$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151529.roa File: AS151529.roa (raw, json) Hash identifier: /g6GbyBAMKZPzf8Rz8IxXfbqj7GDUnDxin1X2/k05U8= Subject key identifier: 6E:9E:B0:6A:B7:4D:46:88:41:B7:83:FC:EE:55:9C:C2:5C:46:10:2B Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 49FA022E09005CA4916BA123202C5C2F20EFB605 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151529.roa Signing time: Sat 02 May 2026 21:15:27 +0000 ROA not before: Sat 02 May 2026 21:10:27 +0000 ROA not after: Sat 01 May 2027 21:15:27 +0000 asID: 151529 IP address blocks: 103.224.16.0/23 maxlen: 24 2001:df2:f6c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:fa:02:2e:09:00:5c:a4:91:6b:a1:23:20:2c:5c:2f:20:ef:b6:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:10:27 2026 GMT Not After : May 1 21:15:27 2027 GMT Subject: CN=6E9EB06AB74D468841B783FCEE559CC25C46102B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b2:b7:f0:f2:45:f3:9d:2d:33:a6:f8:86:f2: b2:8b:57:b2:34:69:47:35:14:a3:50:b6:20:18:e4: 98:e5:b1:02:bf:85:71:ba:c0:e5:e6:65:cc:9c:45: e6:b4:2a:0f:5c:83:1b:42:c7:c4:37:6f:be:dc:5b: 2b:9a:40:d3:95:b5:15:5b:fd:b6:3e:43:cc:7a:82: 3d:1e:b9:b4:a7:cb:60:19:de:4e:c6:a1:69:55:a7: 1e:80:18:3f:eb:7f:6e:ea:21:e2:3f:c3:c1:8a:66: 07:51:a6:df:c0:46:85:ff:72:f0:3b:03:6a:76:74: 66:8f:ee:ac:6d:21:c7:94:e9:a8:64:a7:bb:02:32: ae:03:48:70:c3:b6:85:e1:ce:28:2d:0d:ec:37:20: 1a:d1:86:73:cd:94:83:d7:f9:ef:e1:c6:ed:a1:9a: 50:69:44:79:2b:ea:06:38:1a:98:7d:c2:1b:65:37: 3c:eb:b2:ec:96:fa:ec:05:ed:29:16:20:03:c6:94: 08:bb:53:9b:13:82:37:1e:4e:56:76:a1:84:a8:9a: 1b:8b:5d:b8:77:6c:f5:9d:79:13:52:40:db:47:32: 5c:78:87:77:20:b9:2f:70:04:fe:0d:b0:9b:49:0a: fe:eb:b7:bf:1b:61:18:5c:7b:4d:fd:26:ea:d4:dc: a7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9E:B0:6A:B7:4D:46:88:41:B7:83:FC:EE:55:9C:C2:5C:46:10:2B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151529.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.224.16.0/23 IPv6: 2001:df2:f6c0::/48 Signature Algorithm: sha256WithRSAEncryption 62:f0:62:a0:33:b5:a8:0e:8c:68:df:63:55:af:50:d1:21:35: da:8c:b4:71:3b:e7:b3:cf:73:fd:fc:9d:4c:1d:09:86:e4:8f: a9:65:2c:38:57:8b:e0:49:4c:da:03:4d:da:6f:96:a2:cf:8e: c3:ad:86:18:ad:8f:cd:9a:43:92:de:ff:6b:f2:c9:70:d1:74: 55:6b:ef:b4:ac:0d:25:72:ed:2b:19:f7:33:79:42:2c:30:2c: bb:bf:ea:c0:97:34:a5:97:71:b0:8f:82:e4:5d:99:ce:c4:b8: cd:64:c8:66:d7:9f:de:87:d3:73:45:df:9f:7d:bc:6d:7a:01: 94:a4:4b:66:1f:cc:6e:4d:51:38:89:0b:84:43:ea:33:6e:29: 4d:91:2d:82:9b:f3:f6:40:43:93:1e:22:44:64:c0:d0:34:da: 82:79:f2:d5:0b:28:88:f8:1a:3d:cc:5f:a9:70:7a:be:36:f4: 73:40:49:27:77:d8:bd:8e:98:0f:52:6d:56:08:38:31:d8:0f: a8:98:40:2e:e1:fb:e9:54:df:24:d8:8b:46:7b:95:f6:bc:ce: 95:9f:72:6f:b6:24:89:a6:18:e5:f2:93:3b:b3:2c:95:1f:81: 6e:7e:07:20:bc:69:b0:84:72:2e:2b:1a:32:81:3e:39:fb:ec: c3:96:28:7d -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUSfoCLgkAXKSRa6EjICxcLyDvtgUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTAyN1oX DTI3MDUwMTIxMTUyN1owMzExMC8GA1UEAxMoNkU5RUIwNkFCNzRENDY4ODQxQjc4 M0ZDRUU1NTlDQzI1QzQ2MTAyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJuyt/DyRfOdLTOm+IbysotXsjRpRzUUo1C2IBjkmOWxAr+FcbrA5eZlzJxF 5rQqD1yDG0LHxDdvvtxbK5pA05W1FVv9tj5DzHqCPR65tKfLYBneTsahaVWnHoAY P+t/buoh4j/DwYpmB1Gm38BGhf9y8DsDanZ0Zo/urG0hx5TpqGSnuwIyrgNIcMO2 heHOKC0N7DcgGtGGc82Ug9f57+HG7aGaUGlEeSvqBjgamH3CG2U3POuy7Jb67AXt KRYgA8aUCLtTmxOCNx5OVnahhKiaG4tduHds9Z15E1JA20cyXHiHdyC5L3AE/g2w m0kK/uu3vxthGFx7Tf0m6tTcp4MCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBRunrBq t01GiEG3g/zuVZzCXEYQKzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxNTI5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBZ+AQMA8EAgACMAkDBwAgAQ3y9sAwDQYJKoZIhvcNAQELBQADggEBAGLw YqAztagOjGjfY1WvUNEhNdqMtHE757PPc/38nUwdCYbkj6llLDhXi+BJTNoDTdpv lqLPjsOthhitj82aQ5Le/2vyyXDRdFVr77SsDSVy7SsZ9zN5QiwwLLu/6sCXNKWX cbCPguRdmc7EuM1kyGbXn96H03NF3599vG16AZSkS2YfzG5NUTiJC4RD6jNuKU2R LYKb8/ZAQ5MeIkRkwNA02oJ58tULKIj4Gj3MX6lwer429HNASSd32L2OmA9SbVYI ODHYD6iYQC7h++lU3yTYi0Z7lfa8zpWfcm+2JImmGOXykzuzLJUfgW5+ByC8abCE ci4rGjKBPjn77MOWKH0= -----END CERTIFICATE-----Generated at Sun May 3 00:39:49 2026 by rpki-client