$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151004.roa File: AS151004.roa (raw, json) Hash identifier: ZwowC8jViM/oWKDQVSOTPAYIUA0Oz7xc7AQlvUAD5YU= Subject key identifier: 8A:4E:4B:9D:03:73:75:4A:0E:ED:D8:52:B6:7E:A2:55:C8:4B:9C:A3 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7CFD9F70E47B9B8034E269D23F866FA4645A0B4B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151004.roa Signing time: Sat 02 May 2026 21:18:42 +0000 ROA not before: Sat 02 May 2026 21:13:42 +0000 ROA not after: Sat 01 May 2027 21:18:42 +0000 asID: 151004 IP address blocks: 103.214.250.0/24 maxlen: 24 103.251.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:fd:9f:70:e4:7b:9b:80:34:e2:69:d2:3f:86:6f:a4:64:5a:0b:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:13:42 2026 GMT Not After : May 1 21:18:42 2027 GMT Subject: CN=8A4E4B9D0373754A0EEDD852B67EA255C84B9CA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d4:ec:71:a6:f6:a4:36:ed:00:e1:0d:90:33: 6e:9e:40:41:6a:d8:58:29:db:ea:94:01:b9:4a:44: 82:56:7b:c3:fe:15:15:7a:23:97:0b:97:08:a5:32: 6d:65:0b:19:b4:26:5a:18:bc:b3:60:00:24:f3:e2: c1:f8:6b:33:5a:26:e3:0d:f6:b9:78:bb:07:08:ee: 82:97:88:d7:7a:cc:8a:84:2b:d9:db:2b:97:bf:d6: 39:9b:b0:23:c5:33:50:02:64:34:1d:16:8a:1f:5a: df:ee:1b:88:a8:33:f3:60:2d:db:04:a1:d2:0d:4b: 6d:a7:95:da:51:84:98:06:39:a0:d4:1a:2e:22:ec: 1c:6f:8b:c5:5a:8f:f4:f2:34:6a:4c:7f:37:e6:71: 73:73:6f:b9:e7:e0:46:11:f2:f7:8c:99:fd:0f:39: 9c:62:43:8a:f1:6f:c0:1b:64:84:9d:34:f8:39:44: 1f:df:f3:17:10:52:dc:51:b8:5a:fb:ee:3c:66:83: 5c:05:9e:d5:4d:77:64:80:2c:70:a6:4c:8a:89:68: 99:37:70:8c:fa:78:6d:35:03:cd:8b:e8:22:09:72: b8:78:2e:be:9c:19:86:8d:4a:39:ef:08:f9:6e:f5: 53:28:5f:47:58:ac:1c:2e:be:6e:a0:87:0e:99:d7: 75:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4E:4B:9D:03:73:75:4A:0E:ED:D8:52:B6:7E:A2:55:C8:4B:9C:A3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151004.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.214.250.0/24 103.251.69.0/24 Signature Algorithm: sha256WithRSAEncryption 03:3a:cd:dc:18:f3:8b:31:9e:fb:e3:94:e4:50:83:e9:44:92: c5:59:d4:23:4d:37:68:55:65:98:b9:2b:1a:2f:c6:17:29:f2: 89:f2:43:28:93:9d:a4:dd:04:40:fa:65:9b:05:6b:c2:ed:55: c6:f0:58:df:2a:e9:82:3f:1d:98:8a:8c:7e:0a:11:be:14:7d: 5f:5e:1a:84:0d:c7:b5:29:4c:d9:8b:91:88:77:24:e7:cc:df: 4d:11:f2:27:8c:81:35:00:73:24:c8:f3:05:5d:6a:e9:19:22: dc:b1:6b:a2:b7:35:75:1c:e5:22:f3:cf:9e:c0:42:73:41:83: 01:40:9e:54:7f:ad:60:79:de:e9:12:d1:25:78:03:43:7b:a0: ff:0c:7f:c1:ea:76:d4:88:1a:e9:7a:6a:0d:d5:1f:ec:20:40: 4a:09:5c:5c:6e:1a:6b:3e:93:c3:b8:f3:49:36:a0:7b:6a:9d: cb:ed:12:40:3a:c5:4c:b9:5b:d1:91:56:da:14:88:f3:e2:a3: d4:07:bf:e8:56:d7:f0:9a:b3:56:fa:c3:e1:d8:00:82:1f:16: 3d:34:a7:e0:bc:19:61:07:80:6f:9f:49:bc:69:59:f3:0b:2c: f4:9d:7f:30:28:1e:21:45:d3:f8:43:7d:c3:13:1d:21:15:c2: 54:1d:23:bf -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUfP2fcOR7m4A04mnSP4ZvpGRaC0swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTM0MloX DTI3MDUwMTIxMTg0MlowMzExMC8GA1UEAxMoOEE0RTRCOUQwMzczNzU0QTBFRURE ODUyQjY3RUEyNTVDODRCOUNBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMzU7HGm9qQ27QDhDZAzbp5AQWrYWCnb6pQBuUpEglZ7w/4VFXojlwuXCKUy bWULGbQmWhi8s2AAJPPiwfhrM1om4w32uXi7BwjugpeI13rMioQr2dsrl7/WOZuw I8UzUAJkNB0Wih9a3+4biKgz82At2wSh0g1LbaeV2lGEmAY5oNQaLiLsHG+LxVqP 9PI0akx/N+Zxc3NvuefgRhHy94yZ/Q85nGJDivFvwBtkhJ00+DlEH9/zFxBS3FG4 WvvuPGaDXAWe1U13ZIAscKZMiolomTdwjPp4bTUDzYvoIglyuHguvpwZho1KOe8I +W71UyhfR1isHC6+bqCHDpnXdUUCAwEAAaOCAdIwggHOMB0GA1UdDgQWBBSKTkud A3N1Sg7t2FK2fqJVyEucozAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxMDA0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQAZ9b6AwQAZ/tFMA0GCSqGSIb3DQEBCwUAA4IBAQADOs3cGPOLMZ7745Tk UIPpRJLFWdQjTTdoVWWYuSsaL8YXKfKJ8kMok52k3QRA+mWbBWvC7VXG8FjfKumC Px2Yiox+ChG+FH1fXhqEDce1KUzZi5GIdyTnzN9NEfInjIE1AHMkyPMFXWrpGSLc sWuitzV1HOUi88+ewEJzQYMBQJ5Uf61ged7pEtEleANDe6D/DH/B6nbUiBrpemoN 1R/sIEBKCVxcbhprPpPDuPNJNqB7ap3L7RJAOsVMuVvRkVbaFIjz4qPUB7/oVtfw mrNW+sPh2ACCHxY9NKfgvBlhB4Bvn0m8aVnzCyz0nX8wKB4hRdP4Q33DEx0hFcJU HSO/ -----END CERTIFICATE-----Generated at Sun May 3 00:39:40 2026 by rpki-client