$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150924.roa File: AS150924.roa (raw, json) Hash identifier: C0N1DhVWbhDnNVE4U6C36rQUsDwDkFxB123cFMxi7jg= Subject key identifier: 5F:38:B3:DB:0C:A8:3E:C7:9C:6E:9E:45:10:17:CB:E7:55:61:FA:F5 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 247F32DA3BF25C1B0753E8C6B3F7306DD190864C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150924.roa Signing time: Sat 02 May 2026 21:26:27 +0000 ROA not before: Sat 02 May 2026 21:21:27 +0000 ROA not after: Sat 01 May 2027 21:26:27 +0000 asID: 150924 IP address blocks: 2001:df2:1ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:7f:32:da:3b:f2:5c:1b:07:53:e8:c6:b3:f7:30:6d:d1:90:86:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:21:27 2026 GMT Not After : May 1 21:26:27 2027 GMT Subject: CN=5F38B3DB0CA83EC79C6E9E451017CBE75561FAF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e7:f4:9c:bc:47:19:c2:2b:a1:2d:e0:7c:d8: b5:0e:73:1b:e5:aa:0c:da:b7:26:b6:50:a5:02:92: a6:cf:3a:85:e2:58:de:7f:db:63:84:bf:6c:a7:3f: 3c:a7:0d:f2:ea:3c:83:63:93:3d:69:49:d9:aa:25: 10:76:a5:17:cd:aa:a9:61:de:2f:27:d4:22:de:65: 4e:8a:29:ba:a8:df:14:44:a2:c8:a7:bd:7f:a9:60: 56:b9:30:f4:86:8d:f3:a8:b9:ea:b2:fe:a9:37:80: 65:ab:01:8e:b9:84:a4:fb:fc:cc:2c:0d:40:e0:04: 7a:fe:fe:e1:97:09:4c:a1:6f:9c:e5:d6:fd:67:3d: 3c:b3:59:7f:f9:f7:4d:2f:02:57:64:68:da:10:23: d7:b9:98:05:d8:09:57:0c:84:28:2d:57:6b:bf:56: 38:bf:fc:6d:60:f4:03:83:2f:98:c4:d8:47:31:e5: 62:6e:58:e0:3f:6b:47:e1:27:ed:8a:21:d5:5a:df: cf:01:d9:b9:a1:53:3e:8b:32:85:9d:34:ab:5f:47: 56:4c:99:6c:a3:66:4e:e5:2b:c4:32:f6:e0:e4:71: 44:c4:72:bb:50:c7:99:45:6a:6b:ae:f0:cf:69:c6: 1f:2a:b0:6b:a8:b7:0a:7c:75:6c:0e:2a:fd:96:16: 08:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:38:B3:DB:0C:A8:3E:C7:9C:6E:9E:45:10:17:CB:E7:55:61:FA:F5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150924.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:1ec0::/48 Signature Algorithm: sha256WithRSAEncryption 05:57:53:e9:80:02:93:59:bb:09:b5:a8:c1:d3:31:9f:c7:a2: 93:5b:00:5b:55:3d:22:76:a3:82:41:a2:21:53:50:5e:4f:fb: 47:4f:74:50:e0:3c:0f:31:a5:14:86:6b:89:7a:1a:62:b2:da: c1:ff:44:f2:d3:fe:9e:38:9a:8c:58:f0:d3:d2:11:f5:df:34: 19:8d:33:01:ae:b7:97:d4:5a:02:6b:4c:40:74:8b:30:05:84: ec:4d:1f:c5:af:ee:bc:88:9f:0c:f5:f5:2a:88:ce:b1:c8:56: 33:ae:1c:3a:e5:04:cf:b0:e0:00:d8:10:a5:73:86:5c:c4:97: af:0d:ae:a1:c2:88:87:f3:21:3b:56:ba:a4:a3:d4:c5:9b:7b: 7e:7a:37:f1:fa:f7:59:ee:7c:cf:e8:bd:cf:b4:e5:be:e2:83: 70:76:79:f3:24:cc:37:f3:d1:2a:03:ae:c9:4b:88:7b:74:5e: b4:fd:ba:bb:ca:9e:33:b7:7c:61:5e:8a:87:c5:a1:a4:41:d8: 76:79:6b:a5:ef:b9:a7:66:f5:c1:e5:b8:16:ec:a2:ab:04:5e: a6:fa:03:1d:db:2a:63:08:cb:79:15:1e:70:31:76:4a:45:c4: 1b:5a:4d:6d:3e:12:6f:d0:23:1a:c8:a8:7f:6c:48:fe:a6:67: 7f:87:cc:f4 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUJH8y2jvyXBsHU+jGs/cwbdGQhkwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjEyN1oX DTI3MDUwMTIxMjYyN1owMzExMC8GA1UEAxMoNUYzOEIzREIwQ0E4M0VDNzlDNkU5 RTQ1MTAxN0NCRTc1NTYxRkFGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMXn9Jy8RxnCK6Et4HzYtQ5zG+WqDNq3JrZQpQKSps86heJY3n/bY4S/bKc/ PKcN8uo8g2OTPWlJ2aolEHalF82qqWHeLyfUIt5lToopuqjfFESiyKe9f6lgVrkw 9IaN86i56rL+qTeAZasBjrmEpPv8zCwNQOAEev7+4ZcJTKFvnOXW/Wc9PLNZf/n3 TS8CV2Ro2hAj17mYBdgJVwyEKC1Xa79WOL/8bWD0A4MvmMTYRzHlYm5Y4D9rR+En 7Yoh1VrfzwHZuaFTPosyhZ00q19HVkyZbKNmTuUrxDL24ORxRMRyu1DHmUVqa67w z2nGHyqwa6i3Cnx1bA4q/ZYWCL8CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRfOLPb DKg+x5xunkUQF8vnVWH69TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwOTI0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8h7AMA0GCSqGSIb3DQEBCwUAA4IBAQAFV1PpgAKTWbsJtajB0zGf x6KTWwBbVT0idqOCQaIhU1BeT/tHT3RQ4DwPMaUUhmuJehpistrB/0Ty0/6eOJqM WPDT0hH13zQZjTMBrreX1FoCa0xAdIswBYTsTR/Fr+68iJ8M9fUqiM6xyFYzrhw6 5QTPsOAA2BClc4ZcxJevDa6hwoiH8yE7Vrqko9TFm3t+ejfx+vdZ7nzP6L3PtOW+ 4oNwdnnzJMw389EqA67JS4h7dF60/bq7yp4zt3xhXoqHxaGkQdh2eWul77mnZvXB 5bgW7KKrBF6m+gMd2ypjCMt5FR5wMXZKRcQbWk1tPhJv0CMayKh/bEj+pmd/h8z0 -----END CERTIFICATE-----Generated at Sun May 3 00:42:17 2026 by rpki-client