$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151420.roa File: AS151420.roa (raw, json) Hash identifier: /XTJyFK+uHD95HYfYrXP+BmR5LtVbuzdUtOl0/0RMrE= Subject key identifier: 89:CD:29:C5:F7:3D:B7:53:F6:D2:67:0B:7E:CE:AA:0C:6A:2B:07:C8 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5E0F7A82C7547981BCCD95D27599DA07CA7857EB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151420.roa Signing time: Fri 14 Aug 2026 07:05:13 +0000 ROA not before: Fri 14 Aug 2026 07:00:13 +0000 ROA not after: Fri 13 Aug 2027 07:05:13 +0000 asID: 151420 IP address blocks: 2001:df7:2ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Aug 2026 22:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:0f:7a:82:c7:54:79:81:bc:cd:95:d2:75:99:da:07:ca:78:57:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 14 07:00:13 2026 GMT Not After : Aug 13 07:05:13 2027 GMT Subject: CN=89CD29C5F73DB753F6D2670B7ECEAA0C6A2B07C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:56:f7:0b:29:65:80:4b:97:cc:8d:ed:85:c7: e4:bf:e2:9c:c7:f8:67:a1:d1:1e:36:be:1f:54:17: 39:09:00:45:44:d3:e6:91:c1:5e:03:ba:c8:2d:e3: ed:f2:00:af:75:f3:c4:3c:32:d7:15:0a:9c:cb:95: 2d:6e:fb:15:6f:f4:7a:e5:5a:cc:39:9c:0f:5a:6c: 14:6f:82:9f:64:16:2f:b8:a6:1e:a8:0a:f9:2a:30: 8a:3a:8f:c9:4b:89:8e:fc:e1:a9:b3:02:42:ed:6d: a3:d4:b8:b2:64:52:7b:01:5f:b9:56:19:25:84:75: 7b:5d:b8:4d:ed:7b:ae:39:99:38:fd:9b:d3:11:c5: e4:72:a3:92:ea:76:8e:83:26:06:6c:71:0a:c9:8b: 4f:1e:bd:b2:de:54:f6:9e:e8:05:fb:e4:f5:e6:7e: d3:3a:d2:1d:83:ad:00:b5:cc:0a:26:73:a7:47:ef: d9:14:a2:ba:4e:2a:85:0c:21:4d:94:76:5b:4d:f4: b4:8c:e1:9b:83:29:ad:ab:8e:d8:7a:b6:a4:b1:fc: d7:e4:82:6c:10:ea:9a:4e:4e:fa:23:f1:2a:ef:c2: 96:2f:3a:ef:5f:a5:e4:ce:39:8d:8a:29:0e:89:a2: 34:a8:08:23:6d:ec:4b:94:f2:e8:1e:0a:77:de:77: 98:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CD:29:C5:F7:3D:B7:53:F6:D2:67:0B:7E:CE:AA:0C:6A:2B:07:C8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151420.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:2ac0::/48 Signature Algorithm: sha256WithRSAEncryption 81:18:6b:1a:62:7c:a9:fd:32:36:38:e2:63:7c:58:d5:f7:7d: fd:a1:0b:94:cf:c4:e4:89:5a:aa:93:52:9d:19:10:13:82:ab: d3:ad:08:70:4f:02:b0:7a:28:a1:0d:a9:0d:e2:97:7f:5f:c6: dc:e5:d1:af:ba:1e:3f:72:00:4c:4b:99:16:df:b4:40:d8:73: f1:dd:b9:83:af:41:7c:1b:d5:e7:e9:fa:50:c3:7e:df:8a:da: b2:54:4e:15:7a:c7:ec:28:8d:94:e3:6c:9f:22:9e:93:e8:09: 25:b2:39:c2:ee:e3:1d:2b:35:45:51:53:c4:3d:8e:f9:5f:af: 84:e8:3c:e1:fb:79:e0:83:bd:de:f7:c1:58:16:0d:1d:db:30: 1b:fe:a6:5b:d1:3e:41:17:9a:33:ae:11:c6:6e:5e:91:ab:2c: 4b:d0:ee:1c:41:e6:fc:72:61:cf:ab:39:44:16:1f:f6:60:54: 3e:e5:1e:36:bc:19:ee:1f:18:f7:fb:51:cb:ad:7f:c7:3c:fe: 37:7e:0c:2e:5a:71:20:d8:f9:91:9c:8f:82:62:30:75:d4:bd: 0b:84:bc:5c:ad:65:0a:a8:89:d1:ea:ce:f5:8a:35:04:ce:5d: 69:67:97:93:7a:40:f9:1f:c1:95:6a:04:ef:eb:7e:1e:f3:b0: 3a:17:23:c6 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUXg96gsdUeYG8zZXSdZnaB8p4V+swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgxNDA3MDAxM1oX DTI3MDgxMzA3MDUxM1owMzExMC8GA1UEAxMoODlDRDI5QzVGNzNEQjc1M0Y2RDI2 NzBCN0VDRUFBMEM2QTJCMDdDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANhW9wspZYBLl8yN7YXH5L/inMf4Z6HRHja+H1QXOQkARUTT5pHBXgO6yC3j 7fIAr3XzxDwy1xUKnMuVLW77FW/0euVazDmcD1psFG+Cn2QWL7imHqgK+SowijqP yUuJjvzhqbMCQu1to9S4smRSewFfuVYZJYR1e124Te17rjmZOP2b0xHF5HKjkup2 joMmBmxxCsmLTx69st5U9p7oBfvk9eZ+0zrSHYOtALXMCiZzp0fv2RSiuk4qhQwh TZR2W030tIzhm4MprauO2Hq2pLH81+SCbBDqmk5O+iPxKu/Cli8671+l5M45jYop DomiNKgII23sS5Ty6B4Kd953mLMCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBSJzSnF 9z23U/bSZwt+zqoMaisHyDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxNDIwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9yrAMA0GCSqGSIb3DQEBCwUAA4IBAQCBGGsaYnyp/TI2OOJjfFjV 9339oQuUz8TkiVqqk1KdGRATgqvTrQhwTwKweiihDakN4pd/X8bc5dGvuh4/cgBM S5kW37RA2HPx3bmDr0F8G9Xn6fpQw37fitqyVE4VesfsKI2U42yfIp6T6AklsjnC 7uMdKzVFUVPEPY75X6+E6Dzh+3ngg73e98FYFg0d2zAb/qZb0T5BF5ozrhHGbl6R qyxL0O4cQeb8cmHPqzlEFh/2YFQ+5R42vBnuHxj3+1HLrX/HPP43fgwuWnEg2PmR nI+CYjB11L0LhLxcrWUKqInR6s71ijUEzl1pZ5eTekD5H8GVagTv634e87A6FyPG -----END CERTIFICATE-----Generated at Sun Aug 16 00:36:33 2026 by rpki-client