$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151549.roa File: AS151549.roa (raw, json) Hash identifier: YtTFrlWN9Le4PskaLk3ttj5D5F56wUjTJkuq4BGr8Y8= Subject key identifier: A0:9E:E8:00:21:EF:75:BB:F0:6D:11:F3:1F:BB:6A:C3:07:E0:60:AE Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 332AB95872728247B1A95C0724B1BB9164FDF594 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151549.roa Signing time: Mon 07 Jul 2025 05:00:00 +0000 ROA not before: Mon 07 Jul 2025 04:55:00 +0000 ROA not after: Mon 06 Jul 2026 05:00:00 +0000 asID: 151549 IP address blocks: 103.255.132.0/23 maxlen: 24 2401:2de0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:2a:b9:58:72:72:82:47:b1:a9:5c:07:24:b1:bb:91:64:fd:f5:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 7 04:55:00 2025 GMT Not After : Jul 6 05:00:00 2026 GMT Subject: CN=A09EE80021EF75BBF06D11F31FBB6AC307E060AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:af:59:8a:ca:23:48:94:83:c8:b6:de:b7:2f: 0c:60:30:04:ca:9d:d5:d4:26:f0:f3:4a:15:e3:db: 2c:8e:6f:b3:70:dc:d7:b9:5f:07:93:df:4d:fd:50: 84:d4:4e:ab:4c:77:ec:b3:51:35:1c:f5:96:eb:2f: 88:34:1c:d1:8c:99:a1:4d:8c:7f:a1:38:99:4d:9e: 9f:d1:ee:90:c2:99:91:9f:df:e3:ff:3a:e5:9c:a4: 22:49:a1:3e:05:c2:10:d4:44:44:07:28:a2:68:f8: 5f:b4:a9:ce:52:09:ee:62:40:01:e8:cf:fc:85:19: 88:85:23:6b:20:68:c0:79:01:82:ef:cc:f8:1b:e3: a1:72:10:91:4d:d6:ce:d3:10:eb:d3:05:c4:ea:eb: cb:4b:ea:fa:c0:37:00:cc:a2:de:1a:56:c8:ec:5d: e7:c2:77:98:8a:d6:04:54:82:6d:f9:7a:35:f9:a9: 53:f7:d5:b5:39:9c:da:20:4d:fd:d7:b7:75:61:91: 7f:fd:7e:0f:4c:46:85:c6:1b:a5:f0:b3:aa:33:3d: 68:9d:57:4e:8b:d1:1a:81:1d:65:ee:53:2b:5a:91: a4:74:75:61:d5:9a:62:e4:f1:17:7e:77:d7:fb:d1: a4:38:0b:77:93:18:a8:7b:b8:97:98:9c:57:54:ae: 3a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9E:E8:00:21:EF:75:BB:F0:6D:11:F3:1F:BB:6A:C3:07:E0:60:AE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151549.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.255.132.0/23 IPv6: 2401:2de0::/32 Signature Algorithm: sha256WithRSAEncryption 89:92:2e:73:30:1b:00:dc:be:6c:fe:7f:93:c8:fa:28:45:14: 82:cc:b6:99:f9:8c:12:2a:ce:10:c1:b1:f1:7d:ca:da:a0:c0: 98:b2:21:e9:c1:98:93:b4:c5:ae:98:62:5c:8b:20:e7:c9:f0: dc:c4:4d:96:eb:74:00:83:4a:d4:7d:47:54:53:0e:9c:14:4b: 7b:87:da:fc:6f:b0:ad:3e:65:8c:8a:2e:61:8b:ec:e6:39:e4: 1b:1a:52:bf:ef:e7:2b:f7:a3:58:38:e3:35:96:3c:dd:2e:7d: ba:67:04:35:00:34:fb:c2:37:70:9f:3b:21:f3:aa:a0:4e:33: 45:61:51:e9:fd:02:23:15:8e:82:08:c0:a0:a5:67:98:79:e0: 71:b3:a4:d9:31:34:8a:9e:dd:cb:ef:8f:9b:33:52:ab:17:c5: 7a:b9:81:8c:e6:a9:83:44:ac:ff:f7:11:bf:89:88:57:13:e6: 96:6a:7d:cb:4b:86:0b:e3:18:52:14:9d:0b:0a:50:63:2f:bc: a0:9f:a1:4b:68:b4:b5:49:ad:f5:9f:03:b8:dd:37:53:b0:c6: 25:40:fa:45:d5:85:6e:b2:32:f3:38:6c:55:04:bb:2d:6a:f1: 53:08:65:99:18:b4:d7:1c:08:ed:c3:99:60:87:98:3f:27:e8: 0d:87:db:c7 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUMyq5WHJygkexqVwHJLG7kWT99ZQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcwNzA0NTUwMFoX DTI2MDcwNjA1MDAwMFowMzExMC8GA1UEAxMoQTA5RUU4MDAyMUVGNzVCQkYwNkQx MUYzMUZCQjZBQzMwN0UwNjBBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL6vWYrKI0iUg8i23rcvDGAwBMqd1dQm8PNKFePbLI5vs3Dc17lfB5PfTf1Q hNROq0x37LNRNRz1lusviDQc0YyZoU2Mf6E4mU2en9HukMKZkZ/f4/865ZykIkmh PgXCENRERAcoomj4X7SpzlIJ7mJAAejP/IUZiIUjayBowHkBgu/M+BvjoXIQkU3W ztMQ69MFxOrry0vq+sA3AMyi3hpWyOxd58J3mIrWBFSCbfl6NfmpU/fVtTmc2iBN /de3dWGRf/1+D0xGhcYbpfCzqjM9aJ1XTovRGoEdZe5TK1qRpHR1YdWaYuTxF353 1/vRpDgLd5MYqHu4l5icV1SuOlsCAwEAAaOCAd8wggHbMB0GA1UdDgQWBBSgnugA Ie91u/BtEfMfu2rDB+BgrjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTU0OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAWf/hDANBAIAAjAHAwUAJAEt4DANBgkqhkiG9w0BAQsFAAOCAQEA iZIuczAbANy+bP5/k8j6KEUUgsy2mfmMEirOEMGx8X3K2qDAmLIh6cGYk7TFrphi XIsg58nw3MRNlut0AINK1H1HVFMOnBRLe4fa/G+wrT5ljIouYYvs5jnkGxpSv+/n K/ejWDjjNZY83S59umcENQA0+8I3cJ87IfOqoE4zRWFR6f0CIxWOggjAoKVnmHng cbOk2TE0ip7dy++PmzNSqxfFermBjOapg0Ss//cRv4mIVxPmlmp9y0uGC+MYUhSd CwpQYy+8oJ+hS2i0tUmt9Z8DuN03U7DGJUD6RdWFbrIy8zhsVQS7LWrxUwhlmRi0 1xwI7cOZYIeYPyfoDYfbxw== -----END CERTIFICATE-----Generated at Mon Jul 21 00:09:54 2025 by rpki-client