$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151536.roa File: AS151536.roa (raw, json) Hash identifier: bYxKUXWuPpgHouPmU5JJANpSwqfbPI9HmoCxPbOWXZ0= Subject key identifier: 6D:F2:64:B9:D2:E4:91:2F:AA:8E:92:13:29:CF:8D:00:01:2B:4E:CA Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1F18B413B7D2C4423301C77121197B97BCF77227 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151536.roa Signing time: Thu 07 Aug 2025 05:00:00 +0000 ROA not before: Thu 07 Aug 2025 04:55:00 +0000 ROA not after: Thu 06 Aug 2026 05:00:00 +0000 asID: 151536 IP address blocks: 103.244.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:18:b4:13:b7:d2:c4:42:33:01:c7:71:21:19:7b:97:bc:f7:72:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 7 04:55:00 2025 GMT Not After : Aug 6 05:00:00 2026 GMT Subject: CN=6DF264B9D2E4912FAA8E921329CF8D00012B4ECA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6f:0a:6b:ed:c1:e1:1f:9c:70:78:60:8a:76: d1:f6:4c:e9:84:d0:02:a3:fe:96:5c:00:b4:a4:bb: 34:59:7e:fb:de:6e:62:af:ab:6c:f2:dd:1f:9c:c4: e6:85:92:63:7b:3e:45:1b:4e:3e:06:46:17:58:c3: 9a:a1:6b:1a:c4:5c:c5:15:34:72:03:b8:61:14:04: d6:91:24:c1:90:94:92:e4:b2:fb:a2:3d:8d:fd:b2: 98:b7:aa:f1:8d:16:35:f6:11:97:fd:3b:1b:bd:da: d2:0b:be:49:f8:0a:b5:b3:e9:fe:54:53:90:ee:9b: 36:5b:17:24:8c:82:c7:1f:a7:03:80:47:4f:3d:09: ca:c8:12:7c:51:6a:3b:d7:1f:45:9e:10:4f:f0:5d: fb:f5:d0:2d:ba:c9:8e:89:4d:64:91:3c:de:40:f6: 98:cc:7a:ff:e7:30:4f:57:2d:38:e7:9e:d4:b3:ab: 15:1f:3a:c3:c0:95:e6:10:7a:6b:93:47:7c:36:7d: 85:c2:78:df:1f:af:b5:74:3e:98:d4:5a:2b:7a:b8: ab:6b:2a:50:cb:23:e8:34:13:d2:6b:74:a9:44:3e: 19:d0:f0:8d:4a:4a:5a:f3:40:f9:ce:2a:2d:b9:8a: a3:ba:d1:99:94:bc:fd:1a:23:62:1f:ba:59:b9:be: e6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F2:64:B9:D2:E4:91:2F:AA:8E:92:13:29:CF:8D:00:01:2B:4E:CA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.244.23.0/24 Signature Algorithm: sha256WithRSAEncryption 23:1f:75:cc:b6:4f:52:8e:0e:b3:12:6a:f6:3d:33:de:3f:d7: 45:64:04:59:35:5a:07:82:55:4b:8b:88:a3:f4:fb:b0:b7:15: 23:50:df:5c:10:3f:cc:b0:f7:37:fc:46:65:27:0b:77:16:4c: 2c:8a:0a:ab:a2:6e:70:fd:9e:36:f1:25:be:89:ff:61:fb:fc: 97:36:58:ae:6d:76:b0:67:a6:3b:73:91:b8:85:64:2a:dd:8a: d9:c8:46:94:a4:80:88:4d:f4:12:1a:91:7c:9d:bc:9a:3d:ff: 92:ce:d6:f4:91:3d:3c:c7:f6:a4:d5:cd:ec:cb:b7:8d:c0:3f: 87:19:6c:6f:e3:c7:ad:27:fb:c8:51:9d:79:ad:19:2c:84:4e: f1:de:fa:fb:42:a2:03:63:86:c8:76:73:ba:20:d4:90:80:bb: 91:f2:cf:5b:e1:de:16:bb:fd:80:08:06:70:1b:a5:32:4c:74: c1:36:c0:65:33:e7:ad:97:7c:01:4b:5e:3b:45:fd:0a:37:b1: f9:3f:94:2b:53:e1:94:38:9b:6a:09:a8:b3:fd:34:0c:8a:56: 74:cb:6a:13:61:04:f8:68:bb:73:af:4c:22:9a:93:e7:de:f6: 63:23:1e:16:b0:e8:ce:40:46:00:3f:ae:a7:67:74:ff:63:74: 61:a8:23:0d -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUHxi0E7fSxEIzAcdxIRl7l7z3cicwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgwNzA0NTUwMFoX DTI2MDgwNjA1MDAwMFowMzExMC8GA1UEAxMoNkRGMjY0QjlEMkU0OTEyRkFBOEU5 MjEzMjlDRjhEMDAwMTJCNEVDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9vCmvtweEfnHB4YIp20fZM6YTQAqP+llwAtKS7NFl++95uYq+rbPLdH5zE 5oWSY3s+RRtOPgZGF1jDmqFrGsRcxRU0cgO4YRQE1pEkwZCUkuSy+6I9jf2ymLeq 8Y0WNfYRl/07G73a0gu+SfgKtbPp/lRTkO6bNlsXJIyCxx+nA4BHTz0JysgSfFFq O9cfRZ4QT/Bd+/XQLbrJjolNZJE83kD2mMx6/+cwT1ctOOee1LOrFR86w8CV5hB6 a5NHfDZ9hcJ43x+vtXQ+mNRaK3q4q2sqUMsj6DQT0mt0qUQ+GdDwjUpKWvNA+c4q LbmKo7rRmZS8/RojYh+6Wbm+5rsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRt8mS5 0uSRL6qOkhMpz40AAStOyjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTUzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGf0FzANBgkqhkiG9w0BAQsFAAOCAQEAIx91zLZPUo4OsxJq9j0z 3j/XRWQEWTVaB4JVS4uIo/T7sLcVI1DfXBA/zLD3N/xGZScLdxZMLIoKq6JucP2e NvElvon/Yfv8lzZYrm12sGemO3ORuIVkKt2K2chGlKSAiE30EhqRfJ28mj3/ks7W 9JE9PMf2pNXN7Mu3jcA/hxlsb+PHrSf7yFGdea0ZLIRO8d76+0KiA2OGyHZzuiDU kIC7kfLPW+HeFrv9gAgGcBulMkx0wTbAZTPnrZd8AUteO0X9Cjex+T+UK1PhlDib agmos/00DIpWdMtqE2EE+Gi7c69MIpqT5972YyMeFrDozkBGAD+up2d0/2N0Yagj DQ== -----END CERTIFICATE-----Generated at Mon Nov 3 19:33:12 2025 by rpki-client