$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151560.roa File: AS151560.roa (raw, json) Hash identifier: HjaNoy72TfZ9L6XrJ3kFjz1U5/IE43Oqd7SLXVwfffA= Subject key identifier: FA:44:D5:FD:C8:09:69:BF:8D:62:F0:01:67:D0:CE:3F:AB:E9:66:6F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1A7DBA460DCD81C30DD2F8EF788F10EAA78CB13A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151560.roa Signing time: Mon 02 Mar 2026 02:21:56 +0000 ROA not before: Mon 02 Mar 2026 02:16:56 +0000 ROA not after: Mon 01 Mar 2027 02:21:56 +0000 asID: 151560 IP address blocks: 103.247.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 09:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:7d:ba:46:0d:cd:81:c3:0d:d2:f8:ef:78:8f:10:ea:a7:8c:b1:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 2 02:16:56 2026 GMT Not After : Mar 1 02:21:56 2027 GMT Subject: CN=FA44D5FDC80969BF8D62F00167D0CE3FABE9666F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c1:ce:9b:63:24:fa:54:57:cb:78:df:b4:4a: 25:32:32:3e:42:7c:63:8a:fb:3b:86:85:b2:97:bd: d5:fc:b6:4c:a3:40:d1:3a:7d:6c:9a:75:3b:8d:81: d6:c6:41:9b:fc:55:c5:ae:95:50:83:a3:02:aa:9e: c8:bc:7d:9a:6e:3f:3f:67:2d:6e:ba:0b:24:ec:4b: 7e:e2:d1:0b:50:45:f3:88:0d:84:91:ec:11:c9:1e: 32:47:6d:01:0d:bb:8d:30:18:56:98:99:0c:6d:40: 07:d1:3c:98:4e:16:f4:24:ea:0a:e8:f6:5c:6b:62: 77:08:53:78:d4:19:88:4c:19:28:b9:44:66:33:da: c5:73:97:da:1b:19:9b:a9:ed:30:f6:2b:f2:34:38: 02:ce:69:e2:08:00:26:63:a2:a7:2e:27:95:d9:a7: de:59:95:d5:2f:89:8c:36:9a:ea:84:f6:39:58:c6: 1b:f5:97:fa:1f:4f:05:f3:2c:d3:91:4e:1b:2a:96: f5:23:a5:14:e0:48:bb:e2:0f:32:c8:6c:95:fb:12: 00:e3:4e:58:61:57:07:1f:bc:e6:b2:ec:d8:82:ac: 67:df:e6:85:f2:ef:4a:6d:60:24:e6:bd:fd:f2:6a: a8:d0:34:ef:cb:4f:5a:cd:9f:a0:09:7b:c8:28:75: a5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:44:D5:FD:C8:09:69:BF:8D:62:F0:01:67:D0:CE:3F:AB:E9:66:6F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151560.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.247.240.0/24 Signature Algorithm: sha256WithRSAEncryption 91:00:37:a7:cb:c0:91:1d:fa:51:11:f5:37:7d:d9:3f:d7:fb: 2c:cd:06:9e:22:64:f7:a3:4e:14:b3:22:11:9f:4d:cc:8c:07: 08:bf:80:2e:05:88:37:e3:a8:04:f7:58:83:c3:10:9c:b1:93: a7:0c:e4:44:12:28:61:87:c3:93:52:d8:96:48:f5:10:43:e7: be:cb:a6:b8:5e:6d:ad:b3:b2:bc:d0:26:d9:f5:88:31:2c:ec: f7:37:9e:99:12:bb:07:a4:8f:a0:42:f9:7c:e6:21:99:d9:13: dd:aa:a8:b8:c5:cd:a6:3c:88:70:4f:c7:a0:61:c5:aa:0d:0c: a1:33:23:44:8b:80:07:f7:87:27:b4:ba:ed:fd:88:37:6b:a8: 92:be:8d:9c:1e:a5:f6:09:f5:ad:27:fd:bc:3e:9f:d3:6b:d1: ea:51:14:5d:f4:f9:11:c0:b5:17:07:0f:41:60:b5:e7:ad:7d: 93:b6:14:94:6f:8b:49:ba:73:28:68:45:a1:35:1c:68:dc:24: 2d:66:b3:40:5f:63:55:94:89:18:bb:4e:da:7d:56:88:63:e2: 8e:32:cd:f7:e4:c4:9a:d0:7c:49:b4:ab:ad:95:5d:1c:e0:cf: 14:85:e7:83:68:5f:c0:7d:99:73:d8:5c:58:92:8a:b9:b9:40: d5:ed:a5:0b -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUGn26Rg3NgcMN0vjveI8Q6qeMsTowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMwMjAyMTY1NloX DTI3MDMwMTAyMjE1NlowMzExMC8GA1UEAxMoRkE0NEQ1RkRDODA5NjlCRjhENjJG MDAxNjdEMENFM0ZBQkU5NjY2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALvBzptjJPpUV8t437RKJTIyPkJ8Y4r7O4aFspe91fy2TKNA0Tp9bJp1O42B 1sZBm/xVxa6VUIOjAqqeyLx9mm4/P2ctbroLJOxLfuLRC1BF84gNhJHsEckeMkdt AQ27jTAYVpiZDG1AB9E8mE4W9CTqCuj2XGtidwhTeNQZiEwZKLlEZjPaxXOX2hsZ m6ntMPYr8jQ4As5p4ggAJmOipy4nldmn3lmV1S+JjDaa6oT2OVjGG/WX+h9PBfMs 05FOGyqW9SOlFOBIu+IPMshslfsSAONOWGFXBx+85rLs2IKsZ9/mhfLvSm1gJOa9 /fJqqNA078tPWs2foAl7yCh1pXMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBT6RNX9 yAlpv41i8AFn0M4/q+lmbzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTU2MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGf38DANBgkqhkiG9w0BAQsFAAOCAQEAkQA3p8vAkR36URH1N33Z P9f7LM0GniJk96NOFLMiEZ9NzIwHCL+ALgWIN+OoBPdYg8MQnLGTpwzkRBIoYYfD k1LYlkj1EEPnvsumuF5trbOyvNAm2fWIMSzs9zeemRK7B6SPoEL5fOYhmdkT3aqo uMXNpjyIcE/HoGHFqg0MoTMjRIuAB/eHJ7S67f2IN2uokr6NnB6l9gn1rSf9vD6f 02vR6lEUXfT5EcC1FwcPQWC15619k7YUlG+LSbpzKGhFoTUcaNwkLWazQF9jVZSJ GLtO2n1WiGPijjLN9+TEmtB8SbSrrZVdHODPFIXng2hfwH2Zc9hcWJKKublA1e2l Cw== -----END CERTIFICATE-----Generated at Thu Mar 19 08:11:52 2026 by rpki-client