$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150558.roa File: AS150558.roa (raw, json) Hash identifier: zkPGh68m85wxDTZBgr++ZVXCCAlQ42t9h6l92ab9LB0= Subject key identifier: 30:35:32:78:4B:E9:80:50:D7:96:87:25:93:B2:11:23:85:CF:59:AD Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 296FD260DED4E223C662DC3CB3FD3B112C9CE8EF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150558.roa Signing time: Sat 02 May 2026 21:21:55 +0000 ROA not before: Sat 02 May 2026 21:16:55 +0000 ROA not after: Sat 01 May 2027 21:21:55 +0000 asID: 150558 IP address blocks: 103.86.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:6f:d2:60:de:d4:e2:23:c6:62:dc:3c:b3:fd:3b:11:2c:9c:e8:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:16:55 2026 GMT Not After : May 1 21:21:55 2027 GMT Subject: CN=303532784BE98050D796872593B2112385CF59AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:97:ad:5b:02:87:a9:47:86:53:69:f4:a8:89: 70:07:1e:a7:0d:43:87:aa:98:35:4f:5f:0f:10:aa: eb:ec:34:be:78:ec:8a:3f:12:ee:e1:6d:62:79:7d: 2e:e0:f5:95:b3:6b:ac:18:b7:4d:fe:d1:fd:b5:52: a1:a9:6e:ac:32:a6:dc:1c:65:e5:9e:35:bc:bf:b7: d5:08:fd:74:4e:be:ad:c1:56:52:2a:79:fb:62:3b: c9:ab:fd:92:0f:bc:31:91:52:50:15:42:2d:3a:a4: ad:7a:1e:e0:cd:69:fe:0f:60:01:6d:fc:55:b6:98: d8:53:6d:4b:d3:05:ae:9f:b3:71:06:74:02:53:03: ee:11:da:8f:fe:ec:3d:aa:82:23:76:68:ed:5a:ae: f5:91:23:84:05:d5:16:fb:3d:77:3c:01:17:2d:57: f9:f6:0b:7f:06:03:76:8c:79:51:c7:27:da:ee:8c: 85:5b:53:af:19:81:0f:35:64:77:ab:4f:58:d1:fb: 7e:a6:66:9c:0c:45:34:1d:97:44:76:66:ea:ce:40: 8c:da:c7:26:b6:64:3f:51:49:f7:3f:44:e7:b3:82: 98:f9:bb:a7:5d:fa:f8:2a:6d:ec:5b:57:05:4f:64: 33:f3:44:09:19:30:cb:94:60:3b:8b:ba:a6:27:6a: 6f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:35:32:78:4B:E9:80:50:D7:96:87:25:93:B2:11:23:85:CF:59:AD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150558.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.86.118.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:48:3e:63:5d:81:46:65:53:83:13:38:4f:87:32:c3:09:47: b6:08:1c:02:b6:4a:5d:dc:ca:82:c0:27:c2:18:c6:c6:00:7d: 86:d8:83:1d:87:b6:54:d5:a8:8b:4a:91:e7:2f:f3:43:43:f4: 66:64:33:05:3d:25:3e:44:a3:b1:33:fb:9d:05:6e:58:4b:52: 7a:6b:d6:eb:39:ad:6c:72:0a:88:a2:6d:39:7c:f8:d5:b8:aa: 28:86:57:c2:95:d8:0c:5f:5f:4d:02:2a:d5:82:bd:34:73:de: 4d:ce:06:0e:1d:bd:d5:c0:4e:03:d6:61:e2:5e:f9:59:29:2f: 97:33:2e:04:f9:5a:d0:f4:b3:29:95:88:95:4a:b7:00:65:39: ec:c1:61:5b:0e:78:61:8c:bf:64:8e:58:1e:30:93:b2:2c:a3: 82:18:14:76:bb:17:1a:ab:a5:6a:d6:42:f4:58:0c:d7:f9:d5: 5c:05:6f:ac:e9:a9:a1:d1:25:7a:1e:92:d3:68:53:76:c5:9e: 8b:f7:3d:17:c7:aa:4a:a6:20:7b:8e:d1:26:58:96:b8:c3:4c: e8:cb:eb:b0:08:42:b7:f1:e0:53:67:50:a5:b1:c9:6e:0f:1f: a4:25:2f:0e:5f:06:ee:ff:eb:33:35:eb:2e:3a:fd:fc:55:15: c2:84:f1:1d -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUKW/SYN7U4iPGYtw8s/07ESyc6O8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTY1NVoX DTI3MDUwMTIxMjE1NVowMzExMC8GA1UEAxMoMzAzNTMyNzg0QkU5ODA1MEQ3OTY4 NzI1OTNCMjExMjM4NUNGNTlBRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALSXrVsCh6lHhlNp9KiJcAcepw1Dh6qYNU9fDxCq6+w0vnjsij8S7uFtYnl9 LuD1lbNrrBi3Tf7R/bVSoalurDKm3Bxl5Z41vL+31Qj9dE6+rcFWUip5+2I7yav9 kg+8MZFSUBVCLTqkrXoe4M1p/g9gAW38VbaY2FNtS9MFrp+zcQZ0AlMD7hHaj/7s PaqCI3Zo7Vqu9ZEjhAXVFvs9dzwBFy1X+fYLfwYDdox5Uccn2u6MhVtTrxmBDzVk d6tPWNH7fqZmnAxFNB2XRHZm6s5AjNrHJrZkP1FJ9z9E57OCmPm7p136+Cpt7FtX BU9kM/NECRkwy5RgO4u6pidqb+sCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQwNTJ4 S+mAUNeWhyWTshEjhc9ZrTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwNTU4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ1Z2MA0GCSqGSIb3DQEBCwUAA4IBAQB7SD5jXYFGZVODEzhPhzLDCUe2 CBwCtkpd3MqCwCfCGMbGAH2G2IMdh7ZU1aiLSpHnL/NDQ/RmZDMFPSU+RKOxM/ud BW5YS1J6a9brOa1scgqIom05fPjVuKoohlfCldgMX19NAirVgr00c95NzgYOHb3V wE4D1mHiXvlZKS+XMy4E+VrQ9LMplYiVSrcAZTnswWFbDnhhjL9kjlgeMJOyLKOC GBR2uxcaq6Vq1kL0WAzX+dVcBW+s6amh0SV6HpLTaFN2xZ6L9z0Xx6pKpiB7jtEm WJa4w0zoy+uwCEK38eBTZ1ClscluDx+kJS8OXwbu/+szNesuOv38VRXChPEd -----END CERTIFICATE-----Generated at Sun May 3 00:40:23 2026 by rpki-client