$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS153481.roa File: AS153481.roa (raw, json) Hash identifier: h+hD4zGFdlfGsXl0NZ8jrW42Np+yYJEIv+IO5/Rj3xQ= Subject key identifier: 7E:01:87:A1:93:D0:A4:B6:10:22:46:58:B2:4D:0E:EF:5E:E5:3C:97 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 5A4B2C23FABDB1EC0A7840E6B0D8A31B507ECF6E Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153481.roa Signing time: Sat 02 May 2026 09:24:15 +0000 ROA not before: Sat 02 May 2026 09:19:15 +0000 ROA not after: Sat 01 May 2027 09:24:15 +0000 asID: 153481 IP address blocks: 160.250.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:4b:2c:23:fa:bd:b1:ec:0a:78:40:e6:b0:d8:a3:1b:50:7e:cf:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:19:15 2026 GMT Not After : May 1 09:24:15 2027 GMT Subject: CN=7E0187A193D0A4B610224658B24D0EEF5EE53C97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7d:10:1d:5b:14:85:57:9b:13:f3:97:59:ff: d5:60:4b:46:6d:b4:5d:ed:40:5d:b5:e7:cd:03:97: a6:4c:24:53:c4:aa:6c:1c:cd:77:e7:12:45:c7:1e: 12:9a:58:33:14:88:ee:76:a9:27:7f:e9:90:c6:1a: a2:4d:ff:27:e6:a2:2e:c7:e5:6e:7c:ae:12:c9:1b: b7:09:3e:1a:f9:80:4c:95:13:e2:d0:a1:9f:a8:9f: 0e:7f:66:d5:7e:64:1d:08:e6:16:13:e7:06:f3:f6: 88:29:df:75:fe:1d:c1:55:97:58:8b:52:a6:69:ab: 8c:90:de:b6:9c:c8:91:0f:36:c2:34:de:7f:a7:f1: 8f:37:dd:f5:77:bc:21:a8:5e:0b:64:48:82:b3:41: 1c:fb:78:2c:3e:84:25:e8:fa:95:0a:a9:65:14:95: b8:ba:96:34:16:d8:23:55:b7:8f:ce:6e:c0:46:7e: 9a:85:34:25:e6:47:20:04:83:a0:5a:8d:77:17:6c: 32:d7:8e:23:2c:b5:be:61:f8:af:74:7c:a5:15:28: 26:d2:5d:48:8f:8b:ef:41:d8:5f:eb:25:34:51:1c: b1:ed:ac:40:b3:d8:d8:0c:f8:4e:11:d8:a2:92:2b: 2e:a4:79:12:e5:b0:5b:ba:15:0d:90:3f:b5:40:c3: 76:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:01:87:A1:93:D0:A4:B6:10:22:46:58:B2:4D:0E:EF:5E:E5:3C:97 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153481.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.250.42.0/23 Signature Algorithm: sha256WithRSAEncryption 56:16:c2:9b:d2:3a:28:03:14:c0:6e:b3:07:11:6c:49:bf:dd: 91:0a:db:5a:35:fd:98:cc:d4:c0:7a:25:b0:ec:2e:83:f5:6f: 3b:12:5e:90:bd:e6:fc:7e:50:d6:fa:5e:24:95:66:ca:dc:c6: a3:42:95:4b:2c:c2:16:f8:8d:6d:02:1c:df:77:0f:ea:ef:56: fc:26:54:fa:c2:80:3e:05:02:61:62:75:64:66:78:90:fa:e5: 7e:ab:2f:fd:14:99:a9:14:47:21:a8:31:69:13:aa:b7:72:e6: 8e:ed:29:06:e0:af:88:f3:8c:b0:7a:04:c5:2a:61:e2:59:b3: 5d:f2:52:4e:f6:3a:c4:c3:23:26:04:c0:7a:c1:b7:38:44:92: 0e:97:14:a6:42:06:31:a6:64:61:35:90:e7:f4:b5:b4:71:7a: 26:99:b7:43:4e:19:7e:74:f8:22:49:ce:11:ee:b9:ed:49:94: 0d:5c:d8:d9:26:51:ed:83:67:77:2b:33:45:c7:78:d0:24:28: ca:08:cd:61:72:cd:f5:bf:50:5f:16:fc:01:61:6e:4a:29:d1: 78:ff:92:b8:69:4b:4a:69:48:90:5d:b9:dd:16:ff:44:b3:16: ec:91:32:fe:9c:9e:0c:3f:91:d7:16:2a:b1:a4:65:f7:39:6b: 61:9b:fa:34 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUWkssI/q9sewKeEDmsNijG1B+z24wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTkxNVoX DTI3MDUwMTA5MjQxNVowMzExMC8GA1UEAxMoN0UwMTg3QTE5M0QwQTRCNjEwMjI0 NjU4QjI0RDBFRUY1RUU1M0M5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMt9EB1bFIVXmxPzl1n/1WBLRm20Xe1AXbXnzQOXpkwkU8SqbBzNd+cSRcce EppYMxSI7napJ3/pkMYaok3/J+aiLsflbnyuEskbtwk+GvmATJUT4tChn6ifDn9m 1X5kHQjmFhPnBvP2iCnfdf4dwVWXWItSpmmrjJDetpzIkQ82wjTef6fxjzfd9Xe8 IaheC2RIgrNBHPt4LD6EJej6lQqpZRSVuLqWNBbYI1W3j85uwEZ+moU0JeZHIASD oFqNdxdsMteOIyy1vmH4r3R8pRUoJtJdSI+L70HYX+slNFEcse2sQLPY2Az4ThHY opIrLqR5EuWwW7oVDZA/tUDDdrUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBR+AYeh k9CkthAiRliyTQ7vXuU8lzAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUzNDgxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBoPoqMA0GCSqGSIb3DQEBCwUAA4IBAQBWFsKb0jooAxTAbrMHEWxJv92R CttaNf2YzNTAeiWw7C6D9W87El6Qveb8flDW+l4klWbK3MajQpVLLMIW+I1tAhzf dw/q71b8JlT6woA+BQJhYnVkZniQ+uV+qy/9FJmpFEchqDFpE6q3cuaO7SkG4K+I 84ywegTFKmHiWbNd8lJO9jrEwyMmBMB6wbc4RJIOlxSmQgYxpmRhNZDn9LW0cXom mbdDThl+dPgiSc4R7rntSZQNXNjZJlHtg2d3KzNFx3jQJCjKCM1hcs31v1BfFvwB YW5KKdF4/5K4aUtKaUiQXbndFv9EsxbskTL+nJ4MP5HXFiqxpGX3OWthm/o0 -----END CERTIFICATE-----Generated at Sat May 2 21:04:47 2026 by rpki-client