$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151597.roa File: AS151597.roa (raw, json) Hash identifier: p2h74FFQBQV5SmaeMvcLq41B+6X550XnHX6w2rNVOK0= Subject key identifier: 2A:74:9C:CB:66:2C:57:22:E6:C8:D0:F1:22:C0:6C:43:F2:56:80:87 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 02E7D899F900D002796E1ACB4F1DA3899EA73F09 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151597.roa Signing time: Sat 02 May 2026 09:21:47 +0000 ROA not before: Sat 02 May 2026 09:16:47 +0000 ROA not after: Sat 01 May 2027 09:21:47 +0000 asID: 151597 IP address blocks: 103.254.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:e7:d8:99:f9:00:d0:02:79:6e:1a:cb:4f:1d:a3:89:9e:a7:3f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:16:47 2026 GMT Not After : May 1 09:21:47 2027 GMT Subject: CN=2A749CCB662C5722E6C8D0F122C06C43F2568087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2b:bf:9d:6d:64:36:ac:b6:51:9c:a5:2a:d2: 66:16:e6:7f:13:28:95:43:89:6a:86:a4:38:1f:76: 3a:aa:f8:c6:5c:f8:ca:bc:c9:95:dd:10:34:c6:5d: da:97:cf:70:61:0d:73:86:b3:ec:28:86:c0:01:6b: 1d:f0:d1:61:5c:76:e2:d7:9b:9d:18:21:eb:8f:4a: 27:dc:c5:e6:c4:48:2f:82:26:36:07:e3:18:e0:4d: d4:b0:be:20:5b:5a:fc:b9:35:42:34:1d:30:5e:ef: c8:46:fc:97:63:8e:32:8a:8d:0d:52:bb:7e:31:6c: 3c:75:9c:12:4a:99:68:13:b4:cf:79:9c:c7:66:f2: a5:43:c7:8a:54:66:45:45:8f:71:5b:98:34:9e:8f: 6d:d0:b6:7f:f3:9c:d4:6a:38:25:ac:19:dd:f8:eb: ca:e9:22:47:5c:fc:52:6f:57:35:9c:d1:6c:b7:06: 6d:6f:c6:82:93:8a:88:2e:f2:a4:f9:59:9f:79:fa: e9:d0:05:a5:87:a7:5c:7e:1f:6e:33:bb:43:d9:fd: 11:65:61:e3:bb:f2:97:a6:b4:29:f7:15:73:1d:61: 0a:7e:ab:7e:e5:80:07:31:4c:00:dc:e3:b0:c1:bb: 50:37:e6:0a:48:8f:24:df:43:5d:39:cf:ac:d9:d2: 43:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:74:9C:CB:66:2C:57:22:E6:C8:D0:F1:22:C0:6C:43:F2:56:80:87 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151597.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.254.197.0/24 Signature Algorithm: sha256WithRSAEncryption 59:9a:bf:e3:40:3c:db:66:a8:c6:14:d4:cf:c0:c2:9d:e3:b2: 26:38:b0:ac:0c:55:26:12:b4:3c:ab:fd:b7:52:5c:c4:f2:b8: c7:0b:47:bc:ed:03:9e:41:cb:c6:7d:03:8d:1b:f7:ff:d5:77: 4e:50:22:dc:e7:94:53:c5:b3:2c:f5:ac:96:a3:68:56:87:fa: c6:15:96:a4:c4:b0:d8:9e:7f:c1:dd:5b:66:03:b1:4d:5c:fd: 59:d9:2c:98:3d:89:ef:1e:bc:7f:89:e7:c4:fd:76:ce:f0:cc: 37:c2:a5:f1:5c:3a:04:a3:34:41:19:dc:7c:a4:c1:42:4d:92: 63:7a:1c:5e:9b:e6:2e:d6:7e:ab:55:04:71:41:6e:c6:4d:e5: 07:b5:1a:a0:2b:86:74:b6:80:6a:2f:3b:7c:61:7b:4e:9f:95: 35:16:b5:7d:ce:ef:eb:7a:ab:1e:c6:94:77:01:db:d2:bf:8e: c5:92:f5:5e:19:e5:88:61:75:ee:08:0e:03:b2:2d:10:29:2d: bc:29:d4:55:1d:e2:e0:16:56:54:83:4a:1c:e6:cc:93:7d:48: 74:22:01:69:69:5e:92:9d:e5:ac:8d:69:ea:bb:cd:59:ee:f9: f5:45:f2:b4:08:bc:4e:be:91:d9:48:00:ca:91:e5:bd:14:34: 3a:2c:04:b2 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUAufYmfkA0AJ5bhrLTx2jiZ6nPwkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTY0N1oX DTI3MDUwMTA5MjE0N1owMzExMC8GA1UEAxMoMkE3NDlDQ0I2NjJDNTcyMkU2QzhE MEYxMjJDMDZDNDNGMjU2ODA4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJQrv51tZDastlGcpSrSZhbmfxMolUOJaoakOB92Oqr4xlz4yrzJld0QNMZd 2pfPcGENc4az7CiGwAFrHfDRYVx24tebnRgh649KJ9zF5sRIL4ImNgfjGOBN1LC+ IFta/Lk1QjQdMF7vyEb8l2OOMoqNDVK7fjFsPHWcEkqZaBO0z3mcx2bypUPHilRm RUWPcVuYNJ6PbdC2f/Oc1Go4JawZ3fjryukiR1z8Um9XNZzRbLcGbW/GgpOKiC7y pPlZn3n66dAFpYenXH4fbjO7Q9n9EWVh47vyl6a0KfcVcx1hCn6rfuWABzFMANzj sMG7UDfmCkiPJN9DXTnPrNnSQ38CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQqdJzL ZixXIubI0PEiwGxD8laAhzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxNTk3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ/7FMA0GCSqGSIb3DQEBCwUAA4IBAQBZmr/jQDzbZqjGFNTPwMKd47Im OLCsDFUmErQ8q/23UlzE8rjHC0e87QOeQcvGfQONG/f/1XdOUCLc55RTxbMs9ayW o2hWh/rGFZakxLDYnn/B3VtmA7FNXP1Z2SyYPYnvHrx/iefE/XbO8Mw3wqXxXDoE ozRBGdx8pMFCTZJjehxem+Yu1n6rVQRxQW7GTeUHtRqgK4Z0toBqLzt8YXtOn5U1 FrV9zu/reqsexpR3AdvSv47FkvVeGeWIYXXuCA4Dsi0QKS28KdRVHeLgFlZUg0oc 5syTfUh0IgFpaV6SneWsjWnqu81Z7vn1RfK0CLxOvpHZSADKkeW9FDQ6LASy -----END CERTIFICATE-----Generated at Sun May 3 01:40:38 2026 by rpki-client