$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150752.roa File: AS150752.roa (raw, json) Hash identifier: j/wRUFHckrmiHTVSOBK2/BNfhIZmeDce5mjZzvGfD74= Subject key identifier: 3C:3B:1D:81:C6:F5:F9:05:35:B8:CE:B5:A3:C7:88:CF:FB:AD:9D:21 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4951CC491435C11F449FB30B0F46D79EBB5A5B40 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150752.roa Signing time: Mon 03 Aug 2026 02:38:18 +0000 ROA not before: Mon 03 Aug 2026 02:33:18 +0000 ROA not after: Mon 02 Aug 2027 02:38:18 +0000 asID: 150752 IP address blocks: 2001:df7:3ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:51:cc:49:14:35:c1:1f:44:9f:b3:0b:0f:46:d7:9e:bb:5a:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 3 02:33:18 2026 GMT Not After : Aug 2 02:38:18 2027 GMT Subject: CN=3C3B1D81C6F5F90535B8CEB5A3C788CFFBAD9D21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a5:d1:98:9d:af:2a:0d:88:08:a9:a5:30:17: 36:06:bf:fd:47:13:4f:60:a5:4d:29:22:fe:11:43: f1:4e:73:bd:19:33:4c:a3:68:08:b7:52:fc:1d:6e: cb:bf:02:88:06:c3:14:80:40:42:7a:af:06:62:de: 90:da:5b:f4:67:b7:db:04:47:78:d4:8a:97:a4:8b: 4c:9c:57:31:b2:62:c7:3d:41:29:07:68:8d:02:b4: 24:b4:81:60:eb:ea:7c:f9:d5:d5:7c:f9:7f:7e:a0: 88:84:42:b6:bd:ef:64:4a:0c:32:d5:86:da:57:82: a3:50:30:d2:ce:d6:e0:72:54:48:28:b0:96:00:37: 94:74:48:37:cb:49:43:3e:45:a8:91:26:a5:a1:fc: 61:a3:48:66:44:45:ee:6c:e6:28:86:5a:00:03:43: ed:d3:8b:8e:a1:ca:3b:08:4f:72:15:46:66:84:f8: e9:e4:e3:c4:ec:fc:71:0b:89:8c:cd:33:be:96:77: 97:46:d1:18:71:cf:a2:2b:0c:88:f2:96:16:96:dd: 15:bc:de:29:9e:54:f7:10:e6:86:cc:3d:bc:24:73: 87:11:ae:6a:d3:f6:ed:cd:5a:53:4a:0e:ab:12:6c: ba:68:71:38:d8:30:f8:eb:ae:00:c6:32:7c:89:04: 86:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3B:1D:81:C6:F5:F9:05:35:B8:CE:B5:A3:C7:88:CF:FB:AD:9D:21 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150752.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:3ec0::/48 Signature Algorithm: sha256WithRSAEncryption 35:72:e6:1b:6f:c5:b1:8a:af:10:c4:43:a2:4d:02:a6:fa:d4: 40:9a:96:ac:08:c9:54:f5:fc:6f:13:49:03:ed:b9:47:bb:04: 4f:b5:d9:90:41:d8:be:14:a6:28:36:0f:6b:36:47:8c:44:42: ef:81:01:f1:c6:f7:d6:48:59:2a:72:f8:31:4c:b4:8a:7b:7d: 84:c5:91:11:e2:75:ce:99:6e:ff:4f:75:82:ef:b8:dc:2d:6a: 9d:37:08:df:12:42:fe:05:44:07:fc:49:55:57:7a:4c:88:39: f9:44:ac:cc:56:08:2b:f4:de:35:c4:74:95:5d:b5:bb:8d:d6: a6:22:17:fc:13:d8:d0:19:45:1f:df:0e:8d:16:3c:2b:7f:5b: 01:28:83:7c:15:8f:4d:c0:76:35:65:c2:32:fb:ab:7d:9c:5b: ea:19:33:47:e6:c0:f5:90:1a:93:93:01:8c:41:b3:92:2b:07: f5:a8:e8:21:28:fa:d1:be:51:f5:3b:73:5f:a3:00:17:72:ac: ad:0e:9a:cd:40:a9:c1:72:2b:fe:e9:34:01:91:01:68:2f:ce: 44:ad:6e:0b:d1:fa:92:fa:9e:36:8d:2f:70:e7:5b:4a:c2:95: bf:97:6d:8e:84:ba:6b:2f:66:bc:23:66:ae:20:77:a2:6a:3f: a4:0e:49:e7 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUSVHMSRQ1wR9En7MLD0bXnrtaW0AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgwMzAyMzMxOFoX DTI3MDgwMjAyMzgxOFowMzExMC8GA1UEAxMoM0MzQjFEODFDNkY1RjkwNTM1QjhD RUI1QTNDNzg4Q0ZGQkFEOUQyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6l0ZidryoNiAippTAXNga//UcTT2ClTSki/hFD8U5zvRkzTKNoCLdS/B1u y78CiAbDFIBAQnqvBmLekNpb9Ge32wRHeNSKl6SLTJxXMbJixz1BKQdojQK0JLSB YOvqfPnV1Xz5f36giIRCtr3vZEoMMtWG2leCo1Aw0s7W4HJUSCiwlgA3lHRIN8tJ Qz5FqJEmpaH8YaNIZkRF7mzmKIZaAAND7dOLjqHKOwhPchVGZoT46eTjxOz8cQuJ jM0zvpZ3l0bRGHHPoisMiPKWFpbdFbzeKZ5U9xDmhsw9vCRzhxGuatP27c1aU0oO qxJsumhxONgw+OuuAMYyfIkEhlMCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQ8Ox2B xvX5BTW4zrWjx4jP+62dITAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwNzUyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9z7AMA0GCSqGSIb3DQEBCwUAA4IBAQA1cuYbb8Wxiq8QxEOiTQKm +tRAmpasCMlU9fxvE0kD7blHuwRPtdmQQdi+FKYoNg9rNkeMRELvgQHxxvfWSFkq cvgxTLSKe32ExZER4nXOmW7/T3WC77jcLWqdNwjfEkL+BUQH/ElVV3pMiDn5RKzM Vggr9N41xHSVXbW7jdamIhf8E9jQGUUf3w6NFjwrf1sBKIN8FY9NwHY1ZcIy+6t9 nFvqGTNH5sD1kBqTkwGMQbOSKwf1qOghKPrRvlH1O3NfowAXcqytDprNQKnBciv+ 6TQBkQFoL85ErW4L0fqS+p42jS9w51tKwpW/l22OhLprL2a8I2auIHeiaj+kDknn -----END CERTIFICATE-----Generated at Thu Sep 17 05:27:26 2026 by rpki-client