$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151590.roa File: AS151590.roa (raw, json) Hash identifier: 8NnuJe+1BZnY745rfwtr/2mqV8pWfxZsM0AcnhxBpRI= Subject key identifier: 42:DE:4D:1D:80:08:46:56:91:E4:1A:76:50:6D:59:F6:AA:7D:13:95 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 409C8D46DD13C3092FED84C3EF9305DF2768308C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151590.roa Signing time: Fri 22 Aug 2025 09:00:00 +0000 ROA not before: Fri 22 Aug 2025 08:55:00 +0000 ROA not after: Fri 21 Aug 2026 09:00:00 +0000 asID: 151590 IP address blocks: 103.250.14.0/24 maxlen: 24 103.250.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:9c:8d:46:dd:13:c3:09:2f:ed:84:c3:ef:93:05:df:27:68:30:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 22 08:55:00 2025 GMT Not After : Aug 21 09:00:00 2026 GMT Subject: CN=42DE4D1D8008465691E41A76506D59F6AA7D1395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:7f:46:3a:39:6a:c2:e8:3c:e9:cc:03:68:c1: 8d:94:ef:47:ab:bf:32:c4:79:bf:21:3f:5f:d6:4e: 21:81:f9:a0:ec:18:3b:d8:d1:6f:80:b4:61:a4:8b: 44:ae:b3:29:45:4b:d2:8a:5e:d4:32:9f:9b:38:cc: fd:69:b7:f3:a7:1c:1d:04:6f:20:a9:82:b6:c6:ab: d7:c5:5a:fc:17:17:8e:1e:96:34:e7:d6:9d:42:cf: fd:c9:0e:1a:4f:9f:28:47:c1:94:42:0c:95:94:26: ef:59:4e:96:8c:63:b5:4c:11:22:6b:b2:cd:7d:26: 91:6d:48:69:1a:4a:26:13:ba:ab:31:7f:ae:85:c2: 9e:86:f7:ae:8b:1f:be:00:80:6e:18:94:f7:61:7a: e8:35:7a:d7:1f:68:00:1b:9d:5a:a7:c5:1a:07:20: 34:e4:ab:15:1f:e6:c0:26:9e:ce:b1:7c:4c:5d:b7: 02:de:98:62:65:18:4a:9c:4e:8c:1f:c4:cd:7d:37: 09:23:ec:ce:a9:fe:72:e9:c1:c4:4a:c6:30:8e:5d: 51:21:6b:f5:f8:20:50:86:19:50:83:5a:05:03:89: b8:b2:93:9a:52:e7:8d:c1:3a:4e:5a:47:bb:7a:8c: 2d:b7:ce:1e:67:20:ec:c4:4f:84:97:b6:de:82:87: 77:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DE:4D:1D:80:08:46:56:91:E4:1A:76:50:6D:59:F6:AA:7D:13:95 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151590.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.250.14.0/23 Signature Algorithm: sha256WithRSAEncryption 07:c6:85:0f:93:0d:1a:fd:c2:60:9a:46:ad:6f:d9:02:0a:62: 32:a9:4d:89:7f:76:75:5a:cd:c7:4d:02:f2:3a:9d:e2:f1:d8: 58:e6:f9:72:d0:78:1f:d8:0c:e1:60:09:96:4b:6e:7e:7f:03: 59:17:ad:0e:a8:7b:92:7f:af:ba:9f:60:43:44:d4:5c:27:ff: 91:78:09:37:98:87:b8:60:7c:da:2c:ca:6a:9b:91:d0:f0:b5: a9:fe:11:b4:b8:50:01:ac:bf:c8:ac:29:96:38:94:c8:82:47: cd:5e:92:b3:4c:8f:02:1c:3c:6a:12:c5:61:7c:e9:6f:9a:5a: f9:d9:a9:ab:6e:47:26:00:4a:42:36:1f:8a:6c:c5:69:db:6c: e3:d2:31:b1:01:62:71:be:d8:40:71:23:75:41:e3:5b:27:be: 80:7e:96:73:33:60:45:27:f9:71:ee:8b:73:4f:8f:47:82:69: 43:e3:30:da:e1:13:97:84:53:c8:b7:c5:e1:af:21:36:b2:b3: 9b:fe:4a:e4:d7:d6:a1:7f:ec:45:d2:e8:4f:5d:57:42:3f:46: f1:df:f2:08:dc:e7:5f:41:51:fe:ab:78:19:e9:64:55:c3:95: 37:19:94:0f:8f:a1:c5:e1:d1:9d:57:e0:07:dc:7d:f2:59:eb: 01:0b:01:c1 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUQJyNRt0Twwkv7YTD75MF3ydoMIwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgyMjA4NTUwMFoX DTI2MDgyMTA5MDAwMFowMzExMC8GA1UEAxMoNDJERTREMUQ4MDA4NDY1NjkxRTQx QTc2NTA2RDU5RjZBQTdEMTM5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPZ/Rjo5asLoPOnMA2jBjZTvR6u/MsR5vyE/X9ZOIYH5oOwYO9jRb4C0YaSL RK6zKUVL0ope1DKfmzjM/Wm386ccHQRvIKmCtsar18Va/BcXjh6WNOfWnULP/ckO Gk+fKEfBlEIMlZQm71lOloxjtUwRImuyzX0mkW1IaRpKJhO6qzF/roXCnob3rosf vgCAbhiU92F66DV61x9oABudWqfFGgcgNOSrFR/mwCaezrF8TF23At6YYmUYSpxO jB/EzX03CSPszqn+cunBxErGMI5dUSFr9fggUIYZUINaBQOJuLKTmlLnjcE6TlpH u3qMLbfOHmcg7MRPhJe23oKHd2kCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRC3k0d gAhGVpHkGnZQbVn2qn0TlTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTU5MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWf6DjANBgkqhkiG9w0BAQsFAAOCAQEAB8aFD5MNGv3CYJpGrW/Z AgpiMqlNiX92dVrNx00C8jqd4vHYWOb5ctB4H9gM4WAJlktufn8DWRetDqh7kn+v up9gQ0TUXCf/kXgJN5iHuGB82izKapuR0PC1qf4RtLhQAay/yKwpljiUyIJHzV6S s0yPAhw8ahLFYXzpb5pa+dmpq25HJgBKQjYfimzFadts49IxsQFicb7YQHEjdUHj Wye+gH6WczNgRSf5ce6Lc0+PR4JpQ+Mw2uETl4RTyLfF4a8hNrKzm/5K5NfWoX/s RdLoT11XQj9G8d/yCNznX0FR/qt4GelkVcOVNxmUD4+hxeHRnVfgB9x98lnrAQsB wQ== -----END CERTIFICATE-----Generated at Sat Aug 23 12:17:30 2025 by rpki-client