$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151007.roa File: AS151007.roa (raw, json) Hash identifier: +KBtgyeAkzTzrnUn2M9SeVxtz05DHaMeFdYm8XHIkmw= Subject key identifier: E8:BF:E9:67:BB:A1:5A:09:28:57:96:92:8B:B0:17:C8:C5:F7:E2:F5 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 281C7B8792C7EAAD90DEF02AF6D89FF6444774E2 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151007.roa Signing time: Sat 02 May 2026 21:19:27 +0000 ROA not before: Sat 02 May 2026 21:14:27 +0000 ROA not after: Sat 01 May 2027 21:19:27 +0000 asID: 151007 IP address blocks: 103.68.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:1c:7b:87:92:c7:ea:ad:90:de:f0:2a:f6:d8:9f:f6:44:47:74:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:14:27 2026 GMT Not After : May 1 21:19:27 2027 GMT Subject: CN=E8BFE967BBA15A09285796928BB017C8C5F7E2F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:80:3d:a8:21:d8:c7:50:e0:69:05:de:e3:3b: 09:e9:47:7b:ea:2e:f4:72:f4:af:c0:46:0e:06:1d: e5:d0:32:0f:ce:e7:08:f7:7a:23:63:2d:cb:b5:15: d2:68:db:0f:74:ef:06:7b:a7:95:a3:5e:79:04:fb: 2c:fa:00:8c:57:72:b4:d8:60:c7:0b:c0:35:f9:e4: 3a:c6:43:1b:9a:ef:2f:f9:f8:16:28:45:10:ae:53: 5d:91:a7:60:42:51:d0:3b:5f:b5:9b:1e:49:64:8a: 6c:03:2a:a0:bb:fb:a1:3c:b1:0e:56:a1:07:b3:0b: ce:57:62:0d:64:27:0f:dc:66:d2:7c:f0:e5:8e:1c: 56:7e:a7:4c:0a:e1:11:34:c0:83:20:2a:6e:e1:59: 74:9c:5e:02:73:0d:fd:a4:3d:07:20:36:5f:8c:bc: 88:24:69:bb:c6:1b:5b:cd:cd:20:06:2e:67:e3:67: a2:eb:21:9b:2c:3c:8e:18:c4:b8:16:a1:c8:52:ca: 87:c3:43:6e:5c:30:b0:9b:7f:e0:b6:6a:e5:d1:2d: 46:49:c4:02:c5:81:89:5f:06:c8:ef:90:6f:e7:f6: 3b:80:83:6b:98:c8:1d:a3:64:6d:85:a7:2f:a3:e4: 2c:2c:f4:2e:8a:2c:93:34:42:91:34:14:24:27:2a: 7f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BF:E9:67:BB:A1:5A:09:28:57:96:92:8B:B0:17:C8:C5:F7:E2:F5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151007.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.68.198.0/24 Signature Algorithm: sha256WithRSAEncryption a3:f0:50:7a:57:bc:cb:50:78:ef:d2:e6:1d:4a:94:af:07:e4: 07:a5:e3:50:d7:ef:34:f2:1f:4a:97:d7:27:e5:f6:6d:bc:72: 40:41:46:16:60:f5:2f:40:fc:25:dd:90:bd:42:66:7e:0c:c7: 16:fe:82:6c:29:c9:5d:ad:ab:61:1f:b5:54:0c:6d:85:d9:13: 36:14:ee:ce:a2:9d:ae:a5:ca:7b:40:80:2f:8d:01:82:9a:f1: f4:1b:55:fd:79:1b:24:3f:6f:87:56:f6:82:0c:31:f9:2b:4f: 28:db:0f:c5:6d:a8:bc:41:66:d8:e7:c0:57:b1:3f:b9:37:a1: e0:3d:97:b5:c4:04:7f:60:e1:72:13:8e:f9:f4:53:7c:14:83: 1e:43:63:ac:54:4c:cc:77:62:a8:e6:bb:95:7a:75:c6:49:ad: 67:e7:f4:e6:0d:cf:d9:03:62:b0:03:1b:03:e9:69:4e:0c:62: 76:55:5f:55:8a:68:f9:26:d3:92:99:59:5f:b2:f3:cb:32:3e: 66:9c:dd:44:fd:5e:43:f5:79:35:0f:e1:32:c2:2b:90:9a:ea: 58:da:dd:95:53:98:ab:ad:04:9a:fa:21:5d:b6:74:a3:0a:73: 3d:3c:dc:15:23:b2:90:4b:0e:27:43:aa:94:d1:2d:d3:87:55: 23:32:da:a3 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUKBx7h5LH6q2Q3vAq9tif9kRHdOIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTQyN1oX DTI3MDUwMTIxMTkyN1owMzExMC8GA1UEAxMoRThCRkU5NjdCQkExNUEwOTI4NTc5 NjkyOEJCMDE3QzhDNUY3RTJGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK+APagh2MdQ4GkF3uM7CelHe+ou9HL0r8BGDgYd5dAyD87nCPd6I2Mty7UV 0mjbD3TvBnunlaNeeQT7LPoAjFdytNhgxwvANfnkOsZDG5rvL/n4FihFEK5TXZGn YEJR0DtftZseSWSKbAMqoLv7oTyxDlahB7MLzldiDWQnD9xm0nzw5Y4cVn6nTArh ETTAgyAqbuFZdJxeAnMN/aQ9ByA2X4y8iCRpu8YbW83NIAYuZ+Nnoushmyw8jhjE uBahyFLKh8NDblwwsJt/4LZq5dEtRknEAsWBiV8GyO+Qb+f2O4CDa5jIHaNkbYWn L6PkLCz0LooskzRCkTQUJCcqfxsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTov+ln u6FaCShXlpKLsBfIxffi9TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxMDA3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ0TGMA0GCSqGSIb3DQEBCwUAA4IBAQCj8FB6V7zLUHjv0uYdSpSvB+QH peNQ1+808h9Kl9cn5fZtvHJAQUYWYPUvQPwl3ZC9QmZ+DMcW/oJsKcldrathH7VU DG2F2RM2FO7Oop2upcp7QIAvjQGCmvH0G1X9eRskP2+HVvaCDDH5K08o2w/Fbai8 QWbY58BXsT+5N6HgPZe1xAR/YOFyE4759FN8FIMeQ2OsVEzMd2Ko5ruVenXGSa1n 5/TmDc/ZA2KwAxsD6WlODGJ2VV9Vimj5JtOSmVlfsvPLMj5mnN1E/V5D9Xk1D+Ey wiuQmupY2t2VU5irrQSa+iFdtnSjCnM9PNwVI7KQSw4nQ6qU0S3Th1UjMtqj -----END CERTIFICATE-----Generated at Sun May 3 00:39:45 2026 by rpki-client