$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150241.roa File: AS150241.roa (raw, json) Hash identifier: 94jfl8R+H2bFMiOPPzfcy04Luf1z0wvHRmI9NdmTPAI= Subject key identifier: 74:8B:6C:E5:5E:FF:0A:24:92:F3:94:C5:D9:05:EF:4C:79:93:E1:5D Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4B79872735C4D1E77E2B2D15DB759C8BDDAF7CBA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150241.roa Signing time: Tue 07 Apr 2026 07:00:00 +0000 ROA not before: Tue 07 Apr 2026 06:55:00 +0000 ROA not after: Tue 06 Apr 2027 07:00:00 +0000 asID: 150241 IP address blocks: 2001:df1:a6c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:79:87:27:35:c4:d1:e7:7e:2b:2d:15:db:75:9c:8b:dd:af:7c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 7 06:55:00 2026 GMT Not After : Apr 6 07:00:00 2027 GMT Subject: CN=748B6CE55EFF0A2492F394C5D905EF4C7993E15D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0b:3a:be:b3:30:1b:75:4b:8e:27:f8:4f:d5: 25:b3:39:5e:48:a3:13:63:1e:0d:cb:51:7e:4c:03: d2:03:e7:2c:c2:e7:50:d6:2f:2f:a0:3b:5c:37:da: a8:a9:49:6b:00:70:fd:d9:e0:a1:e6:82:70:91:0b: 1c:d4:e9:d6:d8:52:0c:42:51:25:8d:3a:99:54:19: 42:70:d6:db:79:c2:42:bd:43:4b:42:14:e4:b0:61: d3:5c:f8:39:f4:ae:c7:f6:09:10:b4:76:f1:ac:a6: f9:26:ae:38:11:70:97:f8:57:77:12:5c:b2:dc:ba: 4b:e1:3e:83:96:10:c8:e5:3e:d7:48:9a:35:99:3c: 2c:27:53:f5:1c:69:f6:b2:87:37:5a:85:20:2e:a0: 86:28:85:92:12:e2:b3:70:b6:c0:97:36:c2:be:98: 05:fc:98:e7:8e:6e:f3:5b:e8:59:c2:50:a2:39:1f: 77:35:d2:0c:e5:db:c2:15:b4:ce:e8:a5:cb:14:eb: 23:af:6d:2f:0f:c6:1f:e3:5a:4b:95:43:3d:3c:dc: 90:6b:5c:e6:1b:58:55:d5:66:f3:4a:ba:e7:9a:e5: 67:3c:aa:eb:99:63:4f:fd:b9:32:71:82:91:66:9f: e1:a4:92:ed:34:6c:33:eb:15:65:f6:7e:96:d9:5d: 99:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8B:6C:E5:5E:FF:0A:24:92:F3:94:C5:D9:05:EF:4C:79:93:E1:5D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150241.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:a6c0::/48 Signature Algorithm: sha256WithRSAEncryption 3d:42:23:21:3f:28:73:38:2f:ae:ae:a5:fc:97:40:f3:a3:cd: 5b:a2:11:80:cd:d1:17:79:b6:9c:40:fd:6e:bf:90:04:a7:7d: df:3a:51:dd:b5:fc:9d:d2:f5:b0:19:c4:36:ec:88:ad:cf:d4: c5:98:f9:18:00:d4:f6:c5:e6:bd:2d:0f:77:84:c8:b1:b3:1f: 5b:3e:5b:a7:ee:a0:f6:0d:14:ff:a6:dc:98:06:6d:12:60:f3: a9:8d:9e:c9:a3:2f:84:74:67:72:8a:67:06:c4:43:e7:5f:ef: 55:08:1f:26:c1:c6:fd:bb:a2:ab:6e:6a:7f:a6:be:6e:cb:ee: 2a:0f:17:61:7e:e6:0c:1d:29:27:de:88:d3:d1:f7:06:d1:1a: 88:04:39:d9:a0:a6:f8:b1:2c:60:e0:1d:06:78:68:22:d3:dd: 2e:05:23:12:f1:25:06:69:3c:d6:2c:29:d1:c6:53:36:5d:18: 7c:bc:69:b8:44:1e:1b:51:72:cb:9d:9e:bb:46:a1:0a:b8:2d: ec:44:a3:8d:65:d9:a1:6e:48:74:e4:74:9a:46:a5:0b:f5:e1: 6e:9e:a1:c8:94:56:1a:cf:59:de:49:48:e6:65:c5:03:93:63: 4d:98:0f:53:05:f5:ab:8f:4d:94:73:f7:57:e1:38:14:f9:e4: f7:3e:31:aa -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUS3mHJzXE0ed+Ky0V23Wci92vfLowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQwNzA2NTUwMFoX DTI3MDQwNjA3MDAwMFowMzExMC8GA1UEAxMoNzQ4QjZDRTU1RUZGMEEyNDkyRjM5 NEM1RDkwNUVGNEM3OTkzRTE1RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL8LOr6zMBt1S44n+E/VJbM5XkijE2MeDctRfkwD0gPnLMLnUNYvL6A7XDfa qKlJawBw/dngoeaCcJELHNTp1thSDEJRJY06mVQZQnDW23nCQr1DS0IU5LBh01z4 OfSux/YJELR28aym+SauOBFwl/hXdxJcsty6S+E+g5YQyOU+10iaNZk8LCdT9Rxp 9rKHN1qFIC6ghiiFkhLis3C2wJc2wr6YBfyY545u81voWcJQojkfdzXSDOXbwhW0 zuilyxTrI69tLw/GH+NaS5VDPTzckGtc5htYVdVm80q655rlZzyq65ljT/25MnGC kWaf4aSS7TRsM+sVZfZ+ltldmbcCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBR0i2zl Xv8KJJLzlMXZBe9MeZPhXTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDI0MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfGmwDANBgkqhkiG9w0BAQsFAAOCAQEAPUIjIT8oczgvrq6l /JdA86PNW6IRgM3RF3m2nED9br+QBKd93zpR3bX8ndL1sBnENuyIrc/UxZj5GADU 9sXmvS0Pd4TIsbMfWz5bp+6g9g0U/6bcmAZtEmDzqY2eyaMvhHRncopnBsRD51/v VQgfJsHG/buiq25qf6a+bsvuKg8XYX7mDB0pJ96I09H3BtEaiAQ52aCm+LEsYOAd BnhoItPdLgUjEvElBmk81iwp0cZTNl0YfLxpuEQeG1Fyy52eu0ahCrgt7ESjjWXZ oW5IdOR0mkalC/Xhbp6hyJRWGs9Z3klI5mXFA5NjTZgPUwX1q49NlHP3V+E4FPnk 9z4xqg== -----END CERTIFICATE-----Generated at Fri Apr 17 11:11:17 2026 by rpki-client