$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151043.roa File: AS151043.roa (raw, json) Hash identifier: 2E8OmGQdWwW/oTP2Ri+YZKLEaFQUdlrqG1J2ejH+HHk= Subject key identifier: 22:E9:DE:01:56:A1:62:00:DB:30:59:50:B1:09:12:F1:5C:88:C8:80 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 40577FF19B6FC4F1F5EFADEC02A751230EC445A8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151043.roa Signing time: Sat 02 May 2026 09:26:49 +0000 ROA not before: Sat 02 May 2026 09:21:49 +0000 ROA not after: Sat 01 May 2027 09:26:49 +0000 asID: 151043 IP address blocks: 163.227.86.0/24 maxlen: 24 2001:df5:5ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:57:7f:f1:9b:6f:c4:f1:f5:ef:ad:ec:02:a7:51:23:0e:c4:45:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:49 2026 GMT Not After : May 1 09:26:49 2027 GMT Subject: CN=22E9DE0156A16200DB305950B10912F15C88C880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cf:15:5f:fd:cd:2a:1f:3d:a9:cf:00:0d:3a: 70:c2:65:af:d8:3a:82:62:0e:be:4b:54:64:65:8d: 84:9a:af:97:b2:11:58:3e:c7:5d:c8:32:b8:5e:38: c6:95:6f:13:67:f1:26:f7:7a:fb:6f:33:15:52:30: ee:ef:09:81:0f:68:8d:78:29:1f:ee:4d:ec:1f:b0: f2:81:29:48:f3:cb:05:39:3c:79:4d:43:8b:6b:34: eb:40:2f:e9:ce:0d:a2:a6:e3:cf:6a:75:00:c8:e9: 27:59:5f:b9:67:9c:7e:bb:cc:1a:7d:cf:06:8e:50: 21:67:8a:f4:9f:45:ec:fa:df:56:5f:d8:9d:ef:87: 20:c9:8d:f4:e2:18:17:73:bb:2a:d6:0c:e2:e2:e0: 90:6a:d7:b9:d3:25:45:fb:fc:15:4c:df:c6:43:4b: d0:1d:74:4e:10:a6:4b:34:2c:44:fa:0a:08:a1:3e: cd:ac:40:d9:65:9e:8c:c6:08:a7:00:66:1a:53:5b: fb:73:e0:40:9d:f8:5f:c1:21:f2:72:98:c9:8d:14: 83:3a:c0:a1:72:d4:de:bc:2e:0e:7d:9e:75:71:1f: 77:9b:fd:de:6f:c9:08:44:a5:04:f2:d4:ae:76:dc: 94:0a:31:85:74:9d:9a:29:fb:73:df:4f:e4:52:c3: 6c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E9:DE:01:56:A1:62:00:DB:30:59:50:B1:09:12:F1:5C:88:C8:80 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151043.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.86.0/24 IPv6: 2001:df5:5ec0::/48 Signature Algorithm: sha256WithRSAEncryption 62:48:a7:05:7c:54:2c:bf:7a:79:66:71:0c:bf:f3:d6:80:c2: 5b:81:75:be:53:30:1f:74:7f:6d:52:4f:62:84:07:be:0a:49: ce:3e:3b:9a:3c:f6:45:83:7b:87:b7:e7:4b:4b:16:1d:47:aa: f4:38:d3:c4:b9:18:a3:c4:12:ed:48:ac:e3:b7:51:20:7d:27: b5:39:31:4d:ba:9a:33:71:c5:9a:b6:30:15:21:4f:6e:9a:38: 96:97:b3:6c:af:84:5a:17:e4:a3:19:8e:1e:be:e6:ec:84:d7: 81:f9:de:12:1a:9e:73:b8:cd:01:5d:21:7e:e8:7e:f5:39:5c: 7c:2f:6e:31:89:83:77:cf:5a:a4:cd:8d:aa:e0:a3:df:d4:c1: 82:45:e1:84:c5:06:8a:cd:bc:04:51:e5:8f:52:29:a5:df:2f: 66:da:b3:64:da:f5:fb:e1:b7:4e:2d:24:41:f1:65:b9:fd:38: 66:a3:9e:6b:61:9d:0f:a5:cb:59:a7:a9:49:5f:78:64:d7:6b: 81:c7:6f:c0:5d:fa:99:0b:1b:d2:99:6f:b9:68:26:78:1c:28: 1e:2c:b4:5d:7f:46:b6:65:d6:f0:fe:70:34:1e:7a:08:4d:11: 0a:ec:09:93:6e:91:fc:a3:b5:0b:7c:14:f8:df:ff:72:fc:43: 92:8a:fa:32 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUQFd/8ZtvxPH1763sAqdRIw7ERagwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjE0OVoX DTI3MDUwMTA5MjY0OVowMzExMC8GA1UEAxMoMjJFOURFMDE1NkExNjIwMERCMzA1 OTUwQjEwOTEyRjE1Qzg4Qzg4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI7PFV/9zSofPanPAA06cMJlr9g6gmIOvktUZGWNhJqvl7IRWD7HXcgyuF44 xpVvE2fxJvd6+28zFVIw7u8JgQ9ojXgpH+5N7B+w8oEpSPPLBTk8eU1Di2s060Av 6c4Noqbjz2p1AMjpJ1lfuWecfrvMGn3PBo5QIWeK9J9F7PrfVl/Yne+HIMmN9OIY F3O7KtYM4uLgkGrXudMlRfv8FUzfxkNL0B10ThCmSzQsRPoKCKE+zaxA2WWejMYI pwBmGlNb+3PgQJ34X8Eh8nKYyY0UgzrAoXLU3rwuDn2edXEfd5v93m/JCESlBPLU rnbclAoxhXSdmin7c99P5FLDbBMCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQi6d4B VqFiANswWVCxCRLxXIjIgDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxMDQzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAo+NWMA8EAgACMAkDBwAgAQ31XsAwDQYJKoZIhvcNAQELBQADggEBAGJI pwV8VCy/enlmcQy/89aAwluBdb5TMB90f21ST2KEB74KSc4+O5o89kWDe4e350tL Fh1HqvQ408S5GKPEEu1IrOO3USB9J7U5MU26mjNxxZq2MBUhT26aOJaXs2yvhFoX 5KMZjh6+5uyE14H53hIannO4zQFdIX7ofvU5XHwvbjGJg3fPWqTNjargo9/UwYJF 4YTFBorNvARR5Y9SKaXfL2bas2Ta9fvht04tJEHxZbn9OGajnmthnQ+ly1mnqUlf eGTXa4HHb8Bd+pkLG9KZb7loJngcKB4stF1/RrZl1vD+cDQeeghNEQrsCZNukfyj tQt8FPjf/3L8Q5KK+jI= -----END CERTIFICATE-----Generated at Sun May 3 00:39:48 2026 by rpki-client