$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151545.roa File: AS151545.roa (raw, json) Hash identifier: 4tQlHMsjJkgjDXmzCjEUgZP15bkwNYK+d2aYFqynmmM= Subject key identifier: 00:07:69:1D:05:17:34:CE:5B:E4:E7:36:4F:81:26:E4:D8:02:E1:17 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 78A9D7A65ABF90F1874E36EF9D7F3C8AEDAFAEF3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151545.roa Signing time: Fri 15 Aug 2025 03:00:00 +0000 ROA not before: Fri 15 Aug 2025 02:55:00 +0000 ROA not after: Fri 14 Aug 2026 03:00:00 +0000 asID: 151545 IP address blocks: 103.236.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:a9:d7:a6:5a:bf:90:f1:87:4e:36:ef:9d:7f:3c:8a:ed:af:ae:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 15 02:55:00 2025 GMT Not After : Aug 14 03:00:00 2026 GMT Subject: CN=0007691D051734CE5BE4E7364F8126E4D802E117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fe:1a:37:8c:5f:13:12:e8:c9:52:31:35:63: 31:a8:cf:12:38:66:59:eb:70:d9:8a:2b:bc:b1:eb: 49:10:0a:1f:60:c3:b9:ae:5f:b2:b1:cb:82:05:3c: 2e:a1:d0:a5:b6:e8:05:6d:99:5e:d4:63:85:a4:af: 55:cf:84:28:3c:12:2c:65:83:70:12:f2:b5:82:14: 4d:60:59:ab:d4:6c:01:c3:60:24:66:98:06:93:a3: 5e:35:53:a9:64:1d:26:1c:ed:66:e2:5f:09:85:83: b4:5e:8d:ce:2b:7e:66:04:09:35:9b:f2:d0:e5:5a: 30:20:88:ee:a4:95:2c:14:0a:6e:a7:69:dc:4f:18: 94:3a:b5:cf:bc:dc:f5:3e:6e:8f:ea:e8:f1:02:c7: 10:77:ca:28:6e:14:84:fb:be:51:5e:06:6b:69:00: 38:a1:f6:99:00:35:96:f8:7f:7f:a8:a1:1f:77:f8: 11:75:6d:65:ca:4b:61:4a:8f:78:59:13:76:30:65: 8b:5d:9b:01:08:02:ee:1e:e6:d0:77:0a:f1:71:27: 57:9a:f0:27:66:8c:35:72:7d:24:5f:22:04:14:18: af:ab:2c:88:bb:82:18:8c:0f:22:d2:e0:33:db:5a: 2e:dd:f9:27:56:49:19:5a:12:60:61:31:b6:48:7a: 3d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:07:69:1D:05:17:34:CE:5B:E4:E7:36:4F:81:26:E4:D8:02:E1:17 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151545.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.130.0/23 Signature Algorithm: sha256WithRSAEncryption 12:4b:37:9c:86:ab:ab:7c:3f:36:0a:07:79:78:9c:c2:c2:6b: 44:10:f0:5d:c1:c4:a8:60:4b:1f:5b:9d:65:ed:6d:ec:a5:83: 2d:88:7d:31:c9:06:3f:38:b4:e1:95:f8:3f:1d:92:db:f0:fb: a0:83:88:16:db:b0:5d:7c:57:dc:9e:e0:65:9e:46:72:55:3e: 47:d6:0d:c0:49:fe:2b:4f:5b:88:e2:a2:d7:f1:bf:f9:6f:3b: 86:a3:af:07:05:1f:1d:de:45:a7:d1:fd:05:93:2c:80:a0:b8: 19:78:3b:fe:5d:f0:d4:1f:66:ce:82:5a:87:07:eb:9e:2b:8d: a0:9c:7c:2d:96:91:4d:85:96:15:4e:ff:1e:bb:ec:85:d6:c9: e8:69:72:bc:bf:3a:fc:3f:ba:a4:e3:1d:6a:07:dc:85:dc:68: ba:3a:32:35:df:31:5d:7b:e6:bb:c9:4a:0a:ce:e2:52:59:57: c0:25:b8:2e:7b:89:48:59:3f:fc:80:a7:2d:79:a5:23:cc:80: 3f:13:5e:4c:0e:8f:6a:25:b3:bc:eb:7c:7d:2a:ac:6b:02:7d: b7:5f:3a:a2:91:5e:95:35:d2:48:c1:d0:36:8e:53:f3:83:fd: 89:6b:7b:cf:89:5a:ec:28:85:9f:9a:e4:a5:9f:23:2c:75:ac: e1:fa:9e:77 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUeKnXplq/kPGHTjbvnX88iu2vrvMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxNTAyNTUwMFoX DTI2MDgxNDAzMDAwMFowMzExMC8GA1UEAxMoMDAwNzY5MUQwNTE3MzRDRTVCRTRF NzM2NEY4MTI2RTREODAyRTExNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJj+GjeMXxMS6MlSMTVjMajPEjhmWetw2YorvLHrSRAKH2DDua5fsrHLggU8 LqHQpbboBW2ZXtRjhaSvVc+EKDwSLGWDcBLytYIUTWBZq9RsAcNgJGaYBpOjXjVT qWQdJhztZuJfCYWDtF6Nzit+ZgQJNZvy0OVaMCCI7qSVLBQKbqdp3E8YlDq1z7zc 9T5uj+ro8QLHEHfKKG4UhPu+UV4Ga2kAOKH2mQA1lvh/f6ihH3f4EXVtZcpLYUqP eFkTdjBli12bAQgC7h7m0HcK8XEnV5rwJ2aMNXJ9JF8iBBQYr6ssiLuCGIwPItLg M9taLt35J1ZJGVoSYGExtkh6PUUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQAB2kd BRc0zlvk5zZPgSbk2ALhFzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTU0NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWfsgjANBgkqhkiG9w0BAQsFAAOCAQEAEks3nIarq3w/NgoHeXic wsJrRBDwXcHEqGBLH1udZe1t7KWDLYh9MckGPzi04ZX4Px2S2/D7oIOIFtuwXXxX 3J7gZZ5GclU+R9YNwEn+K09biOKi1/G/+W87hqOvBwUfHd5Fp9H9BZMsgKC4GXg7 /l3w1B9mzoJahwfrniuNoJx8LZaRTYWWFU7/HrvshdbJ6GlyvL86/D+6pOMdagfc hdxoujoyNd8xXXvmu8lKCs7iUllXwCW4LnuJSFk//ICnLXmlI8yAPxNeTA6PaiWz vOt8fSqsawJ9t186opFelTXSSMHQNo5T84P9iWt7z4la7CiFn5rkpZ8jLHWs4fqe dw== -----END CERTIFICATE-----Generated at Sat Aug 23 12:04:20 2025 by rpki-client