$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150997.roa File: AS150997.roa (raw, json) Hash identifier: XIuHzqFQlZtVTefgSEgFb4Kkoq4drpFSBJIYKCnYTVQ= Subject key identifier: EA:4D:78:99:F5:59:74:60:96:4D:F7:4F:F4:89:11:FA:42:A9:A9:EC Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5F59FA5C06918F89D31E1B378F086331D7EC406D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150997.roa Signing time: Mon 06 Apr 2026 11:00:00 +0000 ROA not before: Mon 06 Apr 2026 10:55:00 +0000 ROA not after: Mon 05 Apr 2027 11:00:00 +0000 asID: 150997 IP address blocks: 103.205.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 05:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:59:fa:5c:06:91:8f:89:d3:1e:1b:37:8f:08:63:31:d7:ec:40:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 6 10:55:00 2026 GMT Not After : Apr 5 11:00:00 2027 GMT Subject: CN=EA4D7899F5597460964DF74FF48911FA42A9A9EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:33:d6:b1:ea:20:d3:ff:5c:4e:7f:68:f1:83: b1:ed:bc:bb:52:15:71:8d:4c:7c:25:1b:1a:f9:b8: 1d:11:be:62:a7:bc:8b:49:cb:57:e0:2d:48:44:63: 30:98:3f:bd:b3:68:6f:f4:38:fc:99:c8:b8:bb:08: 5b:e0:07:fe:70:d4:98:ad:f7:82:64:30:61:12:4b: 71:16:2f:97:c0:8c:f9:78:1b:42:69:16:6e:c9:18: 61:5e:5b:11:db:65:09:65:11:d8:c2:41:1d:13:eb: fe:cd:c0:0a:a6:73:ef:5e:0a:ba:2f:f1:33:15:95: 48:f8:9c:10:6c:0f:db:95:ac:31:8d:47:ee:10:c3: 83:4c:65:5b:9d:17:fc:7b:e6:f9:27:66:dc:1d:e8: f7:1d:fa:af:d0:dc:10:83:4b:01:85:03:1b:ec:e4: 88:9e:bd:9d:57:45:b8:73:82:cc:e5:2d:25:23:a4: 47:7b:a9:ce:de:8a:fe:c3:bd:cd:8e:00:a9:97:bc: 82:8a:d1:d0:f1:68:a8:7e:64:bb:e7:57:28:e7:a5: 28:0c:ab:4e:0b:6a:12:56:cc:ce:38:63:c2:64:58: eb:fe:e7:0e:0f:4d:67:ee:86:68:53:e8:42:24:4d: 7c:12:c0:81:34:8c:7b:0a:0c:c2:0b:db:d6:76:f2: 8c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4D:78:99:F5:59:74:60:96:4D:F7:4F:F4:89:11:FA:42:A9:A9:EC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150997.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.205.220.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:b5:fe:64:cc:b0:91:d7:fc:43:7e:c7:5e:9d:93:7d:90:49: b3:87:cd:be:83:9f:40:51:f2:51:6b:00:7f:82:d3:8f:21:46: dc:c0:b4:17:81:37:26:5e:72:00:ab:3a:1d:1e:7f:d9:dd:0b: 39:6d:19:99:9f:39:8e:56:08:c3:0c:50:7d:fb:1a:f3:fa:8e: 81:35:15:b1:b2:ea:54:a9:1e:dd:71:f5:e7:8f:fc:42:ef:c2: a6:4e:8f:26:86:99:7e:24:17:89:48:71:d4:84:ee:2d:41:24: a0:23:59:3b:5b:d6:04:99:31:ed:33:71:97:f5:e9:54:78:6c: 56:87:09:ae:cc:eb:b2:1d:6e:79:a6:f6:18:80:82:1e:11:d9: dc:28:d9:14:bf:75:05:22:9b:bd:90:ee:0d:79:a2:6c:82:7e: ef:a9:01:b1:1d:87:f6:e5:37:dc:28:ee:9c:fb:a4:8a:5c:8b: c4:3e:a4:a3:a5:47:d1:54:2c:2d:1a:b4:82:f7:fa:a8:1e:15: a5:e6:d3:66:ea:62:5d:59:38:8a:2b:5f:db:b7:b7:ed:22:4b: 79:04:e7:ee:bb:8f:7f:3d:62:eb:2f:ba:08:a0:8f:38:07:31: 70:63:af:c4:2e:20:fc:8a:00:b2:d7:be:3b:e3:01:45:4f:05: 20:02:e1:2a -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUX1n6XAaRj4nTHhs3jwhjMdfsQG0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQwNjEwNTUwMFoX DTI3MDQwNTExMDAwMFowMzExMC8GA1UEAxMoRUE0RDc4OTlGNTU5NzQ2MDk2NERG NzRGRjQ4OTExRkE0MkE5QTlFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKkz1rHqINP/XE5/aPGDse28u1IVcY1MfCUbGvm4HRG+Yqe8i0nLV+AtSERj MJg/vbNob/Q4/JnIuLsIW+AH/nDUmK33gmQwYRJLcRYvl8CM+XgbQmkWbskYYV5b EdtlCWUR2MJBHRPr/s3ACqZz714Kui/xMxWVSPicEGwP25WsMY1H7hDDg0xlW50X /Hvm+Sdm3B3o9x36r9DcEINLAYUDG+zkiJ69nVdFuHOCzOUtJSOkR3upzt6K/sO9 zY4AqZe8gorR0PFoqH5ku+dXKOelKAyrTgtqElbMzjhjwmRY6/7nDg9NZ+6GaFPo QiRNfBLAgTSMewoMwgvb1nbyjMkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTqTXiZ 9Vl0YJZN90/0iRH6Qqmp7DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDk5Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWfN3DANBgkqhkiG9w0BAQsFAAOCAQEAfbX+ZMywkdf8Q37HXp2T fZBJs4fNvoOfQFHyUWsAf4LTjyFG3MC0F4E3Jl5yAKs6HR5/2d0LOW0ZmZ85jlYI wwxQffsa8/qOgTUVsbLqVKke3XH154/8Qu/Cpk6PJoaZfiQXiUhx1ITuLUEkoCNZ O1vWBJkx7TNxl/XpVHhsVocJrszrsh1ueab2GICCHhHZ3CjZFL91BSKbvZDuDXmi bIJ+76kBsR2H9uU33CjunPukilyLxD6ko6VH0VQsLRq0gvf6qB4VpebTZupiXVk4 iitf27e37SJLeQTn7ruPfz1i6y+6CKCPOAcxcGOvxC4g/IoAste+O+MBRU8FIALh Kg== -----END CERTIFICATE-----Generated at Fri Apr 17 08:16:28 2026 by rpki-client