
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151478.roa
File: AS151478.roa (raw, json)
Hash identifier: n/LNtx8xjAcOdYbYh9ci9lL6ED57XoFLDy18d3DtGpg=
Subject key identifier: 8D:DB:F2:55:8E:DB:D0:7F:79:D3:FC:6F:77:00:B9:59:68:55:17:5C
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 317EE75BD62804BF758F7450D74F611EFFCBF890
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151478.roa
Signing time: Mon 31 Aug 2026 06:24:04 +0000
ROA not before: Mon 31 Aug 2026 06:19:04 +0000
ROA not after: Mon 30 Aug 2027 06:24:04 +0000
asID: 151478
IP address blocks: 163.52.75.0/24 maxlen: 24
2001:df7:6a40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 05:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:7e:e7:5b:d6:28:04:bf:75:8f:74:50:d7:4f:61:1e:ff:cb:f8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Aug 31 06:19:04 2026 GMT
Not After : Aug 30 06:24:04 2027 GMT
Subject: CN=8DDBF2558EDBD07F79D3FC6F7700B9596855175C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f6:03:40:2f:50:54:05:56:da:a0:ff:07:5c:
8e:04:95:20:67:23:e7:9f:ad:84:ed:50:dc:af:34:
e8:b6:e2:57:60:db:6c:21:14:3b:4b:18:87:97:ec:
8d:d8:68:3f:98:d5:21:db:bf:04:59:0b:d7:da:2d:
15:2a:d1:0c:a1:52:07:a7:bd:7e:55:5d:34:1f:d7:
08:b6:07:f2:3e:be:f4:b4:5f:90:34:7b:0e:77:60:
43:d7:6b:21:78:c2:e5:99:e2:36:03:7c:55:41:0c:
5d:2b:bb:e6:99:3f:be:a4:2a:0f:9d:09:61:68:78:
72:49:39:5e:8d:72:e5:89:da:b6:35:83:4d:dc:91:
1a:8f:38:07:af:45:47:eb:6f:49:86:53:28:a5:81:
f2:04:bf:66:33:c6:9e:7c:71:9b:4c:da:4e:35:7a:
06:12:b5:bf:c6:bd:39:11:73:61:ab:f2:38:05:89:
f2:cc:6c:7a:9e:22:ce:d7:a6:aa:0a:b0:42:41:5e:
9d:0c:60:0a:3e:80:66:4b:e4:d1:0f:a1:aa:b1:06:
e9:b4:4e:b8:b2:b9:dc:0a:bc:d9:3f:a1:01:7c:b0:
75:21:38:ef:5f:f5:14:8d:e1:65:af:32:4f:32:c7:
c8:93:ba:a8:f7:22:8d:2a:2c:bb:1f:40:c9:d7:ae:
bd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DB:F2:55:8E:DB:D0:7F:79:D3:FC:6F:77:00:B9:59:68:55:17:5C
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151478.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.52.75.0/24
IPv6:
2001:df7:6a40::/48
Signature Algorithm: sha256WithRSAEncryption
38:db:9e:0f:90:da:1e:31:9e:21:9b:28:bc:c0:30:04:41:e5:
54:a6:4b:a7:ec:a4:33:c8:84:50:df:b1:20:0e:4f:a1:9e:70:
3b:88:62:b6:7d:0a:fe:30:73:fa:5e:8b:c8:af:46:9a:db:06:
24:c6:8e:84:fa:0c:0c:96:c2:84:5a:07:ea:3a:82:f5:a9:f3:
1b:07:88:6d:d9:41:49:b4:03:52:9a:de:40:aa:18:56:d0:75:
4f:ea:c1:22:fc:c8:f4:48:38:26:8d:da:84:99:c2:fb:3c:73:
ce:46:38:2a:04:7d:a1:cd:91:f0:db:68:8a:fe:94:4e:90:a7:
53:3a:f1:cf:1f:5f:ef:a4:9b:87:b6:bb:69:0b:dc:60:06:7d:
26:1d:c8:88:6b:4c:04:ae:7e:7e:67:df:c4:7d:e9:88:44:ca:
59:76:78:35:a8:32:6d:f3:c6:2a:7b:4f:66:1f:ff:70:9c:d5:
b3:fb:51:4b:23:0f:f5:34:3d:65:6f:36:7b:c4:a9:99:50:05:
d4:39:45:44:4d:3f:b1:46:8b:79:cf:0c:53:7e:32:88:48:1d:
f1:d6:d9:02:42:b9:6a:a9:bc:c5:3c:05:ba:2c:2c:02:39:e1:
05:65:b6:e1:46:e0:38:65:77:ae:53:9d:2e:3d:40:70:10:33:
f1:b7:20:6d
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUMX7nW9YoBL91j3RQ109hHv/L+JAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgzMTA2MTkwNFoX
DTI3MDgzMDA2MjQwNFowMzExMC8GA1UEAxMoOEREQkYyNTU4RURCRDA3Rjc5RDNG
QzZGNzcwMEI5NTk2ODU1MTc1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIr2A0AvUFQFVtqg/wdcjgSVIGcj55+thO1Q3K806LbiV2DbbCEUO0sYh5fs
jdhoP5jVIdu/BFkL19otFSrRDKFSB6e9flVdNB/XCLYH8j6+9LRfkDR7DndgQ9dr
IXjC5ZniNgN8VUEMXSu75pk/vqQqD50JYWh4ckk5Xo1y5YnatjWDTdyRGo84B69F
R+tvSYZTKKWB8gS/ZjPGnnxxm0zaTjV6BhK1v8a9ORFzYavyOAWJ8sxsep4iztem
qgqwQkFenQxgCj6AZkvk0Q+hqrEG6bROuLK53Aq82T+hAXywdSE471/1FI3hZa8y
TzLHyJO6qPcijSosux9AydeuveECAwEAAaOCAd0wggHZMB0GA1UdDgQWBBSN2/JV
jtvQf3nT/G93ALlZaFUXXDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxNDc4LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA
ATAGAwQAozRLMA8EAgACMAkDBwAgAQ33akAwDQYJKoZIhvcNAQELBQADggEBADjb
ng+Q2h4xniGbKLzAMARB5VSmS6fspDPIhFDfsSAOT6GecDuIYrZ9Cv4wc/pei8iv
RprbBiTGjoT6DAyWwoRaB+o6gvWp8xsHiG3ZQUm0A1Ka3kCqGFbQdU/qwSL8yPRI
OCaN2oSZwvs8c85GOCoEfaHNkfDbaIr+lE6Qp1M68c8fX++km4e2u2kL3GAGfSYd
yIhrTASufn5n38R96YhEyll2eDWoMm3zxip7T2Yf/3Cc1bP7UUsjD/U0PWVvNnvE
qZlQBdQ5RURNP7FGi3nPDFN+MohIHfHW2QJCuWqpvMU8BbosLAI54QVltuFG4Dhl
d65TnS49QHAQM/G3IG0=
-----END CERTIFICATE-----
Generated at Thu Sep 17 05:27:49 2026 by rpki-client