$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151509.roa File: AS151509.roa (raw, json) Hash identifier: 9L0qO66VX857EaAtUVO1a3bVBj+J8B5afQch+3kumu0= Subject key identifier: 50:9A:66:8E:0A:C2:9D:E2:20:B0:22:F3:60:5C:50:0F:9E:9E:AE:3A Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 113A0C8F3E2C1F5CBF42F5F3F5669960A404C03A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151509.roa Signing time: Tue 10 Jun 2025 06:00:00 +0000 ROA not before: Tue 10 Jun 2025 05:55:00 +0000 ROA not after: Tue 09 Jun 2026 06:00:00 +0000 asID: 151509 IP address blocks: 103.217.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:3a:0c:8f:3e:2c:1f:5c:bf:42:f5:f3:f5:66:99:60:a4:04:c0:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 10 05:55:00 2025 GMT Not After : Jun 9 06:00:00 2026 GMT Subject: CN=509A668E0AC29DE220B022F3605C500F9E9EAE3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:49:3b:b4:be:35:c6:04:87:e6:50:7a:c7:4c: 37:c6:4b:24:c5:38:b6:79:1e:48:a3:9a:b1:96:90: 07:f5:a7:b7:aa:08:ab:6c:45:30:bc:b6:c2:2e:5d: 4f:2f:06:0e:84:36:cb:41:41:4a:05:19:0c:9e:94: 5d:55:15:2e:70:67:18:25:3a:cc:b6:90:56:a6:68: c5:ba:9b:de:f2:ed:a0:80:4c:a8:c8:8e:25:8e:4d: 3b:d2:cc:a3:95:da:a6:02:70:7c:46:0c:33:92:aa: c0:40:23:39:0f:20:5a:fd:a8:36:91:87:a3:1d:2f: ef:4d:b6:a1:ee:c5:63:b6:48:5f:61:97:42:63:eb: 31:e9:30:86:31:78:85:c3:c7:f0:b4:43:80:cf:e5: 3d:36:e1:3e:38:5d:eb:7e:74:8f:94:7f:83:3d:d1: 07:69:f2:8f:16:32:0d:31:ba:c0:73:9a:51:1f:3b: da:5c:af:59:3b:ea:b3:34:87:68:de:b3:e0:64:74: 37:6e:9a:20:8e:ee:ef:e3:65:83:67:57:f5:ed:45: b6:dd:94:4b:fc:1a:53:99:5f:c9:93:e6:00:73:1c: 6b:a5:e8:23:04:ff:30:2a:d1:37:61:60:f0:e5:22: 56:f6:57:67:84:b8:42:62:c4:71:32:55:ff:ab:b8: cd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9A:66:8E:0A:C2:9D:E2:20:B0:22:F3:60:5C:50:0F:9E:9E:AE:3A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.217.225.0/24 Signature Algorithm: sha256WithRSAEncryption 55:39:4b:78:5b:6a:76:e4:a6:a1:69:96:48:50:0f:9d:b8:00: 3d:a1:cb:07:bf:28:6b:b8:2b:17:ec:03:08:59:08:89:df:db: 72:03:e0:38:6d:79:43:91:7c:0e:0c:ce:b0:cf:4d:6e:a1:3c: 9f:f6:c9:f6:9c:bf:d2:a9:b0:6d:ab:af:a3:ed:d3:c9:05:96: 37:a9:77:11:8a:b8:e2:61:00:14:8b:e8:7b:f3:a1:88:db:a6: 3f:de:d6:88:2d:ef:63:c0:50:d3:6a:34:95:87:d3:96:42:76: 2a:7d:3b:a7:7b:81:34:b3:10:2b:37:e1:d4:a3:9b:82:b2:62: 5a:5d:a2:ac:04:a5:4f:7b:6e:a5:df:22:3c:22:06:c3:dc:79: 3a:87:71:33:e4:2e:90:30:d3:5d:af:18:a5:de:91:85:85:dc: 0f:d0:32:cd:0d:47:92:e0:58:ad:f2:ea:7b:a2:6c:3c:6b:51: e2:ed:4e:a5:2b:5c:a3:6f:ae:55:0f:c5:01:a2:7e:c7:fe:3a: fe:ee:7d:c4:9b:d6:04:19:61:4d:80:52:4b:ae:b3:29:45:9f: 19:4b:05:54:b1:36:a2:83:dd:4b:a0:d4:0d:85:4f:b2:43:9b: 4b:68:13:22:c2:17:15:b4:24:9e:b2:c2:24:86:e2:96:71:d2: e5:13:d6:79 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUEToMjz4sH1y/QvXz9WaZYKQEwDowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYxMDA1NTUwMFoX DTI2MDYwOTA2MDAwMFowMzExMC8GA1UEAxMoNTA5QTY2OEUwQUMyOURFMjIwQjAy MkYzNjA1QzUwMEY5RTlFQUUzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMBJO7S+NcYEh+ZQesdMN8ZLJMU4tnkeSKOasZaQB/Wnt6oIq2xFMLy2wi5d Ty8GDoQ2y0FBSgUZDJ6UXVUVLnBnGCU6zLaQVqZoxbqb3vLtoIBMqMiOJY5NO9LM o5XapgJwfEYMM5KqwEAjOQ8gWv2oNpGHox0v7022oe7FY7ZIX2GXQmPrMekwhjF4 hcPH8LRDgM/lPTbhPjhd6350j5R/gz3RB2nyjxYyDTG6wHOaUR872lyvWTvqszSH aN6z4GR0N26aII7u7+Nlg2dX9e1Ftt2US/waU5lfyZPmAHMca6XoIwT/MCrRN2Fg 8OUiVvZXZ4S4QmLEcTJV/6u4zbECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRQmmaO CsKd4iCwIvNgXFAPnp6uOjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTUwOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfZ4TANBgkqhkiG9w0BAQsFAAOCAQEAVTlLeFtqduSmoWmWSFAP nbgAPaHLB78oa7grF+wDCFkIid/bcgPgOG15Q5F8DgzOsM9NbqE8n/bJ9py/0qmw bauvo+3TyQWWN6l3EYq44mEAFIvoe/OhiNumP97WiC3vY8BQ02o0lYfTlkJ2Kn07 p3uBNLMQKzfh1KObgrJiWl2irASlT3tupd8iPCIGw9x5OodxM+QukDDTXa8Ypd6R hYXcD9AyzQ1HkuBYrfLqe6JsPGtR4u1OpStco2+uVQ/FAaJ+x/46/u59xJvWBBlh TYBSS66zKUWfGUsFVLE2ooPdS6DUDYVPskObS2gTIsIXFbQknrLCJIbilnHS5RPW eQ== -----END CERTIFICATE-----Generated at Sun Jun 15 13:31:52 2025 by rpki-client