$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151565.roa File: AS151565.roa (raw, json) Hash identifier: XHubBUm9UHy898/kSiz9zJIy95GoYWyXjGsCW2N5De8= Subject key identifier: 97:D3:6E:ED:4C:2E:BF:36:B4:C2:E8:18:A3:1D:D6:70:E1:E8:7E:10 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 329B8D6D0A46224A8583500B7A913D17727C32DC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151565.roa Signing time: Sat 02 May 2026 21:18:56 +0000 ROA not before: Sat 02 May 2026 21:13:56 +0000 ROA not after: Sat 01 May 2027 21:18:56 +0000 asID: 151565 IP address blocks: 103.253.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:9b:8d:6d:0a:46:22:4a:85:83:50:0b:7a:91:3d:17:72:7c:32:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:13:56 2026 GMT Not After : May 1 21:18:56 2027 GMT Subject: CN=97D36EED4C2EBF36B4C2E818A31DD670E1E87E10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c5:83:95:91:2d:92:81:e5:bf:ed:5c:f5:08: 20:9e:1f:3b:fa:fd:99:22:e8:69:ec:39:97:e7:67: 2f:ca:7e:78:a8:6b:6d:f0:24:6a:7e:82:8b:49:cd: b6:63:4d:17:e6:17:b3:3d:9f:59:98:40:fc:ed:a6: 69:36:d1:33:37:e6:b0:aa:d3:2f:c2:59:ed:0e:44: cf:55:c8:90:1b:4b:35:af:91:9c:89:8e:c0:8b:1c: a3:99:3c:5b:05:e8:b4:13:1f:c2:8b:a4:81:3f:f7: 7b:23:77:8a:e4:81:db:69:8f:8c:99:a5:53:e2:cc: f0:35:28:fa:ca:21:79:ca:64:fb:a8:ed:cf:07:b3: b9:29:60:37:68:33:b5:78:65:5a:83:81:7f:6c:a4: bf:95:19:4a:2d:1e:8a:00:55:ff:3b:a9:90:4a:3b: 01:cd:e9:f9:86:cc:ec:15:8d:a8:28:5c:eb:e1:61: 6d:63:68:c1:da:b9:97:33:8c:9f:4b:90:7e:75:ad: 49:82:f9:93:ab:45:5b:93:83:ba:46:c5:15:29:92: 14:fb:d2:53:af:d7:f2:17:04:a4:7a:63:13:63:73: 54:14:f0:06:a1:81:e6:8f:f9:6d:51:df:dc:d3:05: 2e:f0:f8:9d:9c:54:90:46:57:6f:17:a2:24:3d:7f: 48:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D3:6E:ED:4C:2E:BF:36:B4:C2:E8:18:A3:1D:D6:70:E1:E8:7E:10 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151565.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.253.230.0/24 Signature Algorithm: sha256WithRSAEncryption 41:f7:bf:4b:d6:22:c5:4e:35:27:21:22:e0:62:73:8e:a7:56: 23:6e:24:18:0d:aa:2a:43:9a:71:c5:82:a6:94:89:b0:09:42: e7:5a:71:54:56:c5:7c:3d:c3:62:36:67:13:e4:2a:cc:2a:d7: 66:18:df:7a:b7:d5:a0:c0:c0:1c:02:61:42:53:46:02:29:d0: d4:9a:74:2b:7b:bb:f1:2d:59:0f:84:c9:05:41:3a:5f:f6:4f: 91:9c:17:8f:0e:c4:9f:2e:f0:d9:2c:89:15:27:65:42:05:7d: fd:c5:2f:72:9d:41:28:da:48:ea:2f:9f:40:81:5c:f9:76:a1: 36:e6:24:1a:7c:7a:be:de:bd:01:3a:ba:31:8a:2b:b0:a3:ef: 0a:9d:1e:0f:34:30:8a:20:27:82:98:3a:0d:0e:89:2f:d8:ff: ff:a8:e0:0d:1e:24:81:ec:ea:a9:55:ad:f7:09:d7:78:d3:df: b0:0f:ef:5d:a7:9b:6d:94:46:67:65:e1:16:27:32:a5:6f:58: 2f:f8:aa:1d:bf:1a:73:98:90:73:34:3c:8a:24:e7:3e:cc:43: 38:b2:1a:70:e3:e6:02:6b:f0:b7:b1:e7:2e:64:7f:ea:de:b6: 61:6c:52:27:4e:0c:25:ce:fa:45:bb:1b:c4:52:ed:97:d5:10: 03:ca:b8:d3 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUMpuNbQpGIkqFg1ALepE9F3J8MtwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTM1NloX DTI3MDUwMTIxMTg1NlowMzExMC8GA1UEAxMoOTdEMzZFRUQ0QzJFQkYzNkI0QzJF ODE4QTMxREQ2NzBFMUU4N0UxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJPFg5WRLZKB5b/tXPUIIJ4fO/r9mSLoaew5l+dnL8p+eKhrbfAkan6Ci0nN tmNNF+YXsz2fWZhA/O2maTbRMzfmsKrTL8JZ7Q5Ez1XIkBtLNa+RnImOwIsco5k8 WwXotBMfwoukgT/3eyN3iuSB22mPjJmlU+LM8DUo+sohecpk+6jtzwezuSlgN2gz tXhlWoOBf2ykv5UZSi0eigBV/zupkEo7Ac3p+YbM7BWNqChc6+FhbWNowdq5lzOM n0uQfnWtSYL5k6tFW5ODukbFFSmSFPvSU6/X8hcEpHpjE2NzVBTwBqGB5o/5bVHf 3NMFLvD4nZxUkEZXbxeiJD1/SDUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSX027t TC6/NrTC6BijHdZw4eh+EDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxNTY1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ/3mMA0GCSqGSIb3DQEBCwUAA4IBAQBB979L1iLFTjUnISLgYnOOp1Yj biQYDaoqQ5pxxYKmlImwCULnWnFUVsV8PcNiNmcT5CrMKtdmGN96t9WgwMAcAmFC U0YCKdDUmnQre7vxLVkPhMkFQTpf9k+RnBePDsSfLvDZLIkVJ2VCBX39xS9ynUEo 2kjqL59AgVz5dqE25iQafHq+3r0BOroxiiuwo+8KnR4PNDCKICeCmDoNDokv2P// qOANHiSB7OqpVa33Cdd409+wD+9dp5ttlEZnZeEWJzKlb1gv+KodvxpzmJBzNDyK JOc+zEM4shpw4+YCa/C3secuZH/q3rZhbFInTgwlzvpFuxvEUu2X1RADyrjT -----END CERTIFICATE-----Generated at Sun May 3 01:41:19 2026 by rpki-client