$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151522.roa File: AS151522.roa (raw, json) Hash identifier: R2QDI1JgJii2FlW9yYzbJGH+DetXPZ2MrHl+DDujJJM= Subject key identifier: 61:83:C1:80:97:55:CE:D8:A5:A1:ED:A4:8A:A4:13:0A:8E:D3:AB:4C Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3AC6EC81795648E24C3B99BF56FE1E8B330B7D41 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151522.roa Signing time: Fri 19 Sep 2025 04:00:00 +0000 ROA not before: Fri 19 Sep 2025 03:55:00 +0000 ROA not after: Fri 18 Sep 2026 04:00:00 +0000 asID: 151522 IP address blocks: 103.234.124.0/23 maxlen: 24 2001:df3:c40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c6:ec:81:79:56:48:e2:4c:3b:99:bf:56:fe:1e:8b:33:0b:7d:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 19 03:55:00 2025 GMT Not After : Sep 18 04:00:00 2026 GMT Subject: CN=6183C1809755CED8A5A1EDA48AA4130A8ED3AB4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:53:fd:02:69:30:17:47:91:32:89:8a:59:bd: c0:bc:fe:e8:df:22:4f:26:47:e0:6a:f3:63:ed:8e: 13:02:13:62:25:2c:cb:f2:d4:20:59:93:5f:58:ac: ef:a0:4d:f1:57:83:71:42:e3:26:01:b7:17:b2:3d: c3:7c:3b:02:9a:eb:f1:71:af:27:ab:29:1d:93:70: 0f:86:65:3f:9e:84:00:c4:62:6c:5f:d6:e7:0d:d6: 7d:93:ed:fb:59:14:c0:ba:81:f9:a9:76:fd:1e:a5: d1:c9:14:08:25:71:13:e5:3b:db:b0:be:d9:df:da: 7c:af:b5:cc:53:49:04:94:55:4d:7d:e3:13:67:1c: 28:ba:06:65:e2:17:06:7d:07:d4:a3:6a:5a:b4:6b: 0f:b7:4a:eb:ef:47:6d:e0:26:43:ce:1b:35:83:46: 84:d4:66:db:1d:63:ea:da:f4:75:f1:ea:bb:54:1c: e4:4d:0b:91:a9:0f:58:2e:08:5a:90:32:c4:2e:bb: 95:23:f8:3c:58:eb:84:fe:6d:25:c1:d1:93:1e:27: ae:b9:b1:99:88:28:79:e3:53:8e:51:5b:07:e0:c5: 86:0c:7b:02:d6:58:f6:9e:18:65:a6:87:4c:ab:47: a0:1c:12:7b:52:3b:d8:2a:68:52:00:63:15:4f:07: eb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:83:C1:80:97:55:CE:D8:A5:A1:ED:A4:8A:A4:13:0A:8E:D3:AB:4C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151522.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.234.124.0/23 IPv6: 2001:df3:c40::/48 Signature Algorithm: sha256WithRSAEncryption 09:94:15:99:a9:32:04:b0:9c:36:cd:0d:ed:8f:f8:92:7d:ae: 15:b4:9e:40:57:f2:14:0f:3c:70:76:2c:c2:ab:3f:1d:74:1a: da:a2:10:98:62:7f:fd:f2:6b:8f:a2:38:fa:f5:1f:a2:1c:d6: 27:94:56:1d:6a:5c:64:54:e7:20:13:2e:1d:99:95:6a:5d:92: 5f:d8:1d:50:38:0b:1f:67:c9:30:f2:24:54:92:19:b3:f6:13: 0c:2c:e8:4b:5d:d2:99:80:43:29:51:d0:4c:58:2c:57:df:65: cf:d1:75:d7:c8:49:87:0b:38:3e:14:70:03:f8:80:af:19:80: b5:6a:e5:57:46:e5:ea:ca:d8:1e:95:01:d0:60:9f:1c:69:86: 25:f6:1c:fc:9e:16:7c:41:4c:75:5d:cd:87:64:1e:bb:3c:c2: f1:c2:f5:9d:6c:70:ca:3f:04:01:c0:94:13:59:fd:bf:e9:a8: d8:4e:6d:b6:34:62:2c:82:53:a0:26:51:03:15:79:e5:91:e5: 77:c0:7f:ce:d6:e7:eb:ec:c7:cf:a9:df:56:80:5e:5b:49:08: d5:7a:8f:94:7b:6f:44:c4:e8:32:2f:01:78:7f:42:d4:c3:81: 6a:0f:49:99:0d:75:a6:00:8b:1e:96:81:11:98:52:09:a0:0c: 0a:29:c9:cb -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUOsbsgXlWSOJMO5m/Vv4eizMLfUEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkxOTAzNTUwMFoX DTI2MDkxODA0MDAwMFowMzExMC8GA1UEAxMoNjE4M0MxODA5NzU1Q0VEOEE1QTFF REE0OEFBNDEzMEE4RUQzQUI0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJhT/QJpMBdHkTKJilm9wLz+6N8iTyZH4GrzY+2OEwITYiUsy/LUIFmTX1is 76BN8VeDcULjJgG3F7I9w3w7Aprr8XGvJ6spHZNwD4ZlP56EAMRibF/W5w3WfZPt +1kUwLqB+al2/R6l0ckUCCVxE+U727C+2d/afK+1zFNJBJRVTX3jE2ccKLoGZeIX Bn0H1KNqWrRrD7dK6+9HbeAmQ84bNYNGhNRm2x1j6tr0dfHqu1Qc5E0LkakPWC4I WpAyxC67lSP4PFjrhP5tJcHRkx4nrrmxmYgoeeNTjlFbB+DFhgx7AtZY9p4YZaaH TKtHoBwSe1I72CpoUgBjFU8H61ECAwEAAaOCAeEwggHdMB0GA1UdDgQWBBRhg8GA l1XO2KWh7aSKpBMKjtOrTDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTUyMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAWfqfDAPBAIAAjAJAwcAIAEN8wxAMA0GCSqGSIb3DQEBCwUAA4IB AQAJlBWZqTIEsJw2zQ3tj/iSfa4VtJ5AV/IUDzxwdizCqz8ddBraohCYYn/98muP ojj69R+iHNYnlFYdalxkVOcgEy4dmZVqXZJf2B1QOAsfZ8kw8iRUkhmz9hMMLOhL XdKZgEMpUdBMWCxX32XP0XXXyEmHCzg+FHAD+ICvGYC1auVXRuXqytgelQHQYJ8c aYYl9hz8nhZ8QUx1Xc2HZB67PMLxwvWdbHDKPwQBwJQTWf2/6ajYTm22NGIsglOg JlEDFXnlkeV3wH/O1ufr7MfPqd9WgF5bSQjVeo+Ue29ExOgyLwF4f0LUw4FqD0mZ DXWmAIseloERmFIJoAwKKcnL -----END CERTIFICATE-----Generated at Tue Nov 4 01:57:20 2025 by rpki-client