$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS150197.roa File: AS150197.roa (raw, json) Hash identifier: 5pu+/ORusPSXLV5piFbQHF+zWAe2W/kZqHCnAzFrdGk= Subject key identifier: C2:72:5D:12:DA:06:8C:C8:4D:9A:5F:E7:83:9B:3F:27:EC:0B:06:B9 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 75F5A33CEDCE14394111B7D97B7353AB0189944B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150197.roa Signing time: Tue 28 Jul 2026 06:27:23 +0000 ROA not before: Tue 28 Jul 2026 06:22:23 +0000 ROA not after: Tue 27 Jul 2027 06:27:23 +0000 asID: 150197 IP address blocks: 2001:df2:a3c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:f5:a3:3c:ed:ce:14:39:41:11:b7:d9:7b:73:53:ab:01:89:94:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jul 28 06:22:23 2026 GMT Not After : Jul 27 06:27:23 2027 GMT Subject: CN=C2725D12DA068CC84D9A5FE7839B3F27EC0B06B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c1:df:18:07:25:59:49:c7:be:54:ae:e4:dd: 4d:ef:54:50:ce:5d:f5:94:6f:65:8c:50:9d:53:97: 74:af:30:a6:db:50:cd:10:97:ab:67:11:4a:b1:2d: fd:3a:8b:2c:fa:7f:47:6b:47:1f:93:50:dc:fb:b6: bc:b9:ef:24:26:af:88:cd:94:1b:34:b3:c8:7d:da: 19:d6:19:71:f5:18:bc:ac:4d:fe:d7:88:c2:99:cd: 70:fe:76:93:a8:ec:d9:97:e5:5e:85:df:48:fa:18: 77:c6:71:25:a6:69:1c:0d:bb:d1:17:ff:66:6d:2f: fc:35:57:21:52:84:e8:ba:1e:cf:7a:57:1f:cf:95: 9c:6e:40:b4:57:90:c8:db:00:4b:2b:06:c9:48:ba: 73:bb:19:c0:1a:f0:d5:88:65:9b:4e:7b:7f:6d:4a: 5e:1a:c4:5c:73:62:a4:c8:0c:45:76:52:84:99:a4: 2a:35:65:27:c6:26:c0:f6:68:2f:a5:b3:b9:56:af: cd:80:93:3d:61:0c:0b:b5:15:62:a4:6c:4b:41:1c: e7:08:b3:2e:24:86:db:9a:46:1c:c1:ed:48:3c:7c: 83:4a:a8:3e:7f:1a:30:45:16:06:2b:e0:58:1e:0c: 3b:d3:0c:78:97:b1:e2:2b:da:af:79:20:b3:59:08: 5b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:72:5D:12:DA:06:8C:C8:4D:9A:5F:E7:83:9B:3F:27:EC:0B:06:B9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS150197.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:a3c0::/48 Signature Algorithm: sha256WithRSAEncryption 13:6a:5f:a6:ba:46:cc:b9:15:8b:66:56:1e:96:b7:51:ae:6f: 2d:f5:3e:22:78:c8:5a:4b:e1:d4:18:9e:db:3b:20:1e:10:14: 7b:33:9f:6d:66:ac:15:b2:68:ea:b8:22:7a:a1:e0:fd:14:c5: 2d:6e:a7:1a:3b:c7:80:22:10:ae:c5:15:7f:5a:b4:9b:25:ec: f1:9b:3a:c1:1e:23:5f:6a:63:fe:43:cc:ac:b8:cf:95:89:42: 7f:dd:74:cf:e1:35:19:f7:03:de:00:b2:92:a6:a7:59:94:fb: 76:81:dd:a1:49:29:73:fe:8f:78:42:db:a0:c8:d5:49:a1:2c: 2b:2a:df:a1:de:5a:fd:3f:a8:2f:7e:66:de:c1:68:eb:ab:ba: fe:f6:52:ce:b1:f5:83:97:97:ae:73:11:da:66:9b:27:03:1b: 33:ae:37:75:63:0f:97:93:6d:52:bc:f4:f4:7b:61:d6:c0:65: b6:8a:30:14:3c:a2:5c:30:6e:ea:e9:e4:30:7e:c0:32:f3:1a: 39:80:ee:65:08:d2:95:25:f5:e9:7d:cd:7b:57:77:8d:9f:65: d7:2b:5e:c5:32:db:ae:a8:ce:2f:d7:e6:2d:63:d8:86:46:08: 2b:ac:e1:54:9f:e9:e6:57:8a:7e:e0:ee:9e:74:7a:a8:a4:c4: c5:29:2a:7c -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUdfWjPO3OFDlBEbfZe3NTqwGJlEswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDcyODA2MjIyM1oX DTI3MDcyNzA2MjcyM1owMzExMC8GA1UEAxMoQzI3MjVEMTJEQTA2OENDODREOUE1 RkU3ODM5QjNGMjdFQzBCMDZCOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJrB3xgHJVlJx75UruTdTe9UUM5d9ZRvZYxQnVOXdK8wpttQzRCXq2cRSrEt /TqLLPp/R2tHH5NQ3Pu2vLnvJCaviM2UGzSzyH3aGdYZcfUYvKxN/teIwpnNcP52 k6js2ZflXoXfSPoYd8ZxJaZpHA270Rf/Zm0v/DVXIVKE6Loez3pXH8+VnG5AtFeQ yNsASysGyUi6c7sZwBrw1Yhlm057f21KXhrEXHNipMgMRXZShJmkKjVlJ8YmwPZo L6WzuVavzYCTPWEMC7UVYqRsS0Ec5wizLiSG25pGHMHtSDx8g0qoPn8aMEUWBivg WB4MO9MMeJex4ivar3kgs1kIW+8CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBTCcl0S 2gaMyE2aX+eDmz8n7AsGuTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUwMTk3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8qPAMA0GCSqGSIb3DQEBCwUAA4IBAQATal+mukbMuRWLZlYelrdR rm8t9T4ieMhaS+HUGJ7bOyAeEBR7M59tZqwVsmjquCJ6oeD9FMUtbqcaO8eAIhCu xRV/WrSbJezxmzrBHiNfamP+Q8ysuM+ViUJ/3XTP4TUZ9wPeALKSpqdZlPt2gd2h SSlz/o94QtugyNVJoSwrKt+h3lr9P6gvfmbewWjrq7r+9lLOsfWDl5eucxHaZpsn Axszrjd1Yw+Xk21SvPT0e2HWwGW2ijAUPKJcMG7q6eQwfsAy8xo5gO5lCNKVJfXp fc17V3eNn2XXK17FMtuuqM4v1+YtY9iGRggrrOFUn+nmV4p+4O6edHqopMTFKSp8 -----END CERTIFICATE-----Generated at Wed Jul 29 04:49:27 2026 by rpki-client