$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151999.roa File: AS151999.roa (raw, json) Hash identifier: mrv3Ke5tZu8hdfZE8qNu+97Wz9NGZTKE0xHwjnYMrSY= Subject key identifier: 9F:D3:7D:E2:38:1A:E2:0D:70:C0:E9:1B:D3:42:22:8A:FC:EF:27:9D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7A97CFE95CCE391C1B92CDF2559C23DCE610F8A5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151999.roa Signing time: Sat 02 May 2026 21:37:53 +0000 ROA not before: Sat 02 May 2026 21:32:53 +0000 ROA not after: Sat 01 May 2027 21:37:53 +0000 asID: 151999 IP address blocks: 43.250.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:97:cf:e9:5c:ce:39:1c:1b:92:cd:f2:55:9c:23:dc:e6:10:f8:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:32:53 2026 GMT Not After : May 1 21:37:53 2027 GMT Subject: CN=9FD37DE2381AE20D70C0E91BD342228AFCEF279D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:98:76:7c:a4:12:45:f0:74:55:a9:17:46:30: 52:55:fa:e8:38:84:80:de:67:66:8a:01:a5:c6:87: 9c:4f:cc:5b:0b:f6:01:fc:bd:6d:6f:cc:a5:4f:fc: d0:9a:e6:a4:95:2d:0b:18:f8:ce:81:3a:e7:04:a5: 8d:d7:3d:02:91:65:cd:a3:3a:c1:d8:ed:09:2a:b4: 57:e5:a4:eb:2a:7e:98:be:28:8d:23:44:76:e2:b1: 9f:fb:be:aa:65:05:c9:1a:95:90:c2:cd:10:56:20: 7a:64:f6:b8:e3:40:3f:99:3a:a3:f9:89:97:a2:d1: c3:f1:48:a9:0c:69:7f:79:9f:97:12:18:31:0a:02: 5b:25:4d:5f:29:99:cd:ad:40:64:2e:35:c7:09:ee: b1:63:9d:e0:7a:59:3e:fa:58:4a:a7:f7:ae:ce:7c: cf:da:4a:48:66:f3:86:1e:ec:2d:f7:cb:2e:ec:1a: 64:38:74:4b:03:9b:55:d2:e4:81:e7:38:5b:ec:c0: 48:e3:68:c7:c5:65:60:9a:da:5d:3c:e0:35:33:bf: f3:9e:1d:80:c3:87:78:b1:53:02:7e:80:23:13:82: a3:6c:84:e7:82:c7:fa:17:df:e6:16:9c:3b:96:7a: 4c:69:5b:dc:3d:5d:2b:bc:1a:c7:f7:83:ab:78:b5: ef:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D3:7D:E2:38:1A:E2:0D:70:C0:E9:1B:D3:42:22:8A:FC:EF:27:9D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151999.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.250.182.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:48:ea:32:98:da:8f:d6:84:3f:ce:af:61:82:23:2c:bf:2f: ef:1b:17:52:9a:8a:43:c4:73:9e:93:42:b0:7f:36:46:1a:24: cf:9c:74:35:78:79:65:9f:f0:09:8f:f4:e1:4b:7e:d7:62:ed: 61:d8:40:20:66:76:e1:63:a0:0a:ec:86:82:07:d2:28:01:96: b4:7e:3b:95:15:b9:07:cd:75:25:33:53:e9:77:d6:f6:9f:80: 00:1b:3e:b2:19:12:33:30:09:5a:21:bb:78:6f:4b:a8:14:92: 83:bf:03:ea:f7:54:7a:14:7e:ab:84:49:b7:99:62:14:7e:d0: 29:ce:b9:8c:14:c8:d2:f0:71:9f:fb:9e:56:b7:11:c8:82:5c: 2c:32:7e:60:2e:6f:d4:b9:00:62:38:9e:e8:3f:cf:d5:d7:7c: ed:e6:a5:69:da:0a:04:f9:bf:29:a9:ee:87:39:06:2f:ab:a7: cf:5f:a2:92:53:35:13:ef:4e:58:38:40:15:06:97:80:4c:54: 21:52:02:4e:ec:16:6f:f4:0f:17:12:de:b4:37:e1:d6:62:5f: 51:04:2d:33:a6:0c:3f:b0:34:ff:88:0d:81:7a:28:d3:89:e5: 43:9e:16:26:20:b2:1b:62:a1:4b:71:ad:85:ec:40:f6:6b:b6: 6d:91:2b:ce -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUepfP6VzOORwbks3yVZwj3OYQ+KUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMzI1M1oX DTI3MDUwMTIxMzc1M1owMzExMC8GA1UEAxMoOUZEMzdERTIzODFBRTIwRDcwQzBF OTFCRDM0MjIyOEFGQ0VGMjc5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOYdnykEkXwdFWpF0YwUlX66DiEgN5nZooBpcaHnE/MWwv2Afy9bW/MpU/8 0JrmpJUtCxj4zoE65wSljdc9ApFlzaM6wdjtCSq0V+Wk6yp+mL4ojSNEduKxn/u+ qmUFyRqVkMLNEFYgemT2uONAP5k6o/mJl6LRw/FIqQxpf3mflxIYMQoCWyVNXymZ za1AZC41xwnusWOd4HpZPvpYSqf3rs58z9pKSGbzhh7sLffLLuwaZDh0SwObVdLk gec4W+zASONox8VlYJraXTzgNTO/854dgMOHeLFTAn6AIxOCo2yE54LH+hff5hac O5Z6TGlb3D1dK7wax/eDq3i17xcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSf033i OBriDXDA6RvTQiKK/O8nnTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxOTk5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBK/q2MA0GCSqGSIb3DQEBCwUAA4IBAQBKSOoymNqP1oQ/zq9hgiMsvy/v GxdSmopDxHOek0KwfzZGGiTPnHQ1eHlln/AJj/ThS37XYu1h2EAgZnbhY6AK7IaC B9IoAZa0fjuVFbkHzXUlM1Ppd9b2n4AAGz6yGRIzMAlaIbt4b0uoFJKDvwPq91R6 FH6rhEm3mWIUftApzrmMFMjS8HGf+55WtxHIglwsMn5gLm/UuQBiOJ7oP8/V13zt 5qVp2goE+b8pqe6HOQYvq6fPX6KSUzUT705YOEAVBpeATFQhUgJO7BZv9A8XEt60 N+HWYl9RBC0zpgw/sDT/iA2BeijTieVDnhYmILIbYqFLca2F7ED2a7ZtkSvO -----END CERTIFICATE-----Generated at Sun May 3 00:40:23 2026 by rpki-client