$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151043.roa File: AS151043.roa (raw, json) Hash identifier: S3Vz0JvsG2Dj+oy1SjDo/NA2azsHRGe9aR3DBEf7cJc= Subject key identifier: 01:96:50:07:73:47:E7:EF:E3:C9:0B:38:BD:96:35:FD:C2:B6:5C:0F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1397454E12E8C3A466F43207E34AB7100770A013 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151043.roa Signing time: Wed 08 Oct 2025 02:57:18 +0000 ROA not before: Wed 08 Oct 2025 02:52:18 +0000 ROA not after: Wed 07 Oct 2026 02:57:18 +0000 asID: 151043 IP address blocks: 163.227.86.0/24 maxlen: 24 2001:df5:5ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:97:45:4e:12:e8:c3:a4:66:f4:32:07:e3:4a:b7:10:07:70:a0:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 8 02:52:18 2025 GMT Not After : Oct 7 02:57:18 2026 GMT Subject: CN=019650077347E7EFE3C90B38BD9635FDC2B65C0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4e:eb:fb:b8:f8:1c:a9:b5:ac:25:56:26:91: 0b:a9:b6:97:c4:42:77:e3:ec:34:26:b9:2d:e0:fe: f2:58:1e:0d:6f:a6:28:c2:f2:b8:95:40:81:47:58: 8b:ee:22:00:90:a2:d0:9f:75:c4:70:9d:4f:ee:ac: ef:93:ce:17:1a:b7:a2:d8:ea:8d:3c:14:38:29:0f: 80:d6:c2:bc:49:6d:88:f8:3e:55:d9:aa:e1:63:f0: 22:f2:52:0e:87:f2:86:f2:a6:8a:61:ca:78:83:a0: b3:c2:c9:eb:f3:94:c0:1a:73:6a:79:3d:b7:ce:c1: f5:64:ad:4a:9f:f5:b5:b7:ab:72:55:17:7c:75:6c: 54:2d:26:b6:2f:96:00:68:0f:56:73:03:3c:70:3c: 89:65:65:f5:f6:62:d5:59:17:30:89:0d:e4:9f:79: e7:a3:40:18:fb:7d:33:55:52:36:3c:b2:8f:cf:f1: 2e:c3:25:72:47:6c:44:84:b6:1e:ef:34:06:57:6f: 60:d8:e6:34:69:0e:04:ff:71:63:cd:ef:03:92:28: e2:d3:90:c7:97:e9:47:5d:49:5c:da:84:8d:3c:2c: dc:a0:7f:fd:70:5c:fa:af:f6:cb:e3:e7:44:a0:cc: 4f:85:65:9e:5a:24:65:44:69:49:74:11:ca:93:2b: e6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:96:50:07:73:47:E7:EF:E3:C9:0B:38:BD:96:35:FD:C2:B6:5C:0F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151043.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.86.0/24 IPv6: 2001:df5:5ec0::/48 Signature Algorithm: sha256WithRSAEncryption 2b:e2:98:1d:cf:c2:71:92:ba:08:03:46:8e:ee:82:eb:d5:f9: 38:4b:5a:11:35:89:d8:ec:74:52:7d:b5:a4:5b:85:b5:62:36: 56:cc:8a:9e:53:60:dc:30:64:44:09:c0:fd:db:24:3b:a2:5a: 7a:99:53:a6:d4:0f:96:ba:36:05:bd:ce:fe:87:d3:f8:0e:1f: c8:bb:12:ed:94:a2:b1:1a:d5:ed:a4:9a:4b:9c:d8:d7:7c:0f: 0e:d8:1a:9c:6b:5f:1b:3e:e0:4e:3b:99:97:13:bb:96:72:17: 36:b5:56:5a:ff:4b:fc:4d:fd:14:38:ff:aa:19:17:52:3c:6e: 1e:04:6c:b1:fc:a8:57:44:1f:81:f4:8f:3e:b4:2d:0a:e0:7b: 86:66:7e:db:fc:eb:66:b4:f9:58:39:4a:d8:70:6d:6c:c9:a6: 00:9c:e5:87:0b:73:8a:a7:cf:ed:94:63:30:ee:0b:32:dc:19: 1e:b7:67:a1:a2:01:52:a8:9e:99:03:55:8a:4f:60:ea:bd:f8: da:2d:96:85:51:d3:78:67:4c:63:97:a1:e1:96:15:ec:90:7e: f6:d1:61:65:18:9f:1d:d7:0f:ab:03:21:6e:65:f4:10:fa:20: d6:56:9b:f2:21:b4:f8:1a:18:bc:98:86:f5:7b:3e:8c:e6:39: 2c:38:a7:0d -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUE5dFThLow6Rm9DIH40q3EAdwoBMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAwODAyNTIxOFoX DTI2MTAwNzAyNTcxOFowMzExMC8GA1UEAxMoMDE5NjUwMDc3MzQ3RTdFRkUzQzkw QjM4QkQ5NjM1RkRDMkI2NUMwRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNO6/u4+ByptawlViaRC6m2l8RCd+PsNCa5LeD+8lgeDW+mKMLyuJVAgUdY i+4iAJCi0J91xHCdT+6s75POFxq3otjqjTwUOCkPgNbCvEltiPg+Vdmq4WPwIvJS DofyhvKmimHKeIOgs8LJ6/OUwBpzank9t87B9WStSp/1tberclUXfHVsVC0mti+W AGgPVnMDPHA8iWVl9fZi1VkXMIkN5J9556NAGPt9M1VSNjyyj8/xLsMlckdsRIS2 Hu80BldvYNjmNGkOBP9xY83vA5Io4tOQx5fpR11JXNqEjTws3KB//XBc+q/2y+Pn RKDMT4VlnlokZURpSXQRypMr5usCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBQBllAH c0fn7+PJCzi9ljX9wrZcDzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTA0My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAKPjVjAPBAIAAjAJAwcAIAEN9V7AMA0GCSqGSIb3DQEBCwUAA4IB AQAr4pgdz8JxkroIA0aO7oLr1fk4S1oRNYnY7HRSfbWkW4W1YjZWzIqeU2DcMGRE CcD92yQ7olp6mVOm1A+WujYFvc7+h9P4Dh/IuxLtlKKxGtXtpJpLnNjXfA8O2Bqc a18bPuBOO5mXE7uWchc2tVZa/0v8Tf0UOP+qGRdSPG4eBGyx/KhXRB+B9I8+tC0K 4HuGZn7b/OtmtPlYOUrYcG1syaYAnOWHC3OKp8/tlGMw7gsy3Bket2ehogFSqJ6Z A1WKT2DqvfjaLZaFUdN4Z0xjl6HhlhXskH720WFlGJ8d1w+rAyFuZfQQ+iDWVpvy IbT4Ghi8mIb1ez6M5jksOKcN -----END CERTIFICATE-----Generated at Sun Oct 19 12:51:22 2025 by rpki-client