$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150980.roa File: AS150980.roa (raw, json) Hash identifier: vbUy4ThGBFY1Ax5g69IJ4AQrX0lVRXudgF8Sl/1/iuw= Subject key identifier: 61:C2:8A:7A:2F:0A:A0:DD:42:E9:35:DA:27:E2:B0:B1:14:A5:13:CE Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0D67FB6BDE093DFCA2106A975E6ABED069040E74 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150980.roa Signing time: Mon 12 Oct 2026 04:09:42 +0000 ROA not before: Mon 12 Oct 2026 04:04:42 +0000 ROA not after: Mon 11 Oct 2027 04:09:42 +0000 asID: 150980 IP address blocks: 43.242.232.0/23 maxlen: 24 103.70.122.0/23 maxlen: 24 103.138.166.0/23 maxlen: 24 2001:df7:9d40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:67:fb:6b:de:09:3d:fc:a2:10:6a:97:5e:6a:be:d0:69:04:0e:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 12 04:04:42 2026 GMT Not After : Oct 11 04:09:42 2027 GMT Subject: CN=61C28A7A2F0AA0DD42E935DA27E2B0B114A513CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4f:70:b8:2f:a2:1c:ae:b3:d1:b8:e9:60:50: ca:65:6f:5b:00:32:25:a0:3d:0d:aa:40:64:90:70: 7d:10:da:77:dd:58:d0:15:d5:da:e2:94:f3:34:ed: ca:f8:09:f2:b0:ce:91:6e:23:b8:f9:ba:2b:4d:55: 77:6f:50:30:f9:46:47:21:9a:2f:f3:6b:88:36:d4: 37:2d:b8:70:0c:e8:b0:d8:d5:fe:4b:99:60:05:aa: cf:0a:70:b9:91:46:15:09:2b:dd:81:b6:bf:ff:8c: ff:76:07:06:e5:e0:f1:a7:f3:39:6e:28:f5:80:70: c9:44:2b:6b:d8:58:c3:b8:f0:50:fd:fb:11:d9:d1: 77:f4:c5:7f:75:0e:f9:c4:5a:04:69:79:48:3e:11: 32:cb:c5:ea:f4:54:a4:b6:95:16:5d:6f:f4:15:c0: f2:4d:b3:2b:19:82:e5:48:b5:29:b4:9b:6b:ad:70: c1:55:88:eb:1a:a6:37:46:28:c4:a0:67:84:5d:d1: 80:55:a9:7c:a4:df:10:ae:3e:26:b4:00:10:48:bf: 71:27:44:f4:28:23:5d:c6:40:b7:0c:f3:05:4d:52: 9c:fa:b4:04:16:a4:d2:97:1c:4f:9a:50:b2:7d:47: 03:9c:2a:87:ee:50:a5:2b:7c:db:da:95:85:21:9f: ff:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C2:8A:7A:2F:0A:A0:DD:42:E9:35:DA:27:E2:B0:B1:14:A5:13:CE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150980.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.242.232.0/23 103.70.122.0/23 103.138.166.0/23 IPv6: 2001:df7:9d40::/48 Signature Algorithm: sha256WithRSAEncryption 59:13:04:56:38:2b:f0:92:a1:f8:fd:0a:08:2c:c0:8b:7b:8a: 9f:7d:5d:b5:3d:a3:fd:38:91:ff:82:0c:24:bd:96:f4:9c:92: a8:3d:eb:c2:1c:6f:e3:7c:9e:8b:d2:5a:94:37:59:a8:00:b8: 6d:09:c2:77:81:36:0b:c7:80:1c:7f:46:e5:a7:2a:02:40:c5: a1:35:85:68:e6:17:be:77:38:73:04:97:4c:26:af:2a:03:ce: ba:31:68:2a:98:6c:ba:4d:50:87:58:fd:b7:8a:a2:0e:61:bf: 67:77:0f:38:27:6f:ac:f2:2a:34:0f:af:c7:1f:c9:c4:6a:fc: 41:42:bf:10:64:a7:fb:dd:6a:b9:6d:fe:f7:a6:7c:f2:35:e9: f3:45:f4:69:c0:6a:f4:a9:f9:8e:93:6d:15:74:4c:92:f4:c5: 72:a1:ad:ba:df:22:06:fc:1a:d1:7d:0c:aa:79:0f:42:4d:a2: c8:70:2a:d8:9a:ce:bd:b1:32:70:e3:c4:54:2c:66:8d:81:eb: 79:15:98:81:7b:ed:92:76:f1:52:a6:5d:1b:bd:25:48:84:38: 84:58:f5:97:6a:c4:a7:3c:6d:86:87:a8:67:ac:82:9e:5a:57: 0b:36:d9:be:26:b0:09:57:a4:9e:ab:a7:10:3e:2b:34:52:2e: 33:7d:4d:8b -----BEGIN CERTIFICATE----- MIIE9jCCA96gAwIBAgIUDWf7a94JPfyiEGqXXmq+0GkEDnQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAxMjA0MDQ0MloX DTI3MTAxMTA0MDk0MlowMzExMC8GA1UEAxMoNjFDMjhBN0EyRjBBQTBERDQyRTkz NURBMjdFMkIwQjExNEE1MTNDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALdPcLgvohyus9G46WBQymVvWwAyJaA9DapAZJBwfRDad91Y0BXV2uKU8zTt yvgJ8rDOkW4juPm6K01Vd29QMPlGRyGaL/NriDbUNy24cAzosNjV/kuZYAWqzwpw uZFGFQkr3YG2v/+M/3YHBuXg8afzOW4o9YBwyUQra9hYw7jwUP37EdnRd/TFf3UO +cRaBGl5SD4RMsvF6vRUpLaVFl1v9BXA8k2zKxmC5Ui1KbSba61wwVWI6xqmN0Yo xKBnhF3RgFWpfKTfEK4+JrQAEEi/cSdE9CgjXcZAtwzzBU1SnPq0BBak0pccT5pQ sn1HA5wqh+5QpSt829qVhSGf/0kCAwEAAaOCAekwggHlMB0GA1UdDgQWBBRhwop6 Lwqg3ULpNdon4rCxFKUTzjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwOTgwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIA ATASAwQBK/LoAwQBZ0Z6AwQBZ4qmMA8EAgACMAkDBwAgAQ33nUAwDQYJKoZIhvcN AQELBQADggEBAFkTBFY4K/CSofj9CggswIt7ip99XbU9o/04kf+CDCS9lvSckqg9 68Icb+N8novSWpQ3WagAuG0JwneBNgvHgBx/RuWnKgJAxaE1hWjmF753OHMEl0wm ryoDzroxaCqYbLpNUIdY/beKog5hv2d3Dzgnb6zyKjQPr8cfycRq/EFCvxBkp/vd arlt/vemfPI16fNF9GnAavSp+Y6TbRV0TJL0xXKhrbrfIgb8GtF9DKp5D0JNoshw Ktiazr2xMnDjxFQsZo2B63kVmIF77ZJ28VKmXRu9JUiEOIRY9ZdqxKc8bYaHqGes gp5aVws22b4msAlXpJ6rpxA+KzRSLjN9TYs= -----END CERTIFICATE-----Generated at Sun Oct 25 14:17:40 2026 by rpki-client