
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS151198.roa
File: AS151198.roa (raw, json)
Hash identifier: vZl+9RxsH/ADrWXKk/tvBBTBSjakMpMC1vKSRBGu4d4=
Subject key identifier: 4D:51:5E:0E:84:5B:DB:A7:DD:82:9D:31:36:EA:30:50:3E:B8:0A:A7
Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Certificate serial: 75A3A1EAB07A7CC8599AB1965D2D20301C1101A2
Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS151198.roa
Signing time: Tue 23 Jun 2026 02:17:30 +0000
ROA not before: Tue 23 Jun 2026 02:12:30 +0000
ROA not after: Tue 22 Jun 2027 02:17:30 +0000
asID: 151198
IP address blocks: 162.4.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 22:31:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:a3:a1:ea:b0:7a:7c:c8:59:9a:b1:96:5d:2d:20:30:1c:11:01:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Validity
Not Before: Jun 23 02:12:30 2026 GMT
Not After : Jun 22 02:17:30 2027 GMT
Subject: CN=4D515E0E845BDBA7DD829D3136EA30503EB80AA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:29:10:8d:ef:71:46:5e:7f:66:a2:e7:68:30:
77:33:89:fa:de:07:ad:09:ce:76:04:c1:0f:bb:44:
db:58:4c:c8:c0:20:63:7e:12:34:9e:c1:f1:3f:69:
3e:05:1f:fc:23:84:2b:61:f5:12:66:9a:d9:ce:ba:
32:87:82:0c:36:1b:15:8c:75:6c:3d:44:b0:f7:85:
c0:24:cb:3f:4f:a3:98:dd:e2:bc:0e:07:f2:40:8d:
b9:08:19:20:4a:d6:06:50:20:14:4e:dc:e7:8e:7a:
72:5e:38:b1:8e:45:ec:9b:d0:04:d1:b9:5c:28:82:
c8:c5:cc:62:75:8f:19:61:bb:ff:09:a6:d6:69:93:
4d:9f:1b:42:0a:93:80:1c:d3:6c:51:78:75:cc:8e:
7a:4f:86:dc:6a:26:c0:73:82:e7:06:96:38:75:fb:
17:08:ed:e3:24:b0:0b:50:75:7c:ca:c6:dc:5a:6c:
1e:25:67:b7:e2:43:63:d4:35:65:c1:ce:29:9d:6b:
bc:57:56:a3:ab:2a:b9:4e:46:f9:26:ee:ec:3c:82:
9d:b0:df:3c:54:eb:66:89:c6:e4:2e:d2:d4:6f:80:
17:71:da:6a:fa:68:79:2e:24:86:f5:f9:f2:50:ed:
34:28:0f:60:07:53:9b:f4:39:8d:ec:22:96:f8:65:
c8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:51:5E:0E:84:5B:DB:A7:DD:82:9D:31:36:EA:30:50:3E:B8:0A:A7
X509v3 Authority Key Identifier:
keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS151198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.4.219.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:86:df:1c:01:80:f7:01:0f:d1:1a:51:32:15:70:b2:40:83:
a2:e6:4b:f5:94:20:01:5c:1f:9b:99:7b:93:52:04:af:a5:75:
9d:38:e9:b8:c2:e3:f1:25:93:5e:93:b7:aa:05:80:58:9f:1d:
0a:70:60:17:d1:29:95:48:92:46:7e:b4:88:73:e7:c2:6b:0f:
ca:e1:82:95:58:d2:54:da:40:ce:5a:23:46:e0:c2:69:66:b7:
9e:b1:ea:6e:27:46:3f:0c:14:f5:29:b4:b3:b7:dc:9f:4f:77:
36:9d:43:90:5a:f1:39:07:df:15:f8:24:99:4c:2f:58:df:00:
2e:fb:f3:94:42:2d:1a:6c:fb:e4:9a:b2:62:90:ae:0f:6f:e3:
0a:43:84:95:49:c3:6f:aa:fa:8c:66:c8:5d:5e:25:40:cc:aa:
cb:49:23:74:e7:82:15:be:56:e3:eb:67:fe:f7:2d:79:88:36:
c1:4c:49:b1:3a:b0:e5:fe:4b:db:d2:d3:b2:fc:b9:21:a5:70:
a2:b4:f5:ce:54:14:5f:7a:1d:d8:2a:fd:ed:1d:df:05:78:5f:
19:35:77:00:83:87:5b:76:d3:6d:e5:85:4e:23:26:63:9e:01:
c3:e4:37:3e:fd:89:24:87:0b:8e:94:71:58:4a:24:5d:7c:30:
d5:3d:d6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:15:25 2026 by rpki-client