$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS151506.roa File: AS151506.roa (raw, json) Hash identifier: pLd6aNqgVnGK8LhW6MT37185eHVMNQVOToyklztNdVM= Subject key identifier: 85:B0:0E:4E:B3:90:EA:C0:0F:5B:9D:22:63:21:E3:CD:B5:2B:E1:2A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5B9B28CFB638ECAC27B2B81F8A3F3A440C77DAB3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151506.roa Signing time: Sat 19 Sep 2026 00:35:57 +0000 ROA not before: Sat 19 Sep 2026 00:30:57 +0000 ROA not after: Sat 18 Sep 2027 00:35:57 +0000 asID: 151506 IP address blocks: 103.137.42.0/23 maxlen: 24 103.234.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:9b:28:cf:b6:38:ec:ac:27:b2:b8:1f:8a:3f:3a:44:0c:77:da:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 19 00:30:57 2026 GMT Not After : Sep 18 00:35:57 2027 GMT Subject: CN=85B00E4EB390EAC00F5B9D226321E3CDB52BE12A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cd:36:34:9f:de:d1:7a:ae:24:ea:ab:46:61: ba:60:03:44:2b:53:22:de:20:dc:53:59:81:32:35: a0:df:d0:c2:38:72:00:3e:b3:c9:eb:e6:ab:06:42: a7:54:33:47:42:8e:c6:70:5a:c7:53:d6:0e:49:d9: 11:78:9a:51:83:39:b8:f0:ab:9a:2a:4c:87:09:8f: 61:1a:56:a9:8d:0a:bd:7b:30:d9:d5:1a:83:07:07: d3:da:19:2e:ee:25:aa:46:68:2a:25:a3:58:0e:4d: 4e:d5:73:9a:2a:f8:ca:6b:6e:52:68:2e:c4:3a:ef: ff:71:39:51:9e:0a:7d:cf:27:ba:9d:01:6b:d4:8e: 7c:10:26:0a:2b:97:91:f1:50:7e:d2:78:b4:b2:06: 0b:dd:d0:18:09:59:83:1e:85:52:2c:3e:3b:cf:e3: 3a:d0:0e:78:7d:01:30:dc:55:50:0e:23:7d:64:a3: 5a:73:4e:dd:04:54:2d:40:52:57:ce:04:bd:b7:b9: df:2c:19:88:9a:cd:7b:74:32:f1:5f:96:25:eb:5e: d2:42:0f:36:f3:3e:78:5b:e4:91:a8:b1:25:f0:30: 74:6a:40:cc:d7:e0:97:4d:39:d8:23:57:7c:3b:b3: ce:37:34:83:ed:9c:11:69:32:d0:6a:f1:55:51:72: 97:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B0:0E:4E:B3:90:EA:C0:0F:5B:9D:22:63:21:E3:CD:B5:2B:E1:2A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS151506.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.137.42.0/23 103.234.18.0/23 Signature Algorithm: sha256WithRSAEncryption 56:3d:4e:f2:5e:67:14:53:bb:99:f4:b0:c8:1e:4a:e5:b8:67: e2:c8:bb:ad:a7:75:60:4b:45:d5:71:ca:3c:33:8d:d4:a1:12: 12:98:e6:c8:31:86:36:5c:f3:97:a2:ba:42:42:08:a3:69:7a: 06:81:4e:36:e1:33:5e:2b:fc:f2:5c:10:83:cf:f7:0f:50:ec: 90:7e:df:de:63:75:6a:ad:d6:80:4a:3e:c5:2d:12:33:5b:61: 6a:7e:eb:70:2f:7c:18:76:c3:60:54:63:ea:91:47:53:cb:ca: 62:05:4a:65:15:69:d7:2b:14:fa:76:c8:d2:f2:e3:ab:b0:9d: fb:e5:ef:97:a2:c5:64:36:b7:68:fa:82:da:b0:8a:13:b6:15: 87:27:de:7b:c5:72:b4:76:7b:a2:d6:9d:14:d7:da:0c:0b:3a: 08:ee:d8:df:3c:7a:d4:8a:bd:bd:e2:29:a2:5b:31:a7:44:d5: 57:41:f2:29:78:cf:02:83:aa:28:c5:ca:1b:3f:a2:b0:46:ca: 3f:c1:fa:99:4a:88:00:60:bf:c3:d0:1f:7e:cd:22:01:37:ae: d4:54:66:da:c6:9c:f9:79:a8:e4:68:bc:e3:27:68:81:a5:c7: b8:d6:49:a4:22:1e:c2:04:a3:11:bc:59:ce:ff:95:ca:e2:82: 43:60:b4:d3 -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUW5soz7Y47Kwnsrgfij86RAx32rMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkxOTAwMzA1N1oX DTI3MDkxODAwMzU1N1owMzExMC8GA1UEAxMoODVCMDBFNEVCMzkwRUFDMDBGNUI5 RDIyNjMyMUUzQ0RCNTJCRTEyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTNNjSf3tF6riTqq0ZhumADRCtTIt4g3FNZgTI1oN/QwjhyAD6zyevmqwZC p1QzR0KOxnBax1PWDknZEXiaUYM5uPCrmipMhwmPYRpWqY0KvXsw2dUagwcH09oZ Lu4lqkZoKiWjWA5NTtVzmir4ymtuUmguxDrv/3E5UZ4Kfc8nup0Ba9SOfBAmCiuX kfFQftJ4tLIGC93QGAlZgx6FUiw+O8/jOtAOeH0BMNxVUA4jfWSjWnNO3QRULUBS V84Evbe53ywZiJrNe3Qy8V+WJete0kIPNvM+eFvkkaixJfAwdGpAzNfgl0052CNX fDuzzjc0g+2cEWky0GrxVVFyl50CAwEAAaOCAdIwggHOMB0GA1UdDgQWBBSFsA5O s5DqwA9bnSJjIePNtSvhKjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUxNTA2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQBZ4kqAwQBZ+oSMA0GCSqGSIb3DQEBCwUAA4IBAQBWPU7yXmcUU7uZ9LDI HkrluGfiyLutp3VgS0XVcco8M43UoRISmObIMYY2XPOXorpCQgijaXoGgU424TNe K/zyXBCDz/cPUOyQft/eY3VqrdaASj7FLRIzW2FqfutwL3wYdsNgVGPqkUdTy8pi BUplFWnXKxT6dsjS8uOrsJ375e+XosVkNrdo+oLasIoTthWHJ957xXK0dnui1p0U 19oMCzoI7tjfPHrUir294imiWzGnRNVXQfIpeM8Cg6ooxcobP6KwRso/wfqZSogA YL/D0B9+zSIBN67UVGbaxpz5eajkaLzjJ2iBpce41kmkIh7CBKMRvFnO/5XK4oJD YLTT -----END CERTIFICATE-----Generated at Mon Sep 21 03:09:51 2026 by rpki-client