$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151544.roa File: AS151544.roa (raw, json) Hash identifier: a/vbjPsdqY9HZw/qCSxdxalYcApk4KwOo6xMYaLkS0Y= Subject key identifier: 5C:BC:7A:BA:B7:AA:D6:58:EE:52:87:A6:9C:9C:22:1C:F6:0C:BC:67 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 701D8FD46584AF4C7210B0E2AC31D2DEF6528E70 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151544.roa Signing time: Mon 21 Jul 2025 07:00:00 +0000 ROA not before: Mon 21 Jul 2025 06:55:00 +0000 ROA not after: Mon 20 Jul 2026 07:00:00 +0000 asID: 151544 IP address blocks: 103.245.159.0/24 maxlen: 24 2001:df2:f0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 13:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:1d:8f:d4:65:84:af:4c:72:10:b0:e2:ac:31:d2:de:f6:52:8e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 21 06:55:00 2025 GMT Not After : Jul 20 07:00:00 2026 GMT Subject: CN=5CBC7ABAB7AAD658EE5287A69C9C221CF60CBC67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ef:25:89:05:bf:ed:e6:23:ab:80:a4:b8:58: dd:37:bb:85:f5:ea:52:0b:d2:e4:1c:fe:1c:03:9a: 45:c3:dd:2b:91:6f:9d:37:3c:f6:91:c1:bd:9e:0b: ec:fc:25:37:10:79:61:59:10:de:ed:e3:4e:f2:79: f3:26:23:03:4a:9e:b2:da:5d:a9:14:a5:b1:57:af: 52:24:91:57:13:5a:70:aa:7d:2e:cd:d4:f6:4d:89: cd:1c:7f:e3:31:23:15:df:09:fc:6d:5e:9f:24:5f: 45:89:39:d6:81:41:41:c9:1e:35:ba:fc:23:d6:e0: 6c:7a:e6:3e:41:af:87:58:0d:76:ef:d4:73:88:d3: 71:e4:5a:67:44:d0:c3:32:61:d2:bd:3f:3d:15:4a: 89:64:28:be:5f:75:88:d1:5f:5a:98:01:e8:db:77: 3f:31:e8:81:a9:55:44:4c:a9:65:4e:c3:23:be:b0: 91:57:9a:b2:58:af:5a:d8:de:d6:3a:1c:6a:1e:4d: 51:ec:84:09:46:5c:75:f1:9b:b9:6c:aa:6f:25:da: bd:24:f0:5b:6f:22:7a:66:48:e7:83:7b:42:8b:0e: 44:66:ee:30:62:06:eb:74:8c:f2:aa:91:1c:d6:18: 05:5f:bf:cf:96:bc:d3:e1:80:d0:98:9d:cd:0e:8d: 6e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BC:7A:BA:B7:AA:D6:58:EE:52:87:A6:9C:9C:22:1C:F6:0C:BC:67 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151544.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.245.159.0/24 IPv6: 2001:df2:f0c0::/48 Signature Algorithm: sha256WithRSAEncryption 09:23:b7:54:c2:58:c2:d4:f5:cd:1e:10:87:7c:84:0a:48:87: 78:c6:56:3a:f5:8b:f4:52:48:34:38:73:12:c1:bb:17:e8:7a: 18:d8:b0:45:00:92:e3:0b:08:05:b5:56:1d:f9:8e:29:3e:d0: ea:7b:7e:c3:23:e7:12:82:57:3d:11:d9:d2:3e:ed:fb:dc:c9: e9:8d:73:fb:cf:b5:1e:24:47:db:45:90:61:40:8b:96:5f:e4: ef:41:cc:a3:a0:7b:9a:34:11:16:d3:59:17:52:d1:8f:15:05: b9:6c:20:9f:37:cf:fc:dc:69:72:cf:c9:97:64:94:45:e2:4d: 49:9e:f1:2b:a3:38:b7:d6:4b:ae:e5:cd:51:c6:2a:5c:2a:56: 2d:63:df:16:9c:0f:0c:14:39:7a:86:6b:ce:21:3f:68:ad:ac: 4e:75:f3:de:01:c8:b2:99:79:6a:82:b0:07:ca:ee:1e:65:04: 09:85:79:84:7f:31:26:1b:c3:aa:81:8f:79:08:a1:5e:9f:46: 01:9e:ed:3b:df:a2:05:00:94:37:b9:46:80:b3:7c:e3:e4:a5: 68:0a:db:5c:55:72:39:13:f6:4c:59:29:ce:0e:77:a3:fa:f5: 56:de:46:38:46:ae:1f:d6:00:0b:25:43:f9:76:25:52:e1:11: 9d:45:36:cf -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUcB2P1GWEr0xyELDirDHS3vZSjnAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcyMTA2NTUwMFoX DTI2MDcyMDA3MDAwMFowMzExMC8GA1UEAxMoNUNCQzdBQkFCN0FBRDY1OEVFNTI4 N0E2OUM5QzIyMUNGNjBDQkM2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3vJYkFv+3mI6uApLhY3Te7hfXqUgvS5Bz+HAOaRcPdK5FvnTc89pHBvZ4L 7PwlNxB5YVkQ3u3jTvJ58yYjA0qestpdqRSlsVevUiSRVxNacKp9Ls3U9k2JzRx/ 4zEjFd8J/G1enyRfRYk51oFBQckeNbr8I9bgbHrmPkGvh1gNdu/Uc4jTceRaZ0TQ wzJh0r0/PRVKiWQovl91iNFfWpgB6Nt3PzHogalVREypZU7DI76wkVeaslivWtje 1jocah5NUeyECUZcdfGbuWyqbyXavSTwW28iemZI54N7QosORGbuMGIG63SM8qqR HNYYBV+/z5a80+GA0JidzQ6Nbq8CAwEAAaOCAeEwggHdMB0GA1UdDgQWBBRcvHq6 t6rWWO5Sh6acnCIc9gy8ZzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTU0NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAGf1nzAPBAIAAjAJAwcAIAEN8vDAMA0GCSqGSIb3DQEBCwUAA4IB AQAJI7dUwljC1PXNHhCHfIQKSId4xlY69Yv0Ukg0OHMSwbsX6HoY2LBFAJLjCwgF tVYd+Y4pPtDqe37DI+cSglc9EdnSPu373MnpjXP7z7UeJEfbRZBhQIuWX+TvQcyj oHuaNBEW01kXUtGPFQW5bCCfN8/83Glyz8mXZJRF4k1JnvErozi31kuu5c1Rxipc KlYtY98WnA8MFDl6hmvOIT9oraxOdfPeAciymXlqgrAHyu4eZQQJhXmEfzEmG8Oq gY95CKFen0YBnu0736IFAJQ3uUaAs3zj5KVoCttcVXI5E/ZMWSnODnej+vVW3kY4 Rq4f1gALJUP5diVS4RGdRTbP -----END CERTIFICATE-----Generated at Wed Aug 6 03:58:11 2025 by rpki-client