$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS153118.roa File: AS153118.roa (raw, json) Hash identifier: Up8DIdb05HSXK4eskmg4IEgVBP+DBvO2dfGvjBLJXDI= Subject key identifier: 1E:FC:FF:75:63:63:D1:D4:F5:82:F0:43:AC:A2:43:BA:63:0F:21:AA Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 79621D47598A393DF9D6927C150029F0824074A7 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153118.roa Signing time: Sat 02 May 2026 09:23:53 +0000 ROA not before: Sat 02 May 2026 09:18:53 +0000 ROA not after: Sat 01 May 2027 09:23:53 +0000 asID: 153118 IP address blocks: 160.187.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:62:1d:47:59:8a:39:3d:f9:d6:92:7c:15:00:29:f0:82:40:74:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:53 2026 GMT Not After : May 1 09:23:53 2027 GMT Subject: CN=1EFCFF756363D1D4F582F043ACA243BA630F21AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:58:fd:27:48:26:ce:76:86:00:54:d5:7a:3b: 6e:6a:2d:ff:20:7a:e2:29:84:ae:87:b3:63:66:38: b8:72:ff:92:a2:7d:89:78:9b:98:35:35:a2:fb:71: 6c:1c:16:9f:8c:92:15:82:25:c2:ec:cc:29:17:5a: 32:5e:55:5c:52:d9:c0:7b:c9:1e:ef:bd:de:70:78: 7e:e1:b0:ea:15:95:2f:23:da:63:7b:4a:43:33:c1: 43:45:5c:7b:9e:01:30:1c:76:e5:02:51:65:09:ce: 1d:77:cd:1e:d0:90:8f:2b:a9:ed:a8:74:15:22:18: 7d:ab:3f:51:db:85:d2:50:25:a1:4b:33:10:2f:4d: b1:09:80:69:ec:fb:23:cb:1e:6b:dc:31:4e:c9:0e: d1:de:c9:a8:87:20:00:c0:b8:5d:53:49:b6:7b:fe: 58:de:ee:c2:f4:04:1b:b4:ed:91:6f:ca:83:e3:c3: 2e:a4:a0:7e:07:59:cb:81:21:a3:11:18:bc:09:f2: 2c:17:a1:b8:0e:fb:b1:f8:1c:9f:32:0f:dd:60:23: 0a:9d:97:76:7d:bc:de:a2:55:3b:35:fe:9e:18:f4: e3:7f:02:5c:e1:f3:25:2f:c0:40:98:f6:84:66:8b: 86:b2:ca:73:ff:61:4d:a3:df:1e:c4:26:d1:29:d5: e9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:FC:FF:75:63:63:D1:D4:F5:82:F0:43:AC:A2:43:BA:63:0F:21:AA X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153118.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.99.0/24 Signature Algorithm: sha256WithRSAEncryption 56:d1:7c:b8:ba:90:c3:73:66:d8:31:17:f0:0d:91:af:cf:a1: c9:5e:c7:ac:63:13:4c:f8:d8:05:20:c6:e4:1e:d0:32:85:23: 37:e4:ba:b9:e3:f0:b0:b8:20:45:8b:01:a7:8e:a9:c8:61:1d: cd:8a:3e:5d:a5:9b:30:73:ab:62:56:f8:d9:b5:2f:7e:17:b4: 08:95:9d:49:bf:bd:be:71:4d:fe:88:88:c7:4c:fd:d9:10:cf: 9b:df:3c:7f:a5:fc:90:7d:b8:2b:c8:36:7b:be:49:51:59:f7: b7:9c:d2:e0:3f:b1:60:e9:4b:20:7c:d6:8f:3c:db:0f:ac:c4: ab:a0:35:48:91:99:af:42:a4:f9:00:fd:10:00:52:38:0d:87: ac:06:71:97:47:6f:38:6d:72:47:02:c7:35:32:f3:1e:7b:f4: 8b:1b:16:d8:f6:73:3b:5f:1e:b4:51:d4:f8:4a:f2:f2:8f:f5: 15:96:77:73:45:8e:60:16:20:6d:15:8d:1d:9e:79:24:91:a9: 3b:50:17:6e:af:11:35:38:46:b9:38:dd:5d:64:2b:86:ef:0c: 6e:e9:89:0e:18:a0:b7:bc:14:e0:12:4b:b2:3e:9f:0a:64:36: ae:a2:81:e0:b7:16:15:75:2b:90:93:70:b4:6d:84:26:ac:76: ea:00:8a:51 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUeWIdR1mKOT351pJ8FQAp8IJAdKcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTg1M1oX DTI3MDUwMTA5MjM1M1owMzExMC8GA1UEAxMoMUVGQ0ZGNzU2MzYzRDFENEY1ODJG MDQzQUNBMjQzQkE2MzBGMjFBQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK5Y/SdIJs52hgBU1Xo7bmot/yB64imEroezY2Y4uHL/kqJ9iXibmDU1ovtx bBwWn4ySFYIlwuzMKRdaMl5VXFLZwHvJHu+93nB4fuGw6hWVLyPaY3tKQzPBQ0Vc e54BMBx25QJRZQnOHXfNHtCQjyup7ah0FSIYfas/UduF0lAloUszEC9NsQmAaez7 I8sea9wxTskO0d7JqIcgAMC4XVNJtnv+WN7uwvQEG7TtkW/Kg+PDLqSgfgdZy4Eh oxEYvAnyLBehuA77sfgcnzIP3WAjCp2Xdn283qJVOzX+nhj0438CXOHzJS/AQJj2 hGaLhrLKc/9hTaPfHsQm0SnV6a0CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQe/P91 Y2PR1PWC8EOsokO6Yw8hqjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUzMTE4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoLtjMA0GCSqGSIb3DQEBCwUAA4IBAQBW0Xy4upDDc2bYMRfwDZGvz6HJ XsesYxNM+NgFIMbkHtAyhSM35Lq54/CwuCBFiwGnjqnIYR3Nij5dpZswc6tiVvjZ tS9+F7QIlZ1Jv72+cU3+iIjHTP3ZEM+b3zx/pfyQfbgryDZ7vklRWfe3nNLgP7Fg 6UsgfNaPPNsPrMSroDVIkZmvQqT5AP0QAFI4DYesBnGXR284bXJHAsc1MvMee/SL GxbY9nM7Xx60UdT4SvLyj/UVlndzRY5gFiBtFY0dnnkkkak7UBdurxE1OEa5ON1d ZCuG7wxu6YkOGKC3vBTgEkuyPp8KZDauooHgtxYVdSuQk3C0bYQmrHbqAIpR -----END CERTIFICATE-----Generated at Sat May 2 21:05:38 2026 by rpki-client