$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS151655.roa File: AS151655.roa (raw, json) Hash identifier: B0E6aymYkHWzIER35Dx8Mr3eH8diF9+lo+UzykZh5ps= Subject key identifier: C1:2D:82:EB:F9:F0:A7:03:90:3B:DB:8A:BD:8D:23:3D:8D:11:D5:C7 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 61D35237F1A77A18D155D5437021EBE437DF0AA1 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS151655.roa Signing time: Fri 31 Jul 2026 03:48:31 +0000 ROA not before: Fri 31 Jul 2026 03:43:31 +0000 ROA not after: Fri 30 Jul 2027 03:48:31 +0000 asID: 151655 IP address blocks: 160.236.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:d3:52:37:f1:a7:7a:18:d1:55:d5:43:70:21:eb:e4:37:df:0a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jul 31 03:43:31 2026 GMT Not After : Jul 30 03:48:31 2027 GMT Subject: CN=C12D82EBF9F0A703903BDB8ABD8D233D8D11D5C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e3:57:b7:f6:7e:58:91:1c:ec:98:b9:6a:b3: d8:a2:8d:45:58:2e:57:fb:8c:b8:f7:30:2d:22:e5: 89:df:8b:3d:ab:c1:47:39:99:46:66:b7:9b:4f:05: 1b:7c:e2:67:8f:48:32:07:af:61:09:cb:76:db:13: 98:76:87:ae:82:c2:4b:0c:a7:f1:05:99:c1:1a:a6: 7c:bc:bf:23:07:e1:bc:03:7f:3d:52:a7:e5:d7:4d: de:57:5f:55:c8:08:3d:21:dd:0f:c4:d8:16:ba:ea: 22:cc:c6:2a:c3:23:a8:e8:69:7f:6c:84:c7:c4:fb: 6e:00:67:52:12:a1:bc:71:df:b1:ab:30:ab:5e:e1: a0:80:cb:91:52:cc:e4:4b:c8:59:f7:d2:c0:99:58: 51:6a:42:a3:b0:e9:42:1a:16:d4:dd:21:98:19:80: 69:c9:00:e9:74:ea:8c:8e:ce:db:c2:b0:1d:20:88: 88:f2:ce:ae:17:6d:d3:b6:91:c1:c2:2a:50:7b:55: 5c:5b:eb:df:cd:6f:8e:12:18:c7:6f:4e:78:69:cc: 2f:99:c7:51:ad:01:4c:1d:c8:fb:bf:75:0f:02:59: 10:3f:76:d5:6e:86:c6:72:41:ed:21:99:12:c1:de: a2:67:dd:80:27:9a:b9:9e:4e:ec:33:4b:94:d5:eb: 38:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2D:82:EB:F9:F0:A7:03:90:3B:DB:8A:BD:8D:23:3D:8D:11:D5:C7 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS151655.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.179.0/24 Signature Algorithm: sha256WithRSAEncryption a6:9d:93:3c:17:f4:4d:ab:4e:7d:f4:04:10:fd:48:46:61:a7: b5:cb:2a:20:69:06:f2:23:09:67:e7:44:75:cf:57:68:56:37: e9:86:a1:6a:f8:18:26:b9:42:34:2b:5f:de:a8:cc:da:f7:5e: 3a:34:96:27:fa:d4:0e:b0:72:f7:95:7b:20:6d:ff:68:10:d2: 83:9a:07:bc:94:cb:2d:b4:db:8e:b8:2b:0d:fa:0c:d7:00:06: 7d:a0:5c:a7:92:00:3b:62:fe:46:9d:7c:fc:76:80:82:de:fc: a1:e3:26:be:68:b6:76:35:fe:2b:3f:3c:58:29:88:62:1e:09: 94:4c:8a:ea:0e:b0:7c:31:bf:86:d7:15:fa:d4:ea:4a:ea:4f: 24:0a:89:6f:cb:f0:f2:a9:56:a4:77:d6:4a:fa:d5:d3:19:35: 09:ed:94:4f:b1:4d:bf:6d:5c:5b:1b:73:2d:03:58:21:44:cf: a6:2f:41:83:0a:f5:3a:a5:52:57:9f:f8:e7:a2:2c:d2:dd:6c: 9f:31:38:f3:83:39:ee:05:17:c9:62:b5:87:f2:b3:72:6d:f8: e2:94:e0:6a:be:ed:b6:e7:65:3a:3d:f2:7d:3b:23:c8:85:d0: 19:5c:c1:d6:a7:d7:ba:d5:6e:a6:ae:c9:93:15:ae:0a:e0:b9: 50:a3:d7:09 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUYdNSN/GnehjRVdVDcCHr5DffCqEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDczMTAzNDMzMVoX DTI3MDczMDAzNDgzMVowMzExMC8GA1UEAxMoQzEyRDgyRUJGOUYwQTcwMzkwM0JE QjhBQkQ4RDIzM0Q4RDExRDVDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTjV7f2fliRHOyYuWqz2KKNRVguV/uMuPcwLSLlid+LPavBRzmZRma3m08F G3ziZ49IMgevYQnLdtsTmHaHroLCSwyn8QWZwRqmfLy/IwfhvAN/PVKn5ddN3ldf VcgIPSHdD8TYFrrqIszGKsMjqOhpf2yEx8T7bgBnUhKhvHHfsaswq17hoIDLkVLM 5EvIWffSwJlYUWpCo7DpQhoW1N0hmBmAackA6XTqjI7O28KwHSCIiPLOrhdt07aR wcIqUHtVXFvr381vjhIYx29OeGnML5nHUa0BTB3I+791DwJZED921W6GxnJB7SGZ EsHeomfdgCeauZ5O7DNLlNXrOCsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTBLYLr +fCnA5A724q9jSM9jRHVxzAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUxNjU1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOyzMA0GCSqGSIb3DQEBCwUAA4IBAQCmnZM8F/RNq0599AQQ/UhGYae1 yyogaQbyIwln50R1z1doVjfphqFq+BgmuUI0K1/eqMza9146NJYn+tQOsHL3lXsg bf9oENKDmge8lMsttNuOuCsN+gzXAAZ9oFynkgA7Yv5GnXz8doCC3vyh4ya+aLZ2 Nf4rPzxYKYhiHgmUTIrqDrB8Mb+G1xX61OpK6k8kColvy/DyqVakd9ZK+tXTGTUJ 7ZRPsU2/bVxbG3MtA1ghRM+mL0GDCvU6pVJXn/jnoizS3WyfMTjzgznuBRfJYrWH 8rNybfjilOBqvu2252U6PfJ9OyPIhdAZXMHWp9e61W6mrsmTFa4K4LlQo9cJ -----END CERTIFICATE-----Generated at Sun Aug 2 16:56:47 2026 by rpki-client