$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151505.roa File: AS151505.roa (raw, json) Hash identifier: cVNm6F7O0gFupsAEErf7PLujZy6RuuX4jC5SVjJ8GRo= Subject key identifier: 6B:96:CC:67:FF:6B:08:5C:34:41:82:06:D3:3B:40:EE:96:8A:85:1A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5D477D5EB0667E394F26592BD8180847F8F90921 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151505.roa Signing time: Sat 02 May 2026 08:36:17 +0000 ROA not before: Sat 02 May 2026 08:31:17 +0000 ROA not after: Sat 01 May 2027 08:36:17 +0000 asID: 151505 IP address blocks: 103.222.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:47:7d:5e:b0:66:7e:39:4f:26:59:2b:d8:18:08:47:f8:f9:09:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:31:17 2026 GMT Not After : May 1 08:36:17 2027 GMT Subject: CN=6B96CC67FF6B085C34418206D33B40EE968A851A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:93:8b:2f:7e:33:96:a7:62:6d:a1:26:11:89: 9e:47:a8:9c:e6:5a:aa:0e:d7:0f:fa:72:6e:cb:29: 2f:aa:b1:c8:61:3c:d2:35:d2:a2:ff:17:0c:42:41: dd:c8:19:31:99:f6:4d:a1:20:ee:70:94:73:35:a2: aa:14:a0:cd:f7:7e:c8:8d:e0:7d:8e:3b:ad:9d:d0: 98:9e:6b:de:4d:1b:32:70:62:5b:11:86:0a:42:32: 92:1a:ee:da:e7:3a:7c:a7:74:65:6c:67:22:1d:ca: ab:3f:02:ad:60:f8:0d:9b:35:d3:5d:c6:2d:9b:41: cb:1c:c6:d5:56:d9:f8:72:54:e5:86:d7:05:66:79: 90:5a:56:97:aa:f0:bd:d2:e7:72:55:f3:d9:f4:f7: 0f:f1:82:a2:96:44:cc:a7:42:72:32:c4:b0:76:6f: ca:9e:4e:19:d2:e0:24:c1:56:d4:9b:3a:69:a0:26: 15:d0:7f:0a:0e:51:1f:64:9d:00:f5:e7:bf:32:1e: 44:c7:37:3c:25:f7:e4:84:46:5e:d0:e9:7a:fd:f5: a6:36:1e:03:8e:09:53:de:77:62:35:ff:a5:d7:70: f6:1a:a6:89:ae:5c:b2:5a:a1:58:46:b2:f8:78:6d: f0:c5:aa:88:b1:94:12:b6:44:1d:69:07:e7:03:6f: 8d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:96:CC:67:FF:6B:08:5C:34:41:82:06:D3:3B:40:EE:96:8A:85:1A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151505.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.222.255.0/24 Signature Algorithm: sha256WithRSAEncryption 19:70:f5:cf:11:3c:69:66:22:7b:c7:49:43:fd:1f:dc:20:6d: a5:49:34:7e:72:b0:70:b5:08:a8:13:be:9a:94:50:1e:6b:4e: 22:3f:57:bd:4a:98:25:de:43:2a:0f:19:bc:61:cf:3c:99:04: a0:5f:2a:69:68:d5:d3:bb:27:4a:48:c4:08:57:99:63:6b:26: fc:78:0a:de:e1:c0:9b:5b:ae:0c:c5:43:ef:da:ad:f5:53:1e: 6f:e9:df:1c:23:4e:5f:a0:32:50:07:98:12:c5:1e:8e:86:43: ff:73:dd:2b:ee:e6:1f:c9:55:d8:a0:de:74:e9:d0:5d:9a:f0: 56:1b:0c:24:b6:08:83:ca:b2:31:4f:e9:36:23:f7:96:d7:c1: 7a:29:fe:f3:26:92:dc:f2:49:97:9a:1d:b2:98:23:52:fb:a8: d6:75:a3:27:ff:34:ea:79:ae:a3:14:28:64:11:6c:93:89:fb: 56:f3:bd:e9:61:16:4d:2e:c6:ac:75:1e:08:1a:7c:da:74:4b: ca:59:d7:97:92:46:b8:11:fc:ce:64:a0:39:c9:ea:99:b7:38: b7:33:78:d3:a5:25:56:6d:4a:93:a7:43:50:ba:e6:f3:ae:ca: b2:51:ac:1a:90:ed:e6:ed:08:0f:62:39:02:5c:30:4c:38:1c: e4:42:28:be -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUXUd9XrBmfjlPJlkr2BgIR/j5CSEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzExN1oX DTI3MDUwMTA4MzYxN1owMzExMC8GA1UEAxMoNkI5NkNDNjdGRjZCMDg1QzM0NDE4 MjA2RDMzQjQwRUU5NjhBODUxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKCTiy9+M5anYm2hJhGJnkeonOZaqg7XD/pybsspL6qxyGE80jXSov8XDEJB 3cgZMZn2TaEg7nCUczWiqhSgzfd+yI3gfY47rZ3QmJ5r3k0bMnBiWxGGCkIykhru 2uc6fKd0ZWxnIh3Kqz8CrWD4DZs1013GLZtByxzG1VbZ+HJU5YbXBWZ5kFpWl6rw vdLnclXz2fT3D/GCopZEzKdCcjLEsHZvyp5OGdLgJMFW1Js6aaAmFdB/Cg5RH2Sd APXnvzIeRMc3PCX35IRGXtDpev31pjYeA44JU953YjX/pddw9hqmia5cslqhWEay +Hht8MWqiLGUErZEHWkH5wNvjTUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRrlsxn /2sIXDRBggbTO0DuloqFGjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxNTA1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ97/MA0GCSqGSIb3DQEBCwUAA4IBAQAZcPXPETxpZiJ7x0lD/R/cIG2l STR+crBwtQioE76alFAea04iP1e9Spgl3kMqDxm8Yc88mQSgXyppaNXTuydKSMQI V5ljayb8eAre4cCbW64MxUPv2q31Ux5v6d8cI05foDJQB5gSxR6OhkP/c90r7uYf yVXYoN506dBdmvBWGwwktgiDyrIxT+k2I/eW18F6Kf7zJpLc8kmXmh2ymCNS+6jW daMn/zTqea6jFChkEWyTiftW873pYRZNLsasdR4IGnzadEvKWdeXkka4EfzOZKA5 yeqZtzi3M3jTpSVWbUqTp0NQuubzrsqyUawakO3m7QgPYjkCXDBMOBzkQii+ -----END CERTIFICATE-----Generated at Sun May 3 00:40:23 2026 by rpki-client