$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151512.roa File: AS151512.roa (raw, json) Hash identifier: nJESy3Yi/V+SRFGbuN9xBCeBRFEYQTwvckYptwc+PCQ= Subject key identifier: 05:33:BB:D9:5F:C8:53:D9:0B:84:96:57:21:32:AC:62:17:A1:A7:C3 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1D8B6512DF7E2D388FDB6F985EEF263B6A38DF9A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151512.roa Signing time: Sat 02 May 2026 21:16:37 +0000 ROA not before: Sat 02 May 2026 21:11:37 +0000 ROA not after: Sat 01 May 2027 21:16:37 +0000 asID: 151512 IP address blocks: 103.234.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:8b:65:12:df:7e:2d:38:8f:db:6f:98:5e:ef:26:3b:6a:38:df:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:11:37 2026 GMT Not After : May 1 21:16:37 2027 GMT Subject: CN=0533BBD95FC853D90B8496572132AC6217A1A7C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3c:ce:ce:0c:29:01:6c:d3:d2:91:6b:03:a0: fa:af:1b:d7:3c:f8:a6:40:7c:25:48:8f:eb:48:50: eb:86:3a:a5:0d:9a:91:8b:98:24:e4:b6:cc:59:33: ac:45:2a:35:19:47:f8:54:c9:91:4e:ae:6f:ab:82: a8:a7:c2:a5:c3:06:bb:f6:40:b3:c0:49:91:ff:ba: 3b:ba:3a:87:04:b2:ca:7e:10:3e:b6:d2:4d:ba:d4: 13:14:a8:6c:9a:88:78:88:fb:2c:1a:d8:8b:44:a3: 8a:90:2a:04:6e:4d:6d:d6:dd:e9:04:62:83:bd:32: a5:53:a8:6f:5b:a6:df:33:86:0f:38:8f:47:e0:de: cb:7f:dc:ce:25:23:9d:59:58:37:aa:b7:81:1e:fe: 7c:4a:91:27:e4:c4:ea:ab:1f:68:81:40:1f:cb:b8: c9:a7:46:9f:e9:52:5e:4d:51:ae:a7:a1:c5:fc:b9: 3b:4b:4b:0a:8f:7d:7f:59:1a:a3:11:ef:ea:b1:a6: a4:eb:02:d3:6f:b8:4e:e7:16:6a:a8:c9:ed:3f:34: 99:8d:26:dd:9e:8d:b6:bd:db:a4:78:69:b8:e7:4f: 35:f8:f3:26:3f:90:08:42:79:f0:a2:95:d2:b2:74: f8:b3:79:f3:92:1b:5c:a9:27:51:30:13:0e:5f:cd: bc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:33:BB:D9:5F:C8:53:D9:0B:84:96:57:21:32:AC:62:17:A1:A7:C3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151512.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.234.30.0/23 Signature Algorithm: sha256WithRSAEncryption 13:16:6b:77:ee:6b:82:0b:a4:03:83:44:ae:61:24:ab:3f:33: 97:09:7a:f2:59:0a:f8:35:3b:f9:8c:09:ba:76:c5:07:00:63: 1d:5c:1c:5e:11:bc:18:a2:5f:7a:0d:a8:4d:9f:a3:8d:ef:1d: d1:f3:ec:f7:b3:4b:5c:eb:a0:fd:12:88:65:20:d3:ae:b7:8a: 6d:d7:b7:da:c2:09:96:11:33:0f:66:ab:aa:f7:9e:66:9b:35: 37:8c:1a:18:a5:2e:76:93:39:9c:30:51:3d:bd:00:0f:22:97: c5:96:3c:a8:80:5b:fb:b8:9f:a9:7e:7e:cd:cd:74:6e:37:22: b7:ec:6b:46:33:d5:f3:41:60:97:53:17:ac:39:45:e6:fb:3b: 7f:e3:37:2c:7e:04:2b:27:c3:2a:cf:f7:e6:1c:1b:82:e0:ca: c8:83:f4:e9:aa:d4:56:4f:eb:23:7a:e2:a1:30:3b:ac:3a:9d: 43:95:7f:5a:63:b7:cf:05:b8:94:f4:0d:36:b4:fe:47:45:d8: b6:2c:a1:1a:4f:c6:7e:44:56:ad:b4:99:24:6b:81:38:02:c0: b8:99:0b:4a:71:cb:51:cc:e5:e0:1c:42:da:25:ef:8c:35:7f: 44:80:22:07:ca:da:f3:41:5c:62:cb:dc:80:2a:15:73:75:af: ea:26:03:c0 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUHYtlEt9+LTiP22+YXu8mO2o435owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTEzN1oX DTI3MDUwMTIxMTYzN1owMzExMC8GA1UEAxMoMDUzM0JCRDk1RkM4NTNEOTBCODQ5 NjU3MjEzMkFDNjIxN0ExQTdDMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ88zs4MKQFs09KRawOg+q8b1zz4pkB8JUiP60hQ64Y6pQ2akYuYJOS2zFkz rEUqNRlH+FTJkU6ub6uCqKfCpcMGu/ZAs8BJkf+6O7o6hwSyyn4QPrbSTbrUExSo bJqIeIj7LBrYi0SjipAqBG5Nbdbd6QRig70ypVOob1um3zOGDziPR+Dey3/cziUj nVlYN6q3gR7+fEqRJ+TE6qsfaIFAH8u4yadGn+lSXk1Rrqehxfy5O0tLCo99f1ka oxHv6rGmpOsC02+4TucWaqjJ7T80mY0m3Z6Ntr3bpHhpuOdPNfjzJj+QCEJ58KKV 0rJ0+LN585IbXKknUTATDl/NvHUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQFM7vZ X8hT2QuEllchMqxiF6GnwzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxNTEyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ+oeMA0GCSqGSIb3DQEBCwUAA4IBAQATFmt37muCC6QDg0SuYSSrPzOX CXryWQr4NTv5jAm6dsUHAGMdXBxeEbwYol96DahNn6ON7x3R8+z3s0tc66D9Eohl INOut4pt17fawgmWETMPZquq955mmzU3jBoYpS52kzmcMFE9vQAPIpfFljyogFv7 uJ+pfn7NzXRuNyK37GtGM9XzQWCXUxesOUXm+zt/4zcsfgQrJ8Mqz/fmHBuC4MrI g/TpqtRWT+sjeuKhMDusOp1DlX9aY7fPBbiU9A02tP5HRdi2LKEaT8Z+RFattJkk a4E4AsC4mQtKcctRzOXgHELaJe+MNX9EgCIHytrzQVxiy9yAKhVzda/qJgPA -----END CERTIFICATE-----Generated at Sun May 3 00:40:19 2026 by rpki-client