$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151522.roa File: AS151522.roa (raw, json) Hash identifier: /8xykGXVCKH5yLaIsL4tVOYZA9rP/nNDEc6XPO7/QX4= Subject key identifier: 1D:01:BA:5C:3A:6C:6B:FA:7B:CC:85:99:1D:0D:CF:CC:04:37:86:7D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1780FE1F3BC382EF341DF9C843222F93F37470A2 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151522.roa Signing time: Sat 02 May 2026 21:16:31 +0000 ROA not before: Sat 02 May 2026 21:11:31 +0000 ROA not after: Sat 01 May 2027 21:16:31 +0000 asID: 151522 IP address blocks: 103.234.124.0/23 maxlen: 24 2001:df3:c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:80:fe:1f:3b:c3:82:ef:34:1d:f9:c8:43:22:2f:93:f3:74:70:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:11:31 2026 GMT Not After : May 1 21:16:31 2027 GMT Subject: CN=1D01BA5C3A6C6BFA7BCC85991D0DCFCC0437867D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a7:d8:45:a7:a0:fe:85:5d:9b:50:4a:bc:8c: 74:dd:76:df:af:60:4f:b1:2a:c5:16:a4:14:f6:0a: ca:bd:a3:88:9a:3e:f0:b8:c6:02:74:49:f7:c0:bd: b8:ff:3e:80:56:77:ac:67:d0:b5:fd:96:5c:a6:f6: 0c:5e:cc:1a:ed:c5:f1:2b:b8:db:eb:6c:c8:78:ab: d9:48:e2:88:1e:d2:4a:2b:bf:ca:1a:40:78:93:c8: fb:b7:cb:1e:33:ad:84:9e:18:98:47:10:a8:bd:c6: eb:83:91:cc:17:48:e5:42:67:1d:8d:0c:84:62:a1: 72:53:eb:6a:36:1d:12:53:cc:30:1b:e3:7a:6b:5e: 0c:8e:92:cd:86:96:51:ec:ee:e8:96:73:fd:25:b5: 9f:83:55:12:df:b2:b4:ae:9e:55:e9:83:c6:03:87: a8:f3:ef:6e:8c:07:8f:ef:20:ba:30:2f:b2:58:04: 78:af:d8:fd:50:de:8d:c4:ef:d6:52:10:80:3a:c8: b8:a2:dd:af:39:7e:82:90:ac:1e:a6:9f:86:dc:49: c2:51:55:16:a1:94:dc:7d:09:3c:d7:9f:17:f2:08: 60:2a:67:0b:ca:6a:9c:48:2a:e3:ea:cf:fa:66:aa: 8d:9e:8c:3f:2e:c9:39:1f:f4:3d:25:71:44:f5:50: dd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:01:BA:5C:3A:6C:6B:FA:7B:CC:85:99:1D:0D:CF:CC:04:37:86:7D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151522.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.234.124.0/23 IPv6: 2001:df3:c40::/48 Signature Algorithm: sha256WithRSAEncryption 74:20:61:fb:f4:17:66:4e:a0:15:71:ee:a1:cd:36:5e:60:81: 7e:76:9f:02:8e:1d:4b:da:ac:18:a0:76:fd:06:03:66:6e:de: 0a:82:74:24:15:b8:52:de:4c:63:1e:1e:45:2a:3f:36:05:90: f8:01:fa:89:67:8d:b7:d4:a3:b6:d0:9f:bd:57:9e:86:74:c8: a2:ef:eb:b6:fb:60:95:1c:8d:00:b4:16:63:92:da:3c:9d:6e: 53:30:dd:1f:80:ad:6b:0c:c1:fe:fd:4c:1d:ec:f7:e4:ac:94: 28:5e:33:b6:4b:dc:2a:50:e0:3b:c5:05:85:2f:93:44:29:d3: 42:ae:c4:d1:a5:53:27:9f:96:18:79:65:3c:00:e1:a6:7e:79: 5b:7d:dd:9d:45:51:4a:90:84:f4:65:8d:2d:b1:75:28:05:71: aa:d0:a9:ef:06:d5:aa:cb:a7:1d:6d:42:b1:88:ef:b2:e8:2b: 6a:16:2c:0f:c3:6f:e4:8f:5e:04:39:78:26:bf:76:09:88:4d: 69:5a:2e:8b:2c:32:39:c3:be:88:b0:ec:82:8d:a9:18:cd:81: d1:dc:f7:a4:a4:ab:ec:11:dc:60:b1:d5:e9:a1:a2:55:c4:4b: 97:93:20:03:64:59:73:a6:dd:42:35:fd:1a:4a:a1:7d:e3:02: 6d:3f:4f:08 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUF4D+HzvDgu80HfnIQyIvk/N0cKIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTEzMVoX DTI3MDUwMTIxMTYzMVowMzExMC8GA1UEAxMoMUQwMUJBNUMzQTZDNkJGQTdCQ0M4 NTk5MUQwRENGQ0MwNDM3ODY3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANOn2EWnoP6FXZtQSryMdN12369gT7EqxRakFPYKyr2jiJo+8LjGAnRJ98C9 uP8+gFZ3rGfQtf2WXKb2DF7MGu3F8Su42+tsyHir2UjiiB7SSiu/yhpAeJPI+7fL HjOthJ4YmEcQqL3G64ORzBdI5UJnHY0MhGKhclPrajYdElPMMBvjemteDI6SzYaW Uezu6JZz/SW1n4NVEt+ytK6eVemDxgOHqPPvbowHj+8gujAvslgEeK/Y/VDejcTv 1lIQgDrIuKLdrzl+gpCsHqafhtxJwlFVFqGU3H0JPNefF/IIYCpnC8pqnEgq4+rP +maqjZ6MPy7JOR/0PSVxRPVQ3csCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQdAbpc Omxr+nvMhZkdDc/MBDeGfTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxNTIyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBZ+p8MA8EAgACMAkDBwAgAQ3zDEAwDQYJKoZIhvcNAQELBQADggEBAHQg Yfv0F2ZOoBVx7qHNNl5ggX52nwKOHUvarBigdv0GA2Zu3gqCdCQVuFLeTGMeHkUq PzYFkPgB+olnjbfUo7bQn71XnoZ0yKLv67b7YJUcjQC0FmOS2jydblMw3R+ArWsM wf79TB3s9+SslCheM7ZL3CpQ4DvFBYUvk0Qp00KuxNGlUyeflhh5ZTwA4aZ+eVt9 3Z1FUUqQhPRljS2xdSgFcarQqe8G1arLpx1tQrGI77LoK2oWLA/Db+SPXgQ5eCa/ dgmITWlaLossMjnDvoiw7IKNqRjNgdHc96Skq+wR3GCx1emholXES5eTIANkWXOm 3UI1/RpKoX3jAm0/Twg= -----END CERTIFICATE-----Generated at Sun May 3 00:39:51 2026 by rpki-client