$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151528.roa File: AS151528.roa (raw, json) Hash identifier: peFS3ZI9Iw6zXSfgl9b8JCLrurgMKIhaXE85/uZdVuA= Subject key identifier: 17:79:D2:DC:80:58:A8:19:14:B6:56:6A:41:BF:3D:BE:66:54:48:3C Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 435EF00FF819C24C6B8E7D6DA0DC19A86D7B16C7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151528.roa Signing time: Sat 02 May 2026 08:35:53 +0000 ROA not before: Sat 02 May 2026 08:30:53 +0000 ROA not after: Sat 01 May 2027 08:35:53 +0000 asID: 151528 IP address blocks: 103.3.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:5e:f0:0f:f8:19:c2:4c:6b:8e:7d:6d:a0:dc:19:a8:6d:7b:16:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:30:53 2026 GMT Not After : May 1 08:35:53 2027 GMT Subject: CN=1779D2DC8058A81914B6566A41BF3DBE6654483C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:63:16:07:ad:a6:3a:9a:a5:2a:a1:73:3b:40: f1:13:3b:d7:25:2e:32:8d:b5:0b:87:68:0f:a8:c0: e8:36:96:a5:6c:f6:e1:63:31:47:12:35:1e:e3:13: 52:6e:7f:00:26:6b:80:19:54:0a:f1:83:99:73:c4: 4e:09:51:cf:0e:b4:11:4c:2e:7a:08:93:aa:d3:54: ac:65:89:a3:eb:62:c4:e9:ce:e6:96:c8:bb:0f:8c: 80:7c:28:b6:59:d0:68:2b:1f:1f:b5:95:51:1c:01: 23:8f:03:07:13:1d:9e:90:51:27:65:8f:a3:b2:62: 53:dd:d9:dd:a8:1a:4e:de:a0:3c:69:98:3c:fe:58: 10:7c:dd:17:c9:3e:9c:44:bb:09:3d:3a:18:33:77: aa:d6:63:0e:09:56:2d:e2:f0:89:cf:03:59:2f:f0: ec:97:c3:c5:68:17:4f:6a:a8:a5:43:cd:50:8d:36: b7:11:5c:fa:3d:87:1b:96:37:1a:b9:cd:92:51:0b: 3b:b6:75:79:3f:b2:41:01:71:97:3c:08:3a:5e:fa: e0:38:af:9f:c7:d4:30:dd:cb:3e:46:6d:95:a0:a8: bd:ff:2b:d1:66:da:df:b1:ea:8b:ad:1b:6b:f3:81: e2:74:ef:6f:58:b8:67:05:f8:4c:36:0c:c9:71:b9: e0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:79:D2:DC:80:58:A8:19:14:B6:56:6A:41:BF:3D:BE:66:54:48:3C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151528.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.3.232.0/24 Signature Algorithm: sha256WithRSAEncryption 35:4d:3c:b7:48:fb:2a:83:51:78:c0:25:ee:59:a3:e3:f1:6c: c5:53:07:14:d8:0c:7c:af:fd:c8:b5:81:07:58:4d:ba:53:0e: cc:ed:15:bd:1a:27:aa:2f:f1:6f:8c:18:9f:6c:13:15:0c:95: 16:62:d8:cd:71:e9:df:cf:60:a4:57:70:ce:ba:22:4b:c2:89: 01:02:8f:c2:68:41:3d:76:a5:f1:98:98:e6:bf:27:23:c2:9a: e6:f6:9e:8a:e2:c7:0f:e6:8a:90:f6:89:12:93:0c:e4:97:af: 6c:12:98:bc:14:7b:a5:db:dd:a7:de:95:53:44:f6:d6:41:27: c0:54:25:70:51:17:18:ff:b6:6e:c1:24:d7:c4:4f:ce:7c:99: 65:55:ef:11:32:0e:91:f0:22:7a:85:df:7d:26:11:7f:1d:bc: b0:19:8a:b9:64:b2:43:be:2e:0a:e4:c3:42:79:f2:88:1a:b9: 69:08:ca:1c:07:eb:9a:53:cb:41:33:d8:7c:0b:34:eb:0c:38: 63:72:e2:7c:d1:83:52:0c:ef:10:d4:bc:15:6a:1b:e0:a7:ff: d0:1a:65:a4:37:67:cc:b1:05:f0:8b:45:c4:9d:c1:be:7f:28: bd:7f:67:c0:a0:a9:7a:b0:51:6c:73:0c:02:e6:f4:a8:cb:ec: 40:df:b7:fb -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUQ17wD/gZwkxrjn1toNwZqG17FscwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzA1M1oX DTI3MDUwMTA4MzU1M1owMzExMC8GA1UEAxMoMTc3OUQyREM4MDU4QTgxOTE0QjY1 NjZBNDFCRjNEQkU2NjU0NDgzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJxjFgetpjqapSqhcztA8RM71yUuMo21C4doD6jA6DaWpWz24WMxRxI1HuMT Um5/ACZrgBlUCvGDmXPETglRzw60EUwuegiTqtNUrGWJo+tixOnO5pbIuw+MgHwo tlnQaCsfH7WVURwBI48DBxMdnpBRJ2WPo7JiU93Z3agaTt6gPGmYPP5YEHzdF8k+ nES7CT06GDN3qtZjDglWLeLwic8DWS/w7JfDxWgXT2qopUPNUI02txFc+j2HG5Y3 GrnNklELO7Z1eT+yQQFxlzwIOl764Divn8fUMN3LPkZtlaCovf8r0Wba37Hqi60b a/OB4nTvb1i4ZwX4TDYMyXG54GsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQXedLc gFioGRS2VmpBvz2+ZlRIPDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxNTI4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZwPoMA0GCSqGSIb3DQEBCwUAA4IBAQA1TTy3SPsqg1F4wCXuWaPj8WzF UwcU2Ax8r/3ItYEHWE26Uw7M7RW9GieqL/FvjBifbBMVDJUWYtjNcenfz2CkV3DO uiJLwokBAo/CaEE9dqXxmJjmvycjwprm9p6K4scP5oqQ9okSkwzkl69sEpi8FHul 292n3pVTRPbWQSfAVCVwURcY/7ZuwSTXxE/OfJllVe8RMg6R8CJ6hd99JhF/Hbyw GYq5ZLJDvi4K5MNCefKIGrlpCMocB+uaU8tBM9h8CzTrDDhjcuJ80YNSDO8Q1LwV ahvgp//QGmWkN2fMsQXwi0XEncG+fyi9f2fAoKl6sFFscwwC5vSoy+xA37f7 -----END CERTIFICATE-----Generated at Sun May 3 00:39:51 2026 by rpki-client