$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS150284.roa File: AS150284.roa (raw, json) Hash identifier: EM2ppdgCaaKPF9m9YFnr1XpBKWlRru0SMfCa2zodpws= Subject key identifier: 27:0E:CC:F6:FA:C8:8D:6A:32:32:80:79:F3:EA:BD:A2:3D:3B:9A:C6 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2C90CF499D3AA589784CD67CBCB2B333EED5CC93 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS150284.roa Signing time: Wed 04 Nov 2026 08:01:50 +0000 ROA not before: Wed 04 Nov 2026 07:56:50 +0000 ROA not after: Wed 03 Nov 2027 08:01:50 +0000 asID: 150284 IP address blocks: 157.66.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 13:22:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:90:cf:49:9d:3a:a5:89:78:4c:d6:7c:bc:b2:b3:33:ee:d5:cc:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Nov 4 07:56:50 2026 GMT Not After : Nov 3 08:01:50 2027 GMT Subject: CN=270ECCF6FAC88D6A32328079F3EABDA23D3B9AC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a5:37:36:8f:39:f0:ac:02:a9:da:82:0a:c4: b4:bc:aa:f0:46:fc:a5:b4:56:e1:55:cb:db:aa:dd: 7d:86:5e:1e:4f:85:44:e3:40:bd:30:55:01:38:80: 0b:fd:14:8c:9d:2c:57:f4:cb:9c:a0:ea:93:d1:16: fb:f9:d4:b9:f7:72:89:7e:02:75:db:31:96:bc:93: 32:7e:62:13:10:88:3d:8f:c6:c2:e4:fe:d9:62:df: 77:3d:f4:ba:eb:ca:4d:13:a7:a6:20:2f:cc:7f:25: b9:72:ea:58:2f:1a:38:90:6c:87:42:cf:16:9c:f4: 6c:76:60:5a:11:10:6d:81:31:00:9f:04:3c:d5:6e: fa:7a:02:55:78:f2:b4:7a:99:c8:6b:4f:e8:f5:b9: 40:e3:37:42:5a:5a:03:ba:d8:27:de:55:14:8c:50: d6:bf:4c:e3:1c:8e:4a:b1:ec:cf:27:24:d4:f2:60: af:0a:93:ef:7f:c5:d2:ce:62:fd:7a:0d:f5:65:18: a9:ec:b8:b8:be:06:49:8a:7a:a8:f4:8e:e5:49:ff: ae:44:87:7c:be:8a:79:89:32:79:d9:4e:61:ec:91: 91:d9:22:fe:92:da:58:62:66:f1:8a:92:25:2a:0f: 1a:68:60:df:20:ba:4b:d3:21:9c:46:95:9b:c0:c9: 47:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0E:CC:F6:FA:C8:8D:6A:32:32:80:79:F3:EA:BD:A2:3D:3B:9A:C6 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS150284.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.84.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:d7:c0:88:30:5b:91:84:ef:3c:4c:ca:91:4c:d0:e2:9c:cd: f1:c6:3b:c0:d9:d1:25:35:8c:c2:24:af:c2:87:1f:6a:ec:e1: 30:7f:ab:8f:16:b8:49:6f:34:3b:74:36:38:29:90:cc:2b:91: d5:c4:1b:ca:fa:5d:b9:d6:41:38:05:38:53:a5:17:45:8c:91: 12:7c:dc:14:b0:2d:6f:f8:10:d1:06:cb:6b:e3:91:06:3f:d3: 99:04:08:3d:0c:02:7f:0f:64:e1:d7:72:c1:aa:d8:a1:df:40: 4e:f0:f8:16:7e:f2:f8:d2:d3:1b:49:bc:24:c1:1c:d5:69:53: 12:26:27:6e:44:43:c4:37:a7:a5:77:de:54:62:c4:4e:58:d8: 8b:6e:d3:08:bd:e1:ba:56:bf:20:ff:1a:16:e3:67:ae:c9:4e: f7:67:c0:49:10:ee:73:86:ce:31:dd:38:66:fe:fa:74:7b:ab: f1:a4:76:f7:aa:35:fe:65:15:05:e7:4b:1d:45:25:76:1a:22: 34:25:4d:c6:1e:5a:37:a9:cb:1a:04:d4:eb:29:92:a5:4d:c5: e2:71:55:b4:2d:4c:fd:22:ce:4a:26:f6:ef:a3:f5:ff:7b:b4: 47:f1:46:a4:11:3e:43:55:d2:61:79:b8:b5:da:ae:d4:10:91: a5:f8:71:76 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIULJDPSZ06pYl4TNZ8vLKzM+7VzJMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MTEwNDA3NTY1MFoX DTI3MTEwMzA4MDE1MFowMzExMC8GA1UEAxMoMjcwRUNDRjZGQUM4OEQ2QTMyMzI4 MDc5RjNFQUJEQTIzRDNCOUFDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2lNzaPOfCsAqnaggrEtLyq8Eb8pbRW4VXL26rdfYZeHk+FRONAvTBVATiA C/0UjJ0sV/TLnKDqk9EW+/nUufdyiX4CddsxlryTMn5iExCIPY/GwuT+2WLfdz30 uuvKTROnpiAvzH8luXLqWC8aOJBsh0LPFpz0bHZgWhEQbYExAJ8EPNVu+noCVXjy tHqZyGtP6PW5QOM3QlpaA7rYJ95VFIxQ1r9M4xyOSrHszyck1PJgrwqT73/F0s5i /XoN9WUYqey4uL4GSYp6qPSO5Un/rkSHfL6KeYkyedlOYeyRkdki/pLaWGJm8YqS JSoPGmhg3yC6S9MhnEaVm8DJR7ECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQnDsz2 +siNajIygHnz6r2iPTuaxjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUwMjg0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBnUJUMA0GCSqGSIb3DQEBCwUAA4IBAQA/18CIMFuRhO88TMqRTNDinM3x xjvA2dElNYzCJK/Chx9q7OEwf6uPFrhJbzQ7dDY4KZDMK5HVxBvK+l251kE4BThT pRdFjJESfNwUsC1v+BDRBstr45EGP9OZBAg9DAJ/D2Th13LBqtih30BO8PgWfvL4 0tMbSbwkwRzVaVMSJiduREPEN6eld95UYsROWNiLbtMIveG6Vr8g/xoW42euyU73 Z8BJEO5zhs4x3Thm/vp0e6vxpHb3qjX+ZRUF50sdRSV2GiI0JU3GHlo3qcsaBNTr KZKlTcXicVW0LUz9Is5KJvbvo/X/e7RH8UakET5DVdJhebi12q7UEJGl+HF2 -----END CERTIFICATE-----Generated at Thu Nov 5 15:00:40 2026 by rpki-client