$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151585.roa File: AS151585.roa (raw, json) Hash identifier: yrf0jGRlYUqmjDB0xUP2QWv0AgsveGOp8E8sQMvUWP0= Subject key identifier: 99:E0:65:E4:82:09:7C:70:6A:6F:08:B8:72:94:DB:5D:81:A9:2B:13 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1150D4BCB83ADB2D67AD10AB47EA0E430D524340 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151585.roa Signing time: Sat 02 May 2026 09:21:33 +0000 ROA not before: Sat 02 May 2026 09:16:33 +0000 ROA not after: Sat 01 May 2027 09:21:33 +0000 asID: 151585 IP address blocks: 103.204.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:50:d4:bc:b8:3a:db:2d:67:ad:10:ab:47:ea:0e:43:0d:52:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:16:33 2026 GMT Not After : May 1 09:21:33 2027 GMT Subject: CN=99E065E482097C706A6F08B87294DB5D81A92B13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e9:f0:91:ab:a5:7f:ba:c5:f9:99:d4:9a:10: 77:96:f6:ce:3a:6d:eb:db:ad:3c:81:73:e6:41:b7: 39:48:ec:00:a5:35:c1:ce:a3:89:08:7a:54:e6:61: 0d:3d:5e:2e:ad:18:82:b1:9f:b2:98:0d:25:1d:6c: 7c:7e:9d:b8:4a:38:86:d6:f4:15:54:52:ff:7a:ce: c6:7e:af:06:35:ea:28:d2:a0:86:b8:7c:0d:85:ad: a1:9a:2f:e7:ac:0c:2c:f4:91:4a:94:4a:31:f6:1a: ed:24:d0:a4:91:32:14:ed:52:46:70:4c:8f:47:29: 59:cf:6b:36:c8:d0:37:e1:a8:50:c3:a2:8c:ca:03: ec:c0:50:36:2e:0c:c9:65:03:53:68:54:53:9a:48: 65:c2:16:1e:17:eb:0f:98:03:12:d0:ad:7b:8d:69: 40:59:bf:26:51:e9:6c:f6:c7:bb:34:a4:9d:30:fa: 0e:79:55:e4:9f:df:4b:e0:67:3b:69:f5:b6:86:4e: ed:71:fd:75:57:40:c9:6c:f9:af:61:68:f0:36:60: 0b:46:a2:14:97:c6:b9:b1:9b:58:cb:41:93:0c:c6: e0:76:71:c7:88:05:3b:46:6f:87:c7:5f:c5:95:c9: bf:8d:1d:63:35:2e:9d:ab:f8:16:d7:47:7a:94:b9: 12:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E0:65:E4:82:09:7C:70:6A:6F:08:B8:72:94:DB:5D:81:A9:2B:13 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151585.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.204.46.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:47:58:b6:8f:07:6f:28:26:62:90:c1:78:b4:93:07:b8:5b: 75:99:81:d9:5d:97:91:e7:f2:83:4f:e7:e3:b2:60:d5:fd:d6: f0:ac:c4:42:3d:78:65:b4:e8:24:68:83:eb:ff:16:60:bf:4c: 8a:c4:fe:1f:52:67:4f:62:a6:b8:d8:b5:86:2f:b9:6d:e3:a2: f0:af:d8:6c:dd:ef:83:51:83:f6:9b:e2:d2:9c:5f:fe:e2:f5: bf:c4:5f:8f:d7:d3:2e:96:b7:ae:24:53:3c:46:3a:aa:3e:22: db:9d:7c:73:6d:7a:5f:44:47:76:33:6f:a2:e7:ec:3e:05:c7: 49:b3:00:a2:9b:3e:d2:17:65:e4:69:3c:6a:53:4b:3c:44:6d: 4e:06:de:7a:c6:7e:12:2f:65:27:f1:c4:28:f3:d7:2f:a3:b3: 27:25:26:f3:71:e1:9b:41:dd:06:31:58:f1:dc:bb:44:54:5d: e1:85:54:2a:47:ca:95:9a:b2:49:45:c4:81:e0:92:d6:da:56: fc:95:e2:3a:86:d6:c0:80:a4:9f:1e:63:f2:2f:48:ea:bb:62: 38:f7:41:99:99:5c:96:82:95:d5:d8:ec:ae:f3:6b:b6:aa:e2: 5d:1e:78:d2:0f:a0:97:32:12:c3:ae:b2:59:1a:4b:f5:17:1c: 77:73:ef:48 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUEVDUvLg62y1nrRCrR+oOQw1SQ0AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTYzM1oX DTI3MDUwMTA5MjEzM1owMzExMC8GA1UEAxMoOTlFMDY1RTQ4MjA5N0M3MDZBNkYw OEI4NzI5NERCNUQ4MUE5MkIxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN7p8JGrpX+6xfmZ1JoQd5b2zjpt69utPIFz5kG3OUjsAKU1wc6jiQh6VOZh DT1eLq0YgrGfspgNJR1sfH6duEo4htb0FVRS/3rOxn6vBjXqKNKghrh8DYWtoZov 56wMLPSRSpRKMfYa7STQpJEyFO1SRnBMj0cpWc9rNsjQN+GoUMOijMoD7MBQNi4M yWUDU2hUU5pIZcIWHhfrD5gDEtCte41pQFm/JlHpbPbHuzSknTD6DnlV5J/fS+Bn O2n1toZO7XH9dVdAyWz5r2Fo8DZgC0aiFJfGubGbWMtBkwzG4HZxx4gFO0Zvh8df xZXJv40dYzUunav4FtdHepS5EmUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSZ4GXk ggl8cGpvCLhylNtdgakrEzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxNTg1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ8wuMA0GCSqGSIb3DQEBCwUAA4IBAQCKR1i2jwdvKCZikMF4tJMHuFt1 mYHZXZeR5/KDT+fjsmDV/dbwrMRCPXhltOgkaIPr/xZgv0yKxP4fUmdPYqa42LWG L7lt46Lwr9hs3e+DUYP2m+LSnF/+4vW/xF+P19MulreuJFM8RjqqPiLbnXxzbXpf REd2M2+i5+w+BcdJswCimz7SF2XkaTxqU0s8RG1OBt56xn4SL2Un8cQo89cvo7Mn JSbzceGbQd0GMVjx3LtEVF3hhVQqR8qVmrJJRcSB4JLW2lb8leI6htbAgKSfHmPy L0jqu2I490GZmVyWgpXV2Oyu82u2quJdHnjSD6CXMhLDrrJZGkv1Fxx3c+9I -----END CERTIFICATE-----Generated at Sun May 3 01:40:56 2026 by rpki-client