$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150999.roa File: AS150999.roa (raw, json) Hash identifier: M6tPgXwqArvjSE8yGNfsEdzP124Ci31rRjkQeS20Lmw= Subject key identifier: 61:F3:51:13:A0:EC:C0:43:E3:84:49:B8:80:B5:5D:3D:F2:AF:AD:83 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 583236857C882E1B86FCBC6EF6C8839D1ACD976E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150999.roa Signing time: Sat 02 May 2026 09:21:23 +0000 ROA not before: Sat 02 May 2026 09:16:23 +0000 ROA not after: Sat 01 May 2027 09:21:23 +0000 asID: 150999 IP address blocks: 103.205.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:32:36:85:7c:88:2e:1b:86:fc:bc:6e:f6:c8:83:9d:1a:cd:97:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:16:23 2026 GMT Not After : May 1 09:21:23 2027 GMT Subject: CN=61F35113A0ECC043E38449B880B55D3DF2AFAD83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:48:b2:d5:07:73:8d:51:87:ae:22:fe:3d:e8: 8f:f1:92:18:ab:24:af:bb:4e:64:b6:57:af:95:8c: 07:fb:c1:27:ec:f8:cc:56:a6:9b:59:08:54:f5:83: 46:8e:fa:d6:f2:47:eb:1d:df:a8:3d:75:83:43:64: 49:af:c7:60:67:cb:75:ae:91:4e:84:d9:57:bb:6a: 27:bf:bf:96:a8:e8:84:ea:6d:7b:07:49:67:f8:f5: b9:e0:18:f5:d9:70:c3:6c:a1:0f:71:93:90:43:39: a9:97:e3:72:ac:8d:d5:0b:4e:7f:e3:a3:df:73:22: f0:af:61:5e:b5:97:31:a2:91:5d:33:3c:cc:40:dc: a3:10:4e:3a:e6:03:de:9f:44:44:74:fa:07:0f:98: 8b:c6:8d:ee:69:f0:2b:c0:1a:3b:ef:99:32:bf:bb: 8a:8f:0f:a6:c5:26:6d:16:73:48:73:ff:05:80:ac: eb:e8:61:fe:51:56:37:74:f5:64:e7:4e:3c:1e:b7: 68:3e:b0:ef:c7:3c:46:a8:d4:7a:36:7f:d0:b4:16: c8:74:b5:c1:8c:96:23:59:a8:3b:df:08:bc:d6:8d: 02:6f:68:53:f1:13:5b:4d:99:cd:ba:26:1f:77:f7: 31:b0:15:29:d3:7e:78:3c:7f:86:60:b0:50:08:14: b7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F3:51:13:A0:EC:C0:43:E3:84:49:B8:80:B5:5D:3D:F2:AF:AD:83 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150999.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.205.222.0/23 Signature Algorithm: sha256WithRSAEncryption 23:23:6a:42:14:6c:85:ac:dc:f9:35:2e:4a:87:22:5e:62:a1: ad:aa:49:4d:59:dd:50:b3:2c:3b:17:2f:8b:92:ea:9f:23:44: cf:d7:b2:e1:f5:6a:8d:ed:7c:31:42:a3:e6:76:13:09:e7:dd: 0e:4a:56:ea:41:1c:11:2d:60:a6:47:1c:fe:29:b0:68:a4:ab: 6f:f2:4b:f2:61:71:03:bd:e9:c0:e5:9f:17:99:06:e9:4c:2d: da:12:36:3f:e2:77:b3:78:52:7c:4e:a7:53:7f:03:15:d6:0a: 61:23:17:d6:d5:83:4b:8a:2d:df:c0:b6:fa:24:44:ff:41:e2: 7c:7d:4e:4d:d5:93:34:1d:ed:23:f4:0e:cb:96:9e:f3:ac:4c: 27:0d:72:a0:3d:36:78:7c:70:72:40:4e:4c:71:92:77:76:96: 92:ab:0e:69:d7:1a:48:ca:a0:91:bc:db:c4:3a:7c:ef:52:63: ed:d0:33:e2:ee:a7:c4:b5:6c:47:26:16:8f:b5:d3:16:85:d9: ac:5b:99:3f:2a:03:af:34:f6:14:59:47:eb:59:fe:55:21:73: 11:c0:47:da:cd:02:86:4a:13:36:9c:67:6c:34:f2:f5:3b:e7: 0e:67:c7:d6:73:e7:62:c1:06:40:4c:62:fb:df:08:8e:6a:47: 17:c4:f9:39 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUWDI2hXyILhuG/Lxu9siDnRrNl24wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTYyM1oX DTI3MDUwMTA5MjEyM1owMzExMC8GA1UEAxMoNjFGMzUxMTNBMEVDQzA0M0UzODQ0 OUI4ODBCNTVEM0RGMkFGQUQ4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMFIstUHc41Rh64i/j3oj/GSGKskr7tOZLZXr5WMB/vBJ+z4zFamm1kIVPWD Ro761vJH6x3fqD11g0NkSa/HYGfLda6RToTZV7tqJ7+/lqjohOptewdJZ/j1ueAY 9dlww2yhD3GTkEM5qZfjcqyN1QtOf+Oj33Mi8K9hXrWXMaKRXTM8zEDcoxBOOuYD 3p9ERHT6Bw+Yi8aN7mnwK8AaO++ZMr+7io8PpsUmbRZzSHP/BYCs6+hh/lFWN3T1 ZOdOPB63aD6w78c8RqjUejZ/0LQWyHS1wYyWI1moO98IvNaNAm9oU/ETW02Zzbom H3f3MbAVKdN+eDx/hmCwUAgUtwkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRh81ET oOzAQ+OESbiAtV098q+tgzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwOTk5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ83eMA0GCSqGSIb3DQEBCwUAA4IBAQAjI2pCFGyFrNz5NS5KhyJeYqGt qklNWd1Qsyw7Fy+LkuqfI0TP17Lh9WqN7XwxQqPmdhMJ590OSlbqQRwRLWCmRxz+ KbBopKtv8kvyYXEDvenA5Z8XmQbpTC3aEjY/4nezeFJ8TqdTfwMV1gphIxfW1YNL ii3fwLb6JET/QeJ8fU5N1ZM0He0j9A7Llp7zrEwnDXKgPTZ4fHByQE5McZJ3dpaS qw5p1xpIyqCRvNvEOnzvUmPt0DPi7qfEtWxHJhaPtdMWhdmsW5k/KgOvNPYUWUfr Wf5VIXMRwEfazQKGShM2nGdsNPL1O+cOZ8fWc+diwQZATGL73wiOakcXxPk5 -----END CERTIFICATE-----Generated at Sun May 3 00:42:32 2026 by rpki-client