$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150931.roa File: AS150931.roa (raw, json) Hash identifier: +ieDknhC1Lp8t/cd+wFquLv0BFuiE0X9iD84y49b6rA= Subject key identifier: D2:91:32:EE:71:1C:CB:DB:0F:76:32:2F:8C:A5:09:F6:9C:8F:4F:33 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5BEF73835020237FFAB718957CC871877E045669 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150931.roa Signing time: Sat 02 May 2026 09:25:56 +0000 ROA not before: Sat 02 May 2026 09:20:56 +0000 ROA not after: Sat 01 May 2027 09:25:56 +0000 asID: 150931 IP address blocks: 2001:df2:e540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:ef:73:83:50:20:23:7f:fa:b7:18:95:7c:c8:71:87:7e:04:56:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:20:56 2026 GMT Not After : May 1 09:25:56 2027 GMT Subject: CN=D29132EE711CCBDB0F76322F8CA509F69C8F4F33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a1:64:38:09:3e:a1:ec:92:80:bc:7d:42:ef: b6:10:f7:ee:06:f4:cc:b0:88:bd:a1:94:ff:b8:36: 56:fb:9e:4b:f1:52:36:26:6f:88:4c:82:d7:89:88: bf:4b:4e:cb:15:51:f7:d9:be:e1:1e:f9:ab:d3:56: 2f:c6:86:67:90:34:75:43:bd:3b:f2:47:eb:25:67: 1a:f3:53:88:7c:53:eb:a2:18:20:b9:98:38:b6:42: c0:2e:cd:eb:3d:07:c6:62:21:09:a5:3c:66:8b:af: 2a:c7:3a:a5:5f:91:cb:be:03:5c:74:f8:63:bb:6b: c7:13:48:31:62:8a:c6:c7:08:86:19:7c:6b:15:4a: d1:e2:8d:49:bf:0c:00:2b:80:55:2e:12:4f:7b:9c: 90:5f:1e:4c:1d:bd:87:b9:42:3f:51:e7:29:9f:7d: df:ed:ee:50:41:e7:6d:b2:ef:83:4a:39:c9:bb:49: 8e:eb:8d:12:f0:2f:09:0c:8b:40:d2:1e:d0:a6:98: 4e:cc:c8:66:78:a6:96:ed:c7:6d:30:a2:eb:01:7c: c7:d0:e0:b1:d7:59:9a:2f:d2:b7:d6:2c:0c:f5:65: d8:e0:f0:c9:b6:0d:06:34:dc:82:3d:fa:73:5e:24: 16:81:67:38:b3:f8:cb:9f:cb:43:0e:bb:95:0d:ea: 86:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:91:32:EE:71:1C:CB:DB:0F:76:32:2F:8C:A5:09:F6:9C:8F:4F:33 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:e540::/48 Signature Algorithm: sha256WithRSAEncryption 7a:7f:09:e1:92:1e:d5:cb:d6:45:ab:13:01:d2:c8:88:eb:5d: 8c:f4:34:a8:b0:5a:8a:ba:87:f8:c9:85:78:96:b2:69:4a:2d: 32:b8:7b:79:43:ab:bc:9a:f3:29:07:43:7a:72:f0:9e:88:74: e8:9e:23:4b:d3:2f:ef:30:ab:12:f7:c0:43:ad:e0:40:ee:7c: 3f:cc:bd:07:38:e4:ab:b4:9f:2b:da:dc:f4:d5:22:17:c6:eb: b9:4b:4f:0a:b4:e2:ad:39:91:4c:68:28:18:47:89:3f:83:6d: 6b:13:56:d9:7b:6a:e8:a5:76:79:69:38:93:13:54:cf:d4:67: 02:4b:a1:30:fd:31:91:e8:75:9e:14:fd:77:1a:d5:cc:7a:c1: 61:66:af:a2:8b:57:63:25:06:8b:9b:0d:a9:5c:87:83:d1:05: aa:45:ba:67:e3:6c:00:bf:e7:89:98:9e:6b:2d:28:7c:56:2e: 6a:a9:78:da:a9:be:db:c1:6a:80:07:e6:7a:91:22:82:db:9e: 49:f8:df:df:4e:68:af:99:1f:3d:2e:6f:6e:c3:c6:f2:aa:3d: 7b:04:f8:90:a3:18:43:15:c8:16:bb:5f:fd:50:13:21:96:d0: 0d:a3:f4:17:95:bb:03:4c:69:82:98:9a:57:60:54:67:cd:37: 07:a1:bd:ea -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUW+9zg1AgI3/6txiVfMhxh34EVmkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjA1NloX DTI3MDUwMTA5MjU1NlowMzExMC8GA1UEAxMoRDI5MTMyRUU3MTFDQ0JEQjBGNzYz MjJGOENBNTA5RjY5QzhGNEYzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOhZDgJPqHskoC8fULvthD37gb0zLCIvaGU/7g2VvueS/FSNiZviEyC14mI v0tOyxVR99m+4R75q9NWL8aGZ5A0dUO9O/JH6yVnGvNTiHxT66IYILmYOLZCwC7N 6z0HxmIhCaU8ZouvKsc6pV+Ry74DXHT4Y7trxxNIMWKKxscIhhl8axVK0eKNSb8M ACuAVS4ST3uckF8eTB29h7lCP1HnKZ993+3uUEHnbbLvg0o5ybtJjuuNEvAvCQyL QNIe0KaYTszIZnimlu3HbTCi6wF8x9DgsddZmi/St9YsDPVl2ODwybYNBjTcgj36 c14kFoFnOLP4y5/LQw67lQ3qhpcCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBTSkTLu cRzL2w92Mi+MpQn2nI9PMzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwOTMxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8uVAMA0GCSqGSIb3DQEBCwUAA4IBAQB6fwnhkh7Vy9ZFqxMB0siI 612M9DSosFqKuof4yYV4lrJpSi0yuHt5Q6u8mvMpB0N6cvCeiHToniNL0y/vMKsS 98BDreBA7nw/zL0HOOSrtJ8r2tz01SIXxuu5S08KtOKtOZFMaCgYR4k/g21rE1bZ e2ropXZ5aTiTE1TP1GcCS6Ew/TGR6HWeFP13GtXMesFhZq+ii1djJQaLmw2pXIeD 0QWqRbpn42wAv+eJmJ5rLSh8Vi5qqXjaqb7bwWqAB+Z6kSKC255J+N/fTmivmR89 Lm9uw8byqj17BPiQoxhDFcgWu1/9UBMhltANo/QXlbsDTGmCmJpXYFRnzTcHob3q -----END CERTIFICATE-----Generated at Sun May 3 00:42:14 2026 by rpki-client