$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS153067.roa File: AS153067.roa (raw, json) Hash identifier: V7lc2RbLW/qtK5IHakpc5U63jW/499NoVjsEHNCbrrs= Subject key identifier: D8:AD:C7:E2:2E:54:7D:3B:4E:4A:7F:FD:2D:86:03:AC:88:08:80:B2 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 494975D25DA5816F16AF4ABC7AA219A7FE7A00EE Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153067.roa Signing time: Sat 02 May 2026 09:23:57 +0000 ROA not before: Sat 02 May 2026 09:18:57 +0000 ROA not after: Sat 01 May 2027 09:23:57 +0000 asID: 153067 IP address blocks: 160.22.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:49:75:d2:5d:a5:81:6f:16:af:4a:bc:7a:a2:19:a7:fe:7a:00:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:57 2026 GMT Not After : May 1 09:23:57 2027 GMT Subject: CN=D8ADC7E22E547D3B4E4A7FFD2D8603AC880880B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f0:25:3d:5a:d2:23:f3:d0:41:34:d3:0c:a6: ec:26:89:5d:8f:55:a5:07:fb:b5:6f:d8:d7:6a:66: 4c:cc:49:69:1d:af:5f:7f:67:89:eb:bc:e4:c1:9a: 29:6c:5d:34:d5:bf:61:40:38:7c:eb:f4:79:66:62: 1a:e5:79:8f:ab:c3:0f:d0:1d:40:6b:fb:65:08:b7: c7:83:f6:55:f8:e1:2a:9e:33:1b:fa:e4:40:b4:58: 06:84:9e:4f:4c:af:60:3e:06:2e:66:44:46:ac:07: d5:88:a9:e4:77:d6:d7:db:3a:a7:d1:98:de:63:b9: 3b:bb:2a:2c:4e:5a:1e:bf:02:ff:21:57:a3:3f:55: bb:91:b2:9d:b0:8c:86:d3:66:b9:3b:44:0c:f5:f8: a4:50:cf:a3:46:b9:9f:a9:b1:8d:af:ca:89:e4:ed: a6:bb:e1:52:5e:64:39:f9:a8:f4:b5:0e:4c:bf:70: 23:ab:e4:23:6b:61:e9:66:45:c8:6f:45:6e:ed:18: f4:1d:cd:4d:1e:e9:ce:e0:3b:37:cf:e5:3c:4a:7d: 41:62:b0:6a:a1:32:c1:f1:f2:b9:bf:79:31:86:31: 82:0b:81:a5:01:0d:4e:47:34:56:7b:d7:63:e7:b4: 32:e4:01:5d:b6:4c:68:1d:a9:62:3c:49:93:f2:3d: 1b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AD:C7:E2:2E:54:7D:3B:4E:4A:7F:FD:2D:86:03:AC:88:08:80:B2 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153067.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.45.0/24 Signature Algorithm: sha256WithRSAEncryption 13:57:81:f3:50:33:f1:a5:de:a1:d3:c6:c9:46:f6:45:59:3b: f2:8d:9b:34:40:57:11:32:da:c3:2a:a1:d8:45:f1:20:cc:16: 4f:7f:16:c0:50:18:a8:0a:d6:db:0e:24:6a:60:44:74:6e:d0: 19:18:83:1d:b5:9c:3a:af:17:20:7e:03:a1:1f:49:22:e4:07: f2:e2:c5:04:d0:07:f1:41:c0:76:c3:23:8f:a4:e7:09:62:dd: 29:c9:fa:a3:13:05:ca:ef:29:f3:88:88:69:da:13:36:bc:a4: 56:1a:55:59:88:b5:58:fe:f6:aa:aa:7c:17:a3:c0:dc:88:42: 74:bb:df:ee:30:80:e0:d2:b6:88:48:05:35:cd:65:55:5f:f7: 13:99:e7:05:38:7e:df:fe:66:06:0e:33:85:bf:b4:ba:8e:22: 81:06:03:c0:cf:7e:19:81:4c:e1:aa:9b:ed:17:96:d9:8e:14: 91:f3:80:5f:35:19:ee:90:38:46:9e:2a:29:0c:b9:e4:bf:98: b9:5b:df:a6:be:48:d6:92:e8:3a:62:bc:93:41:2d:17:83:ee: 29:35:df:73:8d:53:21:28:9b:11:e0:62:6d:7f:86:41:5d:c8: a4:c7:7c:08:99:93:b5:51:22:c5:2b:60:35:03:b3:56:a1:3c: 4d:4d:09:35 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUSUl10l2lgW8Wr0q8eqIZp/56AO4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTg1N1oX DTI3MDUwMTA5MjM1N1owMzExMC8GA1UEAxMoRDhBREM3RTIyRTU0N0QzQjRFNEE3 RkZEMkQ4NjAzQUM4ODA4ODBCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMjwJT1a0iPz0EE00wym7CaJXY9VpQf7tW/Y12pmTMxJaR2vX39nieu85MGa KWxdNNW/YUA4fOv0eWZiGuV5j6vDD9AdQGv7ZQi3x4P2VfjhKp4zG/rkQLRYBoSe T0yvYD4GLmZERqwH1Yip5HfW19s6p9GY3mO5O7sqLE5aHr8C/yFXoz9Vu5GynbCM htNmuTtEDPX4pFDPo0a5n6mxja/KieTtprvhUl5kOfmo9LUOTL9wI6vkI2th6WZF yG9Fbu0Y9B3NTR7pzuA7N8/lPEp9QWKwaqEywfHyub95MYYxgguBpQENTkc0VnvX Y+e0MuQBXbZMaB2pYjxJk/I9G4kCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTYrcfi LlR9O05Kf/0thgOsiAiAsjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUzMDY3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoBYtMA0GCSqGSIb3DQEBCwUAA4IBAQATV4HzUDPxpd6h08bJRvZFWTvy jZs0QFcRMtrDKqHYRfEgzBZPfxbAUBioCtbbDiRqYER0btAZGIMdtZw6rxcgfgOh H0ki5Afy4sUE0AfxQcB2wyOPpOcJYt0pyfqjEwXK7ynziIhp2hM2vKRWGlVZiLVY /vaqqnwXo8DciEJ0u9/uMIDg0raISAU1zWVVX/cTmecFOH7f/mYGDjOFv7S6jiKB BgPAz34ZgUzhqpvtF5bZjhSR84BfNRnukDhGniopDLnkv5i5W9+mvkjWkug6YryT QS0Xg+4pNd9zjVMhKJsR4GJtf4ZBXcikx3wImZO1USLFK2A1A7NWoTxNTQk1 -----END CERTIFICATE-----Generated at Sat May 2 21:03:48 2026 by rpki-client