$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151000.roa File: AS151000.roa (raw, json) Hash identifier: /e+P1NBPsGkWlIQlm3KHpvI7RLp24KAiGSN0Xa23GB4= Subject key identifier: 5C:2E:61:8F:64:1A:83:35:82:6A:6D:10:7F:B0:85:46:70:A5:40:D8 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2DBDAD2EC137E8767775A1035C46314E777D1E0A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151000.roa Signing time: Tue 01 Sep 2026 08:35:11 +0000 ROA not before: Tue 01 Sep 2026 08:30:11 +0000 ROA not after: Tue 31 Aug 2027 08:35:11 +0000 asID: 151000 IP address blocks: 103.139.244.0/23 maxlen: 24 103.155.224.0/23 maxlen: 24 103.190.0.0/23 maxlen: 24 103.190.0.0/24 maxlen: 24 2402:12e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:bd:ad:2e:c1:37:e8:76:77:75:a1:03:5c:46:31:4e:77:7d:1e:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 1 08:30:11 2026 GMT Not After : Aug 31 08:35:11 2027 GMT Subject: CN=5C2E618F641A8335826A6D107FB0854670A540D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:85:e3:74:12:80:d6:a4:80:92:43:e4:22:63: e6:78:d5:0f:ab:9f:d1:43:fc:d8:23:57:b8:01:7a: 56:4e:76:96:37:b3:26:75:0d:47:84:bf:e2:24:96: 75:ba:c9:4e:91:3d:a9:03:a7:b8:7e:59:ab:d8:de: 6e:0f:ad:04:58:67:25:84:33:d3:ab:92:fd:5b:f5: 87:5b:0f:12:b7:03:a6:db:5f:46:c0:57:25:67:c8: bc:1a:bb:0c:b2:4e:35:e6:9b:b9:1c:e2:36:6c:5f: 5c:e6:11:68:c5:1a:df:63:48:de:b6:3d:53:7a:01: 97:e3:da:ed:53:6f:9c:b9:68:8a:7d:c8:ab:d4:cc: 15:9e:07:fa:34:b4:5d:e2:2a:9a:9f:9a:95:ea:fa: 70:a1:9e:dd:22:4d:6c:4c:d3:75:38:fb:23:da:0a: 10:46:cb:db:50:5f:f2:98:e8:ca:70:7a:b3:6b:9e: 28:ea:5b:0b:11:de:80:e4:7a:75:f7:d5:c1:f7:2e: 5f:23:a6:62:58:42:19:f3:39:27:c9:e0:f9:ff:41: d2:81:b2:01:09:48:ce:72:f9:94:0a:0c:5c:83:9d: 7c:b5:d6:2f:af:d9:b0:dd:68:f1:e8:02:00:5f:50: 9a:50:13:4f:cc:39:96:f9:f2:e9:3e:62:8c:50:1f: d0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:2E:61:8F:64:1A:83:35:82:6A:6D:10:7F:B0:85:46:70:A5:40:D8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151000.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.244.0/23 103.155.224.0/23 103.190.0.0/23 IPv6: 2402:12e0::/32 Signature Algorithm: sha256WithRSAEncryption 39:7e:ea:90:ff:98:15:95:7e:1a:7c:7e:af:1c:5c:ce:9a:e3: 6a:50:b0:4c:c3:37:36:83:c8:08:5b:8a:e0:85:1c:f5:22:b3: 72:7a:76:95:05:4f:3e:1a:b2:1b:b6:b2:75:c3:ab:52:4e:c1: 9c:45:85:e0:41:a9:a6:33:82:cb:8f:8f:89:72:f1:8f:49:2e: 4c:a6:60:8b:f4:2d:d1:de:d2:f2:95:00:0c:a1:23:6e:b9:9a: 64:2b:d0:de:4d:eb:d9:a5:7c:37:4b:ad:98:3b:82:d9:2f:ba: a1:a0:9d:37:5a:46:51:67:d6:38:d3:82:94:c9:c5:92:fa:5d: 60:7b:18:93:2d:ad:26:85:be:a3:84:28:d7:2a:95:d8:1b:bb: 7b:d9:eb:2d:f7:5c:ac:ce:24:1f:d6:bf:3b:52:f7:be:6c:31: b9:5c:20:03:1c:06:c0:cb:e4:79:20:cc:ce:85:bd:d0:af:34: a6:6a:9a:70:bb:19:7c:8a:d7:73:e7:93:14:1e:35:0d:7e:f9: 45:0b:a9:a7:0c:b8:84:8c:97:19:d0:4c:49:92:bc:83:0a:7e: e5:b9:92:87:1e:49:ca:e4:4e:f8:24:f4:70:91:73:6b:d6:f6: 1d:81:d2:8d:33:f1:90:d8:4a:5a:bd:c3:50:38:5b:c7:f0:fa: 60:e4:46:87 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIULb2tLsE36HZ3daEDXEYxTnd9HgowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkwMTA4MzAxMVoX DTI3MDgzMTA4MzUxMVowMzExMC8GA1UEAxMoNUMyRTYxOEY2NDFBODMzNTgyNkE2 RDEwN0ZCMDg1NDY3MEE1NDBEODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANOF43QSgNakgJJD5CJj5njVD6uf0UP82CNXuAF6Vk52ljezJnUNR4S/4iSW dbrJTpE9qQOnuH5Zq9jebg+tBFhnJYQz06uS/Vv1h1sPErcDpttfRsBXJWfIvBq7 DLJONeabuRziNmxfXOYRaMUa32NI3rY9U3oBl+Pa7VNvnLloin3Iq9TMFZ4H+jS0 XeIqmp+aler6cKGe3SJNbEzTdTj7I9oKEEbL21Bf8pjoynB6s2ueKOpbCxHegOR6 dffVwfcuXyOmYlhCGfM5J8ng+f9B0oGyAQlIznL5lAoMXIOdfLXWL6/ZsN1o8egC AF9QmlATT8w5lvny6T5ijFAf0L8CAwEAAaOCAecwggHjMB0GA1UdDgQWBBRcLmGP ZBqDNYJqbRB/sIVGcKVA2DAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxMDAwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIA ATASAwQBZ4v0AwQBZ5vgAwQBZ74AMA0EAgACMAcDBQAkAhLgMA0GCSqGSIb3DQEB CwUAA4IBAQA5fuqQ/5gVlX4afH6vHFzOmuNqULBMwzc2g8gIW4rghRz1IrNyenaV BU8+GrIbtrJ1w6tSTsGcRYXgQammM4LLj4+JcvGPSS5MpmCL9C3R3tLylQAMoSNu uZpkK9DeTevZpXw3S62YO4LZL7qhoJ03WkZRZ9Y404KUycWS+l1gexiTLa0mhb6j hCjXKpXYG7t72est91ysziQf1r87Uve+bDG5XCADHAbAy+R5IMzOhb3QrzSmappw uxl8itdz55MUHjUNfvlFC6mnDLiEjJcZ0ExJkryDCn7luZKHHknK5E74JPRwkXNr 1vYdgdKNM/GQ2EpavcNQOFvH8Ppg5EaH -----END CERTIFICATE-----Generated at Thu Sep 17 06:29:14 2026 by rpki-client