$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151591.roa File: AS151591.roa (raw, json) Hash identifier: pJ5gbhVzrSW/OOZrgToPXIxm1qRxv1iLjNSE+EkN2CY= Subject key identifier: 44:77:6E:4D:80:DF:29:72:B2:97:F8:53:8D:F6:BB:09:6E:94:E0:20 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 07F36A7D941F62D2B917FAA670819CC3142261E2 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151591.roa Signing time: Sat 02 May 2026 21:18:22 +0000 ROA not before: Sat 02 May 2026 21:13:22 +0000 ROA not after: Sat 01 May 2027 21:18:22 +0000 asID: 151591 IP address blocks: 103.250.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:f3:6a:7d:94:1f:62:d2:b9:17:fa:a6:70:81:9c:c3:14:22:61:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:13:22 2026 GMT Not After : May 1 21:18:22 2027 GMT Subject: CN=44776E4D80DF2972B297F8538DF6BB096E94E020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e6:c7:c0:3a:69:2d:eb:cf:79:5f:e7:39:5d: 6d:a7:c8:60:96:1f:4d:b1:2a:f0:45:db:84:5f:80: bf:f5:0e:5d:d4:59:a2:b4:3b:3d:1c:74:0f:87:87: da:29:f2:26:31:2d:90:4f:9d:f6:89:a5:86:97:6f: 91:17:9e:bf:5b:bc:64:d4:6d:5b:2e:fb:4a:8f:4a: 89:f7:b4:b7:64:43:4c:3b:0a:0c:1e:94:33:c4:72: 40:5e:e2:20:db:e3:7a:c0:dc:c7:e6:8e:30:62:5d: 58:66:6b:cf:78:84:d8:64:67:a1:4f:c2:89:f4:c4: 85:a0:cb:28:ed:dc:49:6c:e5:6d:c4:d3:d1:8b:d6: 3f:a6:fb:59:ec:69:9d:46:50:70:87:e4:a2:9f:93: 7b:d7:af:4f:f5:0d:c5:69:2c:b6:8c:8c:06:87:1a: 98:9a:1c:87:63:d6:8e:5e:47:3e:b7:96:0e:12:1f: f5:82:30:b1:0f:f0:a4:27:08:2c:96:40:5e:b4:0d: f7:ba:77:b7:7e:b7:41:cb:a8:89:33:57:6c:89:69: 0b:8c:15:7d:81:c1:a5:65:1a:32:61:4e:48:b4:5d: de:f7:f6:31:2c:7d:c0:52:55:ea:99:4a:6e:31:34: 68:f6:2c:d3:58:ce:63:da:13:df:3d:26:a5:7d:68: fa:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:77:6E:4D:80:DF:29:72:B2:97:F8:53:8D:F6:BB:09:6E:94:E0:20 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151591.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.250.12.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:dc:18:e4:e1:88:3a:ce:8d:2a:b1:42:30:c9:d1:8e:b0:a7: 8c:4b:df:29:40:ec:db:1d:33:6f:7a:11:3a:02:62:cb:fb:13: 24:5a:96:0f:89:5e:25:53:53:78:9d:8c:64:5d:bc:7d:c7:ae: c7:1e:d8:78:61:49:36:c7:64:cb:84:84:3c:51:fb:ab:0c:58: db:68:86:ed:e2:a4:be:01:aa:99:b0:d3:71:bb:27:13:17:2e: f1:68:0e:9e:29:07:ff:b0:98:a9:02:d1:e3:b8:f4:01:d9:cf: 98:c1:ef:1e:0c:91:a3:59:82:92:00:0f:70:fd:9b:2e:93:3c: 67:29:24:45:7d:83:22:42:21:a1:0e:a2:0b:21:a0:79:a2:8b: 3e:a1:b8:93:74:b1:f0:e6:1e:d6:81:39:38:36:ca:d0:3c:3f: 3c:2e:d8:a2:74:6a:ba:18:84:dd:9b:ab:80:70:7f:9f:af:8a: f9:6d:f3:7f:67:e1:3e:de:98:dd:f1:54:61:88:d8:3e:1f:9a: fb:5e:71:df:a0:af:bb:d7:2c:f3:88:86:23:e5:09:95:a1:7f: 76:84:35:ce:76:e8:ec:79:0a:1e:3e:79:79:31:2c:5f:51:c1: 8d:af:01:db:9d:4e:e5:f5:c2:39:29:4b:83:ee:0c:25:de:23: 29:5e:6b:5f -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUB/NqfZQfYtK5F/qmcIGcwxQiYeIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTMyMloX DTI3MDUwMTIxMTgyMlowMzExMC8GA1UEAxMoNDQ3NzZFNEQ4MERGMjk3MkIyOTdG ODUzOERGNkJCMDk2RTk0RTAyMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOTmx8A6aS3rz3lf5zldbafIYJYfTbEq8EXbhF+Av/UOXdRZorQ7PRx0D4eH 2inyJjEtkE+d9omlhpdvkReev1u8ZNRtWy77So9Kife0t2RDTDsKDB6UM8RyQF7i INvjesDcx+aOMGJdWGZrz3iE2GRnoU/CifTEhaDLKO3cSWzlbcTT0YvWP6b7Wexp nUZQcIfkop+Te9evT/UNxWkstoyMBocamJoch2PWjl5HPreWDhIf9YIwsQ/wpCcI LJZAXrQN97p3t363QcuoiTNXbIlpC4wVfYHBpWUaMmFOSLRd3vf2MSx9wFJV6plK bjE0aPYs01jOY9oT3z0mpX1o+vUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBREd25N gN8pcrKX+FON9rsJbpTgIDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxNTkxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ/oMMA0GCSqGSIb3DQEBCwUAA4IBAQBM3Bjk4Yg6zo0qsUIwydGOsKeM S98pQOzbHTNvehE6AmLL+xMkWpYPiV4lU1N4nYxkXbx9x67HHth4YUk2x2TLhIQ8 UfurDFjbaIbt4qS+AaqZsNNxuycTFy7xaA6eKQf/sJipAtHjuPQB2c+Ywe8eDJGj WYKSAA9w/ZsukzxnKSRFfYMiQiGhDqILIaB5oos+obiTdLHw5h7WgTk4NsrQPD88 LtiidGq6GITdm6uAcH+fr4r5bfN/Z+E+3pjd8VRhiNg+H5r7XnHfoK+71yzziIYj 5QmVoX92hDXOdujseQoePnl5MSxfUcGNrwHbnU7l9cI5KUuD7gwl3iMpXmtf -----END CERTIFICATE-----Generated at Sun May 3 01:40:56 2026 by rpki-client