$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150999.roa File: AS150999.roa (raw, json) Hash identifier: me3vfYI7fR8FM3E88503WtjIlhjo6I0c4jJA7Vsi5gQ= Subject key identifier: 23:94:20:E7:76:B5:B1:43:01:34:1E:5F:0D:A5:0B:AC:EC:DE:16:D8 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 47D3EFB40F2C25F5900975CA5BB15ED683FE1628 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150999.roa Signing time: Thu 16 Apr 2026 09:00:00 +0000 ROA not before: Thu 16 Apr 2026 08:55:00 +0000 ROA not after: Thu 15 Apr 2027 09:00:00 +0000 asID: 150999 IP address blocks: 103.205.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 05:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:d3:ef:b4:0f:2c:25:f5:90:09:75:ca:5b:b1:5e:d6:83:fe:16:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 16 08:55:00 2026 GMT Not After : Apr 15 09:00:00 2027 GMT Subject: CN=239420E776B5B14301341E5F0DA50BACECDE16D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0e:a6:eb:03:28:a1:be:41:40:7a:97:2e:0a: 15:31:64:4b:d5:36:53:05:69:af:40:84:b5:ae:86: a9:90:d5:fe:2a:70:db:fb:a0:6d:27:6a:02:2a:3e: f2:68:73:df:e3:df:96:3d:b4:5a:2a:c9:e4:37:45: 79:90:e6:1b:e9:33:4d:f0:50:a1:ef:46:a8:1b:7e: af:64:5d:6b:61:fd:54:3d:35:b9:89:8b:0f:ad:8d: 4b:be:29:7c:cd:1f:f8:68:5b:47:5d:99:f3:dc:ac: be:a3:a8:c4:bc:f1:78:33:98:92:5a:d1:58:9f:59: c7:14:05:68:e5:d8:50:b0:cd:5e:75:eb:c5:b2:51: 30:76:a4:8c:62:b9:42:be:94:4d:0e:6c:65:27:bb: 54:d0:d9:61:33:3b:19:d7:df:e7:80:bb:0a:da:eb: ae:f4:42:48:e0:6a:76:96:ef:84:7e:b6:23:35:30: 52:94:61:3b:9f:30:85:b3:8b:c3:6b:18:06:3f:d4: e1:23:16:c4:83:c5:01:71:31:fa:df:aa:43:d4:2d: bc:98:44:0b:9b:97:44:b3:20:83:d8:e8:56:47:a9: 3e:ee:84:f2:aa:1e:64:cd:2c:06:c1:11:97:48:65: 32:1e:11:4d:b3:9b:65:d2:bd:f7:1b:3c:9a:7a:8a: c8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:94:20:E7:76:B5:B1:43:01:34:1E:5F:0D:A5:0B:AC:EC:DE:16:D8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150999.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.205.222.0/23 Signature Algorithm: sha256WithRSAEncryption 05:95:a6:cc:4e:c1:8f:4b:f6:b5:27:c2:57:99:a3:eb:66:76: 02:9b:84:b2:41:83:80:fa:12:b9:41:e4:15:e9:7f:d7:48:67: 81:22:5c:6c:a5:20:7e:1a:f9:6c:c9:86:64:e2:bd:70:ba:c6: 8e:d0:59:2e:1c:81:5b:53:83:23:0e:b4:b6:51:12:cf:f9:d8: 2c:00:8f:5a:c2:21:10:3d:27:5f:e5:c9:cb:31:c4:3c:4e:ed: ce:56:d6:8e:d8:4d:45:3d:6b:14:6c:ac:76:6a:7f:db:eb:dd: 04:23:ce:04:e2:f6:aa:bf:f7:fc:75:96:7e:9e:67:a0:28:4e: 3e:b1:cc:c5:f0:a9:00:02:00:4e:28:16:e8:fc:17:fa:e9:69: 04:62:a6:8c:48:b1:80:92:a4:dc:7d:47:53:22:85:d6:69:a8: 5d:45:e8:ff:40:d2:57:34:86:70:bd:9f:d8:a4:a8:18:f3:61: 02:4a:c4:23:24:6a:25:c6:41:e7:e6:a2:18:b1:8b:63:68:d2: 92:24:ae:b7:73:1b:bd:59:4e:8a:b3:ec:fa:46:93:25:3f:66: ae:b7:17:76:10:ea:76:0f:6e:ef:96:e8:a2:23:a6:c0:e5:35: be:29:79:0f:65:42:ea:3a:40:e4:66:d9:59:fc:54:29:b1:65: ab:ab:3d:91 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUR9PvtA8sJfWQCXXKW7Fe1oP+FigwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQxNjA4NTUwMFoX DTI3MDQxNTA5MDAwMFowMzExMC8GA1UEAxMoMjM5NDIwRTc3NkI1QjE0MzAxMzQx RTVGMERBNTBCQUNFQ0RFMTZEODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANkOpusDKKG+QUB6ly4KFTFkS9U2UwVpr0CEta6GqZDV/ipw2/ugbSdqAio+ 8mhz3+Pflj20WirJ5DdFeZDmG+kzTfBQoe9GqBt+r2Rda2H9VD01uYmLD62NS74p fM0f+GhbR12Z89ysvqOoxLzxeDOYklrRWJ9ZxxQFaOXYULDNXnXrxbJRMHakjGK5 Qr6UTQ5sZSe7VNDZYTM7Gdff54C7CtrrrvRCSOBqdpbvhH62IzUwUpRhO58whbOL w2sYBj/U4SMWxIPFAXEx+t+qQ9QtvJhEC5uXRLMgg9joVkepPu6E8qoeZM0sBsER l0hlMh4RTbObZdK99xs8mnqKyNECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQjlCDn drWxQwE0Hl8NpQus7N4W2DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDk5OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWfN3jANBgkqhkiG9w0BAQsFAAOCAQEABZWmzE7Bj0v2tSfCV5mj 62Z2ApuEskGDgPoSuUHkFel/10hngSJcbKUgfhr5bMmGZOK9cLrGjtBZLhyBW1OD Iw60tlESz/nYLACPWsIhED0nX+XJyzHEPE7tzlbWjthNRT1rFGysdmp/2+vdBCPO BOL2qr/3/HWWfp5noChOPrHMxfCpAAIATigW6PwX+ulpBGKmjEixgJKk3H1HUyKF 1mmoXUXo/0DSVzSGcL2f2KSoGPNhAkrEIyRqJcZB5+aiGLGLY2jSkiSut3MbvVlO irPs+kaTJT9mrrcXdhDqdg9u75booiOmwOU1vil5D2VC6jpA5GbZWfxUKbFlq6s9 kQ== -----END CERTIFICATE-----Generated at Fri Apr 17 08:17:04 2026 by rpki-client