$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151592.roa File: AS151592.roa (raw, json) Hash identifier: RNTK3zIBSEcd3/EwvNr2snHKpOm8lIr4ohwKHHMCHnw= Subject key identifier: FC:90:A1:DC:A7:84:E3:44:F4:CA:DA:C4:11:D8:02:B0:EC:E1:56:4D Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 22C384BEC214554A014131CCB53F03FDF3BD75A2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151592.roa Signing time: Tue 15 Apr 2025 08:30:20 +0000 ROA not before: Tue 15 Apr 2025 08:25:20 +0000 ROA not after: Tue 14 Apr 2026 08:30:20 +0000 asID: 151592 IP address blocks: 163.223.104.0/24 maxlen: 24 2001:df3:240::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:c3:84:be:c2:14:55:4a:01:41:31:cc:b5:3f:03:fd:f3:bd:75:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 15 08:25:20 2025 GMT Not After : Apr 14 08:30:20 2026 GMT Subject: CN=FC90A1DCA784E344F4CADAC411D802B0ECE1564D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2f:f1:69:42:42:10:02:6b:22:0a:3d:c9:b1: 63:18:b9:70:6a:76:00:39:0c:f5:7c:41:d3:32:ea: 69:1e:db:c4:ff:a0:db:c3:6e:e3:b2:8e:9a:32:0b: 7b:5f:90:55:fd:81:ff:bc:e6:55:bd:cc:44:89:0d: f4:6a:d6:c1:b8:4f:42:c7:a0:e8:06:1b:34:0d:87: 20:2d:b0:5d:a4:96:01:27:e4:5f:af:52:5a:76:9e: 45:ae:69:50:94:fc:1a:6d:01:41:0c:e3:63:d1:f2: 2d:e0:fb:90:2e:58:9b:7d:ba:41:56:5f:85:95:e4: 0b:ab:a3:97:60:5a:6b:3d:2e:0b:1d:05:44:05:86: 75:0b:86:17:cf:1a:a6:f0:3a:0c:d3:05:4d:29:a2: 2c:8b:52:95:50:e0:18:02:7b:20:ed:19:e1:86:99: bc:26:96:f4:3a:e8:9d:a6:51:dd:e6:01:de:16:3b: 41:05:a7:c3:44:6b:8f:6f:a6:5d:b7:03:df:b2:ea: 97:5c:83:f3:3d:6d:f0:27:ae:d8:3c:c4:e5:94:5a: a3:4c:55:6b:5f:0e:b4:5b:53:76:36:d5:e4:d7:8d: 55:e1:c1:0b:02:d5:ee:ef:b7:25:0b:56:38:ca:23: ee:c1:d6:41:d6:1f:99:76:4e:b0:62:a4:9a:de:60: 43:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:90:A1:DC:A7:84:E3:44:F4:CA:DA:C4:11:D8:02:B0:EC:E1:56:4D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151592.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.223.104.0/24 IPv6: 2001:df3:240::/48 Signature Algorithm: sha256WithRSAEncryption 8e:cc:6f:f4:ef:aa:80:34:f0:32:cb:d7:2a:3f:e0:31:19:d7: 6a:51:b1:27:c1:e5:08:66:31:c6:1e:cd:99:9d:37:9d:1f:ce: f6:b8:d0:ef:9c:b1:4a:71:e5:9f:5e:92:8d:ae:36:e4:55:b3: 30:9e:4a:ab:8b:d5:6d:9a:6e:11:39:23:97:18:27:90:6a:91: 0d:4e:f6:6e:e7:42:64:e2:69:3a:f1:d7:60:18:62:a3:9f:d7: 92:db:4e:53:4e:13:a1:e1:09:96:e1:56:ad:13:ac:13:2b:ce: 28:ae:68:9d:79:ec:38:96:9d:1b:c3:75:b4:fa:43:d6:4c:96: 69:73:ce:29:e5:ee:2e:d2:eb:07:8e:aa:f2:65:03:c8:73:bb: 21:34:ad:48:9f:43:bc:79:36:9f:72:64:08:47:be:99:d8:d0: cb:f3:07:80:15:64:83:99:db:a3:e8:35:17:08:d4:71:0c:29: 53:7e:01:44:4e:ad:45:a5:32:b2:09:ca:ee:59:ab:53:19:56: 02:83:14:7b:d9:e2:d9:55:dc:52:97:02:2b:63:ac:50:77:5b: 56:ab:c3:d6:c1:94:36:14:91:86:fc:b6:b7:cc:5a:6b:6b:68: 74:c1:ee:a6:97:94:f1:b7:86:16:99:eb:13:c2:9f:4d:2c:d1: 60:d5:de:67 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUIsOEvsIUVUoBQTHMtT8D/fO9daIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQxNTA4MjUyMFoX DTI2MDQxNDA4MzAyMFowMzExMC8GA1UEAxMoRkM5MEExRENBNzg0RTM0NEY0Q0FE QUM0MTFEODAyQjBFQ0UxNTY0RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJQv8WlCQhACayIKPcmxYxi5cGp2ADkM9XxB0zLqaR7bxP+g28Nu47KOmjIL e1+QVf2B/7zmVb3MRIkN9GrWwbhPQseg6AYbNA2HIC2wXaSWASfkX69SWnaeRa5p UJT8Gm0BQQzjY9HyLeD7kC5Ym326QVZfhZXkC6ujl2Baaz0uCx0FRAWGdQuGF88a pvA6DNMFTSmiLItSlVDgGAJ7IO0Z4YaZvCaW9DronaZR3eYB3hY7QQWnw0Rrj2+m XbcD37Lql1yD8z1t8Ceu2DzE5ZRao0xVa18OtFtTdjbV5NeNVeHBCwLV7u+3JQtW OMoj7sHWQdYfmXZOsGKkmt5gQ+MCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBT8kKHc p4TjRPTK2sQR2AKw7OFWTTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTU5Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAKPfaDAPBAIAAjAJAwcAIAEN8wJAMA0GCSqGSIb3DQEBCwUAA4IB AQCOzG/076qANPAyy9cqP+AxGddqUbEnweUIZjHGHs2ZnTedH872uNDvnLFKceWf XpKNrjbkVbMwnkqri9Vtmm4ROSOXGCeQapENTvZu50Jk4mk68ddgGGKjn9eS205T ThOh4QmW4VatE6wTK84ormideew4lp0bw3W0+kPWTJZpc84p5e4u0usHjqryZQPI c7shNK1In0O8eTafcmQIR76Z2NDL8weAFWSDmduj6DUXCNRxDClTfgFETq1FpTKy CcruWatTGVYCgxR72eLZVdxSlwIrY6xQd1tWq8PWwZQ2FJGG/La3zFpra2h0we6m l5Txt4YWmesTwp9NLNFg1d5n -----END CERTIFICATE-----Generated at Mon Nov 3 19:33:10 2025 by rpki-client