$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150530.roa File: AS150530.roa (raw, json) Hash identifier: 3lXMPCSXO+y+AyZHmgloXDu6O8YnDGIbjwLUOJ0019s= Subject key identifier: B2:1D:42:85:54:F2:2C:1B:C5:47:99:6F:36:AD:B7:57:D6:7C:A3:A1 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1B7C43FFFD8ADDB7638A80054AD1EEC1CB52F50A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150530.roa Signing time: Thu 23 Oct 2025 09:00:00 +0000 ROA not before: Thu 23 Oct 2025 08:55:00 +0000 ROA not after: Thu 22 Oct 2026 09:00:00 +0000 asID: 150530 IP address blocks: 2001:df2:440::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:7c:43:ff:fd:8a:dd:b7:63:8a:80:05:4a:d1:ee:c1:cb:52:f5:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 23 08:55:00 2025 GMT Not After : Oct 22 09:00:00 2026 GMT Subject: CN=B21D428554F22C1BC547996F36ADB757D67CA3A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:85:8f:1c:06:c1:a9:89:d6:c7:2d:e8:39:87: 8d:5a:a4:bd:28:7b:b3:ca:31:5c:68:9e:96:ce:41: 1e:60:59:ac:1b:1c:61:53:f6:e3:81:df:5b:5c:d6: 4d:96:ef:3e:3e:83:05:ad:6a:55:fb:bc:46:bf:e3: df:79:6f:bb:ea:f0:14:1d:0d:8b:ab:c6:dc:00:e4: 00:cc:e6:61:fa:25:85:bd:f2:43:3d:62:32:d6:4e: 7f:5e:c3:6a:30:4c:82:fa:9c:85:a7:ac:a4:1d:d6: 77:66:10:85:5e:39:a4:8c:ea:56:43:1c:7a:63:db: 22:72:5c:05:a8:4e:3b:71:12:eb:c3:e8:9b:bd:6a: 33:01:5e:1f:af:b0:e6:80:87:36:3f:47:86:05:23: c8:22:f2:a7:f8:dc:ed:85:d9:95:89:7d:eb:5a:cd: 97:9c:ba:e3:0b:5c:3b:77:d6:5c:89:fb:2f:dc:b8: f7:bb:c8:b1:83:cc:18:a5:40:d9:d8:47:99:41:ee: 00:21:96:e0:b3:d7:e9:5d:b6:4e:ab:34:e3:40:c7: f7:05:2c:d1:9e:a4:e3:e7:77:7a:a6:3b:9e:2b:83: c7:f8:95:12:81:17:e5:c5:b6:b5:b9:12:60:28:bf: d7:7c:d3:84:2f:3f:0e:8c:20:25:db:ae:bb:0e:2e: 57:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1D:42:85:54:F2:2C:1B:C5:47:99:6F:36:AD:B7:57:D6:7C:A3:A1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:440::/48 Signature Algorithm: sha256WithRSAEncryption 09:8d:20:20:a8:14:c9:93:c2:71:f9:87:01:e6:1e:b8:67:80: de:b9:90:26:cf:77:ea:9d:ba:47:f4:f8:60:29:17:7f:fe:28: 1a:77:39:39:80:29:54:a1:a6:22:97:bd:6c:03:a4:cb:72:6d: f2:07:c4:d3:ef:27:08:ac:99:d1:62:c3:bd:84:d2:79:b1:15: b0:b7:f4:cb:5a:a3:84:84:23:c4:1d:a6:9f:c6:54:43:7d:19: e7:19:03:f2:35:b9:6a:ca:34:62:0f:8f:e9:ee:84:aa:ea:b1: 17:65:15:a7:fd:aa:0f:19:52:1f:c5:ed:c3:02:16:79:5c:b0: 05:3d:e5:f3:c3:b5:8d:33:db:7c:5e:da:54:8b:6c:5d:c4:09: 24:b4:5d:32:cb:76:7e:77:58:47:14:49:50:01:ac:c7:3f:d4: 9c:10:11:47:33:26:ad:d8:6a:e7:1c:6f:8d:5c:49:64:6c:e2: 12:cc:29:77:0c:9e:a4:17:4f:8b:b9:3d:7c:92:59:5f:98:5c: aa:70:b0:97:83:e1:d0:19:63:ee:fc:81:60:5e:95:1e:bf:36: 37:7c:36:68:a3:46:0e:e5:57:8d:14:a7:f4:fd:3d:6f:0b:6f: 8e:09:9f:94:f9:d7:21:c0:27:e9:93:8b:01:a9:8b:ef:29:39: ed:41:ca:1e -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUG3xD//2K3bdjioAFStHuwctS9QowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAyMzA4NTUwMFoX DTI2MTAyMjA5MDAwMFowMzExMC8GA1UEAxMoQjIxRDQyODU1NEYyMkMxQkM1NDc5 OTZGMzZBREI3NTdENjdDQTNBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPGFjxwGwamJ1sct6DmHjVqkvSh7s8oxXGiels5BHmBZrBscYVP244HfW1zW TZbvPj6DBa1qVfu8Rr/j33lvu+rwFB0Ni6vG3ADkAMzmYfolhb3yQz1iMtZOf17D ajBMgvqchaespB3Wd2YQhV45pIzqVkMcemPbInJcBahOO3ES68Pom71qMwFeH6+w 5oCHNj9HhgUjyCLyp/jc7YXZlYl961rNl5y64wtcO3fWXIn7L9y497vIsYPMGKVA 2dhHmUHuACGW4LPX6V22Tqs040DH9wUs0Z6k4+d3eqY7niuDx/iVEoEX5cW2tbkS YCi/13zThC8/DowgJduuuw4uV+UCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBSyHUKF VPIsG8VHmW82rbdX1nyjoTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDUzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfIEQDANBgkqhkiG9w0BAQsFAAOCAQEACY0gIKgUyZPCcfmH AeYeuGeA3rmQJs936p26R/T4YCkXf/4oGnc5OYApVKGmIpe9bAOky3Jt8gfE0+8n CKyZ0WLDvYTSebEVsLf0y1qjhIQjxB2mn8ZUQ30Z5xkD8jW5aso0Yg+P6e6Equqx F2UVp/2qDxlSH8XtwwIWeVywBT3l88O1jTPbfF7aVItsXcQJJLRdMst2fndYRxRJ UAGsxz/UnBARRzMmrdhq5xxvjVxJZGziEswpdwyepBdPi7k9fJJZX5hcqnCwl4Ph 0Blj7vyBYF6VHr82N3w2aKNGDuVXjRSn9P09bwtvjgmflPnXIcAn6ZOLAamL7yk5 7UHKHg== -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:30 2025 by rpki-client