$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151543.roa File: AS151543.roa (raw, json) Hash identifier: jU81psrK7zIPflS1++JtY4bxerhR8+sL4bJZ73XR7cI= Subject key identifier: A4:64:BC:A7:5E:4E:83:00:09:0C:9F:CF:13:58:C2:62:A6:CF:97:5C Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2EF9AD7F0337683E5D62267E750EAEFE2536AF64 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151543.roa Signing time: Sat 02 May 2026 08:37:16 +0000 ROA not before: Sat 02 May 2026 08:32:16 +0000 ROA not after: Sat 01 May 2027 08:37:16 +0000 asID: 151543 IP address blocks: 103.242.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:f9:ad:7f:03:37:68:3e:5d:62:26:7e:75:0e:ae:fe:25:36:af:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:32:16 2026 GMT Not After : May 1 08:37:16 2027 GMT Subject: CN=A464BCA75E4E8300090C9FCF1358C262A6CF975C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f7:56:56:98:9e:74:fb:34:c9:53:62:8c:be: 59:0c:c2:4e:18:54:75:08:a6:26:7f:83:a1:c1:88: 9c:99:9a:ca:3c:d7:a1:8f:f5:44:e3:48:09:7c:a8: 01:fb:6f:09:b3:c1:7e:0a:c8:6c:42:4c:41:8c:fa: 1c:1f:16:05:e9:de:ee:65:a7:8b:90:09:2e:4f:5c: b1:16:7a:3a:5c:f4:ba:46:e9:91:da:7e:2f:ac:1c: 98:0a:38:0e:18:62:3f:d2:87:39:e2:3b:fd:d0:16: f6:1e:06:9d:93:a6:49:96:b4:03:a8:0f:12:65:b1: 8c:47:4b:b6:70:36:c7:d4:37:fb:bb:d6:26:20:a3: 8c:ce:ce:c5:07:54:1b:f4:b0:96:3d:98:6e:8b:76: ea:7d:6b:7f:ee:d4:ef:3a:d4:8b:f3:c7:3a:60:49: 5b:39:b6:64:69:14:3c:4f:cd:25:fe:4d:6e:72:1b: 5b:b7:94:76:78:38:d7:12:36:b3:35:55:28:ac:47: 3e:36:16:a5:45:ae:d7:c1:38:7b:82:3c:64:10:0d: 79:c1:dc:65:f0:f1:63:50:31:4d:b5:d3:a4:af:f5: 6a:4a:08:40:01:03:3c:0f:26:b1:c2:66:b4:6a:d5: bf:e1:24:c5:de:b8:b9:a5:b2:44:13:95:01:eb:ae: c5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:64:BC:A7:5E:4E:83:00:09:0C:9F:CF:13:58:C2:62:A6:CF:97:5C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151543.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.242.82.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:d3:02:46:5b:4e:de:34:45:19:40:d5:0b:bc:51:cf:4f:a8: 3f:cc:ca:d9:5f:d5:87:3e:3f:cf:e1:a8:27:b2:30:f8:c8:68: 42:dc:d6:28:83:11:c9:15:93:40:a2:43:49:9d:8d:3a:b2:5f: dd:53:58:dc:24:10:37:2e:dc:b2:46:51:06:f7:55:69:cf:58: 5d:6d:14:81:2d:47:bb:cd:a3:03:c7:5b:88:79:bc:b6:25:57: b1:c0:e6:c0:dc:bb:28:82:e0:11:e3:dc:ae:e6:ca:d1:41:0d: c1:3f:41:2e:2c:c4:3f:07:07:57:e3:f8:63:9c:85:ef:8b:1a: 2b:38:cf:24:bc:32:71:82:b2:e5:b1:1f:e5:fa:12:06:30:1c: ff:7d:07:bc:b3:b5:36:5c:5c:a7:f5:99:f4:4a:9d:cd:55:eb: 66:58:1e:a7:6c:45:70:b8:d9:5d:1f:14:4c:33:50:58:e0:e0: e8:f5:01:09:4a:9f:33:61:86:a0:8d:3f:ee:7b:7b:41:a3:78: 69:ac:b3:ab:0f:e2:19:84:1c:c2:1f:fa:a3:f6:cb:1b:3e:aa: b4:5e:f9:f0:46:26:6d:ae:1d:7c:85:19:6b:7f:7e:c8:84:1c: ff:ec:3a:5d:1a:28:4e:6d:b1:f3:f6:ff:5c:47:f2:f4:96:5d: 61:fa:91:8c -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIULvmtfwM3aD5dYiZ+dQ6u/iU2r2QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzIxNloX DTI3MDUwMTA4MzcxNlowMzExMC8GA1UEAxMoQTQ2NEJDQTc1RTRFODMwMDA5MEM5 RkNGMTM1OEMyNjJBNkNGOTc1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKH3VlaYnnT7NMlTYoy+WQzCThhUdQimJn+DocGInJmayjzXoY/1RONICXyo AftvCbPBfgrIbEJMQYz6HB8WBene7mWni5AJLk9csRZ6Olz0ukbpkdp+L6wcmAo4 DhhiP9KHOeI7/dAW9h4GnZOmSZa0A6gPEmWxjEdLtnA2x9Q3+7vWJiCjjM7OxQdU G/Swlj2Ybot26n1rf+7U7zrUi/PHOmBJWzm2ZGkUPE/NJf5NbnIbW7eUdng41xI2 szVVKKxHPjYWpUWu18E4e4I8ZBANecHcZfDxY1AxTbXTpK/1akoIQAEDPA8mscJm tGrVv+Ekxd64uaWyRBOVAeuuxXECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSkZLyn Xk6DAAkMn88TWMJips+XXDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxNTQzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ/JSMA0GCSqGSIb3DQEBCwUAA4IBAQBb0wJGW07eNEUZQNULvFHPT6g/ zMrZX9WHPj/P4agnsjD4yGhC3NYogxHJFZNAokNJnY06sl/dU1jcJBA3LtyyRlEG 91Vpz1hdbRSBLUe7zaMDx1uIeby2JVexwObA3LsoguAR49yu5srRQQ3BP0EuLMQ/ BwdX4/hjnIXvixorOM8kvDJxgrLlsR/l+hIGMBz/fQe8s7U2XFyn9Zn0Sp3NVetm WB6nbEVwuNldHxRMM1BY4ODo9QEJSp8zYYagjT/ue3tBo3hprLOrD+IZhBzCH/qj 9ssbPqq0XvnwRiZtrh18hRlrf37IhBz/7DpdGihObbHz9v9cR/L0ll1h+pGM -----END CERTIFICATE-----Generated at Sun May 3 00:40:27 2026 by rpki-client