$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151583.roa File: AS151583.roa (raw, json) Hash identifier: xwXRnPSzUfMZhdzagaBYRTVvowZd68zqJqse8fWHevA= Subject key identifier: F1:0B:D4:F2:89:C7:8A:BB:4F:11:D5:BD:D1:0C:2A:AA:CD:99:D3:27 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2B5AA45D65B423D1B78BB4D98671A759107C20B3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151583.roa Signing time: Sat 02 May 2026 21:16:56 +0000 ROA not before: Sat 02 May 2026 21:11:56 +0000 ROA not after: Sat 01 May 2027 21:16:56 +0000 asID: 151583 IP address blocks: 103.236.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:5a:a4:5d:65:b4:23:d1:b7:8b:b4:d9:86:71:a7:59:10:7c:20:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:11:56 2026 GMT Not After : May 1 21:16:56 2027 GMT Subject: CN=F10BD4F289C78ABB4F11D5BDD10C2AAACD99D327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:22:28:65:13:03:a7:ad:4d:58:42:1c:b1:e0: 38:b4:c2:b2:af:bf:28:e0:a0:51:27:82:a2:1d:a0: b5:54:1c:4a:fe:49:73:05:57:7d:64:55:4e:f7:65: 87:60:b4:14:66:71:e6:9d:52:ee:71:bc:80:36:7e: 1e:b8:f1:ed:a8:70:ac:81:59:b0:56:b0:0e:e4:9b: 2a:9d:b9:81:ec:8e:ad:08:82:c4:2c:95:a4:9a:fe: 94:3e:05:37:ab:5c:35:af:fc:f6:8b:e0:82:9d:34: 1a:c0:aa:7f:49:a4:42:7e:0e:0f:5a:bb:42:e2:30: 61:33:75:34:64:f3:a2:0b:71:14:da:18:72:50:28: 22:a2:c1:54:bb:47:e8:78:f2:3d:8f:41:a0:17:17: f5:e2:96:ad:63:ef:a0:c4:bb:f0:56:43:2b:29:a0: 92:6f:54:96:f0:ec:f7:f0:d2:ed:22:b1:e5:97:53: c0:fd:4f:ff:f4:a9:1a:23:ed:82:61:2b:20:86:72: 5a:da:2b:55:f7:0f:f2:ee:9d:6f:c9:e0:29:83:a7: 1e:de:8f:f2:94:9a:d9:2b:21:e0:2e:31:b1:50:5b: 97:e5:3d:be:0e:26:a8:13:29:6f:ae:b4:e0:c5:82: 2e:1d:58:4b:79:75:09:7e:a4:7b:ee:e5:70:11:3c: 97:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0B:D4:F2:89:C7:8A:BB:4F:11:D5:BD:D1:0C:2A:AA:CD:99:D3:27 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151583.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.141.0/24 Signature Algorithm: sha256WithRSAEncryption 21:37:65:55:37:ea:c3:5e:40:7c:2e:7a:50:0f:7a:1f:f6:2e: 4f:35:2e:0f:95:91:54:3c:d2:de:3a:cc:f3:b6:a1:fd:86:f2: 2d:4c:91:9c:d7:ba:4f:78:75:e3:62:96:d7:ae:df:a3:56:18: a9:51:93:2b:d7:ca:93:ea:b4:67:e9:6d:f6:b3:e3:21:3e:40: 0e:c9:72:5e:2e:ad:d9:b1:7c:3d:04:92:f1:1b:30:c3:ed:28: d0:01:e8:dd:a6:2e:e2:33:db:07:73:d6:ca:9f:a1:5f:d2:91: 77:65:69:d9:9f:7a:27:d7:4b:95:ae:1a:7f:84:8c:ae:c0:f8: 8d:3f:aa:90:05:60:d1:9e:53:37:12:46:a6:c9:85:3f:37:a0: 13:f3:07:8a:b3:97:e9:1a:0e:eb:e3:91:f3:9a:84:8f:2f:6e: 67:9e:b4:77:b0:9c:e7:71:43:eb:9f:3e:07:dd:81:d9:9a:57: 58:bb:4e:37:6a:5b:92:12:f0:43:2c:16:88:67:55:f0:be:c5: 7a:a8:33:ca:39:ea:60:48:26:71:4f:3e:c6:c8:bd:08:b8:61: 9b:73:f9:c4:51:8f:94:7e:7a:49:12:8d:de:4f:e8:77:13:3e: 60:b5:d9:d0:99:40:8a:c5:9c:b2:bc:ca:ef:b1:58:d6:32:63: 7d:b2:4f:5c -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUK1qkXWW0I9G3i7TZhnGnWRB8ILMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTE1NloX DTI3MDUwMTIxMTY1NlowMzExMC8GA1UEAxMoRjEwQkQ0RjI4OUM3OEFCQjRGMTFE NUJERDEwQzJBQUFDRDk5RDMyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJMiKGUTA6etTVhCHLHgOLTCsq+/KOCgUSeCoh2gtVQcSv5JcwVXfWRVTvdl h2C0FGZx5p1S7nG8gDZ+Hrjx7ahwrIFZsFawDuSbKp25geyOrQiCxCyVpJr+lD4F N6tcNa/89ovggp00GsCqf0mkQn4OD1q7QuIwYTN1NGTzogtxFNoYclAoIqLBVLtH 6HjyPY9BoBcX9eKWrWPvoMS78FZDKymgkm9UlvDs9/DS7SKx5ZdTwP1P//SpGiPt gmErIIZyWtorVfcP8u6db8ngKYOnHt6P8pSa2Ssh4C4xsVBbl+U9vg4mqBMpb660 4MWCLh1YS3l1CX6ke+7lcBE8l90CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTxC9Ty iceKu08R1b3RDCqqzZnTJzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxNTgzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ+yNMA0GCSqGSIb3DQEBCwUAA4IBAQAhN2VVN+rDXkB8LnpQD3of9i5P NS4PlZFUPNLeOszztqH9hvItTJGc17pPeHXjYpbXrt+jVhipUZMr18qT6rRn6W32 s+MhPkAOyXJeLq3ZsXw9BJLxGzDD7SjQAejdpi7iM9sHc9bKn6Ff0pF3ZWnZn3on 10uVrhp/hIyuwPiNP6qQBWDRnlM3EkamyYU/N6AT8weKs5fpGg7r45HzmoSPL25n nrR3sJzncUPrnz4H3YHZmldYu043aluSEvBDLBaIZ1XwvsV6qDPKOepgSCZxTz7G yL0IuGGbc/nEUY+UfnpJEo3eT+h3Ez5gtdnQmUCKxZyyvMrvsVjWMmN9sk9c -----END CERTIFICATE-----Generated at Sun May 3 01:40:57 2026 by rpki-client