f7:72:3b:c6:25:ff:98:a0:3f:f8:df:04:bf:81: a5:4d:72:ac:8d:3b:d7:0a:f1:b6:10:3e:44:07:c3:3d:50:ac: 17:1a:49:da -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUMhIFnPhNbNTW3Ik+zB3RmDO5NQ4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzA1NFoX DTI3MDUwMTA4MzU1NFowMzExMC8GA1UEAxMoMTg1MjhBNUMzQ0JFNTdFMUNDMTcw OTcwREE5NjAwMkRFMDI1N0I2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKQ0uzCmp8xxjlmmwSCwCqTTzbfms5k0wzcVk1i1367EMblLoiV9Ae/y2whe Q38qJ8trc14dlpxO0JUbtBQUhtEHtqlWKlErOFDMJ2l4bZXG43XiEelJSbbOtxHs UhalMARtRtOdVkrHpJOP+41KYLskF5kRnBqysNj/YCofyspYIyX0Uq0CeOCX1QuR 7UYPe7oo1eqwXW4jBZYSfCoNKDeTX11WzO/mbtUDp/jZsOrcqR5w86GWj5RABF0J zp2pLAwNh4nQP04fsyn7B3nLE5sibesjc7rD8XgVcJA/z7VrnceyMpvQaDBlQion Oac3/xVahnXrhs2HK+B7pvkrlJMCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQYUopc PL5X4cwXCXDalgAt4CV7YDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwNDgwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8xBAMA0GCSqGSIb3DQEBCwUAA4IBAQA2yN6cjHA6hKPp2DbSgI+g fCpaP6m0I/ZV/eAPA65zQfaB9cPsWHEyoWmLnLhwIvo1DRPRQe6thkuwSQgcF+pW eGrdqcjseFt+IfOlSieiC3EZdCN0OYPIAM+z3jljTXOzz45tdW/Jgs6XeQ6LFaEh JHIclfj52Yhtv1A/dxR618uolUeREhqvvhU07PCmKco9tArOIaehQq2z/IpEUg5+ C5vB3nT9A8WFQ7teP5kMltYTjJiSdAI78k1O2N9OGMKJtoZ/jH4u0lWfsEdepjFF zIXq593vfR+VJPab93I7xiX/mKA/+N8Ev4GlTXKsjTvXCvG2ED5EB8M9UKwXGkna -----END CERTIFICATE-----Generated at Sun May 3 00:40:41 2026 by rpki-client