$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150496.roa File: AS150496.roa (raw, json) Hash identifier: M9aMRuqs3a06QBc2a4FJgLmoPpx8i1Qahl1SfB/69YY= Subject key identifier: 37:4C:35:5B:8F:E2:DE:60:24:BB:38:03:08:15:9F:84:4B:CB:7D:C7 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7D386F0B991041CEAB0D3A6FF5DC8C39500E7C0D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150496.roa Signing time: Sat 02 May 2026 09:21:41 +0000 ROA not before: Sat 02 May 2026 09:16:41 +0000 ROA not after: Sat 01 May 2027 09:21:41 +0000 asID: 150496 IP address blocks: 103.58.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:38:6f:0b:99:10:41:ce:ab:0d:3a:6f:f5:dc:8c:39:50:0e:7c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:16:41 2026 GMT Not After : May 1 09:21:41 2027 GMT Subject: CN=374C355B8FE2DE6024BB380308159F844BCB7DC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3e:33:c2:ed:6c:b7:3e:a0:13:6c:85:c5:bf: 72:f0:65:96:8a:84:49:ef:33:98:c4:b4:d9:ab:1e: 5c:02:99:b3:1f:a3:3f:a2:08:79:13:af:48:63:7f: be:73:8f:d7:c9:64:b8:ca:7f:82:c6:29:01:a9:af: 6f:20:6a:41:09:a7:c6:69:b1:9c:f0:b8:4b:a2:6d: c6:29:cc:80:00:c8:5c:ed:f4:5a:58:70:2c:89:71: 21:7f:28:6c:ed:5b:6f:65:a8:1c:4b:ee:7f:01:ca: 09:e4:83:cb:9f:15:67:97:18:72:8d:ca:cc:c5:0f: ef:3f:bc:13:10:48:3d:ba:40:a0:2b:2e:3b:f0:a5: ec:89:15:cb:ac:2e:b8:50:e7:b9:cd:ef:34:92:b2: ff:0d:2b:31:d5:b6:49:2c:fd:74:3b:cc:d4:97:65: 76:fb:f0:38:ee:52:d5:22:19:35:74:49:62:2c:61: c5:92:5b:04:66:55:8f:7d:5c:6e:02:cc:e5:8f:0f: ed:6d:de:45:e0:f9:98:88:e3:83:02:73:18:98:58: 62:2b:2b:ac:76:ca:e5:3d:e1:fa:f1:fd:39:f3:24: ee:ba:cc:12:e7:3f:26:ef:05:e3:97:d4:20:1e:08: 50:77:6d:0f:bd:c4:8b:f4:7b:a0:b6:e8:5b:1b:99: b9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4C:35:5B:8F:E2:DE:60:24:BB:38:03:08:15:9F:84:4B:CB:7D:C7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150496.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.58.196.0/23 Signature Algorithm: sha256WithRSAEncryption 30:82:de:9e:03:5d:a5:4f:8b:a9:58:75:6a:48:99:30:a0:02: 16:61:60:bc:80:28:94:a6:74:d9:19:3e:0d:b5:e3:4b:e9:00: b4:cc:01:58:43:02:f8:91:20:cd:3a:48:f6:26:ad:71:21:7a: 56:77:94:b6:aa:92:3a:2e:67:7e:9b:6b:71:47:2b:00:7d:dd: 34:f7:3c:b2:4d:c5:0b:f8:43:33:0b:9a:03:9b:c4:d8:ef:3c: dd:44:e9:38:19:a9:6e:3a:05:f0:44:da:b0:52:f3:49:37:19: d4:90:5a:bb:96:03:60:ab:fb:59:fe:07:11:a3:3b:b3:50:4f: f2:cc:62:6e:63:4f:ba:5f:24:95:dd:4c:6b:34:75:27:e8:68: d1:d9:e4:b0:0e:37:1b:55:b2:14:61:39:b8:41:7d:66:bc:e8: 1e:8a:1b:3b:02:32:91:f3:80:47:fe:9f:b4:6b:5e:95:74:c7: 9c:2b:00:c9:fa:8d:1f:ab:eb:1b:c1:2f:b3:e0:ae:3d:b2:a7: b7:9c:89:38:62:08:68:66:34:e3:4b:14:21:11:57:3e:65:59: 44:e0:84:c4:a8:a4:eb:a9:22:73:11:91:b0:99:5b:c8:0a:d8: 4b:a1:07:25:29:16:aa:85:d8:ea:14:2e:a1:5a:07:59:45:c9: 3b:f5:fb:11 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUfThvC5kQQc6rDTpv9dyMOVAOfA0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTY0MVoX DTI3MDUwMTA5MjE0MVowMzExMC8GA1UEAxMoMzc0QzM1NUI4RkUyREU2MDI0QkIz ODAzMDgxNTlGODQ0QkNCN0RDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALc+M8LtbLc+oBNshcW/cvBlloqESe8zmMS02aseXAKZsx+jP6IIeROvSGN/ vnOP18lkuMp/gsYpAamvbyBqQQmnxmmxnPC4S6JtxinMgADIXO30WlhwLIlxIX8o bO1bb2WoHEvufwHKCeSDy58VZ5cYco3KzMUP7z+8ExBIPbpAoCsuO/Cl7IkVy6wu uFDnuc3vNJKy/w0rMdW2SSz9dDvM1JdldvvwOO5S1SIZNXRJYixhxZJbBGZVj31c bgLM5Y8P7W3eReD5mIjjgwJzGJhYYisrrHbK5T3h+vH9OfMk7rrMEuc/Ju8F45fU IB4IUHdtD73Ei/R7oLboWxuZub8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQ3TDVb j+LeYCS7OAMIFZ+ES8t9xzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwNDk2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZzrEMA0GCSqGSIb3DQEBCwUAA4IBAQAwgt6eA12lT4upWHVqSJkwoAIW YWC8gCiUpnTZGT4NteNL6QC0zAFYQwL4kSDNOkj2Jq1xIXpWd5S2qpI6Lmd+m2tx RysAfd009zyyTcUL+EMzC5oDm8TY7zzdROk4GaluOgXwRNqwUvNJNxnUkFq7lgNg q/tZ/gcRozuzUE/yzGJuY0+6XySV3UxrNHUn6GjR2eSwDjcbVbIUYTm4QX1mvOge ihs7AjKR84BH/p+0a16VdMecKwDJ+o0fq+sbwS+z4K49sqe3nIk4YghoZjTjSxQh EVc+ZVlE4ITEqKTrqSJzEZGwmVvICthLoQclKRaqhdjqFC6hWgdZRck79fsR -----END CERTIFICATE-----Generated at Sun May 3 00:42:01 2026 by rpki-client