$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151580.roa File: AS151580.roa (raw, json) Hash identifier: C1/omyFAvbBTRX7lDen2gZ6ShoauTpNwtKYvaoa8qIk= Subject key identifier: D7:F5:C6:DE:92:27:B1:C1:91:E4:56:F8:BA:F4:D8:04:2E:7E:A8:11 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 059C5823CF331A6FA97B1ECE573AC9BF4E62FA96 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151580.roa Signing time: Thu 31 Jul 2025 09:00:00 +0000 ROA not before: Thu 31 Jul 2025 08:55:00 +0000 ROA not after: Thu 30 Jul 2026 09:00:00 +0000 asID: 151580 IP address blocks: 103.216.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:9c:58:23:cf:33:1a:6f:a9:7b:1e:ce:57:3a:c9:bf:4e:62:fa:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 08:55:00 2025 GMT Not After : Jul 30 09:00:00 2026 GMT Subject: CN=D7F5C6DE9227B1C191E456F8BAF4D8042E7EA811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e8:2f:d5:c2:10:b3:94:cc:6f:5f:bb:c7:8e: 00:6f:15:f0:39:3c:d4:83:0d:5e:02:9c:52:6c:e8: e8:97:43:6d:d5:c9:7e:71:01:9b:bc:77:b4:6a:93: 58:6e:2d:8e:bb:88:8e:0e:68:4f:47:e1:58:86:a8: 8b:2b:d4:1b:58:f8:00:ca:ac:75:37:ce:6c:d2:e7: da:40:52:93:5c:3b:d9:1a:9e:1d:d4:e5:88:45:18: ea:c6:c6:2d:85:d4:b1:0a:97:ee:2c:e9:02:db:73: 1d:80:8a:42:49:b7:ba:cf:09:bf:80:d0:9d:11:3b: 32:41:29:7c:c8:61:cc:2a:43:33:d7:17:a9:ca:41: af:87:ae:13:89:e9:f3:36:29:f7:2f:fa:09:3c:b4: 0d:c1:81:95:57:3a:7c:e4:30:23:ad:49:8a:99:10: 14:28:06:0f:75:c3:9a:80:b2:ac:38:3b:0a:25:60: ee:8d:34:df:b5:90:03:5a:30:6b:a1:00:9e:3e:1d: 98:a5:0b:12:ae:3d:bb:ab:b3:55:5d:5d:21:c0:65: fa:80:36:91:ec:05:b7:38:67:86:16:57:18:4c:ee: 6a:e4:c8:36:5c:21:1b:bb:0b:46:d1:f2:7a:33:2a: bd:5e:b2:2a:0d:c5:31:be:b1:bb:c3:3b:2b:1c:51: 6a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F5:C6:DE:92:27:B1:C1:91:E4:56:F8:BA:F4:D8:04:2E:7E:A8:11 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151580.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.216.105.0/24 Signature Algorithm: sha256WithRSAEncryption 81:04:44:25:05:12:99:27:b4:ee:5d:11:0d:9a:55:25:fc:b4: 0a:1d:ff:af:bd:e1:ab:2d:53:a7:63:ee:1c:00:5c:c4:ee:a4: 53:d2:ac:d2:56:3a:93:84:5a:34:de:e7:dd:12:f4:ff:eb:31: a7:69:e6:7d:da:c8:50:c0:9a:35:27:38:92:67:73:86:aa:e6: 90:5d:62:25:4e:9d:d0:75:cf:f7:60:9e:15:c0:4c:ff:38:e3: db:aa:0c:93:ca:e0:a0:11:c8:3c:e0:de:7b:53:ad:3f:3a:de: c3:24:93:8c:d7:d7:23:6b:f8:7d:c8:3e:f0:60:6f:97:8f:60: 0b:a5:8d:45:46:a9:35:7f:39:fc:4c:cb:75:2b:7a:75:c1:26: 33:bb:3a:38:19:f5:b6:4e:31:c3:e9:72:55:6f:01:3f:c8:ed: 32:01:dd:5e:25:70:e2:d1:da:73:ae:ac:26:93:95:27:7e:39: f6:9a:15:90:bf:ba:01:9b:55:c8:db:45:2d:d0:1a:51:88:f9: d1:0e:8f:38:de:71:28:8b:60:bf:91:34:3c:13:b3:ee:cb:68: 88:d1:76:9c:39:08:2b:c2:a0:b3:a1:95:28:91:3a:70:d3:62: 37:12:a5:3c:2c:1a:04:fe:50:ad:6b:db:51:83:2d:fa:9c:e8: e5:59:af:54 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUBZxYI88zGm+pex7OVzrJv05i+pYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDczMTA4NTUwMFoX DTI2MDczMDA5MDAwMFowMzExMC8GA1UEAxMoRDdGNUM2REU5MjI3QjFDMTkxRTQ1 NkY4QkFGNEQ4MDQyRTdFQTgxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK/oL9XCELOUzG9fu8eOAG8V8Dk81IMNXgKcUmzo6JdDbdXJfnEBm7x3tGqT WG4tjruIjg5oT0fhWIaoiyvUG1j4AMqsdTfObNLn2kBSk1w72RqeHdTliEUY6sbG LYXUsQqX7izpAttzHYCKQkm3us8Jv4DQnRE7MkEpfMhhzCpDM9cXqcpBr4euE4np 8zYp9y/6CTy0DcGBlVc6fOQwI61JipkQFCgGD3XDmoCyrDg7CiVg7o0037WQA1ow a6EAnj4dmKULEq49u6uzVV1dIcBl+oA2kewFtzhnhhZXGEzuauTINlwhG7sLRtHy ejMqvV6yKg3FMb6xu8M7KxxRagMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTX9cbe kiexwZHkVvi69NgELn6oETAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTU4MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfYaTANBgkqhkiG9w0BAQsFAAOCAQEAgQREJQUSmSe07l0RDZpV Jfy0Ch3/r73hqy1Tp2PuHABcxO6kU9Ks0lY6k4RaNN7n3RL0/+sxp2nmfdrIUMCa NSc4kmdzhqrmkF1iJU6d0HXP92CeFcBM/zjj26oMk8rgoBHIPODee1OtPzrewyST jNfXI2v4fcg+8GBvl49gC6WNRUapNX85/EzLdSt6dcEmM7s6OBn1tk4xw+lyVW8B P8jtMgHdXiVw4tHac66sJpOVJ3459poVkL+6AZtVyNtFLdAaUYj50Q6PON5xKItg v5E0PBOz7stoiNF2nDkIK8Kgs6GVKJE6cNNiNxKlPCwaBP5QrWvbUYMt+pzo5Vmv VA== -----END CERTIFICATE-----Generated at Wed Aug 6 10:01:24 2025 by rpki-client