$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151000.roa File: AS151000.roa (raw, json) Hash identifier: yzBJgWUREsoV0244PalgCcQJtqyE1t+s4i9dn4bDP9A= Subject key identifier: 8C:CF:DC:FB:41:01:4A:AE:D5:F1:2D:3C:D8:FB:2F:69:5D:44:80:51 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 26CBF2942EB0C2B48236F04F60451F8847EEE7D9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151000.roa Signing time: Mon 30 Mar 2026 02:47:40 +0000 ROA not before: Mon 30 Mar 2026 02:42:40 +0000 ROA not after: Mon 29 Mar 2027 02:47:40 +0000 asID: 151000 IP address blocks: 103.139.244.0/23 maxlen: 24 103.190.0.0/24 maxlen: 24 2402:12e0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:cb:f2:94:2e:b0:c2:b4:82:36:f0:4f:60:45:1f:88:47:ee:e7:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 30 02:42:40 2026 GMT Not After : Mar 29 02:47:40 2027 GMT Subject: CN=8CCFDCFB41014AAED5F12D3CD8FB2F695D448051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fc:46:84:77:5d:2f:85:7a:db:5b:b7:77:80: b8:1a:6e:b7:1b:60:8e:9a:10:54:46:81:4b:38:6d: d8:38:1f:5a:23:fd:4f:39:eb:6f:e5:88:4b:2e:90: 78:df:0f:da:84:02:94:dc:47:f9:b4:5d:d0:a9:2a: 1f:a2:98:4a:2c:88:e9:c7:a8:bf:6a:6a:ee:7a:f6: 78:e2:8d:6b:12:86:58:99:f2:6e:c9:c9:fa:54:45: 75:47:eb:fd:eb:0e:48:24:c0:a5:e0:69:d5:d4:63: 5a:f5:a4:96:63:5f:f3:ef:fb:1c:62:f9:a5:f9:5a: e7:e8:4d:21:ef:ab:4d:f2:4a:0f:5a:52:05:64:fd: 52:b1:11:35:ea:45:ac:c7:72:d1:ca:ba:b8:61:a4: d9:1d:66:8b:13:22:86:9a:5e:4e:c3:4c:60:e0:3b: c2:00:cf:94:b2:3d:fc:1f:e0:84:a3:22:a3:ef:1a: b6:a5:e1:dc:71:b4:d2:dc:66:01:5e:2d:78:71:e5: ba:47:28:22:0d:a9:0e:33:77:53:c5:d5:80:bf:23: a9:9e:e5:75:84:b3:68:77:a5:ac:94:be:1f:8a:c0: 3b:39:77:71:32:5f:d7:be:af:5a:2d:b1:a6:13:b3: c4:99:f7:10:ad:63:2d:79:52:97:16:32:a2:60:4d: a3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CF:DC:FB:41:01:4A:AE:D5:F1:2D:3C:D8:FB:2F:69:5D:44:80:51 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151000.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.244.0/23 103.190.0.0/24 IPv6: 2402:12e0::/32 Signature Algorithm: sha256WithRSAEncryption 01:d8:99:0e:05:0d:69:e7:bb:f4:2a:e5:85:d0:37:1d:00:3c: 56:ea:52:d3:11:4e:47:37:92:02:2f:8a:f5:f3:ba:85:8e:2c: d0:18:a2:73:74:02:11:76:af:45:94:7c:bf:5d:f3:a0:9a:a6: 7a:a1:a2:fc:fe:cd:f7:7b:2b:1f:d5:f2:94:6b:d8:28:eb:26: 63:cb:b3:3e:fb:d2:39:96:97:cc:7a:1b:42:a6:d4:6e:fd:cb: 37:70:10:9b:15:15:83:a3:25:ca:bc:e5:c5:96:2b:6f:b3:f0: cb:4d:9d:6a:5f:70:55:f8:f9:b0:29:75:01:c2:dc:63:c5:94: 88:f9:5f:6f:63:67:98:7d:d9:6b:db:3e:71:82:5b:71:79:f7: 57:3b:b0:4a:07:c9:8c:a0:61:02:5a:00:d8:94:e0:72:2d:01: 15:ed:e0:f8:79:21:4d:4e:85:a5:05:cb:7f:5a:76:de:11:6d: 7c:a5:4e:85:07:f7:08:ec:c2:b2:c8:66:88:a6:c6:c8:8e:27: 66:40:2c:49:f2:96:a5:b2:a2:e6:b3:7d:f1:bb:4d:b0:21:81: 18:0c:72:85:7c:28:ad:9f:95:16:24:3b:d7:5c:6f:2f:5c:d6: 45:2d:93:55:b9:7d:68:12:4d:3c:9c:d5:1e:bb:15:09:b6:80: dd:74:98:da -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIUJsvylC6wwrSCNvBPYEUfiEfu59kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMzMDAyNDI0MFoX DTI3MDMyOTAyNDc0MFowMzExMC8GA1UEAxMoOENDRkRDRkI0MTAxNEFBRUQ1RjEy RDNDRDhGQjJGNjk1RDQ0ODA1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALr8RoR3XS+Fettbt3eAuBputxtgjpoQVEaBSzht2DgfWiP9Tznrb+WISy6Q eN8P2oQClNxH+bRd0KkqH6KYSiyI6ceov2pq7nr2eOKNaxKGWJnybsnJ+lRFdUfr /esOSCTApeBp1dRjWvWklmNf8+/7HGL5pfla5+hNIe+rTfJKD1pSBWT9UrERNepF rMdy0cq6uGGk2R1mixMihppeTsNMYOA7wgDPlLI9/B/ghKMio+8atqXh3HG00txm AV4teHHlukcoIg2pDjN3U8XVgL8jqZ7ldYSzaHelrJS+H4rAOzl3cTJf176vWi2x phOzxJn3EK1jLXlSlxYyomBNowECAwEAAaOCAeUwggHhMB0GA1UdDgQWBBSMz9z7 QQFKrtXxLTzY+y9pXUSAUTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTAwMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMw EgQCAAEwDAMEAWeL9AMEAGe+ADANBAIAAjAHAwUAJAIS4DANBgkqhkiG9w0BAQsF AAOCAQEAAdiZDgUNaee79CrlhdA3HQA8VupS0xFORzeSAi+K9fO6hY4s0Biic3QC EXavRZR8v13zoJqmeqGi/P7N93srH9XylGvYKOsmY8uzPvvSOZaXzHobQqbUbv3L N3AQmxUVg6MlyrzlxZYrb7Pwy02dal9wVfj5sCl1AcLcY8WUiPlfb2NnmH3Za9s+ cYJbcXn3VzuwSgfJjKBhAloA2JTgci0BFe3g+HkhTU6FpQXLf1p23hFtfKVOhQf3 COzCsshmiKbGyI4nZkAsSfKWpbKi5rN98btNsCGBGAxyhXworZ+VFiQ711xvL1zW RS2TVbl9aBJNPJzVHrsVCbaA3XSY2g== -----END CERTIFICATE-----Generated at Fri Apr 17 10:55:10 2026 by rpki-client