$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147159.roa File: AS147159.roa (raw, json) Hash identifier: 1TbEmUMip3fWuM8AH+yYn2qj8i1xOsIt19gqPlEi9zs= Subject key identifier: DB:B6:29:93:61:28:C9:9F:87:3B:E7:D1:AE:BD:84:73:9B:BA:86:C7 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5E57DE2D0C5D0BF7385F2FC5F972F4BF5B767A18 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147159.roa Signing time: Tue 31 Mar 2026 05:00:00 +0000 ROA not before: Tue 31 Mar 2026 04:55:00 +0000 ROA not after: Tue 30 Mar 2027 05:00:00 +0000 asID: 147159 IP address blocks: 36.50.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 21:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:57:de:2d:0c:5d:0b:f7:38:5f:2f:c5:f9:72:f4:bf:5b:76:7a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 31 04:55:00 2026 GMT Not After : Mar 30 05:00:00 2027 GMT Subject: CN=DBB629936128C99F873BE7D1AEBD84739BBA86C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:59:e4:d7:f6:b6:3f:89:b7:83:d3:d9:28:02: eb:96:5e:ee:75:fd:34:20:1b:71:93:28:e3:d0:01: 0b:57:a2:a0:25:ef:c0:dd:14:b5:ee:f3:d8:bf:14: 8d:c1:83:de:03:53:49:6b:47:d3:1c:3c:ef:79:ff: 43:b0:dc:95:66:3c:ca:a1:a7:e0:f3:a5:0e:9c:8a: 1d:00:3e:f1:e6:fc:6e:41:82:a0:29:48:50:22:c0: fe:e5:f7:aa:7e:e1:5b:84:58:ac:bb:d7:37:66:8f: 01:2d:4e:2f:25:6d:4d:ec:4b:d1:a8:5b:90:75:e7: ec:87:00:65:f6:f7:c7:96:38:16:6b:52:d2:7f:b1: 54:9d:ee:42:29:ff:6c:51:16:43:8e:4e:d4:e6:40: bd:34:fa:c2:0d:8b:2d:4f:9d:0c:8b:74:71:80:6e: 5b:00:f8:61:38:bc:1d:fb:0f:64:31:2b:0b:0a:62: 43:8a:6b:1d:a0:6b:e9:33:61:d2:13:89:fa:9d:4a: 14:88:a1:c1:f6:27:c3:e8:83:e4:3b:9a:58:9b:b9: b6:7a:ed:54:0b:35:b7:2d:86:b0:0d:78:2e:10:1f: 19:c1:4e:b6:00:41:dc:16:d8:c2:55:28:c8:48:dc: 30:0e:a2:64:f4:91:34:40:4a:ef:d6:97:eb:96:be: 1b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B6:29:93:61:28:C9:9F:87:3B:E7:D1:AE:BD:84:73:9B:BA:86:C7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147159.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.205.0/24 Signature Algorithm: sha256WithRSAEncryption 20:51:94:f0:7b:92:e2:49:29:3b:9f:b5:e8:55:b6:43:4f:41: 9f:a5:42:77:07:69:ae:2b:b8:cf:d6:ec:0c:14:72:9e:b2:f9: f5:15:5e:22:77:18:f4:d9:e4:ad:21:b8:0e:be:c8:d3:9d:08: 37:8d:2c:80:f1:fe:2a:10:10:6e:d1:2e:e3:89:01:28:97:d4: b1:37:f8:8f:32:d8:53:4a:43:2d:e7:34:d0:f1:c1:92:67:7c: 58:31:91:a1:2d:6b:f0:c2:64:78:0a:0e:b0:b9:97:00:3c:17: b2:97:92:2d:78:92:61:ff:0d:90:e7:66:56:21:76:31:cc:fd: 52:08:28:6c:3b:dd:36:0e:e0:1d:5b:fe:ac:b7:41:e0:5a:3b: 3f:9c:a6:b8:11:f2:d4:ff:b5:d8:99:f9:37:9a:a8:f7:2b:78: ff:39:cd:7b:6b:92:5c:2b:18:95:dc:56:a7:93:e5:27:cd:d5: 4e:a2:26:85:a0:b0:c7:0e:0e:56:b6:cf:ba:a0:71:d4:fe:b9: 9c:90:db:b0:d7:4a:50:c4:9d:91:2c:2c:96:7e:d4:12:9f:42: cf:59:3a:32:46:ea:a7:c3:17:46:3c:c2:9b:f9:b1:56:d8:60: c9:5e:e1:bb:f1:ba:ca:98:51:3f:9e:e3:cb:76:90:e4:a1:18: f6:5d:1d:60 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUXlfeLQxdC/c4Xy/F+XL0v1t2ehgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMzMTA0NTUwMFoX DTI3MDMzMDA1MDAwMFowMzExMC8GA1UEAxMoREJCNjI5OTM2MTI4Qzk5Rjg3M0JF N0QxQUVCRDg0NzM5QkJBODZDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKdZ5Nf2tj+Jt4PT2SgC65Ze7nX9NCAbcZMo49ABC1eioCXvwN0Ute7z2L8U jcGD3gNTSWtH0xw873n/Q7DclWY8yqGn4POlDpyKHQA+8eb8bkGCoClIUCLA/uX3 qn7hW4RYrLvXN2aPAS1OLyVtTexL0ahbkHXn7IcAZfb3x5Y4FmtS0n+xVJ3uQin/ bFEWQ45O1OZAvTT6wg2LLU+dDIt0cYBuWwD4YTi8HfsPZDErCwpiQ4prHaBr6TNh 0hOJ+p1KFIihwfYnw+iD5DuaWJu5tnrtVAs1ty2GsA14LhAfGcFOtgBB3BbYwlUo yEjcMA6iZPSRNEBK79aX65a+G1ECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTbtimT YSjJn4c759GuvYRzm7qGxzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0NzE1OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEACQyzTANBgkqhkiG9w0BAQsFAAOCAQEAIFGU8HuS4kkpO5+16FW2 Q09Bn6VCdwdpriu4z9bsDBRynrL59RVeIncY9NnkrSG4Dr7I050IN40sgPH+KhAQ btEu44kBKJfUsTf4jzLYU0pDLec00PHBkmd8WDGRoS1r8MJkeAoOsLmXADwXspeS LXiSYf8NkOdmViF2Mcz9UggobDvdNg7gHVv+rLdB4Fo7P5ymuBHy1P+12Jn5N5qo 9yt4/znNe2uSXCsYldxWp5PlJ83VTqImhaCwxw4OVrbPuqBx1P65nJDbsNdKUMSd kSwsln7UEp9Cz1k6Mkbqp8MXRjzCm/mxVthgyV7hu/G6yphRP57jy3aQ5KEY9l0d YA== -----END CERTIFICATE-----Generated at Fri Apr 17 16:30:35 2026 by rpki-client