$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151592.roa File: AS151592.roa (raw, json) Hash identifier: WLINtnE0hTKsS5Hu2kMeeDWEPuyYf4iFqz57pffuM30= Subject key identifier: 03:97:6D:CB:14:D0:8B:94:AD:CA:CC:D4:5E:51:E6:A8:3D:27:E4:6C Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 60CA6056D5777143AC8B4163BF64AF60F3D3DD79 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151592.roa Signing time: Sat 02 May 2026 09:25:57 +0000 ROA not before: Sat 02 May 2026 09:20:57 +0000 ROA not after: Sat 01 May 2027 09:25:57 +0000 asID: 151592 IP address blocks: 163.223.104.0/24 maxlen: 24 2001:df3:240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ca:60:56:d5:77:71:43:ac:8b:41:63:bf:64:af:60:f3:d3:dd:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:20:57 2026 GMT Not After : May 1 09:25:57 2027 GMT Subject: CN=03976DCB14D08B94ADCACCD45E51E6A83D27E46C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d8:70:b8:00:6d:80:0f:91:9e:8b:2b:6c:54: d3:7f:93:48:34:69:96:7b:12:2b:52:5c:2a:2f:d8: bc:a5:63:10:e6:8e:5b:8b:82:13:45:eb:d5:a8:aa: d8:0c:61:f8:be:f7:1a:ee:47:01:fa:c8:8c:92:6e: f1:29:b1:18:3b:9c:eb:96:0c:af:63:c9:28:f8:8f: f3:76:62:e2:86:48:71:6c:e2:2d:3d:54:b8:ef:87: e6:11:ad:d9:9c:1e:a0:db:47:03:a6:fb:e8:a2:ad: 2f:69:c8:de:ae:a3:ec:7a:20:48:e7:9f:27:1b:01: ee:e9:7c:3a:e8:c2:11:db:87:26:70:7e:4f:f5:78: f7:ee:a0:b5:d9:2b:35:7b:d7:83:51:ee:4e:7a:87: c7:78:e7:ab:6e:2c:9b:5f:b5:93:01:f3:8d:c8:c0: 50:c2:e6:b5:75:93:a3:07:58:e4:7a:35:41:2f:52: 4a:c1:eb:db:cb:13:60:7c:ee:d0:45:5e:3b:73:db: 5d:2e:81:fb:8c:ae:77:03:64:a7:2b:27:c6:32:d8: a2:a5:c8:99:2a:01:ec:c5:b8:d3:31:12:9e:f4:f9: 61:a2:23:1d:aa:6b:d8:d5:e8:93:12:69:29:18:04: 4f:2b:d1:47:83:4b:8f:f6:90:56:b2:12:4a:c0:c5: ce:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:97:6D:CB:14:D0:8B:94:AD:CA:CC:D4:5E:51:E6:A8:3D:27:E4:6C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151592.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.223.104.0/24 IPv6: 2001:df3:240::/48 Signature Algorithm: sha256WithRSAEncryption 0b:5d:ed:97:6c:52:58:36:9d:91:1c:c7:59:98:72:39:92:15: 24:f3:ff:ad:d7:d2:46:2a:20:6b:4e:0d:c5:f5:16:a6:73:b3: be:b9:ea:d8:6e:f6:44:25:c3:1f:8d:a5:ef:78:cd:76:7e:94: 82:07:f5:0e:76:01:66:be:f3:8d:4f:b7:10:31:ac:35:de:8a: df:23:10:1a:31:3f:c7:21:17:4d:93:7a:73:5a:01:94:73:fd: f0:71:03:36:3c:90:e0:d9:90:d9:df:74:3b:d8:40:1f:e2:90: 37:16:a5:32:e8:cf:d2:6c:1d:5a:d9:40:f8:46:09:4a:fc:67: ce:5e:cc:56:0b:0b:b2:00:f0:d8:5a:33:7b:97:fe:74:43:ab: 99:fd:78:29:ad:4f:da:14:02:33:df:f2:b1:cc:c8:0b:a6:aa: c1:5a:bb:fb:10:75:a8:38:c0:0c:ee:0d:3c:71:4e:34:6f:ca: 3b:9c:f7:47:f3:52:fb:80:73:c4:a0:5c:4c:19:84:5f:13:c0: 08:3d:2d:a4:c8:9c:92:d3:0c:35:f8:59:62:0d:62:08:4f:16: cf:cc:0d:78:89:63:2b:09:96:ea:30:d4:17:d7:7d:06:28:87: 73:13:51:02:3f:db:d2:71:7a:ab:3b:04:eb:55:76:9a:e8:07: 2b:f5:2a:9e -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUYMpgVtV3cUOsi0Fjv2SvYPPT3XkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjA1N1oX DTI3MDUwMTA5MjU1N1owMzExMC8GA1UEAxMoMDM5NzZEQ0IxNEQwOEI5NEFEQ0FD Q0Q0NUU1MUU2QTgzRDI3RTQ2QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI7YcLgAbYAPkZ6LK2xU03+TSDRplnsSK1JcKi/YvKVjEOaOW4uCE0Xr1aiq 2Axh+L73Gu5HAfrIjJJu8SmxGDuc65YMr2PJKPiP83Zi4oZIcWziLT1UuO+H5hGt 2ZweoNtHA6b76KKtL2nI3q6j7HogSOefJxsB7ul8OujCEduHJnB+T/V49+6gtdkr NXvXg1HuTnqHx3jnq24sm1+1kwHzjcjAUMLmtXWTowdY5Ho1QS9SSsHr28sTYHzu 0EVeO3PbXS6B+4yudwNkpysnxjLYoqXImSoB7MW40zESnvT5YaIjHapr2NXokxJp KRgETyvRR4NLj/aQVrISSsDFzvMCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQDl23L FNCLlK3KzNReUeaoPSfkbDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxNTkyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAo99oMA8EAgACMAkDBwAgAQ3zAkAwDQYJKoZIhvcNAQELBQADggEBAAtd 7ZdsUlg2nZEcx1mYcjmSFSTz/63X0kYqIGtODcX1FqZzs7656thu9kQlwx+Npe94 zXZ+lIIH9Q52AWa+841PtxAxrDXeit8jEBoxP8chF02TenNaAZRz/fBxAzY8kODZ kNnfdDvYQB/ikDcWpTLoz9JsHVrZQPhGCUr8Z85ezFYLC7IA8NhaM3uX/nRDq5n9 eCmtT9oUAjPf8rHMyAumqsFau/sQdag4wAzuDTxxTjRvyjuc90fzUvuAc8SgXEwZ hF8TwAg9LaTInJLTDDX4WWINYghPFs/MDXiJYysJluow1BfXfQYoh3MTUQI/29Jx eqs7BOtVdproByv1Kp4= -----END CERTIFICATE-----Generated at Sun May 3 00:39:49 2026 by rpki-client