$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151567.roa File: AS151567.roa (raw, json) Hash identifier: QgrMuaL/mfxP5Kr0tJxApFVsP8LvwBAtZGLvcCRBuXU= Subject key identifier: 76:48:71:31:11:A4:BC:4D:13:A2:FD:7C:EE:56:52:CD:36:19:F3:19 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 40AD3AD4383100D359791C5ADCF28A9D6EF590C3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151567.roa Signing time: Sat 02 May 2026 08:36:47 +0000 ROA not before: Sat 02 May 2026 08:31:47 +0000 ROA not after: Sat 01 May 2027 08:36:47 +0000 asID: 151567 IP address blocks: 103.38.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ad:3a:d4:38:31:00:d3:59:79:1c:5a:dc:f2:8a:9d:6e:f5:90:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:31:47 2026 GMT Not After : May 1 08:36:47 2027 GMT Subject: CN=7648713111A4BC4D13A2FD7CEE5652CD3619F319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:46:52:42:be:4f:9d:59:06:fc:a4:f8:4f:96: 9e:4d:6e:70:ae:7c:45:25:de:bb:ca:69:ea:7c:76: 94:8d:fa:0c:96:a9:af:98:72:b6:e3:f6:91:99:12: 1c:75:93:70:41:04:50:a8:61:4c:8f:6f:37:c8:fc: 07:e9:75:15:19:36:29:5d:b2:6f:6e:b9:e0:da:61: c1:65:4c:b5:5e:a6:e4:8a:b8:58:24:a1:b2:50:85: 3c:9d:82:d1:23:b8:5d:be:2c:59:ec:c9:fa:f5:53: 4b:9d:ac:5b:fa:79:a7:d0:78:38:3b:b8:f4:a3:46: 7c:09:d0:de:0f:c8:69:79:d2:7e:ad:76:df:e0:d8: 3f:6f:32:c8:ae:32:d1:1f:bd:85:3a:5f:56:84:2c: e2:a5:9f:85:76:a9:12:4a:f4:f2:12:e7:1c:d6:3f: eb:33:f5:f7:f8:e1:8d:3a:f0:7e:51:df:1a:79:2d: 16:ef:36:99:76:74:3c:f0:5f:75:aa:5a:72:b9:3e: 46:eb:a9:a7:0e:87:1c:c8:4f:df:6b:a9:3c:76:da: bd:5c:d7:39:d4:9d:b2:a6:37:ab:eb:74:ec:8c:0f: 9a:05:0c:7b:51:fe:0f:3d:29:de:92:0f:43:18:a4: d5:b2:85:0d:9b:96:6b:a8:d2:e7:a2:0b:d9:a4:87: 31:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:48:71:31:11:A4:BC:4D:13:A2:FD:7C:EE:56:52:CD:36:19:F3:19 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151567.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.38.104.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:dd:9a:30:b9:a7:f3:3b:d9:b5:01:5e:0c:c8:c9:02:5d:dd: 2a:95:dc:0a:8d:15:d4:0c:fa:af:c8:d8:ef:d9:82:f0:c3:bc: 7e:95:1a:aa:d0:8d:d0:23:11:23:82:3e:86:00:a5:6c:d1:00: 3c:75:0f:e0:0e:7f:3a:b2:97:ad:b5:11:db:06:47:5d:c6:45: 58:9b:5a:ed:94:f6:88:3a:e5:bc:6b:52:f1:c8:eb:66:ad:d1: bc:35:7a:5a:8e:b6:e0:db:4d:ae:d1:ac:38:70:75:96:26:b7: 0d:76:74:af:28:fc:1d:66:23:07:f0:46:ca:80:c5:da:6a:db: cd:7a:4a:ce:de:86:2b:1b:56:ee:47:04:46:9f:98:88:cd:00: 26:d2:e0:b2:08:04:a8:b0:53:84:f9:89:b0:e3:74:99:07:f8: f7:49:45:3b:f5:5d:c9:3f:b3:6e:74:ab:1b:52:be:7e:13:6b: 73:99:96:60:a8:a3:db:58:2c:94:46:4c:af:47:a6:91:16:53: 84:49:1e:23:be:9d:06:cf:d4:08:30:66:a8:a0:8b:5d:8f:1d: d3:bb:cf:ba:af:b4:c1:0b:94:e1:2d:37:ce:04:0e:56:51:fa: 42:dc:a4:0a:6b:41:51:52:31:11:86:76:4d:9c:52:f2:ca:5e: 82:8a:04:fb -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUQK061DgxANNZeRxa3PKKnW71kMMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzE0N1oX DTI3MDUwMTA4MzY0N1owMzExMC8GA1UEAxMoNzY0ODcxMzExMUE0QkM0RDEzQTJG RDdDRUU1NjUyQ0QzNjE5RjMxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKhGUkK+T51ZBvyk+E+Wnk1ucK58RSXeu8pp6nx2lI36DJapr5hytuP2kZkS HHWTcEEEUKhhTI9vN8j8B+l1FRk2KV2yb2654NphwWVMtV6m5Iq4WCShslCFPJ2C 0SO4Xb4sWezJ+vVTS52sW/p5p9B4ODu49KNGfAnQ3g/IaXnSfq123+DYP28yyK4y 0R+9hTpfVoQs4qWfhXapEkr08hLnHNY/6zP19/jhjTrwflHfGnktFu82mXZ0PPBf dapacrk+Ruuppw6HHMhP32upPHbavVzXOdSdsqY3q+t07IwPmgUMe1H+Dz0p3pIP Qxik1bKFDZuWa6jS56IL2aSHMWcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBR2SHEx EaS8TROi/XzuVlLNNhnzGTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxNTY3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZyZoMA0GCSqGSIb3DQEBCwUAA4IBAQAe3ZowuafzO9m1AV4MyMkCXd0q ldwKjRXUDPqvyNjv2YLww7x+lRqq0I3QIxEjgj6GAKVs0QA8dQ/gDn86spettRHb BkddxkVYm1rtlPaIOuW8a1LxyOtmrdG8NXpajrbg202u0aw4cHWWJrcNdnSvKPwd ZiMH8EbKgMXaatvNekrO3oYrG1buRwRGn5iIzQAm0uCyCASosFOE+Ymw43SZB/j3 SUU79V3JP7NudKsbUr5+E2tzmZZgqKPbWCyURkyvR6aRFlOESR4jvp0Gz9QIMGao oItdjx3Tu8+6r7TBC5ThLTfOBA5WUfpC3KQKa0FRUjERhnZNnFLyyl6CigT7 -----END CERTIFICATE-----Generated at Sun May 3 00:39:50 2026 by rpki-client