$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS151043.roa File: AS151043.roa (raw, json) Hash identifier: 6MdV4Vh8tqsqCI8gAvFd2WI3bXQYmhig3772yh0xKpo= Subject key identifier: 6B:FE:B5:2F:58:FD:C6:1E:55:F4:9F:C7:C5:B0:22:46:8D:68:E5:7B Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 636F6BB6FF419FE164316BFFD37C68C61688F70B Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS151043.roa Signing time: Tue 10 Nov 2026 01:39:06 +0000 ROA not before: Tue 10 Nov 2026 01:34:06 +0000 ROA not after: Tue 09 Nov 2027 01:39:06 +0000 asID: 151043 IP address blocks: 160.236.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:6f:6b:b6:ff:41:9f:e1:64:31:6b:ff:d3:7c:68:c6:16:88:f7:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Nov 10 01:34:06 2026 GMT Not After : Nov 9 01:39:06 2027 GMT Subject: CN=6BFEB52F58FDC61E55F49FC7C5B022468D68E57B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8f:fd:50:91:4d:dd:59:94:f9:8b:a7:8f:42: f1:4a:99:fb:62:41:ca:1a:4e:d9:45:14:bc:b4:d3: ce:99:75:f5:af:1c:69:10:27:fc:31:cf:41:40:1f: 64:6f:93:e0:70:5d:10:0b:85:a5:43:43:b0:11:b7: 4b:85:0b:81:a4:39:4d:f1:77:ad:40:25:c1:77:23: 90:3b:fe:02:e7:e4:71:43:97:ba:e9:df:5e:a9:19: b6:f2:a8:22:39:de:c1:f8:96:1c:70:38:86:19:fe: 1e:f8:52:2e:68:9d:cd:fe:2f:bd:e1:69:da:61:a7: 8b:f1:b7:13:c8:c2:17:7c:93:97:d3:81:6b:37:bc: cf:e9:25:fb:22:d8:4a:4e:41:82:41:32:51:2b:b3: 49:62:a2:a9:a3:0d:11:16:2d:7c:79:b3:12:bc:da: 7c:04:c4:b4:29:83:fa:b0:1e:42:ad:21:30:d1:99: 38:f5:85:19:1c:61:ab:22:9a:75:19:59:c8:01:ce: b0:ae:c5:a4:6b:0a:04:29:2a:01:fc:e9:b6:83:03: 6d:1e:1e:be:7f:28:51:06:3b:45:05:d6:4e:b7:24: 2b:9b:16:70:f0:9f:03:01:82:a7:e6:9d:e9:b9:20: 00:51:e3:f5:8d:6b:b3:56:f3:b6:43:6b:fd:c7:75: 2d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FE:B5:2F:58:FD:C6:1E:55:F4:9F:C7:C5:B0:22:46:8D:68:E5:7B X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS151043.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.187.0/24 Signature Algorithm: sha256WithRSAEncryption 41:d7:bd:8d:f0:aa:b8:5e:a7:20:00:88:a6:3f:06:52:1a:c0: 75:b7:51:ec:c4:ac:71:ec:20:03:9c:49:64:45:cc:87:c9:20: be:42:6e:a6:a5:32:ae:c3:54:23:d3:65:ae:eb:22:9c:ba:21: 2c:c0:ac:ab:6e:62:81:d2:6f:1f:c9:ff:d4:1a:7f:dd:57:fc: 35:c1:c7:0c:32:ad:85:55:f5:55:5e:44:de:e7:7f:aa:0f:a0: 35:5e:7c:29:fc:7a:72:92:26:f1:e4:32:ea:fe:a9:d2:15:f6: fc:cd:70:a1:17:14:6a:5f:1e:e0:e3:5a:1f:c4:10:45:51:26: 4b:e5:8b:0a:0e:d9:4b:29:7c:a8:40:07:d5:80:35:66:d1:80: dc:f5:57:77:03:79:c2:c3:94:27:90:b0:08:1b:d2:8c:e1:48: ff:91:4b:5e:02:e5:15:46:21:13:67:98:64:e6:e1:a8:97:ba: 7b:32:95:ee:61:e6:42:3e:11:f7:60:a5:db:38:c7:f4:dd:81: 34:2f:e2:5c:6f:72:e5:22:db:a3:d3:1a:66:67:22:3b:cc:77: c6:b5:c5:32:af:e1:24:64:23:95:8c:fa:7e:f8:5e:e8:83:49: 07:a2:21:82:83:01:c5:f8:91:d2:c4:15:20:70:0f:53:9b:c2: 6d:f7:21:95 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUY29rtv9Bn+FkMWv/03xoxhaI9wswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MTExMDAxMzQwNloX DTI3MTEwOTAxMzkwNlowMzExMC8GA1UEAxMoNkJGRUI1MkY1OEZEQzYxRTU1RjQ5 RkM3QzVCMDIyNDY4RDY4RTU3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGP/VCRTd1ZlPmLp49C8UqZ+2JByhpO2UUUvLTTzpl19a8caRAn/DHPQUAf ZG+T4HBdEAuFpUNDsBG3S4ULgaQ5TfF3rUAlwXcjkDv+AufkcUOXuunfXqkZtvKo IjnewfiWHHA4hhn+HvhSLmidzf4vveFp2mGni/G3E8jCF3yTl9OBaze8z+kl+yLY Sk5BgkEyUSuzSWKiqaMNERYtfHmzErzafATEtCmD+rAeQq0hMNGZOPWFGRxhqyKa dRlZyAHOsK7FpGsKBCkqAfzptoMDbR4evn8oUQY7RQXWTrckK5sWcPCfAwGCp+ad 6bkgAFHj9Y1rs1bztkNr/cd1LfcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRr/rUv WP3GHlX0n8fFsCJGjWjlezAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUxMDQzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOy7MA0GCSqGSIb3DQEBCwUAA4IBAQBB172N8Kq4XqcgAIimPwZSGsB1 t1HsxKxx7CADnElkRcyHySC+Qm6mpTKuw1Qj02Wu6yKcuiEswKyrbmKB0m8fyf/U Gn/dV/w1wccMMq2FVfVVXkTe53+qD6A1Xnwp/Hpykibx5DLq/qnSFfb8zXChFxRq Xx7g41ofxBBFUSZL5YsKDtlLKXyoQAfVgDVm0YDc9Vd3A3nCw5QnkLAIG9KM4Uj/ kUteAuUVRiETZ5hk5uGol7p7MpXuYeZCPhH3YKXbOMf03YE0L+Jcb3LlItuj0xpm ZyI7zHfGtcUyr+EkZCOVjPp++F7og0kHoiGCgwHF+JHSxBUgcA9Tm8Jt9yGV -----END CERTIFICATE-----Generated at Sat Nov 14 22:05:14 2026 by rpki-client