$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151544.roa File: AS151544.roa (raw, json) Hash identifier: v6Drd+jrB8N+33IeMbTThE+P/hDHHX/64ujZEl+vcvM= Subject key identifier: 19:7B:85:6D:90:38:64:00:CA:E3:43:2A:15:13:2A:77:BF:30:5E:61 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2B5DA62D3882B62E17D7E40653D3F5739DCE26D7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151544.roa Signing time: Sat 02 May 2026 14:33:17 +0000 ROA not before: Sat 02 May 2026 14:28:17 +0000 ROA not after: Sat 01 May 2027 14:33:17 +0000 asID: 151544 IP address blocks: 103.245.159.0/24 maxlen: 24 2001:df2:f0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:5d:a6:2d:38:82:b6:2e:17:d7:e4:06:53:d3:f5:73:9d:ce:26:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 14:28:17 2026 GMT Not After : May 1 14:33:17 2027 GMT Subject: CN=197B856D90386400CAE3432A15132A77BF305E61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6a:90:03:d5:03:66:4b:d4:35:7a:16:a2:3c: 87:8a:ca:d1:7d:5b:41:d6:61:53:86:c9:b4:9b:53: f6:92:d0:86:f6:6c:e8:67:a7:54:50:f1:f8:6c:30: 45:da:38:95:27:43:f0:0b:ed:80:61:c3:7d:7c:88: 46:2b:c0:8c:90:0f:12:eb:24:f0:20:68:5d:56:52: 69:b2:34:ef:d2:5d:47:64:ef:f1:7b:6c:57:03:29: d0:b8:0c:7a:31:c8:37:99:f9:6e:ed:b4:c0:0c:2b: 23:82:62:b4:3d:74:1d:09:db:d1:55:7d:b8:ac:91: e5:1d:72:1d:f4:a4:b1:51:dd:97:db:da:a3:58:3b: f6:b0:79:d8:d5:41:c7:c1:38:bb:35:3e:b3:b6:38: 86:95:74:e4:36:b5:d5:f9:96:64:9f:84:15:d7:07: 7b:80:01:7e:9a:2f:c4:a4:77:75:66:b9:a4:cf:8a: 21:3d:13:51:a8:2c:cf:29:6d:02:d0:70:ec:f8:08: ca:84:37:b0:b1:c5:c7:bc:4d:07:51:66:e0:78:49: ea:00:1f:e9:7e:2f:18:ea:b2:2b:fd:ce:6c:4b:d3: 14:06:24:fc:00:f3:b1:e3:12:49:e8:02:7b:b4:7a: 4a:8a:97:ad:8d:85:93:b6:cc:5c:52:c5:9f:a4:46: a4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7B:85:6D:90:38:64:00:CA:E3:43:2A:15:13:2A:77:BF:30:5E:61 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151544.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.245.159.0/24 IPv6: 2001:df2:f0c0::/48 Signature Algorithm: sha256WithRSAEncryption 6b:cb:ec:cf:2e:44:fb:45:6b:57:a6:63:84:4e:7f:57:86:9c: 2c:9e:0f:88:40:db:ce:f9:57:d9:6b:32:f0:d0:56:3b:9d:32: bd:57:5f:ab:3f:80:c1:7a:52:05:da:94:b4:12:33:85:5a:29: e0:81:d3:cd:41:a1:ba:87:3b:ae:10:a4:74:52:73:0d:8f:69: 43:d8:18:b8:59:15:8b:a7:74:ec:34:21:2d:eb:32:37:af:6c: 64:13:3d:02:35:ef:23:85:57:50:5f:2c:a4:e7:1a:1e:3c:d4: 25:68:32:30:12:3f:93:a7:1b:15:52:c0:78:86:bd:24:ec:c6: 5d:6f:f6:c8:0b:e4:29:28:00:12:d6:7d:87:96:09:ed:f7:48: 64:42:84:c2:b9:34:2a:7e:e8:00:57:8a:e4:6e:27:fa:fd:1b: ed:18:fa:45:6f:20:0d:2c:1b:56:d5:22:eb:f3:12:b9:fe:ba: 50:bb:83:33:76:a4:99:5e:72:64:be:d7:dc:a4:0c:60:c4:f6: 14:df:da:2e:08:b8:ff:96:70:8e:49:cc:1b:0f:c2:07:a6:8f: 82:3a:bc:d4:35:55:98:c1:ec:7c:2c:41:1a:88:3a:9e:c2:ad: 39:b0:ae:48:a6:aa:7c:14:5e:01:d0:d3:2e:ee:64:55:d4:78: e5:cb:6a:e0 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUK12mLTiCti4X1+QGU9P1c53OJtcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjE0MjgxN1oX DTI3MDUwMTE0MzMxN1owMzExMC8GA1UEAxMoMTk3Qjg1NkQ5MDM4NjQwMENBRTM0 MzJBMTUxMzJBNzdCRjMwNUU2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALFqkAPVA2ZL1DV6FqI8h4rK0X1bQdZhU4bJtJtT9pLQhvZs6GenVFDx+Gww Rdo4lSdD8AvtgGHDfXyIRivAjJAPEusk8CBoXVZSabI079JdR2Tv8XtsVwMp0LgM ejHIN5n5bu20wAwrI4JitD10HQnb0VV9uKyR5R1yHfSksVHdl9vao1g79rB52NVB x8E4uzU+s7Y4hpV05Da11fmWZJ+EFdcHe4ABfpovxKR3dWa5pM+KIT0TUagszylt AtBw7PgIyoQ3sLHFx7xNB1Fm4HhJ6gAf6X4vGOqyK/3ObEvTFAYk/ADzseMSSegC e7R6SoqXrY2Fk7bMXFLFn6RGpDUCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQZe4Vt kDhkAMrjQyoVEyp3vzBeYTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxNTQ0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAZ/WfMA8EAgACMAkDBwAgAQ3y8MAwDQYJKoZIhvcNAQELBQADggEBAGvL 7M8uRPtFa1emY4ROf1eGnCyeD4hA2875V9lrMvDQVjudMr1XX6s/gMF6UgXalLQS M4VaKeCB081BobqHO64QpHRScw2PaUPYGLhZFYundOw0IS3rMjevbGQTPQI17yOF V1BfLKTnGh481CVoMjASP5OnGxVSwHiGvSTsxl1v9sgL5CkoABLWfYeWCe33SGRC hMK5NCp+6ABXiuRuJ/r9G+0Y+kVvIA0sG1bVIuvzErn+ulC7gzN2pJlecmS+19yk DGDE9hTf2i4IuP+WcI5JzBsPwgemj4I6vNQ1VZjB7HwsQRqIOp7CrTmwrkimqnwU XgHQ0y7uZFXUeOXLauA= -----END CERTIFICATE-----Generated at Sun May 3 01:40:54 2026 by rpki-client