$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150937.roa File: AS150937.roa (raw, json) Hash identifier: Uj+MCU+GdyVBFyZbE8ErllTHMlco5C/7xQd9tCbj5Qw= Subject key identifier: 63:77:13:FB:D9:03:44:E4:67:49:74:64:90:AF:CB:FB:2C:46:48:70 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2FB9BA0689312775A118D18F9181DC6EFB42CDD8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150937.roa Signing time: Sat 02 May 2026 09:19:19 +0000 ROA not before: Sat 02 May 2026 09:14:19 +0000 ROA not after: Sat 01 May 2027 09:19:19 +0000 asID: 150937 IP address blocks: 103.110.100.0/23 maxlen: 24 103.225.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:b9:ba:06:89:31:27:75:a1:18:d1:8f:91:81:dc:6e:fb:42:cd:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:14:19 2026 GMT Not After : May 1 09:19:19 2027 GMT Subject: CN=637713FBD90344E46749746490AFCBFB2C464870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dd:fb:9d:d4:fc:1c:b6:b5:14:23:ce:5a:95: a4:80:c7:d7:ab:30:45:cb:dd:94:c1:ad:ce:ab:ec: ca:1f:0c:f0:a4:25:5a:43:1b:26:fd:82:b8:a0:36: 39:97:2c:fc:56:09:50:8e:74:d9:f1:85:bc:e9:c0: da:09:6d:ad:9a:10:84:b7:f3:41:58:76:84:41:e6: 04:19:9d:ec:c1:8c:71:51:91:a0:be:f9:c7:40:c8: eb:aa:9c:90:ee:7e:41:e8:c3:3c:8c:ef:75:67:3a: ec:29:cc:85:ee:38:fd:7d:1f:67:0f:ae:43:c0:f0: fa:7f:b6:53:3b:a3:6b:b9:e0:a9:49:85:2a:0d:74: 0c:e1:54:7c:3d:db:6a:24:cb:57:7b:d5:a8:5d:1f: 8a:ee:b6:68:a1:86:0a:7b:d5:37:96:bd:f4:0d:f5: 3e:5b:02:b9:ac:51:55:60:75:66:77:d6:e5:7f:2c: a5:f8:e9:b9:24:d5:87:86:ea:80:19:d1:10:14:f0: c3:be:b2:1a:3b:a7:83:d4:a1:50:89:8d:2a:6d:51: 58:20:d5:15:f8:41:65:1f:22:fe:bf:aa:4d:e1:b1: f0:ac:1a:38:a6:be:8a:f6:39:1a:23:45:ff:d4:cc: df:0e:81:15:17:b6:a7:ff:22:58:60:26:ac:ed:16: 1e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:77:13:FB:D9:03:44:E4:67:49:74:64:90:AF:CB:FB:2C:46:48:70 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.110.100.0/23 103.225.46.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:a0:06:64:99:62:60:72:f4:ad:95:24:b2:d0:dc:21:44:0c: 78:87:1f:79:42:9f:8c:3b:0d:07:74:42:c2:f4:82:94:bc:5a: 24:13:77:e5:99:ca:85:26:55:5d:d6:a8:03:8b:4e:63:39:45: ad:d9:f9:de:24:17:df:51:3c:1f:93:c7:d0:25:e0:83:1e:7d: 1e:a3:49:a0:a6:68:f1:29:9c:9c:40:ad:2d:c6:f4:06:67:aa: 47:9a:a3:32:0f:28:f0:54:45:6d:65:75:ae:de:ed:35:d8:22: 5f:f5:f1:71:de:8c:8f:8b:87:13:c5:49:8b:95:6b:b3:6e:9e: d9:91:49:de:28:d2:85:ac:34:9a:5f:20:ff:97:43:f1:2d:2e: eb:f3:46:e8:dd:b6:33:e0:dd:ce:d5:fb:c7:df:43:d1:2a:f2: ca:9a:6d:fd:49:c0:99:39:6b:89:07:cd:06:0e:09:40:5e:b8: 31:1a:a5:69:a0:57:30:a2:08:76:e9:a8:0a:ea:f8:ba:e9:50: e3:c1:23:2b:a6:eb:d4:35:63:b5:82:81:c8:3c:48:c2:10:11: 97:4d:19:f4:21:5f:86:dd:d3:cb:9d:91:db:0d:58:15:f6:1a: cb:36:97:e2:14:9b:d1:f8:4c:85:80:69:da:4d:92:c0:a8:2f: c0:f5:bd:c6 -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUL7m6BokxJ3WhGNGPkYHcbvtCzdgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTQxOVoX DTI3MDUwMTA5MTkxOVowMzExMC8GA1UEAxMoNjM3NzEzRkJEOTAzNDRFNDY3NDk3 NDY0OTBBRkNCRkIyQzQ2NDg3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHd+53U/By2tRQjzlqVpIDH16swRcvdlMGtzqvsyh8M8KQlWkMbJv2CuKA2 OZcs/FYJUI502fGFvOnA2gltrZoQhLfzQVh2hEHmBBmd7MGMcVGRoL75x0DI66qc kO5+QejDPIzvdWc67CnMhe44/X0fZw+uQ8Dw+n+2Uzuja7ngqUmFKg10DOFUfD3b aiTLV3vVqF0fiu62aKGGCnvVN5a99A31PlsCuaxRVWB1ZnfW5X8spfjpuSTVh4bq gBnREBTww76yGjung9ShUImNKm1RWCDVFfhBZR8i/r+qTeGx8KwaOKa+ivY5GiNF /9TM3w6BFRe2p/8iWGAmrO0WHu0CAwEAAaOCAdIwggHOMB0GA1UdDgQWBBRjdxP7 2QNE5GdJdGSQr8v7LEZIcDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwOTM3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQBZ25kAwQAZ+EuMA0GCSqGSIb3DQEBCwUAA4IBAQBNoAZkmWJgcvStlSSy 0NwhRAx4hx95Qp+MOw0HdELC9IKUvFokE3flmcqFJlVd1qgDi05jOUWt2fneJBff UTwfk8fQJeCDHn0eo0mgpmjxKZycQK0txvQGZ6pHmqMyDyjwVEVtZXWu3u012CJf 9fFx3oyPi4cTxUmLlWuzbp7ZkUneKNKFrDSaXyD/l0PxLS7r80bo3bYz4N3O1fvH 30PRKvLKmm39ScCZOWuJB80GDglAXrgxGqVpoFcwogh26agK6vi66VDjwSMrpuvU NWO1goHIPEjCEBGXTRn0IV+G3dPLnZHbDVgV9hrLNpfiFJvR+EyFgGnaTZLAqC/A 9b3G -----END CERTIFICATE-----Generated at Sun May 3 01:44:18 2026 by rpki-client