$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151580.roa File: AS151580.roa (raw, json) Hash identifier: FcKX28/Z36tnI/JOv0KKjZToj5cR+DOZk4hb9ZqVryM= Subject key identifier: C1:C2:03:4A:2A:4F:7E:82:93:F4:B1:2D:7D:DD:1E:01:FA:82:66:42 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 22FB1D7082859077ECE64C2A3B8BCEFD17F970B6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151580.roa Signing time: Sat 02 May 2026 09:21:22 +0000 ROA not before: Sat 02 May 2026 09:16:22 +0000 ROA not after: Sat 01 May 2027 09:21:22 +0000 asID: 151580 IP address blocks: 103.216.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:fb:1d:70:82:85:90:77:ec:e6:4c:2a:3b:8b:ce:fd:17:f9:70:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:16:22 2026 GMT Not After : May 1 09:21:22 2027 GMT Subject: CN=C1C2034A2A4F7E8293F4B12D7DDD1E01FA826642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:68:d8:97:10:f6:7b:63:05:0d:d4:70:55:e4: 23:8c:35:46:3a:1c:f3:1e:dd:30:fb:63:61:fa:a4: 10:67:b1:f2:14:b0:1b:1f:88:c9:89:22:5c:c8:0f: 41:28:31:74:74:85:db:3a:d6:97:70:d1:79:71:7b: 75:2e:57:46:d4:c4:cb:93:d1:3a:f0:01:33:fe:fd: cc:15:d0:10:17:5d:ec:f7:4b:8f:8d:a2:ba:96:1b: a0:d9:cd:0b:88:64:9e:d7:65:64:f3:cf:3e:51:94: 78:aa:6f:cb:7d:70:f0:10:9f:0b:5b:f0:bc:49:d0: ee:9b:60:ee:17:42:e1:43:36:de:e5:c4:57:e5:f9: ef:0d:a3:1d:57:1d:d3:70:47:1a:86:df:55:e2:98: 2c:71:1e:b6:84:85:2d:f9:40:0b:f7:e5:3b:02:2a: d3:20:dd:8a:cd:15:81:f0:cd:a6:93:5d:f1:f6:e0: 97:1b:6a:04:4a:3f:80:b0:ff:aa:a8:12:75:0b:b4: 60:dd:a0:b9:90:5b:81:dc:eb:aa:88:60:a4:23:fa: 39:c7:ec:32:5d:b7:28:43:d1:f7:ef:b6:37:5d:5c: 77:15:bc:12:fc:99:03:1b:21:54:e7:bb:58:ac:10: 4d:57:28:72:53:e8:0b:d2:e9:c1:46:d4:60:2f:ef: 94:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C2:03:4A:2A:4F:7E:82:93:F4:B1:2D:7D:DD:1E:01:FA:82:66:42 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151580.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.216.105.0/24 Signature Algorithm: sha256WithRSAEncryption 10:d7:9a:4f:2c:c1:67:0e:66:e3:34:2c:8e:10:f3:2e:f6:7f: 1a:b7:6c:7f:38:98:ff:1a:61:80:e6:d9:4a:4a:97:eb:8a:69: 42:a2:ea:5e:8c:10:36:59:d0:ff:ea:a7:bd:30:b2:e2:73:69: bc:66:84:01:1b:fb:f6:1b:68:de:4e:c9:d9:8d:ee:1e:97:e7: 6b:5a:2b:1b:31:17:fa:72:be:a8:da:a3:df:45:6f:a3:b7:4e: 37:0d:ea:32:88:51:df:9b:2e:b2:b3:1c:44:a2:08:0b:1f:c8: ad:74:38:65:b0:96:d5:29:d4:ae:f8:ad:be:f5:10:34:f0:9a: 8f:9c:9d:a4:bd:88:8e:f8:da:0d:bf:87:52:e6:09:9e:54:7b: 7c:aa:3e:bb:b4:84:9a:08:3e:d9:f5:aa:36:07:da:75:c0:88: 5d:e4:9d:5c:21:3d:d2:72:f8:c1:74:7e:79:35:46:51:ce:df: 56:15:10:93:db:84:5a:b7:87:07:58:26:dd:63:1d:a5:46:31: 0c:05:b6:7f:3d:06:06:fd:90:44:45:96:cf:3f:b3:31:1d:6b: 35:86:ec:55:3c:24:a6:4e:4f:76:c3:62:9d:e7:27:bb:27:3a: 79:b4:37:e1:3f:70:d3:ae:76:22:6c:93:fc:88:09:9a:6d:fe: 2c:7b:f6:1a -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUIvsdcIKFkHfs5kwqO4vO/Rf5cLYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTYyMloX DTI3MDUwMTA5MjEyMlowMzExMC8GA1UEAxMoQzFDMjAzNEEyQTRGN0U4MjkzRjRC MTJEN0RERDFFMDFGQTgyNjY0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI1o2JcQ9ntjBQ3UcFXkI4w1Rjoc8x7dMPtjYfqkEGex8hSwGx+IyYkiXMgP QSgxdHSF2zrWl3DReXF7dS5XRtTEy5PROvABM/79zBXQEBdd7PdLj42iupYboNnN C4hkntdlZPPPPlGUeKpvy31w8BCfC1vwvEnQ7ptg7hdC4UM23uXEV+X57w2jHVcd 03BHGobfVeKYLHEetoSFLflAC/flOwIq0yDdis0VgfDNppNd8fbglxtqBEo/gLD/ qqgSdQu0YN2guZBbgdzrqohgpCP6OcfsMl23KEPR9++2N11cdxW8EvyZAxshVOe7 WKwQTVcoclPoC9LpwUbUYC/vlNkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTBwgNK Kk9+gpP0sS193R4B+oJmQjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxNTgwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ9hpMA0GCSqGSIb3DQEBCwUAA4IBAQAQ15pPLMFnDmbjNCyOEPMu9n8a t2x/OJj/GmGA5tlKSpfrimlCoupejBA2WdD/6qe9MLLic2m8ZoQBG/v2G2jeTsnZ je4el+drWisbMRf6cr6o2qPfRW+jt043DeoyiFHfmy6ysxxEoggLH8itdDhlsJbV KdSu+K2+9RA08JqPnJ2kvYiO+NoNv4dS5gmeVHt8qj67tISaCD7Z9ao2B9p1wIhd 5J1cIT3ScvjBdH55NUZRzt9WFRCT24Rat4cHWCbdYx2lRjEMBbZ/PQYG/ZBERZbP P7MxHWs1huxVPCSmTk92w2Kd5ye7Jzp5tDfhP3DTrnYibJP8iAmabf4se/Ya -----END CERTIFICATE-----Generated at Sun May 3 00:39:53 2026 by rpki-client