$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS153161.roa File: AS153161.roa (raw, json) Hash identifier: jtgBtIHEznxt6VLSHBCyR/mS+Xs4leWJ7WwjmWfdA7c= Subject key identifier: A8:2C:D2:27:66:72:B2:A4:48:86:20:4F:F1:C0:FD:E8:92:8D:1D:27 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 66E6A36D0C4B9F8FE3B15486CD1B30CA3F8E9563 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153161.roa Signing time: Fri 30 Oct 2026 02:14:14 +0000 ROA not before: Fri 30 Oct 2026 02:09:14 +0000 ROA not after: Fri 29 Oct 2027 02:14:14 +0000 asID: 153161 IP address blocks: 192.152.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e6:a3:6d:0c:4b:9f:8f:e3:b1:54:86:cd:1b:30:ca:3f:8e:95:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Oct 30 02:09:14 2026 GMT Not After : Oct 29 02:14:14 2027 GMT Subject: CN=A82CD2276672B2A44886204FF1C0FDE8928D1D27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:71:e0:5c:19:2f:18:43:00:43:7c:9b:44:ba: a7:46:51:7d:3a:30:13:a2:6a:ca:7e:42:7d:2d:85: e9:8d:5d:94:58:3d:9f:60:1a:f2:c1:df:df:f0:4f: 2c:28:36:9e:4e:9f:a0:04:95:0e:f9:8a:a5:73:bb: 0f:ca:19:fb:69:bd:b4:e0:4e:d9:86:4e:d8:07:71: 4e:a2:02:5c:ff:6f:f3:a8:02:79:80:5e:1c:25:60: 2f:81:d2:d3:b9:02:b3:ac:5f:af:97:fb:f4:fb:eb: 1a:cd:45:e9:01:e2:f4:5e:03:f1:56:53:a3:00:0f: 4c:76:78:19:d4:33:df:18:16:f6:4b:2e:0d:b3:e8: 3c:10:57:7c:b7:b5:15:52:dc:a3:fc:5f:15:48:94: eb:a7:8d:cc:c0:4c:0a:2b:59:e9:10:69:76:6e:f9: 1e:83:7d:a6:74:ea:51:28:5b:19:56:fd:16:02:42: 44:8e:48:96:34:1a:8f:78:2a:f3:e8:f0:b5:6e:36: c3:1e:42:70:e9:a5:b5:20:95:56:be:76:1a:02:6e: d8:f7:85:36:67:91:9e:0f:fd:e4:63:65:b6:ca:21: 2e:90:5c:9d:00:30:2c:4b:38:61:56:68:8a:27:90: 68:5f:d0:24:67:12:9e:10:77:c6:a5:06:cc:86:ad: 5e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2C:D2:27:66:72:B2:A4:48:86:20:4F:F1:C0:FD:E8:92:8D:1D:27 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153161.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.152.146.0/24 Signature Algorithm: sha256WithRSAEncryption 99:61:6d:1e:28:97:15:6c:24:1b:74:f5:1a:0f:0a:80:71:12: 31:ae:9e:92:f9:5f:11:79:07:83:c6:bf:d1:22:94:e7:a8:c4: 9c:fe:0b:0a:dd:08:2f:92:12:9c:bd:e9:5b:96:3d:2c:b1:88: 6b:96:b7:57:72:74:ac:13:15:8a:af:b5:78:49:54:75:56:1c: 78:22:0f:b2:56:82:44:a1:12:83:66:fc:b9:b4:9e:32:7e:1a: 4f:67:e3:a2:37:89:3e:62:7d:4d:71:c9:f5:50:21:76:1c:4a: bc:b3:91:9f:26:be:08:28:6e:47:64:b0:fa:d6:45:51:b8:84: fc:06:d0:12:6b:90:0b:c0:f3:c6:a7:79:c7:f1:f3:f8:cf:7e: cc:42:f2:db:b1:4f:44:4c:6b:b2:44:66:8e:cb:9f:d0:89:92: d3:d1:9f:bc:b8:1b:78:07:8e:e5:97:d4:63:1e:f0:ff:4a:09: 06:7e:79:6e:6d:0a:da:48:98:31:76:af:c7:8e:6d:03:6c:8c: 83:33:2e:d0:58:4e:c2:9c:ed:44:d2:a7:8b:12:d6:ee:b0:f9: ca:7d:75:ad:34:23:5a:06:c0:4d:dc:55:d0:fc:3f:03:3b:a2: aa:a4:98:a1:e2:de:3c:3b:db:25:a3:ed:db:a0:77:ac:b0:66: 26:ec:af:60 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUZuajbQxLn4/jsVSGzRswyj+OlWMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MTAzMDAyMDkxNFoX DTI3MTAyOTAyMTQxNFowMzExMC8GA1UEAxMoQTgyQ0QyMjc2NjcyQjJBNDQ4ODYy MDRGRjFDMEZERTg5MjhEMUQyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM9x4FwZLxhDAEN8m0S6p0ZRfTowE6Jqyn5CfS2F6Y1dlFg9n2Aa8sHf3/BP LCg2nk6foASVDvmKpXO7D8oZ+2m9tOBO2YZO2AdxTqICXP9v86gCeYBeHCVgL4HS 07kCs6xfr5f79PvrGs1F6QHi9F4D8VZTowAPTHZ4GdQz3xgW9ksuDbPoPBBXfLe1 FVLco/xfFUiU66eNzMBMCitZ6RBpdm75HoN9pnTqUShbGVb9FgJCRI5IljQaj3gq 8+jwtW42wx5CcOmltSCVVr52GgJu2PeFNmeRng/95GNltsohLpBcnQAwLEs4YVZo iieQaF/QJGcSnhB3xqUGzIatXksCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSoLNIn ZnKypEiGIE/xwP3oko0dJzAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUzMTYxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAwJiSMA0GCSqGSIb3DQEBCwUAA4IBAQCZYW0eKJcVbCQbdPUaDwqAcRIx rp6S+V8ReQeDxr/RIpTnqMSc/gsK3QgvkhKcvelblj0ssYhrlrdXcnSsExWKr7V4 SVR1Vhx4Ig+yVoJEoRKDZvy5tJ4yfhpPZ+OiN4k+Yn1Nccn1UCF2HEq8s5GfJr4I KG5HZLD61kVRuIT8BtASa5ALwPPGp3nH8fP4z37MQvLbsU9ETGuyRGaOy5/QiZLT 0Z+8uBt4B47ll9RjHvD/SgkGfnlubQraSJgxdq/Hjm0DbIyDMy7QWE7CnO1E0qeL EtbusPnKfXWtNCNaBsBN3FXQ/D8DO6KqpJih4t48O9slo+3boHessGYm7K9g -----END CERTIFICATE-----Generated at Tue Nov 3 05:04:23 2026 by rpki-client