$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150948.roa File: AS150948.roa (raw, json) Hash identifier: nTTUSl/mUQnkRG4bnntdkcQvFxTaloby0OqsQe4my4U= Subject key identifier: 6A:56:C3:05:30:BF:18:44:61:7B:1F:9E:E3:15:5E:4D:DD:E8:F3:24 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 31347F5773C21376F1ABAAE87095A7701179769C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150948.roa Signing time: Mon 06 Apr 2026 03:01:28 +0000 ROA not before: Mon 06 Apr 2026 02:56:28 +0000 ROA not after: Mon 05 Apr 2027 03:01:28 +0000 asID: 150948 IP address blocks: 103.107.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 05:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:34:7f:57:73:c2:13:76:f1:ab:aa:e8:70:95:a7:70:11:79:76:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 6 02:56:28 2026 GMT Not After : Apr 5 03:01:28 2027 GMT Subject: CN=6A56C30530BF1844617B1F9EE3155E4DDDE8F324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:77:d4:d3:60:81:f9:e1:f6:4c:02:d0:aa:61: 63:52:96:1f:34:73:02:56:b6:19:8d:ba:a0:f5:65: 40:4c:b9:5d:0b:b4:bc:8d:9b:67:36:7d:d3:1b:a4: bb:53:25:1f:d1:a3:07:10:7b:f7:c3:56:ba:a6:67: 65:43:5d:08:be:b6:ea:64:3e:48:88:91:c9:44:44: 50:39:23:ba:35:05:18:40:90:52:26:40:f1:bb:f7: 94:58:38:fd:da:c2:cf:bb:b1:99:31:2b:a9:d5:90: 50:13:90:6d:fd:11:48:29:07:5d:df:a5:f9:b3:ed: 03:38:32:32:67:62:b9:90:5d:0a:d7:8b:66:35:e8: 02:0d:bf:21:f3:6e:ee:27:f2:dc:0b:ae:f2:10:01: 6e:06:4e:9c:d3:af:de:f9:47:5a:cf:34:c6:1c:a9: 6c:95:8b:6c:a1:4d:f0:86:ff:c1:87:9f:05:97:b3: df:5c:4f:33:66:71:9e:6e:bc:97:29:24:ac:84:7b: 9a:9d:e4:37:62:8b:b8:cc:cf:20:2b:9f:dc:41:be: af:ba:82:46:6a:74:c6:6d:f1:48:93:07:eb:9b:e8: 57:0f:5c:7f:9c:fd:22:58:85:d7:a5:bb:0e:76:c4: c9:1d:75:6d:04:3e:73:b7:86:1b:ad:9c:bd:38:97: 62:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:56:C3:05:30:BF:18:44:61:7B:1F:9E:E3:15:5E:4D:DD:E8:F3:24 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150948.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.107.138.0/23 Signature Algorithm: sha256WithRSAEncryption 42:c3:66:81:c0:8b:4e:09:e0:74:39:62:5e:dd:bb:41:56:63: 4c:b0:cf:8e:33:b1:9a:85:5c:1f:f4:00:0a:c3:b5:48:6e:69: 53:f5:68:2a:c1:ef:05:9a:d0:3e:9c:89:cf:7e:d3:b8:36:52: c9:d3:22:9f:8a:b6:8c:63:9f:d4:ae:12:e5:24:be:c2:2b:a2: 5f:fb:88:d8:57:91:6c:81:2f:90:39:e0:8c:95:6a:bc:fb:c9: 06:f6:f0:fa:dd:79:65:2d:68:ab:9c:52:b8:c9:e0:c1:8f:4e: 08:fa:b1:c3:81:28:3e:d4:c9:fc:41:52:8b:4b:e7:87:07:2d: 32:43:2a:cd:c3:27:13:03:c0:b4:36:6d:cd:09:c6:0e:75:5a: 35:49:70:6c:d5:68:e1:5a:03:8e:91:51:52:c8:67:47:f3:bb: 3d:ff:74:e6:5d:df:4c:9e:fb:d9:ef:61:22:dd:ff:d6:ca:a4: 38:0e:b3:3d:d0:46:2f:e7:b4:f1:97:b7:9e:24:ae:fd:ed:2f: 35:6c:d6:47:01:87:e1:a2:50:cf:37:af:e2:77:16:34:1b:a7: 31:a7:b4:f4:72:57:a1:59:15:79:cf:d4:0b:dd:80:8e:3c:8e: c5:07:dc:3a:f7:9f:fc:6d:bb:ca:5a:ab:ac:66:40:40:ee:2a: f7:34:58:47 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUMTR/V3PCE3bxq6rocJWncBF5dpwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQwNjAyNTYyOFoX DTI3MDQwNTAzMDEyOFowMzExMC8GA1UEAxMoNkE1NkMzMDUzMEJGMTg0NDYxN0Ix RjlFRTMxNTVFNEREREU4RjMyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOZ31NNggfnh9kwC0KphY1KWHzRzAla2GY26oPVlQEy5XQu0vI2bZzZ90xuk u1MlH9GjBxB798NWuqZnZUNdCL626mQ+SIiRyUREUDkjujUFGECQUiZA8bv3lFg4 /drCz7uxmTErqdWQUBOQbf0RSCkHXd+l+bPtAzgyMmdiuZBdCteLZjXoAg2/IfNu 7ify3Auu8hABbgZOnNOv3vlHWs80xhypbJWLbKFN8Ib/wYefBZez31xPM2Zxnm68 lykkrIR7mp3kN2KLuMzPICuf3EG+r7qCRmp0xm3xSJMH65voVw9cf5z9IliF16W7 DnbEyR11bQQ+c7eGG62cvTiXYusCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRqVsMF ML8YRGF7H57jFV5N3ejzJDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDk0OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWdrijANBgkqhkiG9w0BAQsFAAOCAQEAQsNmgcCLTgngdDliXt27 QVZjTLDPjjOxmoVcH/QACsO1SG5pU/VoKsHvBZrQPpyJz37TuDZSydMin4q2jGOf 1K4S5SS+wiuiX/uI2FeRbIEvkDngjJVqvPvJBvbw+t15ZS1oq5xSuMngwY9OCPqx w4EoPtTJ/EFSi0vnhwctMkMqzcMnEwPAtDZtzQnGDnVaNUlwbNVo4VoDjpFRUshn R/O7Pf905l3fTJ772e9hIt3/1sqkOA6zPdBGL+e08Ze3niSu/e0vNWzWRwGH4aJQ zzev4ncWNBunMae09HJXoVkVec/UC92AjjyOxQfcOvef/G27ylqrrGZAQO4q9zRY Rw== -----END CERTIFICATE-----Generated at Fri Apr 17 08:16:14 2026 by rpki-client