$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS153147.roa File: AS153147.roa (raw, json) Hash identifier: pr17UM95pCmnlMn066XFVELKO/BEo64lhGlCGkrdjiw= Subject key identifier: 5E:08:AF:15:A7:B1:C8:69:1B:98:2C:94:B8:B7:50:D0:CB:54:83:68 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 31E5D1834177EF5E5FD3E7A36C2EC7BD8358BA9C Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153147.roa Signing time: Mon 07 Sep 2026 02:24:09 +0000 ROA not before: Mon 07 Sep 2026 02:19:09 +0000 ROA not after: Mon 06 Sep 2027 02:24:09 +0000 asID: 153147 IP address blocks: 160.191.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:e5:d1:83:41:77:ef:5e:5f:d3:e7:a3:6c:2e:c7:bd:83:58:ba:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Sep 7 02:19:09 2026 GMT Not After : Sep 6 02:24:09 2027 GMT Subject: CN=5E08AF15A7B1C8691B982C94B8B750D0CB548368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:44:e6:d6:cb:90:97:3b:af:d4:34:41:9f:d5: b1:63:e4:a4:99:0f:ff:4e:23:af:f6:ab:4b:1e:0f: 67:ed:0f:e4:de:01:d4:68:e6:d2:f3:4a:1b:b2:58: b6:64:7c:6b:98:1f:e4:1a:e5:42:f3:36:70:46:c3: 3c:bb:b9:8d:27:c0:ee:01:cb:2b:80:83:2b:85:eb: f7:79:42:51:02:e6:9a:67:25:6a:26:39:12:29:a1: 2a:8f:c0:5f:60:dd:eb:82:03:c6:29:a7:53:0d:7f: 54:88:6d:d7:f8:10:3e:43:c3:27:cf:0a:27:c0:31: d9:19:6b:3e:53:cb:81:d9:50:34:e5:d1:ad:01:c1: 4c:72:d4:1f:3a:3d:cc:1a:ec:ef:27:4b:ea:2b:e5: be:dd:11:49:07:07:2b:13:6c:75:25:02:64:ac:5c: 10:b6:56:6c:5a:36:2c:fc:4f:4c:62:43:39:15:c2: 96:e9:bf:84:4e:50:43:fd:e0:0a:cb:29:ce:cb:3f: aa:14:34:14:22:51:a1:b8:ba:9b:50:97:5a:2e:4d: b1:5b:1d:37:bf:31:d5:cc:cb:26:8e:a2:dc:4d:15: 03:12:a9:22:48:a5:29:8d:31:45:e9:e0:4d:ee:bf: 09:94:48:3c:76:dd:a3:69:a9:24:c8:64:c0:f5:9a: b1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:08:AF:15:A7:B1:C8:69:1B:98:2C:94:B8:B7:50:D0:CB:54:83:68 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153147.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.67.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:87:94:1c:6a:b6:0f:97:ac:9b:ac:87:c0:c6:10:eb:a8:5d: f1:d8:7e:f1:c8:91:75:f1:2f:36:78:fd:80:0c:ba:f0:45:2a: fd:ff:b7:58:7a:ca:bf:ae:d2:f2:9f:c7:31:3e:cb:64:cd:27: 29:cf:a0:f6:63:a4:3a:9b:15:f6:79:a9:2f:17:87:14:76:56: 18:09:32:e0:57:9d:46:a4:2a:ff:a1:1f:6f:28:d8:78:c1:55: 2c:1e:a5:29:f9:70:90:a2:b2:61:a5:7d:a8:1c:68:7e:ea:07: f1:90:e2:c7:ac:6b:e3:31:4a:80:60:87:9c:0d:3c:80:05:ab: b1:72:49:02:74:b1:7c:71:0f:c6:76:2b:f9:33:28:55:5f:ac: 9b:14:4c:0e:9f:c6:ee:63:53:03:9b:f5:fb:a4:77:5d:77:dd: 7c:1e:be:51:74:60:68:81:59:1e:66:70:90:2c:ce:36:c0:16: 11:e9:5f:5f:96:72:73:4a:2b:a9:07:9c:f1:f8:39:0b:d9:5b: 4a:98:2b:2f:e9:32:5b:31:cc:fb:cd:33:fa:6d:e1:5c:04:3c: b7:23:b3:f1:07:e2:d0:ec:3d:ad:53:67:60:c1:69:1d:d4:ee: 24:e8:b0:7b:f2:24:76:50:7a:8a:52:50:39:1a:92:31:f9:3a: 95:96:8f:33 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUMeXRg0F3715f0+ejbC7HvYNYupwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDkwNzAyMTkwOVoX DTI3MDkwNjAyMjQwOVowMzExMC8GA1UEAxMoNUUwOEFGMTVBN0IxQzg2OTFCOTgy Qzk0QjhCNzUwRDBDQjU0ODM2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKpE5tbLkJc7r9Q0QZ/VsWPkpJkP/04jr/arSx4PZ+0P5N4B1Gjm0vNKG7JY tmR8a5gf5BrlQvM2cEbDPLu5jSfA7gHLK4CDK4Xr93lCUQLmmmclaiY5EimhKo/A X2Dd64IDximnUw1/VIht1/gQPkPDJ88KJ8Ax2RlrPlPLgdlQNOXRrQHBTHLUHzo9 zBrs7ydL6ivlvt0RSQcHKxNsdSUCZKxcELZWbFo2LPxPTGJDORXClum/hE5QQ/3g Csspzss/qhQ0FCJRobi6m1CXWi5NsVsdN78x1czLJo6i3E0VAxKpIkilKY0xReng Te6/CZRIPHbdo2mpJMhkwPWasQ0CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBReCK8V p7HIaRuYLJS4t1DQy1SDaDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUzMTQ3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoL9DMA0GCSqGSIb3DQEBCwUAA4IBAQAOh5QcarYPl6ybrIfAxhDrqF3x 2H7xyJF18S82eP2ADLrwRSr9/7dYesq/rtLyn8cxPstkzScpz6D2Y6Q6mxX2eakv F4cUdlYYCTLgV51GpCr/oR9vKNh4wVUsHqUp+XCQorJhpX2oHGh+6gfxkOLHrGvj MUqAYIecDTyABauxckkCdLF8cQ/Gdiv5MyhVX6ybFEwOn8buY1MDm/X7pHddd918 Hr5RdGBogVkeZnCQLM42wBYR6V9flnJzSiupB5zx+DkL2VtKmCsv6TJbMcz7zTP6 beFcBDy3I7PxB+LQ7D2tU2dgwWkd1O4k6LB78iR2UHqKUlA5GpIx+TqVlo8z -----END CERTIFICATE-----Generated at Thu Sep 17 12:16:47 2026 by rpki-client