$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS151505.roa File: AS151505.roa (raw, json) Hash identifier: I/E70BPNoW9pxbKLabNS89Zv9f8Dl/Mo6LtoGJ8uyNY= Subject key identifier: 93:7D:FA:59:B2:68:E7:84:9B:F1:BC:FF:A7:F4:E5:64:5A:1C:58:72 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 3C821559F00EDE1C763F4F581C5EE42D2290BEDC Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS151505.roa Signing time: Sat 02 May 2026 09:24:20 +0000 ROA not before: Sat 02 May 2026 09:19:20 +0000 ROA not after: Sat 01 May 2027 09:24:20 +0000 asID: 151505 IP address blocks: 161.248.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:82:15:59:f0:0e:de:1c:76:3f:4f:58:1c:5e:e4:2d:22:90:be:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:19:20 2026 GMT Not After : May 1 09:24:20 2027 GMT Subject: CN=937DFA59B268E7849BF1BCFFA7F4E5645A1C5872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:58:95:97:ed:3f:34:ae:b7:16:03:0e:cc:88: 8d:de:21:f0:1c:f8:3d:fd:c2:ea:37:6e:64:4b:b2: de:72:60:35:f1:0b:8d:92:9c:81:41:24:1e:e1:db: 68:01:90:f7:c0:3b:20:c4:44:b1:b4:43:53:d7:06: 53:7d:ee:f6:c7:c2:a8:cc:79:ff:bf:18:2a:07:2e: e7:e9:bb:f5:09:1a:0a:e2:e5:e0:76:bb:a0:2b:21: 94:be:f2:c3:ef:09:48:81:c0:52:0d:60:d7:a6:0f: b8:a4:fe:60:60:54:8c:39:06:fa:bc:6f:9c:ee:66: 00:d3:67:2c:b6:f7:55:19:43:61:64:5f:b5:63:bb: ba:6b:b2:03:05:99:67:b2:3d:20:28:52:f3:ce:cb: 9e:dd:2a:0e:c4:e0:be:9f:36:07:8a:6d:e1:07:eb: e3:18:de:c9:14:b2:06:c9:76:b9:ab:50:d9:30:24: 50:80:a2:cd:a8:d8:1f:68:2e:21:52:1f:e1:6a:fa: dc:82:b6:c9:8e:98:68:4a:c6:f7:f6:96:4b:31:52: 0f:d4:20:f5:64:ca:27:07:2a:9a:f7:a9:21:92:6a: 0c:03:a7:e6:da:8d:8f:24:e7:3d:59:3c:ee:ce:da: 23:e8:75:db:a1:0c:92:1f:f5:06:0a:41:31:53:93: 6d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7D:FA:59:B2:68:E7:84:9B:F1:BC:FF:A7:F4:E5:64:5A:1C:58:72 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS151505.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.248.206.0/24 Signature Algorithm: sha256WithRSAEncryption 21:f0:82:17:81:7b:ad:c6:d8:fb:d3:05:0d:6f:c3:53:08:6f: cf:5a:07:5a:77:a5:76:8b:3a:fa:a1:d2:81:e1:2c:1e:bf:14: ae:85:00:04:01:7f:00:9d:3f:c2:04:b8:81:75:42:6a:9e:ba: 5a:bf:7c:9b:0e:6e:09:ac:14:d6:d7:f9:13:d0:f0:39:16:62: f1:fe:63:b4:69:89:f7:b6:65:73:b6:d7:18:ea:69:12:b7:c3: 51:58:9b:93:2e:54:70:85:6e:7f:6a:47:bc:59:97:99:f9:9d: ea:d5:71:66:6e:26:b0:43:45:03:36:40:c0:d5:c7:86:9a:f9: ac:03:bc:95:50:6e:42:c2:f8:f5:eb:4d:46:b1:30:81:0c:fc: 6a:c5:c3:d8:9c:01:d3:7c:fd:fc:94:f1:07:8d:be:78:48:bd: ff:cf:d0:33:cd:41:5d:06:15:1e:81:e3:0b:b8:cd:83:39:23: b8:85:bf:e7:94:44:85:1e:55:8f:68:d2:14:c3:73:e9:e6:ed: 0a:e1:0e:ff:35:20:66:f7:8a:85:ee:2b:b6:e4:f9:e7:98:62: 8e:09:35:71:12:89:44:42:fc:2a:7b:7b:09:62:58:6f:8e:14: b2:f3:82:4c:da:08:1b:4e:1e:d6:42:37:aa:2c:6f:25:96:56: 53:70:ae:b9 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUPIIVWfAO3hx2P09YHF7kLSKQvtwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTkyMFoX DTI3MDUwMTA5MjQyMFowMzExMC8GA1UEAxMoOTM3REZBNTlCMjY4RTc4NDlCRjFC Q0ZGQTdGNEU1NjQ1QTFDNTg3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMdYlZftPzSutxYDDsyIjd4h8Bz4Pf3C6jduZEuy3nJgNfELjZKcgUEkHuHb aAGQ98A7IMREsbRDU9cGU33u9sfCqMx5/78YKgcu5+m79QkaCuLl4Ha7oCshlL7y w+8JSIHAUg1g16YPuKT+YGBUjDkG+rxvnO5mANNnLLb3VRlDYWRftWO7umuyAwWZ Z7I9IChS887Lnt0qDsTgvp82B4pt4Qfr4xjeyRSyBsl2uatQ2TAkUICizajYH2gu IVIf4Wr63IK2yY6YaErG9/aWSzFSD9Qg9WTKJwcqmvepIZJqDAOn5tqNjyTnPVk8 7s7aI+h126EMkh/1BgpBMVOTbZsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSTffpZ smjnhJvxvP+n9OVkWhxYcjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUxNTA1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAofjOMA0GCSqGSIb3DQEBCwUAA4IBAQAh8IIXgXutxtj70wUNb8NTCG/P Wgdad6V2izr6odKB4SwevxSuhQAEAX8AnT/CBLiBdUJqnrpav3ybDm4JrBTW1/kT 0PA5FmLx/mO0aYn3tmVzttcY6mkSt8NRWJuTLlRwhW5/ake8WZeZ+Z3q1XFmbiaw Q0UDNkDA1ceGmvmsA7yVUG5Cwvj1601GsTCBDPxqxcPYnAHTfP38lPEHjb54SL3/ z9AzzUFdBhUegeMLuM2DOSO4hb/nlESFHlWPaNIUw3Pp5u0K4Q7/NSBm94qF7iu2 5PnnmGKOCTVxEolEQvwqe3sJYlhvjhSy84JM2ggbTh7WQjeqLG8lllZTcK65 -----END CERTIFICATE-----Generated at Sat May 2 21:04:40 2026 by rpki-client