
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150484.roa
File: AS150484.roa (raw, json)
Hash identifier: FO1I+b3nHXE6HewMWn1Kb1ujfChU9jZTOWfgkefuFSE=
Subject key identifier: D2:C6:EE:66:2A:20:F3:05:08:7F:49:55:80:38:CE:76:A4:3D:63:25
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 5F15C57FBB85DF1063630613A6269CA1FC37B573
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150484.roa
Signing time: Sat 02 May 2026 09:21:44 +0000
ROA not before: Sat 02 May 2026 09:16:44 +0000
ROA not after: Sat 01 May 2027 09:21:44 +0000
asID: 150484
IP address blocks: 103.55.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:15:c5:7f:bb:85:df:10:63:63:06:13:a6:26:9c:a1:fc:37:b5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 09:16:44 2026 GMT
Not After : May 1 09:21:44 2027 GMT
Subject: CN=D2C6EE662A20F305087F49558038CE76A43D6325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:01:98:06:fd:ad:de:fc:6f:fb:e9:2f:72:37:
98:af:d9:c5:00:c5:82:be:57:df:10:2d:37:54:ee:
b3:eb:00:63:7c:7b:8c:24:d3:b2:f7:46:5e:8f:78:
70:4e:09:6d:d1:52:6e:75:73:bc:15:70:1c:22:30:
a1:85:40:03:b9:c4:4d:52:47:8c:40:8e:ac:24:be:
50:6f:d2:a2:08:bc:bb:45:7c:1d:a5:b6:f8:6c:4c:
9f:70:a1:f1:39:42:f1:81:23:3c:7d:02:90:f7:b8:
6e:44:37:11:75:43:cb:51:2f:f1:36:90:0e:b4:7f:
88:c1:3d:ef:99:d5:0d:71:7a:ee:99:e2:65:a0:6e:
43:98:aa:f1:95:b6:c8:58:97:ca:1c:c5:02:ae:e8:
ed:f3:60:b2:94:7b:93:e0:d1:f9:07:e6:73:4d:12:
16:5b:79:cb:dd:86:fc:b2:50:95:0c:f0:c7:88:d8:
65:b8:40:81:3f:91:fb:34:95:bb:04:97:f0:cf:fa:
ec:fe:11:f7:bd:94:08:69:10:f0:53:4c:d4:17:35:
8b:96:31:f2:be:16:7f:dc:c3:4a:33:e0:20:cb:33:
d0:ac:08:92:9d:f0:b8:58:28:ab:48:5d:51:8e:2c:
53:bd:73:b6:06:d8:f1:d0:a0:d4:f9:8e:95:8c:78:
4f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C6:EE:66:2A:20:F3:05:08:7F:49:55:80:38:CE:76:A4:3D:63:25
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150484.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.55.30.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:44:82:6c:3d:1f:06:7f:b7:e3:1c:32:e5:fc:45:d8:db:aa:
1a:c4:b6:01:38:1b:83:01:bd:54:a0:54:df:c0:01:c6:b4:13:
cb:42:0d:a0:6f:df:6e:b3:ef:a7:f2:49:8e:c3:af:f0:a1:5f:
c9:d9:e2:0b:23:23:0a:57:e5:91:d6:c6:81:55:96:ca:a2:b2:
56:15:bd:40:62:c5:35:4f:58:5d:37:7f:c7:89:ef:fb:49:c4:
f5:6c:11:34:c8:29:37:bc:c9:14:7f:c1:5d:c1:27:bf:ee:1d:
af:cd:0f:54:44:2a:8c:b6:1f:0c:35:cb:d0:76:6d:98:2f:ad:
63:a4:85:25:33:c1:82:8b:ca:e5:c0:bc:09:a4:ec:8e:57:bd:
15:f6:25:d1:90:0d:37:0c:13:e9:50:a3:0c:9d:99:16:51:76:
2f:8a:5f:37:1c:e0:69:a9:31:10:dc:f9:32:cc:62:2d:92:66:
ab:09:c6:0d:20:84:4b:e3:ef:71:7e:b8:f1:07:1e:10:d5:6a:
27:a5:e9:41:91:e7:a9:93:78:25:5a:7d:0e:62:04:13:71:7f:
40:2a:6c:0a:47:56:ef:c8:03:af:69:73:2c:d0:b1:3f:90:1f:
85:3e:ed:95:2c:11:74:f7:16:0c:d0:ce:10:2d:c8:8f:d3:ba:
3a:42:48:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:39:49 2026 by rpki-client