$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151508.roa File: AS151508.roa (raw, json) Hash identifier: A+Gba0YkCHeEvNPHM1P07RWrcUF1Lw8iVD3PgCySU3Q= Subject key identifier: 5A:61:3A:85:F2:51:9C:0B:5C:1D:B4:45:40:72:C9:D7:D5:04:F9:DB Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 360D0E4CC7E5C6755EF70BC45E3D4768CD8EB9E0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151508.roa Signing time: Wed 02 Jul 2025 05:00:00 +0000 ROA not before: Wed 02 Jul 2025 04:55:00 +0000 ROA not after: Wed 01 Jul 2026 05:00:00 +0000 asID: 151508 IP address blocks: 103.232.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:0d:0e:4c:c7:e5:c6:75:5e:f7:0b:c4:5e:3d:47:68:cd:8e:b9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 2 04:55:00 2025 GMT Not After : Jul 1 05:00:00 2026 GMT Subject: CN=5A613A85F2519C0B5C1DB4454072C9D7D504F9DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6a:13:2f:f8:a0:05:34:53:3a:a1:de:b9:7f: b1:dc:d6:02:00:a3:8a:2c:d5:2b:8c:1e:98:44:9b: b6:c4:61:07:95:4f:47:68:ab:18:d6:29:50:f4:93: 3a:22:cf:e0:3d:27:2a:c5:8a:1f:16:3d:74:c3:2e: 53:ec:67:ea:fc:ac:72:10:65:36:ee:7d:e5:3a:0a: 8b:4d:e8:d4:1a:3a:ee:e6:a3:a4:48:18:9b:55:b1: 4a:2d:26:cc:9a:0f:51:59:75:90:d3:23:e2:98:89: 90:3d:d1:35:14:48:3e:d9:c2:c3:25:c4:f1:61:9a: fb:6c:9b:26:aa:f3:9b:6f:fd:6f:ce:99:1b:4f:75: cc:93:4e:ab:9d:34:d4:da:76:23:cd:42:ac:03:44: 5c:8b:63:75:02:3f:29:60:a4:7b:d8:14:2b:9c:19: 5e:e2:d6:57:4c:33:13:60:13:92:fe:1a:0b:9c:aa: de:c4:4c:c7:bd:f0:60:56:6e:56:2f:74:08:b9:2b: c9:64:94:cf:6d:e4:ab:40:50:9e:86:2f:c4:03:88: bb:5b:9b:4b:f7:c1:a6:05:33:aa:cf:20:ef:ed:e6: 93:3a:d4:6a:a1:36:0c:2b:59:7d:b6:34:e2:cc:39: 6a:35:d6:ba:76:35:dd:ba:a1:6d:ae:7a:49:83:0d: a6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:61:3A:85:F2:51:9C:0B:5C:1D:B4:45:40:72:C9:D7:D5:04:F9:DB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151508.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.232.20.0/23 Signature Algorithm: sha256WithRSAEncryption 29:d9:fb:4f:ce:e3:64:29:48:ca:20:38:18:09:5c:93:5c:91: 9e:de:55:c6:48:89:f2:2a:fd:a7:cf:58:91:f2:41:dd:42:86: 07:df:79:13:90:8c:50:55:99:38:b5:79:1a:d6:0c:ad:ff:dd: 83:a0:f7:86:58:56:dd:96:94:2d:2f:53:ca:37:00:79:cf:31: df:50:03:45:5d:49:f5:ef:84:a5:9d:ce:c8:84:b8:88:5d:da: 8a:95:70:5d:19:9d:2b:a0:d8:f0:6a:67:69:9d:4c:5b:cd:cd: 8c:3d:f0:13:fb:68:eb:3f:fe:2b:6e:84:84:36:4e:ba:26:9d: 68:f4:f0:76:5e:01:c0:8e:c2:b1:d5:8d:cc:96:ac:ea:f1:63: 4e:19:f0:3a:ca:09:46:20:4d:c7:85:fa:d3:10:68:d3:7e:e9: ad:a9:99:e8:d2:f9:06:2d:7d:c9:05:52:0e:b9:11:ce:87:6e: c2:68:10:c7:90:be:4a:9f:c8:fe:5d:41:23:a9:0e:4f:9d:7f: 58:8a:06:60:10:a1:27:8a:95:f5:80:a0:77:bb:e7:8b:c7:e9: bd:ae:a8:ee:24:5f:1c:c8:10:ac:44:7d:9b:c2:17:41:f9:a7: 5a:bc:c2:ce:97:c1:38:30:75:d7:ad:ce:f4:48:31:8a:1b:6b: 72:c7:8e:21 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUNg0OTMflxnVe9wvEXj1HaM2OueAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcwMjA0NTUwMFoX DTI2MDcwMTA1MDAwMFowMzExMC8GA1UEAxMoNUE2MTNBODVGMjUxOUMwQjVDMURC NDQ1NDA3MkM5RDdENTA0RjlEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO1qEy/4oAU0Uzqh3rl/sdzWAgCjiizVK4wemESbtsRhB5VPR2irGNYpUPST OiLP4D0nKsWKHxY9dMMuU+xn6vyschBlNu595ToKi03o1Bo67uajpEgYm1WxSi0m zJoPUVl1kNMj4piJkD3RNRRIPtnCwyXE8WGa+2ybJqrzm2/9b86ZG091zJNOq500 1Np2I81CrANEXItjdQI/KWCke9gUK5wZXuLWV0wzE2ATkv4aC5yq3sRMx73wYFZu Vi90CLkryWSUz23kq0BQnoYvxAOIu1ubS/fBpgUzqs8g7+3mkzrUaqE2DCtZfbY0 4sw5ajXWunY13bqhba56SYMNpn0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRaYTqF 8lGcC1wdtEVAcsnX1QT52zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTUwOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWfoFDANBgkqhkiG9w0BAQsFAAOCAQEAKdn7T87jZClIyiA4GAlc k1yRnt5VxkiJ8ir9p89YkfJB3UKGB995E5CMUFWZOLV5GtYMrf/dg6D3hlhW3ZaU LS9TyjcAec8x31ADRV1J9e+EpZ3OyIS4iF3aipVwXRmdK6DY8GpnaZ1MW83NjD3w E/to6z/+K26EhDZOuiadaPTwdl4BwI7CsdWNzJas6vFjThnwOsoJRiBNx4X60xBo 037pramZ6NL5Bi19yQVSDrkRzoduwmgQx5C+Sp/I/l1BI6kOT51/WIoGYBChJ4qV 9YCgd7vni8fpva6o7iRfHMgQrER9m8IXQfmnWrzCzpfBODB1163O9EgxihtrcseO IQ== -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:33 2025 by rpki-client