$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151545.roa File: AS151545.roa (raw, json) Hash identifier: VsNxON1pe1asDOvuXXevhMwhBcu2aS/Q/xRUtQzQF0U= Subject key identifier: A1:1D:70:70:30:FB:D5:81:CA:18:1E:04:01:67:55:77:D2:9D:C2:F1 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5D41FCE2DA936ECB198AECB41692DA373B1E2B19 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151545.roa Signing time: Sat 02 May 2026 21:16:52 +0000 ROA not before: Sat 02 May 2026 21:11:52 +0000 ROA not after: Sat 01 May 2027 21:16:52 +0000 asID: 151545 IP address blocks: 103.236.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:41:fc:e2:da:93:6e:cb:19:8a:ec:b4:16:92:da:37:3b:1e:2b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:11:52 2026 GMT Not After : May 1 21:16:52 2027 GMT Subject: CN=A11D707030FBD581CA181E0401675577D29DC2F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ff:08:65:9a:e3:69:43:ca:32:6e:4b:02:00: 97:c7:03:7a:a5:e5:ac:4e:6e:38:d0:8c:10:e0:38: ba:c3:f4:dc:a2:42:b1:0b:e9:9c:ca:25:6d:f2:1e: bb:9a:ac:86:3b:27:76:89:3b:42:2c:0f:2a:a2:94: 90:3f:9f:4c:9a:c3:fe:69:e0:ee:2e:97:e8:39:22: 3a:42:e1:fe:54:b5:b0:9c:06:3d:81:fb:6c:da:77: 80:59:0b:92:e2:bb:0a:09:fc:10:13:39:10:7a:0c: 01:f4:fb:08:cf:62:2d:15:77:5f:85:59:8a:d4:ab: e9:a3:6d:37:5c:e3:94:1f:fc:4d:e7:eb:0f:30:38: 23:70:b8:b8:bf:1b:6f:b7:17:64:5d:9a:aa:6b:41: 65:09:7b:c1:dc:b0:6f:5b:13:95:54:ef:8f:cc:36: 04:a2:01:4b:ab:5b:d1:8f:ea:a7:ab:5a:15:79:1a: f5:c1:4c:64:56:6c:c8:de:ea:6d:b5:c1:16:7e:14: ff:2d:59:a0:87:e5:98:2e:a3:1c:33:85:9e:54:50: 3d:35:ea:8d:b6:13:ec:fd:76:24:2d:bb:bc:38:bc: 8a:59:03:03:d1:59:37:da:b8:cd:44:72:10:7b:76: d0:01:bc:44:d0:cd:2c:88:66:e6:56:67:f9:15:55: 5d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1D:70:70:30:FB:D5:81:CA:18:1E:04:01:67:55:77:D2:9D:C2:F1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151545.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.130.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:09:dd:70:f5:15:44:8a:4d:9a:a9:3b:19:dc:e4:79:69:53: 36:eb:9d:56:0b:2a:9d:08:4a:8a:b4:14:84:25:a5:b4:6c:64: e7:a9:7b:d2:06:de:12:7a:70:93:da:75:b3:b7:e9:3b:04:6e: 3a:82:dc:16:34:c4:2d:45:23:7f:66:1b:d1:6d:28:a4:b7:f8: 97:3f:c4:67:fd:05:88:33:dd:95:77:80:71:1d:d7:95:18:f6: 6e:32:b9:f0:b7:33:17:c5:b4:07:24:5f:21:24:36:02:3c:fe: 6a:96:f4:26:c2:e5:00:ef:8e:a7:e7:5a:bf:8c:70:9f:a5:39: c4:a0:80:15:b1:d0:88:29:12:46:28:aa:e9:45:6e:4e:a5:7a: b5:d8:19:27:5c:3b:78:39:a0:57:81:b4:ce:c3:e6:d9:ee:ef: ed:40:7e:04:db:85:dd:d7:1e:28:c4:c5:57:f0:9e:bf:2d:9f: 84:12:d1:fb:39:21:2d:6e:00:28:45:13:c4:a6:4a:09:c5:98: f5:f7:82:f2:b8:d3:0d:ea:33:b2:53:4c:20:99:95:6d:9e:de: 00:01:70:3b:ce:0e:5c:de:50:5d:97:5d:93:c2:4c:95:76:cf: e4:96:fa:49:4f:07:67:4a:73:00:05:79:0c:93:26:49:0d:42: 0c:db:f4:58 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUXUH84tqTbssZiuy0FpLaNzseKxkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTE1MloX DTI3MDUwMTIxMTY1MlowMzExMC8GA1UEAxMoQTExRDcwNzAzMEZCRDU4MUNBMTgx RTA0MDE2NzU1NzdEMjlEQzJGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKD/CGWa42lDyjJuSwIAl8cDeqXlrE5uONCMEOA4usP03KJCsQvpnMolbfIe u5qshjsndok7QiwPKqKUkD+fTJrD/mng7i6X6DkiOkLh/lS1sJwGPYH7bNp3gFkL kuK7Cgn8EBM5EHoMAfT7CM9iLRV3X4VZitSr6aNtN1zjlB/8TefrDzA4I3C4uL8b b7cXZF2aqmtBZQl7wdywb1sTlVTvj8w2BKIBS6tb0Y/qp6taFXka9cFMZFZsyN7q bbXBFn4U/y1ZoIflmC6jHDOFnlRQPTXqjbYT7P12JC27vDi8ilkDA9FZN9q4zURy EHt20AG8RNDNLIhm5lZn+RVVXcUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBShHXBw MPvVgcoYHgQBZ1V30p3C8TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxNTQ1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ+yCMA0GCSqGSIb3DQEBCwUAA4IBAQCKCd1w9RVEik2aqTsZ3OR5aVM2 651WCyqdCEqKtBSEJaW0bGTnqXvSBt4SenCT2nWzt+k7BG46gtwWNMQtRSN/ZhvR bSikt/iXP8Rn/QWIM92Vd4BxHdeVGPZuMrnwtzMXxbQHJF8hJDYCPP5qlvQmwuUA 746n51q/jHCfpTnEoIAVsdCIKRJGKKrpRW5OpXq12BknXDt4OaBXgbTOw+bZ7u/t QH4E24Xd1x4oxMVX8J6/LZ+EEtH7OSEtbgAoRRPEpkoJxZj194LyuNMN6jOyU0wg mZVtnt4AAXA7zg5c3lBdl12TwkyVds/klvpJTwdnSnMABXkMkyZJDUIM2/RY -----END CERTIFICATE-----Generated at Sun May 3 00:39:36 2026 by rpki-client