$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS151541.roa File: AS151541.roa (raw, json) Hash identifier: JpiFv/cmBMc+oe9x9YzPFLiH9vze6DcuxBAmDrE9FAo= Subject key identifier: 4C:13:2E:7C:E3:A6:02:88:F8:36:BC:66:2A:D3:50:66:9D:85:A9:39 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 6EA577790C0444378E5F19662AA9E46974BBECC4 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS151541.roa Signing time: Tue 04 Aug 2026 06:31:14 +0000 ROA not before: Tue 04 Aug 2026 06:26:14 +0000 ROA not after: Tue 03 Aug 2027 06:31:14 +0000 asID: 151541 IP address blocks: 160.236.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:a5:77:79:0c:04:44:37:8e:5f:19:66:2a:a9:e4:69:74:bb:ec:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Aug 4 06:26:14 2026 GMT Not After : Aug 3 06:31:14 2027 GMT Subject: CN=4C132E7CE3A60288F836BC662AD350669D85A939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d2:b5:da:7f:de:3b:fc:aa:01:bb:99:5d:21: 43:1d:65:03:f0:17:43:13:52:02:a3:16:89:fd:53: 1f:3d:c0:6f:5b:a8:6b:04:44:7e:c8:65:37:82:8a: fd:e3:7b:51:71:ad:a7:75:ad:4a:e6:97:94:3d:d3: 13:03:d4:97:d7:ea:48:26:93:9c:7c:f9:d2:7b:67: d3:25:7b:c7:f5:64:47:c9:b2:a0:3b:72:0b:98:61: ce:5f:06:2b:cb:8e:44:76:cc:4b:0e:6b:df:98:9e: 23:0b:0f:6f:c9:e3:e5:f9:1f:cb:58:f0:a8:23:5e: 44:f7:72:a9:3d:cd:7f:44:e0:9e:41:28:5a:04:0c: 3b:73:84:48:03:40:53:55:c4:28:d5:93:9d:cb:a4: fd:10:26:83:17:95:74:09:5b:07:a5:46:46:2a:8b: e1:88:57:98:d5:09:da:13:78:2c:54:9d:ad:68:73: 78:85:1c:01:c5:91:74:84:18:80:0d:0f:19:ec:c2: 55:c3:89:32:96:a3:65:a8:99:dd:14:61:0e:66:89: fc:ea:82:3a:88:db:fd:38:1f:0c:d8:38:c3:99:d9: 9d:d7:40:38:94:19:1a:8e:ac:b1:da:38:2e:6d:14: 0c:c0:e3:d0:df:ff:f8:8e:a9:6b:90:ab:95:9b:21: 43:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:13:2E:7C:E3:A6:02:88:F8:36:BC:66:2A:D3:50:66:9D:85:A9:39 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS151541.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.123.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:cb:d4:2c:4b:92:ba:a4:cd:c2:3b:87:5b:6f:48:63:ca:7f: 7b:89:3b:73:6e:19:0c:1a:68:57:4e:e0:5e:17:19:54:0f:9b: 48:22:9c:96:d2:b1:1e:5b:9a:23:79:e8:d4:a4:d8:06:75:68: 08:59:7b:c7:c4:8c:1f:e7:b4:fb:96:53:90:f3:0b:25:9e:c6: c9:46:09:07:03:5b:7a:19:4b:b8:f8:dd:1d:61:6f:20:92:b2: ac:d0:3f:ce:6b:e7:89:ec:12:8a:c5:e7:ae:e7:4c:f8:b8:df: 0f:1c:a9:79:d0:4b:1b:2d:86:8a:5a:7f:63:3f:b1:12:83:8f: 76:99:d2:9c:f3:d5:14:c2:af:23:4a:f5:c3:4c:df:94:2d:3a: 47:c1:01:e7:3d:b8:ea:6f:be:c8:38:18:8a:09:f1:dc:ff:2e: db:1b:ac:81:da:8c:2a:78:da:5c:37:27:a1:dd:67:00:07:88: c6:86:e9:a6:22:a9:69:c7:ed:df:55:cf:db:23:f2:5f:e5:76: 7a:16:00:6a:a1:0f:27:d3:57:fa:d1:c8:e1:d4:57:be:a2:5a: a4:7a:ac:0f:12:c9:2d:4f:d6:23:7c:31:a1:74:be:17:56:27: 48:59:5d:21:6c:16:c8:33:40:13:75:98:56:cb:ab:30:53:1c: ca:0b:4c:6c -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUbqV3eQwERDeOXxlmKqnkaXS77MQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDgwNDA2MjYxNFoX DTI3MDgwMzA2MzExNFowMzExMC8GA1UEAxMoNEMxMzJFN0NFM0E2MDI4OEY4MzZC QzY2MkFEMzUwNjY5RDg1QTkzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALjStdp/3jv8qgG7mV0hQx1lA/AXQxNSAqMWif1THz3Ab1uoawREfshlN4KK /eN7UXGtp3WtSuaXlD3TEwPUl9fqSCaTnHz50ntn0yV7x/VkR8myoDtyC5hhzl8G K8uORHbMSw5r35ieIwsPb8nj5fkfy1jwqCNeRPdyqT3Nf0TgnkEoWgQMO3OESANA U1XEKNWTncuk/RAmgxeVdAlbB6VGRiqL4YhXmNUJ2hN4LFSdrWhzeIUcAcWRdIQY gA0PGezCVcOJMpajZaiZ3RRhDmaJ/OqCOojb/TgfDNg4w5nZnddAOJQZGo6ssdo4 Lm0UDMDj0N//+I6pa5CrlZshQ9ECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRMEy58 46YCiPg2vGYq01BmnYWpOTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUxNTQxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOx7MA0GCSqGSIb3DQEBCwUAA4IBAQCPy9QsS5K6pM3CO4dbb0hjyn97 iTtzbhkMGmhXTuBeFxlUD5tIIpyW0rEeW5ojeejUpNgGdWgIWXvHxIwf57T7llOQ 8wslnsbJRgkHA1t6GUu4+N0dYW8gkrKs0D/Oa+eJ7BKKxeeu50z4uN8PHKl50Esb LYaKWn9jP7ESg492mdKc89UUwq8jSvXDTN+ULTpHwQHnPbjqb77IOBiKCfHc/y7b G6yB2owqeNpcNyeh3WcAB4jGhummIqlpx+3fVc/bI/Jf5XZ6FgBqoQ8n01f60cjh 1Fe+olqkeqwPEsktT9YjfDGhdL4XVidIWV0hbBbIM0ATdZhWy6swUxzKC0xs -----END CERTIFICATE-----Generated at Thu Sep 17 12:16:46 2026 by rpki-client