$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150516.roa File: AS150516.roa (raw, json) Hash identifier: Q2Xk3Fxoj2RAoYQG+IYBHWwgFcoW3c7bJZZOQ3gNBys= Subject key identifier: 84:15:3C:C0:F7:1E:21:C1:1A:46:77:BF:0F:33:51:0B:D7:98:27:96 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 26DA387247D544D4C1BF92553A5BBA9A258FE420 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150516.roa Signing time: Sat 02 May 2026 21:25:03 +0000 ROA not before: Sat 02 May 2026 21:20:03 +0000 ROA not after: Sat 01 May 2027 21:25:03 +0000 asID: 150516 IP address blocks: 103.10.111.0/24 maxlen: 24 2001:df1:62c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:da:38:72:47:d5:44:d4:c1:bf:92:55:3a:5b:ba:9a:25:8f:e4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:20:03 2026 GMT Not After : May 1 21:25:03 2027 GMT Subject: CN=84153CC0F71E21C11A4677BF0F33510BD7982796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:87:97:62:10:16:00:af:c4:a4:8c:13:24:30: 8e:6a:4a:b9:6f:4e:9c:e1:ae:26:cf:5e:aa:ac:c6: e5:53:05:0c:90:51:b6:d6:c0:e4:91:c4:f6:45:5e: 53:42:c5:19:91:ae:fb:57:15:3a:35:2c:52:72:5c: 9c:3b:25:ee:82:53:c1:cb:3b:af:60:f4:c3:1b:44: e6:0e:bc:2d:5a:69:6f:f3:a7:93:b2:bc:11:9a:82: e7:67:f9:69:bd:65:b4:0c:55:2a:91:ea:9a:d4:35: 66:f5:9c:1a:95:9a:fa:aa:27:c9:5d:56:79:61:ff: 55:bb:5d:d4:ce:84:1d:ed:22:ca:ab:6f:67:46:2b: f5:c7:3c:f9:ed:1f:cd:b0:74:45:4c:3a:7c:b1:dc: 22:1d:27:ef:87:91:4e:53:73:f9:44:bc:67:11:03: cf:41:1e:03:e5:79:96:10:4c:5b:0e:48:c5:ae:9f: fb:ae:c3:c0:33:cc:49:7d:96:90:53:7d:22:b7:88: 32:52:99:0c:0d:65:d0:f8:89:75:b1:96:31:4f:5e: 74:df:6d:2d:c7:d8:37:cb:b6:bd:2f:73:5e:29:70: 55:e0:0b:fa:4b:fc:a4:32:bc:0e:99:3c:23:82:16: 66:15:64:a2:fe:5a:cc:1d:7e:11:8e:b0:36:b4:5f: 5f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:15:3C:C0:F7:1E:21:C1:1A:46:77:BF:0F:33:51:0B:D7:98:27:96 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150516.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.10.111.0/24 IPv6: 2001:df1:62c0::/48 Signature Algorithm: sha256WithRSAEncryption 80:23:e0:58:c3:30:67:af:82:08:87:f4:a4:c6:76:d5:a9:e4: c6:de:95:07:0c:12:cd:40:73:21:71:c5:9f:45:ce:a3:64:55: 3f:3f:bb:12:79:2c:3b:1d:e9:80:a7:20:42:30:54:34:94:f6: e5:2c:fe:4f:f7:36:5a:6f:ae:b9:a8:ff:ef:73:5f:d1:c9:6c: b1:23:b5:d4:db:8b:6a:bd:10:34:d5:cc:98:ca:6b:82:e0:cc: 99:71:09:13:74:b0:cf:5d:e2:42:6f:a2:57:29:2e:65:cc:c7: 45:c8:a0:ba:b7:05:86:3d:c2:2b:ed:aa:df:75:9e:af:58:6a: 98:20:6e:71:1a:48:68:c4:7a:72:c7:4a:53:b4:2b:51:35:af: a4:d6:0e:2c:d2:64:ea:14:0b:5b:7d:0d:6f:b4:ac:8b:e1:91: 05:dd:17:b8:d7:72:e4:13:f7:77:9e:8a:25:b9:b5:dd:d1:f9: f0:23:3c:48:71:a6:39:0e:14:47:f8:1d:7e:58:08:7d:f0:65: 98:12:82:6a:9d:bc:f2:b8:a3:3f:4a:28:c7:2e:93:9c:6a:be: a4:e7:70:f5:53:61:9b:64:33:74:4b:0c:5e:fa:b3:ce:ce:5b: 56:df:51:26:51:e8:d3:fe:ce:7e:f6:bf:bd:ca:d3:17:30:c4: ce:8c:55:ce -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUJto4ckfVRNTBv5JVOlu6miWP5CAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjAwM1oX DTI3MDUwMTIxMjUwM1owMzExMC8GA1UEAxMoODQxNTNDQzBGNzFFMjFDMTFBNDY3 N0JGMEYzMzUxMEJENzk4Mjc5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOGHl2IQFgCvxKSMEyQwjmpKuW9OnOGuJs9eqqzG5VMFDJBRttbA5JHE9kVe U0LFGZGu+1cVOjUsUnJcnDsl7oJTwcs7r2D0wxtE5g68LVppb/Onk7K8EZqC52f5 ab1ltAxVKpHqmtQ1ZvWcGpWa+qonyV1WeWH/Vbtd1M6EHe0iyqtvZ0Yr9cc8+e0f zbB0RUw6fLHcIh0n74eRTlNz+US8ZxEDz0EeA+V5lhBMWw5Ixa6f+67DwDPMSX2W kFN9IreIMlKZDA1l0PiJdbGWMU9edN9tLcfYN8u2vS9zXilwVeAL+kv8pDK8Dpk8 I4IWZhVkov5azB1+EY6wNrRfX5kCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBSEFTzA 9x4hwRpGd78PM1EL15gnljAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwNTE2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAZwpvMA8EAgACMAkDBwAgAQ3xYsAwDQYJKoZIhvcNAQELBQADggEBAIAj 4FjDMGevggiH9KTGdtWp5MbelQcMEs1AcyFxxZ9FzqNkVT8/uxJ5LDsd6YCnIEIw VDSU9uUs/k/3Nlpvrrmo/+9zX9HJbLEjtdTbi2q9EDTVzJjKa4LgzJlxCRN0sM9d 4kJvolcpLmXMx0XIoLq3BYY9wivtqt91nq9YapggbnEaSGjEenLHSlO0K1E1r6TW DizSZOoUC1t9DW+0rIvhkQXdF7jXcuQT93eeiiW5td3R+fAjPEhxpjkOFEf4HX5Y CH3wZZgSgmqdvPK4oz9KKMcuk5xqvqTncPVTYZtkM3RLDF76s87OW1bfUSZR6NP+ zn72v73K0xcwxM6MVc4= -----END CERTIFICATE-----Generated at Sun May 3 00:40:38 2026 by rpki-client