$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151509.roa File: AS151509.roa (raw, json) Hash identifier: odGw2DG2m4yZa3LvzFoABkKufxe1SAVLVD0WzkUdQmc= Subject key identifier: 2C:D0:A0:A8:75:A3:D7:83:04:CD:4D:3C:CA:EF:FD:97:A7:37:69:FE Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 10B7F2EEBECD66B90AF8F6A652D2309BA0B084B0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151509.roa Signing time: Sat 02 May 2026 09:21:27 +0000 ROA not before: Sat 02 May 2026 09:16:27 +0000 ROA not after: Sat 01 May 2027 09:21:27 +0000 asID: 151509 IP address blocks: 103.217.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b7:f2:ee:be:cd:66:b9:0a:f8:f6:a6:52:d2:30:9b:a0:b0:84:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:16:27 2026 GMT Not After : May 1 09:21:27 2027 GMT Subject: CN=2CD0A0A875A3D78304CD4D3CCAEFFD97A73769FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b0:2b:1f:ce:40:eb:18:72:fd:18:29:46:82: b7:21:d6:8f:9c:3d:59:a7:f6:65:98:84:fb:17:6b: b9:44:23:e9:1d:ee:0f:9c:8f:d4:c0:86:79:8e:e2: 39:1a:28:9b:97:ed:6d:6b:f9:82:86:05:90:96:92: 73:64:c9:4c:e7:c1:be:0e:ad:7c:f4:b8:5e:a1:44: 6e:15:d7:2c:92:e9:7c:22:60:c6:0e:2a:bd:bc:fe: 14:82:a8:ed:6d:1c:4a:61:56:0f:d6:b7:a1:06:80: 6e:ed:d6:d8:e6:d7:0e:6b:d8:ad:a6:80:32:50:11: 0f:2b:59:9c:19:3f:95:47:2c:2f:c0:cb:40:3f:0f: 33:54:19:ae:19:86:22:51:5a:a8:c2:19:96:08:f6: 67:e4:98:25:a7:1b:68:f2:45:60:73:d5:74:cb:9f: e0:71:1f:71:8b:70:6d:e6:b7:5e:37:0c:f3:d8:7f: 2b:75:20:12:38:4f:87:ba:a8:07:aa:d3:8f:7b:37: de:90:0d:2c:bc:78:e6:a3:1b:b3:6a:97:74:37:66: 2c:bf:f3:a0:5b:af:47:16:1a:81:39:09:76:eb:a6: 75:94:14:58:7e:09:a5:ba:1f:bb:1b:21:78:1a:02: 79:0a:7e:c7:0f:4a:a4:27:e3:95:ab:09:e8:97:71: 47:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D0:A0:A8:75:A3:D7:83:04:CD:4D:3C:CA:EF:FD:97:A7:37:69:FE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.217.225.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:f0:a4:4d:b4:e3:40:ae:c9:d1:0f:cc:fc:a2:d5:2c:35:46: c8:e4:22:00:f4:42:1f:24:46:8f:df:2e:38:1e:16:35:05:ae: 8d:b5:c0:04:ec:78:b7:ea:43:29:72:81:57:10:50:3e:d3:f9: 56:5a:68:bd:98:88:b5:55:b8:49:b0:35:35:41:6a:16:19:2e: 4e:5b:62:31:78:99:31:f3:c6:ec:ab:76:32:74:d3:74:c7:b9: 96:71:6c:ea:41:52:87:14:1d:23:3d:1f:79:34:32:3b:b0:8a: d3:b9:3e:ec:01:27:af:ce:89:7e:f8:d5:5a:02:b3:5b:e5:4c: 07:bd:34:a2:61:0b:71:26:0a:b6:5f:00:5b:0f:56:65:4f:67: c8:a3:a9:03:74:6d:4f:06:69:08:05:47:a4:20:5b:4c:02:90: 24:65:e0:fc:9b:39:9d:21:f4:b7:87:17:67:5c:13:b0:2f:5c: 68:67:db:09:17:c8:56:1f:9c:f9:e5:60:b6:d4:be:a7:8d:de: 37:18:67:c1:62:15:05:fc:37:53:2c:18:ea:19:29:2d:95:b2: 8f:6a:1f:17:21:75:47:2e:1e:5c:91:58:5c:bb:50:4b:38:24: 2e:1f:43:29:fa:90:3f:11:c8:72:97:9f:61:be:29:bc:11:f1: c9:60:3e:fe -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUELfy7r7NZrkK+PamUtIwm6CwhLAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTYyN1oX DTI3MDUwMTA5MjEyN1owMzExMC8GA1UEAxMoMkNEMEEwQTg3NUEzRDc4MzA0Q0Q0 RDNDQ0FFRkZEOTdBNzM3NjlGRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKKwKx/OQOsYcv0YKUaCtyHWj5w9Waf2ZZiE+xdruUQj6R3uD5yP1MCGeY7i ORoom5ftbWv5goYFkJaSc2TJTOfBvg6tfPS4XqFEbhXXLJLpfCJgxg4qvbz+FIKo 7W0cSmFWD9a3oQaAbu3W2ObXDmvYraaAMlARDytZnBk/lUcsL8DLQD8PM1QZrhmG IlFaqMIZlgj2Z+SYJacbaPJFYHPVdMuf4HEfcYtwbea3XjcM89h/K3UgEjhPh7qo B6rTj3s33pANLLx45qMbs2qXdDdmLL/zoFuvRxYagTkJduumdZQUWH4Jpbofuxsh eBoCeQp+xw9KpCfjlasJ6JdxR2cCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQs0KCo daPXgwTNTTzK7/2Xpzdp/jAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxNTA5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ9nhMA0GCSqGSIb3DQEBCwUAA4IBAQAr8KRNtONArsnRD8z8otUsNUbI 5CIA9EIfJEaP3y44HhY1Ba6NtcAE7Hi36kMpcoFXEFA+0/lWWmi9mIi1VbhJsDU1 QWoWGS5OW2IxeJkx88bsq3YydNN0x7mWcWzqQVKHFB0jPR95NDI7sIrTuT7sASev zol++NVaArNb5UwHvTSiYQtxJgq2XwBbD1ZlT2fIo6kDdG1PBmkIBUekIFtMApAk ZeD8mzmdIfS3hxdnXBOwL1xoZ9sJF8hWH5z55WC21L6njd43GGfBYhUF/DdTLBjq GSktlbKPah8XIXVHLh5ckVhcu1BLOCQuH0Mp+pA/Echyl59hvim8EfHJYD7+ -----END CERTIFICATE-----Generated at Sun May 3 00:39:52 2026 by rpki-client