$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151534.roa File: AS151534.roa (raw, json) Hash identifier: Gh2ZE0fSshLMkrJXm6dN3vzcZF9HoXvPi0VQnh2ST2g= Subject key identifier: 71:B2:87:2A:CC:0D:4D:3D:DA:3C:5F:C7:D3:64:A1:9C:7C:70:E7:49 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 36EDEDDA111EBF97D5D11DB6BDD34C39404C0540 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151534.roa Signing time: Mon 13 Apr 2026 02:44:34 +0000 ROA not before: Mon 13 Apr 2026 02:39:34 +0000 ROA not after: Mon 12 Apr 2027 02:44:34 +0000 asID: 151534 IP address blocks: 103.245.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 00:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ed:ed:da:11:1e:bf:97:d5:d1:1d:b6:bd:d3:4c:39:40:4c:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 13 02:39:34 2026 GMT Not After : Apr 12 02:44:34 2027 GMT Subject: CN=71B2872ACC0D4D3DDA3C5FC7D364A19C7C70E749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d7:45:0a:d9:30:e2:c0:2d:46:8e:f8:4b:43: f9:e3:f5:a7:0e:e2:01:17:bc:da:71:52:da:90:b4: 9e:c8:b4:53:56:8a:5a:cf:77:29:b9:de:2f:7f:11: c9:35:53:41:b6:e4:12:d9:8e:37:e8:e9:f9:7a:23: 0e:92:08:20:9f:00:66:5d:66:be:1e:1d:e5:4c:45: 0d:ca:3b:51:78:ac:be:77:5f:35:36:a7:4d:89:99: e3:c7:cd:dc:05:1a:b5:b2:9b:f3:4a:7c:b5:fa:3e: 88:a1:33:8c:87:51:92:5c:e7:ab:70:40:c6:d1:b3: 17:25:31:9f:7a:0c:a1:d7:89:57:e8:4f:72:65:80: 85:bc:cd:b0:e9:f6:7e:0f:d7:77:d2:e1:0e:da:53: 2e:07:8b:ef:b9:16:39:b2:df:22:1c:ca:78:75:cf: 23:a0:ed:84:01:1d:6d:f8:db:05:c1:6f:bc:4e:52: da:84:a1:24:b0:d2:97:9b:bd:d3:47:d9:ec:63:4d: 99:f8:fd:80:01:3b:c5:8d:71:e1:05:c0:37:2d:3b: f1:6d:45:b8:56:2a:d3:aa:c5:0f:ef:bb:6e:4b:f6: 9c:83:17:e6:7e:b8:35:ab:ec:f1:2e:38:f1:5d:cc: f8:13:ee:a5:7f:ca:9c:f4:01:5a:80:71:ff:6e:75: 38:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B2:87:2A:CC:0D:4D:3D:DA:3C:5F:C7:D3:64:A1:9C:7C:70:E7:49 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.245.58.0/23 Signature Algorithm: sha256WithRSAEncryption 11:94:12:94:55:0f:64:02:8a:be:d1:d3:48:86:12:55:f9:75: 40:c1:4f:14:31:84:c0:31:e6:c2:13:8c:53:43:68:ce:88:cc: 32:3e:31:ce:98:a4:69:11:f3:aa:1c:82:c0:92:ed:e5:92:c9: 92:cc:88:ed:66:e6:88:0e:52:20:e5:0d:5a:ca:9c:6e:94:9f: f5:5f:a1:c8:f3:f7:80:eb:93:1a:8b:40:ce:a9:6e:0c:56:11: 41:2b:63:03:ec:72:2b:a5:46:9d:26:7f:82:12:11:2e:d7:c3: 72:81:4e:db:18:3b:9e:8a:f0:66:e3:e4:43:41:f1:aa:5e:12: d7:32:6e:84:c1:49:34:fc:17:b0:20:06:c5:39:3a:01:28:f2: 9f:89:67:3e:db:ad:86:50:79:88:4d:d3:d6:e8:db:b1:55:ae: 43:3f:fc:dc:f4:6c:73:90:fa:91:c6:40:2c:74:63:4f:03:87: 2f:e4:b2:52:2e:a3:6c:37:79:dc:a6:57:f8:1f:da:1e:b2:cc: 86:ad:84:fd:9f:a8:62:fd:62:ae:a0:52:9b:32:7f:39:32:56: e8:11:e3:e5:ed:a6:9b:d9:03:e8:68:54:24:81:24:ff:81:9f: 73:90:a8:c4:b0:09:78:99:b1:08:6d:40:8f:21:b2:bf:a7:8d: a0:44:14:34 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUNu3t2hEev5fV0R22vdNMOUBMBUAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQxMzAyMzkzNFoX DTI3MDQxMjAyNDQzNFowMzExMC8GA1UEAxMoNzFCMjg3MkFDQzBENEQzRERBM0M1 RkM3RDM2NEExOUM3QzcwRTc0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPXRQrZMOLALUaO+EtD+eP1pw7iARe82nFS2pC0nsi0U1aKWs93KbneL38R yTVTQbbkEtmON+jp+XojDpIIIJ8AZl1mvh4d5UxFDco7UXisvndfNTanTYmZ48fN 3AUatbKb80p8tfo+iKEzjIdRklznq3BAxtGzFyUxn3oModeJV+hPcmWAhbzNsOn2 fg/Xd9LhDtpTLgeL77kWObLfIhzKeHXPI6DthAEdbfjbBcFvvE5S2oShJLDSl5u9 00fZ7GNNmfj9gAE7xY1x4QXANy078W1FuFYq06rFD++7bkv2nIMX5n64Navs8S44 8V3M+BPupX/KnPQBWoBx/251OF8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRxsocq zA1NPdo8X8fTZKGcfHDnSTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTUzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWf1OjANBgkqhkiG9w0BAQsFAAOCAQEAEZQSlFUPZAKKvtHTSIYS Vfl1QMFPFDGEwDHmwhOMU0NozojMMj4xzpikaRHzqhyCwJLt5ZLJksyI7WbmiA5S IOUNWsqcbpSf9V+hyPP3gOuTGotAzqluDFYRQStjA+xyK6VGnSZ/ghIRLtfDcoFO 2xg7norwZuPkQ0Hxql4S1zJuhMFJNPwXsCAGxTk6ASjyn4lnPtuthlB5iE3T1ujb sVWuQz/83PRsc5D6kcZALHRjTwOHL+SyUi6jbDd53KZX+B/aHrLMhq2E/Z+oYv1i rqBSmzJ/OTJW6BHj5e2mm9kD6GhUJIEk/4Gfc5CoxLAJeJmxCG1AjyGyv6eNoEQU NA== -----END CERTIFICATE-----Generated at Fri Apr 17 16:02:50 2026 by rpki-client