$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150551.roa File: AS150551.roa (raw, json) Hash identifier: E9DBJSFyA9y5KXu4z5wKQ2MjzCh4a15xK9iS5ld9iS8= Subject key identifier: 52:A0:8C:BF:19:7A:82:94:C7:20:20:B0:9C:7F:39:54:6D:67:B6:C6 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3D0EAB07F33F74694DB53B77F55DAAA7479C838B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150551.roa Signing time: Thu 10 Sep 2026 03:36:16 +0000 ROA not before: Thu 10 Sep 2026 03:31:16 +0000 ROA not after: Thu 09 Sep 2027 03:36:16 +0000 asID: 150551 IP address blocks: 2001:df2:5cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:0e:ab:07:f3:3f:74:69:4d:b5:3b:77:f5:5d:aa:a7:47:9c:83:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 10 03:31:16 2026 GMT Not After : Sep 9 03:36:16 2027 GMT Subject: CN=52A08CBF197A8294C72020B09C7F39546D67B6C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3b:21:ca:cc:a3:13:b0:ab:5e:16:de:89:ec: 20:5e:0f:71:5d:fb:55:9b:26:ff:74:40:a7:c8:dc: 6a:4e:26:c5:d3:ab:4d:cb:09:6b:43:48:79:5c:96: 6a:23:04:3a:61:fe:9f:2b:96:ee:63:04:5a:2a:53: 39:7f:d2:80:d1:41:93:e4:21:20:67:c2:f8:5a:50: 06:06:d0:b4:bb:48:d0:f3:5a:24:d7:60:90:72:e8: 89:0e:17:5a:d6:6b:ae:b4:65:22:e6:bc:49:1f:55: 2f:52:dc:b8:08:72:b9:ff:90:f8:56:b6:00:16:1b: cb:c4:bd:1b:12:3b:57:93:ae:7e:20:b8:60:51:05: 20:63:bc:60:46:29:ee:1e:25:d0:1a:88:8c:d6:c9: 01:42:aa:0b:84:cf:e6:30:8f:aa:20:94:bf:52:50: 0c:03:60:48:56:04:3e:29:56:ee:77:4c:1c:92:7f: 3a:c1:66:41:6c:4e:83:bc:c6:b9:5a:ae:67:e5:d0: 73:f1:a2:e0:9a:0e:97:06:40:9b:50:21:f1:40:d2: 72:d6:1d:bb:de:02:20:d9:8e:d7:6f:75:f2:10:b1: 20:01:34:54:d8:8c:7c:cc:70:03:a4:b5:ea:5d:b1: d2:6c:63:e6:fc:56:58:ad:1b:a4:5e:09:c4:a5:c2: b4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A0:8C:BF:19:7A:82:94:C7:20:20:B0:9C:7F:39:54:6D:67:B6:C6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150551.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:5cc0::/48 Signature Algorithm: sha256WithRSAEncryption 64:dd:01:da:ab:2b:c6:6d:c2:bd:bf:0e:ab:7a:48:0a:7f:d2: 17:0d:b8:c7:67:32:63:90:77:0a:85:f2:8b:17:d5:50:1e:f1: 0e:29:84:57:9a:f9:9d:23:42:aa:1e:31:0f:94:40:6b:1f:b5: 36:df:11:2d:54:99:1f:39:b4:46:a1:8f:e1:20:2a:69:e9:68: c4:28:45:6e:a1:69:38:d9:d3:e4:85:5c:0d:2c:68:d6:99:5f: e6:10:17:37:e9:18:6f:4b:2c:a6:2f:69:a0:ff:77:86:fa:5a: 5a:d4:cb:f9:95:97:ba:cf:a0:69:45:f1:d7:fb:71:d3:66:bd: 70:f2:25:32:71:d1:2d:39:9d:14:da:39:56:18:fe:ae:1d:3c: 74:e9:72:44:54:fa:ad:4e:77:48:86:16:90:50:de:e0:fe:4c: 8a:2a:2e:f8:a0:71:4e:bc:ca:e5:e2:3d:ae:28:25:72:c1:ae: 91:80:e2:0b:49:11:b0:19:9c:12:b9:d5:43:d8:a4:a7:6b:e4: 3f:fb:ad:37:17:9a:72:95:ec:12:0c:06:42:96:a2:71:f6:5d: 67:40:fc:be:46:ea:1c:e3:5f:48:9a:ad:79:c9:0c:a9:67:90: 32:de:68:4f:7c:ad:fb:7f:33:a0:33:d5:71:4d:07:77:4f:cb: 34:85:17:77 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUPQ6rB/M/dGlNtTt39V2qp0ecg4swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkxMDAzMzExNloX DTI3MDkwOTAzMzYxNlowMzExMC8GA1UEAxMoNTJBMDhDQkYxOTdBODI5NEM3MjAy MEIwOUM3RjM5NTQ2RDY3QjZDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMo7IcrMoxOwq14W3onsIF4PcV37VZsm/3RAp8jcak4mxdOrTcsJa0NIeVyW aiMEOmH+nyuW7mMEWipTOX/SgNFBk+QhIGfC+FpQBgbQtLtI0PNaJNdgkHLoiQ4X WtZrrrRlIua8SR9VL1LcuAhyuf+Q+Fa2ABYby8S9GxI7V5OufiC4YFEFIGO8YEYp 7h4l0BqIjNbJAUKqC4TP5jCPqiCUv1JQDANgSFYEPilW7ndMHJJ/OsFmQWxOg7zG uVquZ+XQc/Gi4JoOlwZAm1Ah8UDSctYdu94CINmO12918hCxIAE0VNiMfMxwA6S1 6l2x0mxj5vxWWK0bpF4JxKXCtHMCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRSoIy/ GXqClMcgILCcfzlUbWe2xjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwNTUxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8lzAMA0GCSqGSIb3DQEBCwUAA4IBAQBk3QHaqyvGbcK9vw6rekgK f9IXDbjHZzJjkHcKhfKLF9VQHvEOKYRXmvmdI0KqHjEPlEBrH7U23xEtVJkfObRG oY/hICpp6WjEKEVuoWk42dPkhVwNLGjWmV/mEBc36RhvSyymL2mg/3eG+lpa1Mv5 lZe6z6BpRfHX+3HTZr1w8iUycdEtOZ0U2jlWGP6uHTx06XJEVPqtTndIhhaQUN7g /kyKKi74oHFOvMrl4j2uKCVywa6RgOILSRGwGZwSudVD2KSna+Q/+603F5pylewS DAZClqJx9l1nQPy+Ruoc419Imq15yQypZ5Ay3mhPfK37fzOgM9VxTQd3T8s0hRd3 -----END CERTIFICATE-----Generated at Thu Sep 17 05:28:25 2026 by rpki-client