$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151655.roa File: AS151655.roa (raw, json) Hash identifier: e3XLcaF4YGDcjrFgbeSwHFYRqW9z3mDpiDKJDADChUQ= Subject key identifier: 52:FD:7D:6E:7E:0F:20:C0:0B:66:46:92:66:9A:05:4D:0F:53:20:14 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4869A9490588B3D6D2B5D77E752B059D86763A3A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151655.roa Signing time: Fri 31 Jul 2026 03:48:51 +0000 ROA not before: Fri 31 Jul 2026 03:43:51 +0000 ROA not after: Fri 30 Jul 2027 03:48:51 +0000 asID: 151655 IP address blocks: 2001:df7:46c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:69:a9:49:05:88:b3:d6:d2:b5:d7:7e:75:2b:05:9d:86:76:3a:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jul 31 03:43:51 2026 GMT Not After : Jul 30 03:48:51 2027 GMT Subject: CN=52FD7D6E7E0F20C00B664692669A054D0F532014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6a:89:8e:8e:95:13:1b:3c:cf:ed:3e:d7:99: 93:ef:44:e2:5e:49:c2:8b:db:63:2f:9e:65:9f:2e: af:41:c1:e8:aa:82:ff:71:51:f9:42:39:f4:7d:3d: 3d:e6:f1:5a:46:39:9a:74:f5:47:34:f9:51:fc:fb: 84:78:41:a4:80:a1:39:71:27:47:03:2b:a7:db:51: 07:b3:49:bc:71:f1:d3:ba:9b:52:7b:fc:f6:8b:58: 8e:b8:6c:c6:58:9c:08:be:0f:58:34:93:27:2f:79: 3a:a5:0c:0b:dc:c6:4e:56:14:0e:e5:13:32:81:11: 63:0d:da:1d:de:1c:e7:75:3a:af:02:e8:e5:92:67: c2:49:f5:48:80:eb:88:d9:49:cb:c4:8b:d1:9a:ea: 04:64:9c:12:77:40:f6:37:95:8f:54:dc:16:3e:4f: 24:32:9e:f6:90:24:f7:01:11:cf:9d:b1:db:a2:f4: d1:29:d8:34:78:59:22:86:90:80:9f:ce:48:4b:12: 87:34:dc:b1:ed:42:30:fc:b2:32:8c:9d:0e:af:eb: 0b:58:d1:8d:4c:ff:f3:dc:5d:70:1c:fc:06:dd:28: 58:7f:d7:5d:a5:44:58:86:14:3c:4e:53:05:e9:96: 7f:12:6c:f2:05:50:07:5d:90:6a:0e:d2:84:30:3a: 1b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FD:7D:6E:7E:0F:20:C0:0B:66:46:92:66:9A:05:4D:0F:53:20:14 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151655.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:46c0::/48 Signature Algorithm: sha256WithRSAEncryption a7:9c:fa:de:80:4b:9e:c2:bc:b4:69:a4:c1:75:b4:de:17:07: 85:de:9d:5a:bd:dd:05:3c:60:49:ce:d1:0c:95:7d:48:51:a2: 4b:59:a8:32:25:52:ea:3c:bc:c4:0d:9b:57:36:d9:c0:98:6f: f6:65:b1:7a:3d:aa:ce:71:c1:33:7d:34:f7:b5:e0:2f:e3:2d: c1:b9:4f:6a:0d:d8:f9:7e:82:f0:30:47:87:94:9f:a5:63:9c: cf:df:1a:20:84:d8:13:c0:d0:0d:1a:1b:64:94:dc:1f:2c:bf: 40:f5:10:55:46:57:d0:b8:ea:bd:19:d5:f6:3a:3c:6f:ce:b4: 74:d3:dc:e9:f5:df:f3:f5:cf:5d:f5:d1:d1:93:60:ed:c6:5c: ab:b8:62:02:89:08:2d:52:a8:d1:9a:3d:97:ae:e7:66:93:a7: 78:4f:9c:ac:22:7e:19:81:7c:9e:33:8f:e2:18:06:15:6c:04: 4e:cd:ee:a5:06:1a:39:e8:64:65:e4:fb:52:94:0e:98:8c:4c: 71:df:5a:d7:33:e6:51:8a:b9:60:69:29:de:55:9d:fa:c9:b2: 0f:c8:3c:7d:f1:9c:d6:8e:f2:b4:94:6f:db:d2:ce:a0:fe:bc: 44:0e:68:cc:6d:fd:e5:ee:a7:dc:ef:c6:6b:ae:7b:d4:b8:aa: 1f:53:c4:54 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUSGmpSQWIs9bStdd+dSsFnYZ2OjowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDczMTAzNDM1MVoX DTI3MDczMDAzNDg1MVowMzExMC8GA1UEAxMoNTJGRDdENkU3RTBGMjBDMDBCNjY0 NjkyNjY5QTA1NEQwRjUzMjAxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANlqiY6OlRMbPM/tPteZk+9E4l5JwovbYy+eZZ8ur0HB6KqC/3FR+UI59H09 PebxWkY5mnT1RzT5Ufz7hHhBpIChOXEnRwMrp9tRB7NJvHHx07qbUnv89otYjrhs xlicCL4PWDSTJy95OqUMC9zGTlYUDuUTMoERYw3aHd4c53U6rwLo5ZJnwkn1SIDr iNlJy8SL0ZrqBGScEndA9jeVj1TcFj5PJDKe9pAk9wERz52x26L00SnYNHhZIoaQ gJ/OSEsShzTcse1CMPyyMoydDq/rC1jRjUz/89xdcBz8Bt0oWH/XXaVEWIYUPE5T BemWfxJs8gVQB12Qag7ShDA6GxMCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRS/X1u fg8gwAtmRpJmmgVND1MgFDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxNjU1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN90bAMA0GCSqGSIb3DQEBCwUAA4IBAQCnnPregEuewry0aaTBdbTe FweF3p1avd0FPGBJztEMlX1IUaJLWagyJVLqPLzEDZtXNtnAmG/2ZbF6ParOccEz fTT3teAv4y3BuU9qDdj5foLwMEeHlJ+lY5zP3xoghNgTwNANGhtklNwfLL9A9RBV RlfQuOq9GdX2OjxvzrR009zp9d/z9c9d9dHRk2DtxlyruGICiQgtUqjRmj2Xrudm k6d4T5ysIn4ZgXyeM4/iGAYVbAROze6lBho56GRl5PtSlA6YjExx31rXM+ZRirlg aSneVZ36ybIPyDx98ZzWjvK0lG/b0s6g/rxEDmjMbf3l7qfc78ZrrnvUuKofU8RU -----END CERTIFICATE-----Generated at Sun Aug 2 14:24:07 2026 by rpki-client