$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151532.roa File: AS151532.roa (raw, json) Hash identifier: 5VO3276HoifSUXLWg/BfU1xaW/+RcI6GrYtb7d89KXc= Subject key identifier: 54:57:E7:E0:B6:9D:13:7F:40:0E:7A:FE:82:63:85:9C:A6:59:63:76 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0854F792A3035D010705D1010AE5FDFB6228EC07 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151532.roa Signing time: Sat 02 May 2026 21:17:35 +0000 ROA not before: Sat 02 May 2026 21:12:35 +0000 ROA not after: Sat 01 May 2027 21:17:35 +0000 asID: 151532 IP address blocks: 103.245.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:54:f7:92:a3:03:5d:01:07:05:d1:01:0a:e5:fd:fb:62:28:ec:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:12:35 2026 GMT Not After : May 1 21:17:35 2027 GMT Subject: CN=5457E7E0B69D137F400E7AFE8263859CA6596376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:06:b4:2f:d7:89:d6:40:c6:66:6d:cf:ce:51: 34:38:69:42:a2:fd:c2:bf:a7:df:7a:64:a4:1f:ad: 74:0d:1f:56:49:1c:4c:6e:06:a7:66:f0:45:cd:9b: 6b:7e:9b:2a:97:76:60:31:04:bd:b7:ef:ed:d1:fb: bb:7c:94:f0:76:a4:10:05:79:0a:96:b9:84:6b:a2: f7:0e:1e:e2:4c:32:e7:98:d4:a6:12:54:48:4a:77: 56:dd:f9:f4:25:97:56:be:bf:46:cb:74:12:7c:e7: f7:96:71:f8:a5:27:e7:d4:54:32:7c:7d:60:de:d8: 07:78:70:58:1e:94:a2:17:34:1b:d0:a1:f6:69:68: da:3b:3f:5a:5f:92:b3:24:59:49:26:35:ea:c2:bd: 22:6d:c0:16:f1:4b:b9:be:0a:15:24:47:1e:be:60: 7b:a1:d3:5e:ff:ad:c0:25:cb:0a:48:4f:6f:d8:61: be:1d:25:05:bd:00:62:2c:f7:7f:92:5a:a9:0a:1a: cb:48:f7:f8:55:fa:89:04:39:c8:34:de:f7:29:4c: 01:0d:d1:76:7c:5e:1e:ba:c2:ad:7f:74:cc:47:a5: 0b:9e:aa:4d:fd:f2:b0:60:e4:70:76:0e:da:42:47: 2d:82:6f:d4:b7:13:8c:3c:0b:30:fe:f0:47:0e:a2: f5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:57:E7:E0:B6:9D:13:7F:40:0E:7A:FE:82:63:85:9C:A6:59:63:76 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.245.56.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:c2:63:e7:cd:82:19:61:08:dc:8d:5e:bf:23:c8:2e:2e:31: 6d:4a:65:c8:ee:c1:0a:3b:f3:a8:1c:3f:c0:57:66:e4:68:76: 4f:96:13:5d:64:b0:b2:b7:1d:58:0a:32:4a:ba:2a:37:ba:d3: d8:58:f6:c0:cc:60:64:43:33:fb:a4:ab:f2:a1:82:20:f8:39: f1:c2:1e:80:79:7e:bb:12:89:57:46:29:97:ec:84:2c:a7:d0: 3b:e0:9b:63:4b:73:04:ce:bd:33:87:d7:ce:91:f3:36:1c:2f: a2:18:e0:5d:2a:99:c7:bd:e6:aa:9c:11:71:98:80:5e:50:4d: 25:b3:d7:02:a7:23:ec:a6:41:e9:55:07:2e:ad:97:8e:bb:75: 77:62:bf:73:cf:cf:d2:15:d2:3c:08:f2:ce:14:b5:1e:cb:5b: 7d:5a:1e:8b:12:60:ba:eb:53:8f:84:66:b6:e8:60:0b:bf:07: 82:e3:b0:d7:83:3d:51:9b:04:0c:41:ad:14:bb:94:ea:fb:b0: b9:b0:b8:55:77:49:b1:78:05:bb:a1:f0:2a:a3:1a:12:e8:ae: 1a:1e:2c:a3:f1:f5:61:8c:2d:c7:fd:af:10:49:3c:18:31:03: 62:a8:6f:d9:1f:28:29:34:74:10:2b:65:a5:80:95:e2:81:f5: 81:da:42:b4 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUCFT3kqMDXQEHBdEBCuX9+2Io7AcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTIzNVoX DTI3MDUwMTIxMTczNVowMzExMC8GA1UEAxMoNTQ1N0U3RTBCNjlEMTM3RjQwMEU3 QUZFODI2Mzg1OUNBNjU5NjM3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJgGtC/XidZAxmZtz85RNDhpQqL9wr+n33pkpB+tdA0fVkkcTG4Gp2bwRc2b a36bKpd2YDEEvbfv7dH7u3yU8HakEAV5Cpa5hGui9w4e4kwy55jUphJUSEp3Vt35 9CWXVr6/Rst0Enzn95Zx+KUn59RUMnx9YN7YB3hwWB6Uohc0G9Ch9mlo2js/Wl+S syRZSSY16sK9Im3AFvFLub4KFSRHHr5ge6HTXv+twCXLCkhPb9hhvh0lBb0AYiz3 f5JaqQoay0j3+FX6iQQ5yDTe9ylMAQ3RdnxeHrrCrX90zEelC56qTf3ysGDkcHYO 2kJHLYJv1LcTjDwLMP7wRw6i9VsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRUV+fg tp0Tf0AOev6CY4WcplljdjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxNTMyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ/U4MA0GCSqGSIb3DQEBCwUAA4IBAQBdwmPnzYIZYQjcjV6/I8guLjFt SmXI7sEKO/OoHD/AV2bkaHZPlhNdZLCytx1YCjJKuio3utPYWPbAzGBkQzP7pKvy oYIg+Dnxwh6AeX67EolXRimX7IQsp9A74JtjS3MEzr0zh9fOkfM2HC+iGOBdKpnH veaqnBFxmIBeUE0ls9cCpyPspkHpVQcurZeOu3V3Yr9zz8/SFdI8CPLOFLUey1t9 Wh6LEmC661OPhGa26GALvweC47DXgz1RmwQMQa0Uu5Tq+7C5sLhVd0mxeAW7ofAq oxoS6K4aHiyj8fVhjC3H/a8QSTwYMQNiqG/ZHygpNHQQK2WlgJXigfWB2kK0 -----END CERTIFICATE-----Generated at Sun May 3 00:39:51 2026 by rpki-client