$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150946.roa File: AS150946.roa (raw, json) Hash identifier: 0RUPLU2yPStSKz2pD57l1JBrg6O3x/5fj72FrY/9drg= Subject key identifier: 3A:C1:04:27:4E:82:9F:68:5B:63:85:5D:4A:1D:EC:A5:33:6B:52:50 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 717964241FC15D0744194C0376E15B15584894FC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150946.roa Signing time: Sat 02 May 2026 09:26:08 +0000 ROA not before: Sat 02 May 2026 09:21:08 +0000 ROA not after: Sat 01 May 2027 09:26:08 +0000 asID: 150946 IP address blocks: 2001:df2:8ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:79:64:24:1f:c1:5d:07:44:19:4c:03:76:e1:5b:15:58:48:94:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:08 2026 GMT Not After : May 1 09:26:08 2027 GMT Subject: CN=3AC104274E829F685B63855D4A1DECA5336B5250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bd:75:71:94:02:81:e5:a4:48:63:c1:08:a9: 14:84:d0:17:10:41:9a:52:9f:81:08:d8:66:67:f9: c2:dc:04:ad:16:bf:86:b9:4e:cd:4f:67:49:2c:cd: 55:a0:10:24:a3:ca:62:3e:aa:b2:3a:7c:35:33:d7: e7:45:69:73:e5:eb:d3:84:ef:fe:7a:58:f8:38:00: 84:c1:65:65:20:8c:d6:e7:c4:1e:97:42:4e:a2:7e: 5d:11:8f:ff:f7:c2:7a:4f:20:46:a6:ae:3d:f8:0f: 43:7c:e5:c4:4c:5a:5f:94:e2:94:a8:e7:59:fa:82: bd:97:23:c9:bf:b1:e0:91:4a:e0:47:94:83:c4:eb: 3f:32:31:c2:86:bf:92:ad:66:71:67:93:44:93:11: 98:cc:63:28:97:f6:62:79:e2:3a:4b:15:63:1b:b0: 6f:4d:c8:46:03:a7:9e:03:f4:43:f7:77:6f:48:d6: c1:74:6e:55:fb:25:54:6a:37:e2:4a:10:79:6d:87: 83:a9:36:93:e2:97:c8:4b:ff:8b:6b:f9:fb:6f:b3: 20:f2:35:9e:63:4b:06:ec:5e:b6:54:a4:d1:58:6b: 34:55:52:39:72:e8:96:12:02:89:bc:cc:3a:91:a2: bf:87:28:c0:0c:42:1c:e3:eb:d1:b5:35:0b:ff:5e: d8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C1:04:27:4E:82:9F:68:5B:63:85:5D:4A:1D:EC:A5:33:6B:52:50 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150946.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:8ac0::/48 Signature Algorithm: sha256WithRSAEncryption 63:84:f9:0b:32:b8:c6:03:b9:df:ba:89:a0:3f:0b:91:2a:2f: 58:2b:77:56:ed:01:55:4e:b7:fb:b6:c8:46:71:d9:44:55:a9: ff:69:6a:59:57:82:02:43:89:86:8b:ad:2b:52:3e:4a:7b:31: b0:4e:3f:64:69:45:5a:cb:93:8f:89:d7:85:5c:09:c3:db:81: 32:e3:19:0f:6e:1a:3a:7c:85:40:f5:6a:2c:c3:33:70:ba:18: c1:99:64:6a:1c:c5:f4:80:44:87:b5:7b:30:99:2e:03:5e:00: 5b:c8:f0:08:3b:09:47:c2:53:cf:7d:84:fb:84:82:f4:16:3e: f8:23:20:5e:e0:cf:70:81:e0:f0:00:05:6e:c1:78:96:fb:29: 8a:68:a2:a3:98:a0:94:81:fa:72:72:b6:55:f4:03:3d:39:02: 7a:7b:e1:12:81:45:43:d8:bd:23:4b:f6:e5:37:77:ca:7a:8d: 2d:ea:66:2e:81:2d:69:bd:fd:e0:e4:14:14:eb:e1:f6:ba:26: 2e:d4:98:3f:36:21:03:5c:7c:a2:77:8f:f2:8a:df:59:76:20: 52:59:3d:4e:ea:86:8b:a7:e2:08:83:5d:97:41:36:20:ca:4a: ad:da:18:f7:56:14:f7:f4:4a:e9:11:90:02:94:a7:76:1d:92: a4:3d:e0:2d -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUcXlkJB/BXQdEGUwDduFbFVhIlPwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjEwOFoX DTI3MDUwMTA5MjYwOFowMzExMC8GA1UEAxMoM0FDMTA0Mjc0RTgyOUY2ODVCNjM4 NTVENEExREVDQTUzMzZCNTI1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALu9dXGUAoHlpEhjwQipFITQFxBBmlKfgQjYZmf5wtwErRa/hrlOzU9nSSzN VaAQJKPKYj6qsjp8NTPX50Vpc+Xr04Tv/npY+DgAhMFlZSCM1ufEHpdCTqJ+XRGP //fCek8gRqauPfgPQ3zlxExaX5TilKjnWfqCvZcjyb+x4JFK4EeUg8TrPzIxwoa/ kq1mcWeTRJMRmMxjKJf2YnniOksVYxuwb03IRgOnngP0Q/d3b0jWwXRuVfslVGo3 4koQeW2Hg6k2k+KXyEv/i2v5+2+zIPI1nmNLBuxetlSk0VhrNFVSOXLolhICibzM OpGiv4cowAxCHOPr0bU1C/9e2EkCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQ6wQQn ToKfaFtjhV1KHeylM2tSUDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwOTQ2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8orAMA0GCSqGSIb3DQEBCwUAA4IBAQBjhPkLMrjGA7nfuomgPwuR Ki9YK3dW7QFVTrf7tshGcdlEVan/aWpZV4ICQ4mGi60rUj5KezGwTj9kaUVay5OP ideFXAnD24Ey4xkPbho6fIVA9WoswzNwuhjBmWRqHMX0gESHtXswmS4DXgBbyPAI OwlHwlPPfYT7hIL0Fj74IyBe4M9wgeDwAAVuwXiW+ymKaKKjmKCUgfpycrZV9AM9 OQJ6e+ESgUVD2L0jS/blN3fKeo0t6mYugS1pvf3g5BQU6+H2uiYu1Jg/NiEDXHyi d4/yit9ZdiBSWT1O6oaLp+IIg12XQTYgykqt2hj3VhT39ErpEZAClKd2HZKkPeAt -----END CERTIFICATE-----Generated at Sun May 3 00:42:34 2026 by rpki-client