$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151569.roa File: AS151569.roa (raw, json) Hash identifier: vWYJQWaJolHiAsBBpDOpBWszYl6c082LNBZ2di7th54= Subject key identifier: A3:69:88:8B:FE:43:43:CE:48:9D:2F:69:3D:50:B2:22:FA:B5:2F:C7 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6F79FC7986B674E3E1BD76EE3EA92AF246DE3EC1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151569.roa Signing time: Tue 19 Aug 2025 07:00:00 +0000 ROA not before: Tue 19 Aug 2025 06:55:00 +0000 ROA not after: Tue 18 Aug 2026 07:00:00 +0000 asID: 151569 IP address blocks: 103.38.110.0/23 maxlen: 24 2001:df3:2c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:79:fc:79:86:b6:74:e3:e1:bd:76:ee:3e:a9:2a:f2:46:de:3e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 19 06:55:00 2025 GMT Not After : Aug 18 07:00:00 2026 GMT Subject: CN=A369888BFE4343CE489D2F693D50B222FAB52FC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:68:05:b2:ae:a9:c7:ee:0b:1f:fe:e4:63:ad: b1:5e:2a:46:f4:dd:de:92:4f:ef:1c:ef:e8:7b:de: 69:27:a6:29:13:d5:9e:bb:b2:d0:63:bc:1b:77:2e: 39:b2:a1:9c:eb:2e:01:e6:29:6a:bf:8c:a8:c0:48: 4c:20:cd:1c:7e:6b:6d:51:f4:e1:9b:2b:65:96:d2: ea:54:a7:72:3f:12:6c:7e:27:f4:0f:a6:f0:ca:ce: 75:47:92:df:23:5e:2a:da:ab:67:f6:a0:f9:d4:2b: f6:5e:83:ae:85:23:d6:0b:a2:fe:8c:69:5c:80:98: fd:4c:cf:bf:0d:62:75:fb:a6:4d:59:ff:76:09:b3: 2d:1a:7b:00:bf:f7:06:8c:35:ee:82:9d:15:31:4b: b6:7c:49:b5:77:e0:af:e1:d2:4f:7b:a5:ca:e6:19: 13:cb:15:12:16:14:f6:06:b4:c8:c1:59:c7:77:bc: ef:5e:14:1c:e8:c5:b9:cf:4d:d6:84:9b:9e:ac:93: 7f:c7:9b:d1:e5:b4:b7:ee:63:e4:66:8a:ae:16:87: 39:67:7a:da:fc:e9:60:95:06:69:03:d2:82:6c:01: dd:56:c4:23:30:df:d3:5f:84:7a:55:9d:2a:e7:77: 32:fa:c9:40:c7:88:38:d8:9e:3c:ee:78:7e:cc:76: 01:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:69:88:8B:FE:43:43:CE:48:9D:2F:69:3D:50:B2:22:FA:B5:2F:C7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151569.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.38.110.0/23 IPv6: 2001:df3:2c0::/48 Signature Algorithm: sha256WithRSAEncryption 32:32:dd:73:bc:5a:d5:c3:a1:52:49:5f:56:8b:9f:0e:69:12: 69:26:b2:c8:f3:a1:7c:f4:69:17:f4:03:bf:5c:9c:87:42:e0: ab:30:83:f8:9e:22:2d:8b:e8:e0:63:7b:cc:81:24:87:3b:cc: 6e:bf:f1:d6:e1:78:a3:e9:fc:72:b2:96:11:00:33:aa:41:df: ee:11:4d:91:0d:71:2d:f3:28:0e:9e:0f:1c:f7:9e:f6:08:f8: 29:2e:b3:e0:22:ce:2f:c3:61:0c:c1:ac:ca:81:d3:57:36:71: ea:a8:ef:61:bb:c0:1d:3f:84:61:e3:28:ec:66:22:d3:0a:4c: ba:db:02:d3:ca:85:89:d2:f1:7d:6a:4e:3b:ee:00:09:22:e0: 2f:89:9a:a6:16:93:c8:21:31:8b:b3:70:e9:5d:e3:72:12:17: e2:35:92:66:9c:23:35:3d:68:0a:29:41:30:ce:9b:21:14:e4: 79:54:a2:4c:70:53:13:bd:e7:23:2f:8c:cf:9a:a9:7f:6d:84: 59:ba:61:97:32:8e:10:6e:c6:64:94:43:91:9a:9a:3e:76:64: 2b:32:e7:dc:9a:68:5a:1d:b0:72:71:b4:9e:c5:89:4d:d5:53: ef:b6:95:15:63:8b:d9:33:ba:b8:9b:dc:7c:90:d4:28:f5:c4: da:b3:86:84 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUb3n8eYa2dOPhvXbuPqkq8kbePsEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxOTA2NTUwMFoX DTI2MDgxODA3MDAwMFowMzExMC8GA1UEAxMoQTM2OTg4OEJGRTQzNDNDRTQ4OUQy RjY5M0Q1MEIyMjJGQUI1MkZDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9oBbKuqcfuCx/+5GOtsV4qRvTd3pJP7xzv6HveaSemKRPVnruy0GO8G3cu ObKhnOsuAeYpar+MqMBITCDNHH5rbVH04ZsrZZbS6lSncj8SbH4n9A+m8MrOdUeS 3yNeKtqrZ/ag+dQr9l6DroUj1gui/oxpXICY/UzPvw1idfumTVn/dgmzLRp7AL/3 Bow17oKdFTFLtnxJtXfgr+HST3ulyuYZE8sVEhYU9ga0yMFZx3e8714UHOjFuc9N 1oSbnqyTf8eb0eW0t+5j5GaKrhaHOWd62vzpYJUGaQPSgmwB3VbEIzDf01+EelWd Kud3MvrJQMeIONiePO54fsx2AdcCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBSjaYiL /kNDzkidL2k9ULIi+rUvxzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTU2OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAWcmbjAPBAIAAjAJAwcAIAEN8wLAMA0GCSqGSIb3DQEBCwUAA4IB AQAyMt1zvFrVw6FSSV9Wi58OaRJpJrLI86F89GkX9AO/XJyHQuCrMIP4niIti+jg Y3vMgSSHO8xuv/HW4Xij6fxyspYRADOqQd/uEU2RDXEt8ygOng8c9572CPgpLrPg Is4vw2EMwazKgdNXNnHqqO9hu8AdP4Rh4yjsZiLTCky62wLTyoWJ0vF9ak477gAJ IuAviZqmFpPIITGLs3DpXeNyEhfiNZJmnCM1PWgKKUEwzpshFOR5VKJMcFMTvecj L4zPmql/bYRZumGXMo4QbsZklEORmpo+dmQrMufcmmhaHbBycbSexYlN1VPvtpUV Y4vZM7q4m9x8kNQo9cTas4aE -----END CERTIFICATE-----Generated at Sat Aug 23 11:57:32 2025 by rpki-client