$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151561.roa File: AS151561.roa (raw, json) Hash identifier: SvWjWvcN0jeSaSCBOMWEOhjWxDodRwL0yh+Cn7NXp50= Subject key identifier: DC:4C:28:58:79:01:E7:5E:D2:5E:F8:C9:FF:78:AA:26:83:BD:A7:F0 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6CA1932C5AFDB5F09A2236E8B053C29C574DF3ED Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151561.roa Signing time: Sat 02 May 2026 09:21:39 +0000 ROA not before: Sat 02 May 2026 09:16:39 +0000 ROA not after: Sat 01 May 2027 09:21:39 +0000 asID: 151561 IP address blocks: 103.255.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:a1:93:2c:5a:fd:b5:f0:9a:22:36:e8:b0:53:c2:9c:57:4d:f3:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:16:39 2026 GMT Not After : May 1 09:21:39 2027 GMT Subject: CN=DC4C28587901E75ED25EF8C9FF78AA2683BDA7F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6a:60:5d:7a:4c:40:71:c9:0b:f0:69:d3:ee: 7d:d2:8a:94:65:83:ca:4b:cd:d4:92:b1:35:c3:a7: 72:93:18:7f:d3:ee:f5:92:c8:96:74:3a:ca:da:fc: 9e:08:da:75:f4:7e:a7:ba:a9:2d:12:57:ba:89:7b: 27:c1:8e:80:be:d6:3a:ed:fe:ac:b3:b6:e8:67:47: 28:d0:9d:73:64:44:e9:67:b8:73:77:16:21:84:ce: 7e:4e:95:8e:f4:2e:65:0a:a3:83:bc:3f:da:b3:27: 31:e3:12:d6:bb:cf:b7:78:ff:cc:b0:28:a7:b9:50: 0c:2c:85:1c:26:78:02:01:48:03:59:1b:46:5e:9f: 23:55:b4:62:d2:26:9b:bb:d6:e2:47:16:f0:70:e4: ac:36:97:5b:ec:33:6a:84:bf:7a:3f:bd:2e:c4:c3: a6:9b:0c:6c:6b:00:60:d9:8f:e6:35:25:6e:70:17: 0c:12:6a:cb:46:7e:6a:7d:d2:2d:86:c8:c5:59:87: c2:1e:62:45:28:55:b8:2f:2b:a4:f8:58:74:9a:1e: c1:17:d2:74:81:7d:46:94:7c:06:15:cb:be:18:e3: 9e:25:55:42:a2:79:46:92:f2:8c:c6:2b:12:c4:4f: af:59:2d:b2:70:e6:9f:44:33:3b:1f:c5:1b:37:e4: 12:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4C:28:58:79:01:E7:5E:D2:5E:F8:C9:FF:78:AA:26:83:BD:A7:F0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151561.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.255.110.0/24 Signature Algorithm: sha256WithRSAEncryption 67:b9:b0:f6:47:6d:c1:ab:71:cc:1d:7a:20:72:3d:60:db:db: e2:f4:56:1e:a2:46:b8:be:7e:5a:a0:31:1d:59:91:7d:14:ac: 66:19:90:a4:c4:46:15:70:6d:ad:56:6b:11:14:6c:46:67:4f: 18:a9:69:d6:f1:47:ab:f3:a7:8a:88:99:60:16:f4:72:fe:42: 10:74:6d:3a:87:35:82:63:2a:89:e9:ab:ed:e4:c0:51:d8:00: 53:b1:be:e8:07:06:9d:09:e8:c2:70:b0:d3:f9:75:c5:1b:20: 05:06:f2:7b:fa:51:55:b8:e6:38:ae:f6:3f:ac:64:de:05:ba: de:51:db:da:7f:c9:fa:10:bf:4c:15:b7:12:98:75:92:5d:e7: d1:ab:b5:66:33:0f:d9:72:72:90:47:c4:08:d2:86:ef:27:ff: 99:8b:a9:85:dc:58:14:ad:2e:c2:d2:0e:07:62:e5:0b:03:9a: bd:d1:1c:73:0a:5c:90:23:e8:60:6c:c1:76:c7:78:1b:5c:8d: b9:2b:7f:93:0e:49:6d:70:1a:24:01:93:d0:23:12:87:89:4c: 69:3a:fb:42:0c:93:5d:56:05:d6:23:f8:95:19:77:81:32:7f: a7:d3:70:16:7d:99:64:d7:67:81:97:42:f2:7a:98:63:52:c7: bd:7e:b8:54 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUbKGTLFr9tfCaIjbosFPCnFdN8+0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTYzOVoX DTI3MDUwMTA5MjEzOVowMzExMC8GA1UEAxMoREM0QzI4NTg3OTAxRTc1RUQyNUVG OEM5RkY3OEFBMjY4M0JEQTdGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO9qYF16TEBxyQvwadPufdKKlGWDykvN1JKxNcOncpMYf9Pu9ZLIlnQ6ytr8 ngjadfR+p7qpLRJXuol7J8GOgL7WOu3+rLO26GdHKNCdc2RE6We4c3cWIYTOfk6V jvQuZQqjg7w/2rMnMeMS1rvPt3j/zLAop7lQDCyFHCZ4AgFIA1kbRl6fI1W0YtIm m7vW4kcW8HDkrDaXW+wzaoS/ej+9LsTDppsMbGsAYNmP5jUlbnAXDBJqy0Z+an3S LYbIxVmHwh5iRShVuC8rpPhYdJoewRfSdIF9RpR8BhXLvhjjniVVQqJ5RpLyjMYr EsRPr1ktsnDmn0QzOx/FGzfkEq0CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTcTChY eQHnXtJe+Mn/eKomg72n8DAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxNTYxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ/9uMA0GCSqGSIb3DQEBCwUAA4IBAQBnubD2R23Bq3HMHXogcj1g29vi 9FYeoka4vn5aoDEdWZF9FKxmGZCkxEYVcG2tVmsRFGxGZ08YqWnW8Uer86eKiJlg FvRy/kIQdG06hzWCYyqJ6avt5MBR2ABTsb7oBwadCejCcLDT+XXFGyAFBvJ7+lFV uOY4rvY/rGTeBbreUdvaf8n6EL9MFbcSmHWSXefRq7VmMw/ZcnKQR8QI0obvJ/+Z i6mF3FgUrS7C0g4HYuULA5q90RxzClyQI+hgbMF2x3gbXI25K3+TDkltcBokAZPQ IxKHiUxpOvtCDJNdVgXWI/iVGXeBMn+n03AWfZlk12eBl0LyephjUse9frhU -----END CERTIFICATE-----Generated at Sun May 3 00:39:42 2026 by rpki-client