$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150487.roa File: AS150487.roa (raw, json) Hash identifier: i2aUKweP2W84BBjoiU5rzfML5lvvTAiRLSitXVthi9A= Subject key identifier: F4:8C:0D:FA:9E:FB:84:A7:08:BD:8E:34:B9:BC:AD:73:05:BE:E2:27 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4A158BD70138D1A100362E460EC5BECEA11AABF0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150487.roa Signing time: Sat 02 May 2026 21:25:49 +0000 ROA not before: Sat 02 May 2026 21:20:49 +0000 ROA not after: Sat 01 May 2027 21:25:49 +0000 asID: 150487 IP address blocks: 2001:df1:b9c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:15:8b:d7:01:38:d1:a1:00:36:2e:46:0e:c5:be:ce:a1:1a:ab:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:20:49 2026 GMT Not After : May 1 21:25:49 2027 GMT Subject: CN=F48C0DFA9EFB84A708BD8E34B9BCAD7305BEE227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6b:bf:bd:9a:8a:ac:86:d9:07:9d:83:94:09: 5d:30:ec:90:8d:60:57:dd:5f:95:df:07:e5:e9:a5: 77:68:df:db:c5:f5:43:31:da:fc:44:55:cf:b0:6d: 1d:45:75:14:b8:22:6d:d0:3c:41:ab:35:f1:11:06: f4:55:e1:91:30:a8:55:26:d8:ad:fb:3b:c9:9c:f2: 59:4c:0a:62:3e:0c:d8:0c:9f:67:13:9d:c7:45:0c: 21:64:8c:a5:1a:e8:2f:70:60:99:37:75:e2:fc:c1: 9d:f1:8e:75:f2:eb:2f:90:a7:11:fe:02:93:d1:93: c5:b8:f6:bc:6c:4f:f2:c2:61:52:da:87:85:43:6a: 86:8b:7a:e8:09:91:d9:98:74:cb:19:40:28:50:c2: f6:68:5e:20:c0:aa:81:a1:78:a3:26:b2:f3:94:23: 83:ab:fe:4b:be:c9:ab:40:13:74:a8:6a:9f:ab:b6: 43:42:53:ae:03:30:03:2a:b1:47:a4:47:a3:5c:65: 78:eb:5a:01:aa:17:b5:c6:46:e2:2f:6c:61:ac:32: 67:9a:44:26:4a:a0:96:1c:4b:66:4e:c9:75:b9:78: f4:b8:e8:d3:55:5d:94:01:6f:6d:6e:5a:57:2e:91: 35:af:e3:cc:b3:44:dc:cc:b6:e0:bf:2b:79:3d:ec: 94:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8C:0D:FA:9E:FB:84:A7:08:BD:8E:34:B9:BC:AD:73:05:BE:E2:27 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150487.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:b9c0::/48 Signature Algorithm: sha256WithRSAEncryption 2f:14:0d:62:2f:07:d7:bc:8c:cd:a9:32:c5:e8:85:81:e6:a8: b8:b0:7a:aa:dd:0b:1b:0b:9d:fe:3d:c5:be:de:cc:d4:f3:79: 2d:4b:13:2b:7f:8d:b1:05:bd:16:ff:d6:2c:1b:c3:ae:85:9f: 76:0b:91:ed:50:c8:57:fd:b4:cd:25:da:8c:0a:5a:36:3d:e9: d3:59:e5:55:84:31:6d:b6:0f:12:d2:24:35:57:87:54:16:1c: 60:5f:f5:d9:57:a0:57:5e:66:90:19:53:d1:bc:d5:54:b5:93: 98:22:d7:67:96:cb:60:a9:da:4a:86:af:c8:c9:6c:f5:d7:f1: df:44:47:9b:cb:38:15:88:00:f9:48:21:e0:6f:5a:66:4c:e7: c4:05:4e:0a:d9:73:52:fa:a5:02:29:e4:d2:59:a1:c9:bd:99: aa:7f:c5:53:3d:12:0f:a1:9c:21:ac:8b:05:3d:42:51:97:71: fb:2b:85:64:31:c3:82:80:fa:eb:8c:92:ab:5a:f0:61:d7:d5: b1:cf:2c:41:5e:26:97:b6:af:2f:82:b8:9d:9e:10:53:1d:cc: 37:a3:5d:6a:73:7b:ad:5d:51:68:95:59:7c:75:7b:e5:ad:be: fa:95:87:58:c8:5b:b4:20:e4:e8:e7:cd:5f:94:8c:2a:3e:5c: 56:73:e7:e1 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUShWL1wE40aEANi5GDsW+zqEaq/AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjA0OVoX DTI3MDUwMTIxMjU0OVowMzExMC8GA1UEAxMoRjQ4QzBERkE5RUZCODRBNzA4QkQ4 RTM0QjlCQ0FENzMwNUJFRTIyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKVrv72aiqyG2Qedg5QJXTDskI1gV91fld8H5emld2jf28X1QzHa/ERVz7Bt HUV1FLgibdA8Qas18REG9FXhkTCoVSbYrfs7yZzyWUwKYj4M2AyfZxOdx0UMIWSM pRroL3BgmTd14vzBnfGOdfLrL5CnEf4Ck9GTxbj2vGxP8sJhUtqHhUNqhot66AmR 2Zh0yxlAKFDC9mheIMCqgaF4oyay85Qjg6v+S77Jq0ATdKhqn6u2Q0JTrgMwAyqx R6RHo1xleOtaAaoXtcZG4i9sYawyZ5pEJkqglhxLZk7Jdbl49Ljo01VdlAFvbW5a Vy6RNa/jzLNE3My24L8reT3slF8CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBT0jA36 nvuEpwi9jjS5vK1zBb7iJzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwNDg3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8bnAMA0GCSqGSIb3DQEBCwUAA4IBAQAvFA1iLwfXvIzNqTLF6IWB 5qi4sHqq3QsbC53+PcW+3szU83ktSxMrf42xBb0W/9YsG8OuhZ92C5HtUMhX/bTN JdqMClo2PenTWeVVhDFttg8S0iQ1V4dUFhxgX/XZV6BXXmaQGVPRvNVUtZOYItdn lstgqdpKhq/IyWz11/HfREebyzgViAD5SCHgb1pmTOfEBU4K2XNS+qUCKeTSWaHJ vZmqf8VTPRIPoZwhrIsFPUJRl3H7K4VkMcOCgPrrjJKrWvBh19WxzyxBXiaXtq8v gridnhBTHcw3o11qc3utXVFolVl8dXvlrb76lYdYyFu0IOTo581flIwqPlxWc+fh -----END CERTIFICATE-----Generated at Sun May 3 00:39:47 2026 by rpki-client