$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151579.roa File: AS151579.roa (raw, json) Hash identifier: iEPYayDL+EznHYrI9xOqJETisei91gO0hESS2HDgTDY= Subject key identifier: 20:41:62:AD:33:84:0F:19:34:B6:DF:E4:45:F6:4B:25:8A:A5:72:36 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 644F9A8A5BFAEBD057388CFA2C825D613E5AD8ED Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151579.roa Signing time: Sat 02 May 2026 21:18:06 +0000 ROA not before: Sat 02 May 2026 21:13:06 +0000 ROA not after: Sat 01 May 2027 21:18:06 +0000 asID: 151579 IP address blocks: 103.247.82.0/23 maxlen: 24 103.247.82.0/24 maxlen: 24 103.247.83.0/24 maxlen: 24 2001:df3:df40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:4f:9a:8a:5b:fa:eb:d0:57:38:8c:fa:2c:82:5d:61:3e:5a:d8:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:13:06 2026 GMT Not After : May 1 21:18:06 2027 GMT Subject: CN=204162AD33840F1934B6DFE445F64B258AA57236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:47:4e:5f:7e:ff:90:a1:1e:d6:3e:99:e9:fe: 4a:82:f5:71:6d:7c:3a:0d:9f:9f:0c:20:70:07:7b: 7e:1f:3b:9e:12:27:ec:02:74:8c:c9:7e:22:7d:c7: 80:fe:3e:03:17:a5:12:0e:a3:43:12:8f:6e:6c:a4: da:09:26:33:28:37:b4:ea:b4:94:9e:bf:10:8b:74: 49:5f:46:82:53:34:6a:11:66:5f:cd:67:6f:a1:01: 75:ce:e6:cb:26:60:6d:37:09:19:b8:8a:84:2e:2c: ed:04:14:95:b9:6d:27:65:06:40:f3:4f:3f:ee:16: b3:90:cd:1e:e8:03:05:a4:9c:68:04:d0:d1:2e:88: 89:1c:41:ef:75:11:95:27:11:3e:d7:3e:4d:6d:a1: c5:0d:3e:2c:78:8c:c5:80:35:82:e2:39:d6:5f:5a: 15:e7:76:d1:f0:17:8b:50:5b:08:4f:15:13:69:3b: fe:3b:02:ea:d3:a9:8f:c2:72:c3:ae:7d:09:18:54: 14:73:5d:3c:28:93:2f:06:7d:bf:b9:c1:2d:0f:59: 82:2c:8c:ef:14:f4:e1:b5:49:9e:03:06:93:49:7b: 3e:bf:35:f8:c2:a7:d2:48:04:e6:9d:12:dc:7f:52: d2:96:1e:2a:3e:ce:c5:3e:50:06:03:9c:f9:a9:e0: be:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:41:62:AD:33:84:0F:19:34:B6:DF:E4:45:F6:4B:25:8A:A5:72:36 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151579.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.247.82.0/23 IPv6: 2001:df3:df40::/48 Signature Algorithm: sha256WithRSAEncryption 96:06:b8:db:75:1e:fa:06:d2:b2:fb:6f:c7:da:f2:13:6c:18: cf:dc:ba:88:78:30:cd:c7:c0:3b:bf:73:dd:ac:12:96:37:ae: 68:9b:40:ec:d7:c2:9c:85:11:b2:fd:f3:e1:f5:18:d8:73:db: 6d:9c:a5:07:12:f4:23:2e:bb:1d:66:13:c9:b8:ec:94:14:11: 70:4e:1b:8f:c3:09:82:03:76:cd:9a:1a:0e:74:33:50:b9:7f: ec:eb:11:02:d4:61:57:3e:ec:1c:68:d6:62:62:6a:c8:b3:0c: 07:48:b0:5b:b9:34:10:0e:7e:cc:9b:f5:38:b3:20:47:12:3c: f2:c4:9d:59:f7:be:b0:c1:6e:8c:6b:29:f1:5b:d8:4b:16:fc: 75:ef:08:48:e5:75:67:3f:9c:6b:1c:ca:ef:9e:a6:58:43:01: 74:1c:95:0b:04:a3:0f:33:15:f3:85:3a:f1:bf:f1:db:10:a3: 0d:6b:cb:cb:1b:6e:69:45:71:81:b6:c8:4e:d0:c6:ea:85:5f: c8:00:75:20:e1:2f:d7:84:94:63:e0:ae:69:df:8f:0b:ea:fb: b5:d3:2b:cc:db:59:43:c4:e9:30:93:0c:9e:66:0b:7e:05:c9: 9c:08:b6:bc:6f:a7:f5:e1:a7:39:99:6b:f5:ca:a3:de:88:ec: f2:b0:40:e2 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUZE+ailv669BXOIz6LIJdYT5a2O0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTMwNloX DTI3MDUwMTIxMTgwNlowMzExMC8GA1UEAxMoMjA0MTYyQUQzMzg0MEYxOTM0QjZE RkU0NDVGNjRCMjU4QUE1NzIzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALNHTl9+/5ChHtY+men+SoL1cW18Og2fnwwgcAd7fh87nhIn7AJ0jMl+In3H gP4+AxelEg6jQxKPbmyk2gkmMyg3tOq0lJ6/EIt0SV9GglM0ahFmX81nb6EBdc7m yyZgbTcJGbiKhC4s7QQUlbltJ2UGQPNPP+4Ws5DNHugDBaScaATQ0S6IiRxB73UR lScRPtc+TW2hxQ0+LHiMxYA1guI51l9aFed20fAXi1BbCE8VE2k7/jsC6tOpj8Jy w659CRhUFHNdPCiTLwZ9v7nBLQ9ZgiyM7xT04bVJngMGk0l7Pr81+MKn0kgE5p0S 3H9S0pYeKj7OxT5QBgOc+angvlkCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQgQWKt M4QPGTS23+RF9ksliqVyNjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxNTc5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBZ/dSMA8EAgACMAkDBwAgAQ3z30AwDQYJKoZIhvcNAQELBQADggEBAJYG uNt1HvoG0rL7b8fa8hNsGM/cuoh4MM3HwDu/c92sEpY3rmibQOzXwpyFEbL98+H1 GNhz222cpQcS9CMuux1mE8m47JQUEXBOG4/DCYIDds2aGg50M1C5f+zrEQLUYVc+ 7Bxo1mJiasizDAdIsFu5NBAOfsyb9TizIEcSPPLEnVn3vrDBboxrKfFb2EsW/HXv CEjldWc/nGscyu+eplhDAXQclQsEow8zFfOFOvG/8dsQow1ry8sbbmlFcYG2yE7Q xuqFX8gAdSDhL9eElGPgrmnfjwvq+7XTK8zbWUPE6TCTDJ5mC34FyZwItrxvp/Xh pzmZa/XKo96I7PKwQOI= -----END CERTIFICATE-----Generated at Sun May 3 01:40:55 2026 by rpki-client