$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151594.roa File: AS151594.roa (raw, json) Hash identifier: 6xOT75gQ+9jHFTIp40w2fS9l5+OVUMzZYrcx8SnAiJo= Subject key identifier: DB:9F:E5:B5:38:EE:94:FD:80:CA:7A:DC:39:0F:1D:2C:21:33:EA:06 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 099371117DCF22B247458D2F080322BCD41B7997 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151594.roa Signing time: Sat 02 May 2026 21:15:48 +0000 ROA not before: Sat 02 May 2026 21:10:48 +0000 ROA not after: Sat 01 May 2027 21:15:48 +0000 asID: 151594 IP address blocks: 103.227.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:93:71:11:7d:cf:22:b2:47:45:8d:2f:08:03:22:bc:d4:1b:79:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:10:48 2026 GMT Not After : May 1 21:15:48 2027 GMT Subject: CN=DB9FE5B538EE94FD80CA7ADC390F1D2C2133EA06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:06:e3:c3:95:5c:1a:45:b1:5e:12:f8:4a:4b: ea:e9:0e:d3:dc:bc:3e:a9:c9:01:fe:ff:41:86:c7: 8f:3a:f4:58:09:38:5c:88:a4:81:da:2d:95:fc:84: 97:f4:e1:37:d9:ed:ed:be:95:af:05:a1:06:39:40: 3a:0d:1d:6d:9a:07:76:0d:3d:5c:d7:07:17:1e:1f: 63:09:05:eb:aa:ff:14:56:13:40:b0:06:d1:b8:19: d7:17:63:85:7a:70:12:8c:89:df:90:e3:5d:04:10: 47:0a:eb:5c:86:4e:40:76:14:fb:eb:a9:7f:f7:8b: 9f:11:3d:b9:fa:5b:bc:ec:86:5f:5d:62:74:1c:1a: 38:e2:23:9c:91:57:06:d1:43:1f:27:d9:92:d5:54: 76:56:93:c0:70:0c:ef:5a:30:e8:c6:2d:5e:f4:5f: d2:7c:b6:1b:fe:ef:15:6a:16:2e:46:8a:1b:64:bf: c0:74:55:73:f6:d0:e8:6b:a4:09:d3:6c:73:53:36: dd:91:a7:11:f0:f9:c2:7e:1c:2a:4f:07:75:32:cf: f3:84:d9:0e:e8:98:1a:bf:84:fe:60:c8:e9:aa:b7: 32:94:09:17:d8:42:44:27:2e:2a:d4:f2:40:a5:76: b9:a6:6f:e5:33:40:a1:d8:51:0d:4d:0c:17:28:ee: 54:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9F:E5:B5:38:EE:94:FD:80:CA:7A:DC:39:0F:1D:2C:21:33:EA:06 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151594.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.227.0.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:66:11:13:67:c6:15:cf:a2:71:66:42:5e:0e:f0:50:7f:c6: 47:f7:c8:e6:ce:16:dc:38:c3:00:5f:f7:57:22:ac:64:cd:4a: c9:cb:ac:58:86:f4:3f:4e:77:c5:81:a3:cb:e4:71:9b:4b:bc: dc:f8:53:73:46:8c:7c:2b:37:1f:70:d1:c5:b7:6f:4d:91:88: ce:63:9d:fa:41:c3:93:88:16:c0:fc:52:5c:ec:cc:84:82:09: 3f:7c:28:e8:a7:5c:3c:c8:0d:f8:cd:75:af:2a:ca:84:80:18: 3f:88:02:d2:ad:1b:df:6a:a8:86:bb:fe:1a:7d:32:b6:a2:5c: 62:ca:7f:3f:62:8f:c0:8e:ab:73:4f:bf:2d:cd:44:6d:a0:db: 38:d9:71:fe:08:d2:96:b5:02:c7:17:2c:0a:05:49:0b:5c:63: b8:54:d6:b6:87:1d:43:68:67:3d:9c:a9:a3:37:4a:33:6f:13: fa:fe:20:15:c0:e2:eb:25:48:d6:65:6e:96:3b:5b:65:20:86: 93:5c:6d:bb:df:dc:6f:f5:18:f9:98:01:f5:7e:f3:39:e2:18: 16:9b:41:d6:7b:b3:af:24:64:88:f9:d9:70:8e:ac:44:da:fa: a3:31:c9:56:91:c4:e3:bc:36:7c:16:33:88:12:dc:5c:35:7d: 07:ad:6f:67 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUCZNxEX3PIrJHRY0vCAMivNQbeZcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTA0OFoX DTI3MDUwMTIxMTU0OFowMzExMC8GA1UEAxMoREI5RkU1QjUzOEVFOTRGRDgwQ0E3 QURDMzkwRjFEMkMyMTMzRUEwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANcG48OVXBpFsV4S+EpL6ukO09y8PqnJAf7/QYbHjzr0WAk4XIikgdotlfyE l/ThN9nt7b6VrwWhBjlAOg0dbZoHdg09XNcHFx4fYwkF66r/FFYTQLAG0bgZ1xdj hXpwEoyJ35DjXQQQRwrrXIZOQHYU++upf/eLnxE9ufpbvOyGX11idBwaOOIjnJFX BtFDHyfZktVUdlaTwHAM71ow6MYtXvRf0ny2G/7vFWoWLkaKG2S/wHRVc/bQ6Guk CdNsc1M23ZGnEfD5wn4cKk8HdTLP84TZDuiYGr+E/mDI6aq3MpQJF9hCRCcuKtTy QKV2uaZv5TNAodhRDU0MFyjuVMcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTbn+W1 OO6U/YDKetw5Dx0sITPqBjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxNTk0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ+MAMA0GCSqGSIb3DQEBCwUAA4IBAQA6ZhETZ8YVz6JxZkJeDvBQf8ZH 98jmzhbcOMMAX/dXIqxkzUrJy6xYhvQ/TnfFgaPL5HGbS7zc+FNzRox8KzcfcNHF t29NkYjOY536QcOTiBbA/FJc7MyEggk/fCjop1w8yA34zXWvKsqEgBg/iALSrRvf aqiGu/4afTK2olxiyn8/Yo/AjqtzT78tzURtoNs42XH+CNKWtQLHFywKBUkLXGO4 VNa2hx1DaGc9nKmjN0ozbxP6/iAVwOLrJUjWZW6WO1tlIIaTXG2739xv9Rj5mAH1 fvM54hgWm0HWe7OvJGSI+dlwjqxE2vqjMclWkcTjvDZ8FjOIEtxcNX0HrW9n -----END CERTIFICATE-----Generated at Sun May 3 00:40:32 2026 by rpki-client