$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS153116.roa File: AS153116.roa (raw, json) Hash identifier: UMCzSx6ovsW0vkGqMffLTVZQLx8awuF3fwpM6b/1QJw= Subject key identifier: 11:37:40:F0:6D:23:C2:66:FD:17:3E:2D:53:D3:06:B5:49:9B:25:3F Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 1C9AE9B58F57D95F8443A49C07A692574E40E016 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153116.roa Signing time: Sat 02 May 2026 09:24:17 +0000 ROA not before: Sat 02 May 2026 09:19:17 +0000 ROA not after: Sat 01 May 2027 09:24:17 +0000 asID: 153116 IP address blocks: 160.25.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:9a:e9:b5:8f:57:d9:5f:84:43:a4:9c:07:a6:92:57:4e:40:e0:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:19:17 2026 GMT Not After : May 1 09:24:17 2027 GMT Subject: CN=113740F06D23C266FD173E2D53D306B5499B253F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:37:80:1f:fd:34:d7:ee:3a:e1:17:f4:43:de: 5c:33:50:37:e9:d9:1f:ef:86:1a:ef:2a:17:73:71: be:18:a4:33:bf:e9:d6:68:6b:3f:aa:e0:2e:7c:37: e3:65:35:a5:85:76:e5:5a:bc:97:21:11:48:b4:c9: 23:ac:da:65:4f:60:84:ab:c5:01:df:3a:5e:99:de: 3e:55:f9:9a:76:93:dc:58:9f:50:de:42:6c:3b:57: e3:bd:d2:15:30:6c:1d:2a:fd:3e:92:8b:09:7b:89: 64:fd:35:d6:93:ca:a1:12:dc:22:0c:ab:f6:12:79: 3e:33:96:51:37:c1:01:a0:af:fb:74:eb:a7:5e:54: c2:27:20:6b:ff:a7:35:b1:04:dd:84:98:15:ba:21: 23:a9:63:a2:e9:9c:e7:77:8f:e0:d3:18:78:da:cf: ed:2a:20:4e:75:f0:98:c1:1a:84:90:91:6c:60:b3: fa:9a:8b:fb:6c:9c:30:70:35:6d:cc:5e:09:d8:e2: 8a:81:11:b0:82:38:25:32:64:f2:98:54:db:c4:c5: 4c:7f:87:1b:d0:7c:b6:92:ed:dd:03:f8:ed:5e:b5: e3:a3:e1:b8:21:5a:ca:2c:c5:af:7e:27:a3:2f:0d: ad:18:dd:7d:cd:8e:8c:4e:88:a5:2e:e7:e9:6f:76: 68:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:37:40:F0:6D:23:C2:66:FD:17:3E:2D:53:D3:06:B5:49:9B:25:3F X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153116.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.200.0/24 Signature Algorithm: sha256WithRSAEncryption 92:39:a8:0e:00:e4:40:23:fb:af:29:6a:b3:e4:9e:5e:e4:a2: 5d:22:1c:10:66:64:3c:74:43:64:d7:ff:cb:64:c3:52:5d:90: 2b:6e:2b:5c:96:10:71:4d:0d:1b:e2:3a:87:4e:74:e5:9a:dd: a0:ea:6e:9f:55:ba:14:59:84:fc:38:cb:03:b6:2a:ae:86:d0: 79:96:16:10:14:2b:9b:75:49:25:44:f1:08:3a:28:38:33:44: 2e:6e:47:da:be:f4:9c:d5:f6:41:9e:de:08:68:a1:88:c8:23: 4e:a0:ef:10:72:78:11:59:8b:a9:d0:24:c0:78:67:e7:c9:0f: de:53:8e:4b:fe:d8:a6:e1:49:64:70:b4:ba:09:90:4d:90:15: b4:01:b2:ff:c2:c3:b2:58:e0:0c:e5:99:24:37:fc:da:1d:2e: 98:a3:36:96:9f:c2:83:57:24:f6:40:85:09:4e:bf:94:f7:1d: 5c:8f:45:f0:2d:ec:d8:9e:ad:16:b9:d0:70:06:6c:02:ce:a4: a6:b6:a4:04:21:5b:42:69:12:6e:58:dc:9a:ef:24:7e:79:0b: 9f:f3:da:b5:64:6f:69:25:99:09:0c:56:21:4d:61:0e:34:c1: e5:9a:6c:1b:db:7a:47:ec:a6:0f:2c:9b:77:b6:4d:0b:7b:80: e6:5a:8f:6f -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUHJrptY9X2V+EQ6ScB6aSV05A4BYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTkxN1oX DTI3MDUwMTA5MjQxN1owMzExMC8GA1UEAxMoMTEzNzQwRjA2RDIzQzI2NkZEMTcz RTJENTNEMzA2QjU0OTlCMjUzRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALY3gB/9NNfuOuEX9EPeXDNQN+nZH++GGu8qF3NxvhikM7/p1mhrP6rgLnw3 42U1pYV25Vq8lyERSLTJI6zaZU9ghKvFAd86XpnePlX5mnaT3FifUN5CbDtX473S FTBsHSr9PpKLCXuJZP011pPKoRLcIgyr9hJ5PjOWUTfBAaCv+3Trp15Uwicga/+n NbEE3YSYFbohI6ljoumc53eP4NMYeNrP7SogTnXwmMEahJCRbGCz+pqL+2ycMHA1 bcxeCdjiioERsII4JTJk8phU28TFTH+HG9B8tpLt3QP47V6146PhuCFayizFr34n oy8NrRjdfc2OjE6IpS7n6W92aMcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQRN0Dw bSPCZv0XPi1T0wa1SZslPzAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUzMTE2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoBnIMA0GCSqGSIb3DQEBCwUAA4IBAQCSOagOAORAI/uvKWqz5J5e5KJd IhwQZmQ8dENk1//LZMNSXZArbitclhBxTQ0b4jqHTnTlmt2g6m6fVboUWYT8OMsD tiquhtB5lhYQFCubdUklRPEIOig4M0QubkfavvSc1fZBnt4IaKGIyCNOoO8QcngR WYup0CTAeGfnyQ/eU45L/tim4UlkcLS6CZBNkBW0AbL/wsOyWOAM5ZkkN/zaHS6Y ozaWn8KDVyT2QIUJTr+U9x1cj0XwLezYnq0WudBwBmwCzqSmtqQEIVtCaRJuWNya 7yR+eQuf89q1ZG9pJZkJDFYhTWEONMHlmmwb23pH7KYPLJt3tk0Le4DmWo9v -----END CERTIFICATE-----Generated at Sat May 2 21:05:06 2026 by rpki-client