$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151513.roa File: AS151513.roa (raw, json) Hash identifier: E5SCeuYl9v8MTA7q2D3i0WOnhQO7sljGENSiG9UMhog= Subject key identifier: BC:72:EE:D5:F6:85:FA:3D:2B:5E:0D:31:2E:F1:1D:3C:43:32:8D:93 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2FF1BD57E024BEF4B42F515E137AC1D7A9BCE75F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151513.roa Signing time: Sat 02 May 2026 08:37:18 +0000 ROA not before: Sat 02 May 2026 08:32:18 +0000 ROA not after: Sat 01 May 2027 08:37:18 +0000 asID: 151513 IP address blocks: 103.217.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:f1:bd:57:e0:24:be:f4:b4:2f:51:5e:13:7a:c1:d7:a9:bc:e7:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:32:18 2026 GMT Not After : May 1 08:37:18 2027 GMT Subject: CN=BC72EED5F685FA3D2B5E0D312EF11D3C43328D93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e0:df:fe:00:d8:e3:42:eb:83:ac:5f:6f:8e: 9f:c8:4e:d0:80:1a:84:37:7c:8f:03:07:05:12:cb: 2a:03:a8:77:f4:86:6d:e8:c6:4f:66:87:7e:aa:24: d7:02:4f:2c:fd:a9:b5:f8:62:5b:c3:d9:55:e3:a5: d9:e3:de:77:41:c5:ba:d3:7c:ea:4f:77:7c:d4:ba: c6:32:14:69:d2:d8:2b:c8:1e:b6:d7:60:ae:aa:3a: 07:77:59:11:57:b0:cf:d2:7b:48:37:14:17:5c:73: 8a:12:f7:62:72:3c:d1:15:fd:09:37:7f:b3:32:36: f9:da:ea:de:81:fa:09:ae:11:c6:4a:36:b1:3d:02: 1c:a5:1e:97:cf:5a:7a:21:6c:d7:25:c2:e4:d7:2c: 08:45:d2:1c:4c:23:98:1a:41:1e:e0:c4:3f:77:7e: df:d2:ba:fb:4f:22:27:69:41:ca:1a:d9:a9:06:b6: 23:5b:46:83:d4:f8:c0:c4:c8:73:21:22:1b:c8:e0: 7f:8a:25:70:38:1b:6d:4d:39:63:45:c0:c9:fb:c3: 25:f8:ad:d5:1e:f2:34:1e:cd:30:5b:77:85:bb:91: dc:5c:f2:35:a5:67:8d:ec:59:2f:a5:75:9f:f4:35: 02:09:64:ac:74:5f:53:75:91:e2:76:a0:b3:c8:74: d3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:72:EE:D5:F6:85:FA:3D:2B:5E:0D:31:2E:F1:1D:3C:43:32:8D:93 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151513.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.217.146.0/23 Signature Algorithm: sha256WithRSAEncryption 83:ed:32:14:be:57:e1:df:f8:80:d5:bc:2e:3d:72:18:d6:11: e3:90:a2:2a:a8:89:53:35:81:30:3b:f8:e5:58:41:c9:ef:e1: fc:d4:83:53:1d:7c:62:6e:14:49:4b:34:d4:15:87:e5:1f:f8: 0c:07:ef:d9:c1:4e:d7:ea:61:fc:ef:06:8e:e4:95:b7:ef:e3: 4c:ed:16:05:6e:38:93:85:5d:d5:8a:5f:63:e3:9f:01:ad:0e: f7:9e:31:ec:9d:c5:cf:92:95:ed:4e:c4:1b:c5:66:a6:af:38: 05:74:ca:47:8b:7d:08:3c:59:50:bc:98:57:46:c1:da:bb:f8: 45:ad:c2:f9:f6:f3:8d:ea:92:ba:c7:d8:0e:ed:14:fc:17:3e: 49:19:e9:81:64:74:71:97:5b:65:09:96:48:ba:df:c2:5d:eb: 33:13:76:e0:bc:b3:c3:a4:6d:41:89:03:4b:48:ba:7a:20:67: 69:44:0e:ec:1a:74:04:25:47:3c:a5:45:08:5e:23:bf:73:52: 8c:8e:b7:31:77:f6:83:0d:ac:b2:b7:00:60:c0:a1:c8:53:0e: 4f:f6:4a:7b:95:c5:8a:92:49:67:3c:f1:fa:cf:00:8e:14:ba: 22:8c:f7:fe:aa:a6:93:f7:d0:de:e2:1c:0f:dc:ca:59:fb:44: af:53:ae:e4 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUL/G9V+AkvvS0L1FeE3rB16m8518wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzIxOFoX DTI3MDUwMTA4MzcxOFowMzExMC8GA1UEAxMoQkM3MkVFRDVGNjg1RkEzRDJCNUUw RDMxMkVGMTFEM0M0MzMyOEQ5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMfg3/4A2ONC64OsX2+On8hO0IAahDd8jwMHBRLLKgOod/SGbejGT2aHfqok 1wJPLP2ptfhiW8PZVeOl2ePed0HFutN86k93fNS6xjIUadLYK8gettdgrqo6B3dZ EVewz9J7SDcUF1xzihL3YnI80RX9CTd/szI2+drq3oH6Ca4Rxko2sT0CHKUel89a eiFs1yXC5NcsCEXSHEwjmBpBHuDEP3d+39K6+08iJ2lByhrZqQa2I1tGg9T4wMTI cyEiG8jgf4olcDgbbU05Y0XAyfvDJfit1R7yNB7NMFt3hbuR3FzyNaVnjexZL6V1 n/Q1AglkrHRfU3WR4nags8h00+ECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBS8cu7V 9oX6PSteDTEu8R08QzKNkzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxNTEzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ9mSMA0GCSqGSIb3DQEBCwUAA4IBAQCD7TIUvlfh3/iA1bwuPXIY1hHj kKIqqIlTNYEwO/jlWEHJ7+H81INTHXxibhRJSzTUFYflH/gMB+/ZwU7X6mH87waO 5JW37+NM7RYFbjiThV3Vil9j458BrQ73njHsncXPkpXtTsQbxWamrzgFdMpHi30I PFlQvJhXRsHau/hFrcL59vON6pK6x9gO7RT8Fz5JGemBZHRxl1tlCZZIut/CXesz E3bgvLPDpG1BiQNLSLp6IGdpRA7sGnQEJUc8pUUIXiO/c1KMjrcxd/aDDayytwBg wKHIUw5P9kp7lcWKkklnPPH6zwCOFLoijPf+qqaT99De4hwP3MpZ+0SvU67k -----END CERTIFICATE-----Generated at Sun May 3 00:40:21 2026 by rpki-client