$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS153538.roa File: AS153538.roa (raw, json) Hash identifier: Z00KiufV2iz1ERaM9Poj4h7mxzuDLfafktSWER4eQr0= Subject key identifier: 70:8B:7F:8D:02:C5:F5:A3:0A:BD:EB:62:A4:AC:52:9F:66:9E:45:34 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 3F5E815633C936F394ED1230D14DA9CAB4F4ADF8 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153538.roa Signing time: Sat 02 May 2026 09:24:10 +0000 ROA not before: Sat 02 May 2026 09:19:10 +0000 ROA not after: Sat 01 May 2027 09:24:10 +0000 asID: 153538 IP address blocks: 161.248.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:5e:81:56:33:c9:36:f3:94:ed:12:30:d1:4d:a9:ca:b4:f4:ad:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:19:10 2026 GMT Not After : May 1 09:24:10 2027 GMT Subject: CN=708B7F8D02C5F5A30ABDEB62A4AC529F669E4534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1d:a0:9f:c0:ff:5b:18:75:6a:71:19:5d:51: a5:0a:ea:0a:1d:8f:8a:df:24:65:2d:5d:2e:b4:b1: 57:00:40:fb:14:2c:e6:07:94:38:db:3f:90:17:68: 4b:84:17:e4:e6:21:23:80:e8:70:fb:99:cd:ec:c4: 70:b6:87:02:69:ea:a6:c8:8c:9a:b5:2c:b1:53:41: 4f:95:4e:cc:3c:fa:06:70:e2:97:42:3f:d5:17:6c: 7c:56:72:ad:87:c3:6c:4d:66:50:6f:9c:9e:98:46: b5:57:70:85:76:2a:75:2b:9a:16:e1:42:87:5c:f2: cd:85:eb:67:87:6b:35:0f:38:bf:19:49:52:a6:bf: fc:86:9d:ea:7a:98:30:cb:8e:d3:07:34:40:d6:24: 3f:64:34:bc:78:8a:c0:25:70:0a:b2:f3:2f:03:b1: c8:62:f8:3f:57:59:85:b1:88:3d:86:80:a9:72:d4: bc:89:73:bf:d3:64:cd:97:c8:7c:eb:dc:bc:7a:59: ad:e8:55:b9:04:55:98:33:b8:5e:7b:98:95:23:f3: 9f:70:7e:21:de:18:be:4d:af:26:ba:49:6d:1d:1c: 84:0d:a4:bf:04:19:38:6f:f3:b0:df:1f:7c:e0:7f: 15:cc:37:5c:00:9b:ff:33:8f:52:b4:aa:9e:5b:76: fd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8B:7F:8D:02:C5:F5:A3:0A:BD:EB:62:A4:AC:52:9F:66:9E:45:34 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.248.172.0/23 Signature Algorithm: sha256WithRSAEncryption 02:70:10:f2:fc:40:84:2f:2b:82:75:3d:06:2e:c7:4f:24:aa: f9:34:1d:37:22:1a:b9:d1:00:f4:c9:6f:fe:4c:19:06:50:96: fa:ab:63:5a:a5:08:e3:fc:e4:9c:36:30:a5:6c:74:1c:fb:27: 6f:76:60:b3:c7:2e:cc:0c:86:31:4d:15:8b:99:b1:c6:d5:2a: a7:41:71:49:72:86:f6:c2:5d:5b:60:65:dd:8f:7f:7a:55:d9: 8d:3b:92:1b:d4:c4:a4:62:1d:7c:12:4a:46:03:3b:73:7e:39: 3b:5e:5b:85:6d:8e:69:dd:bb:aa:07:dd:73:63:51:81:4b:8c: f8:bd:e1:64:6b:29:a7:13:22:d8:07:0c:b1:ff:7d:d7:35:94: 75:f8:3c:fa:d6:9a:8c:d9:92:98:a4:3a:b9:32:df:a3:ec:95: 10:9f:ac:de:84:d4:7c:dc:e4:ec:a3:7b:c3:7e:c3:5d:a4:b9: 9b:d3:9b:2b:55:0a:89:16:bd:42:e3:cc:3e:d4:ba:c1:2c:a1: 7e:7c:bf:0a:54:25:73:bf:04:d4:e0:a3:f2:6a:59:3e:c1:c1: ed:66:6f:2a:60:ad:2b:66:cb:c9:1b:d4:01:95:a0:a1:29:3e: 23:02:09:3f:fc:4e:52:66:5c:74:28:d6:96:d5:43:d7:08:e1: c0:7b:ba:71 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUP16BVjPJNvOU7RIw0U2pyrT0rfgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTkxMFoX DTI3MDUwMTA5MjQxMFowMzExMC8GA1UEAxMoNzA4QjdGOEQwMkM1RjVBMzBBQkRF QjYyQTRBQzUyOUY2NjlFNDUzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsdoJ/A/1sYdWpxGV1RpQrqCh2Pit8kZS1dLrSxVwBA+xQs5geUONs/kBdo S4QX5OYhI4DocPuZzezEcLaHAmnqpsiMmrUssVNBT5VOzDz6BnDil0I/1RdsfFZy rYfDbE1mUG+cnphGtVdwhXYqdSuaFuFCh1zyzYXrZ4drNQ84vxlJUqa//Iad6nqY MMuO0wc0QNYkP2Q0vHiKwCVwCrLzLwOxyGL4P1dZhbGIPYaAqXLUvIlzv9NkzZfI fOvcvHpZrehVuQRVmDO4XnuYlSPzn3B+Id4Yvk2vJrpJbR0chA2kvwQZOG/zsN8f fOB/Fcw3XACb/zOPUrSqnlt2/fkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRwi3+N AsX1owq962KkrFKfZp5FNDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUzNTM4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBofisMA0GCSqGSIb3DQEBCwUAA4IBAQACcBDy/ECELyuCdT0GLsdPJKr5 NB03Ihq50QD0yW/+TBkGUJb6q2NapQjj/OScNjClbHQc+ydvdmCzxy7MDIYxTRWL mbHG1SqnQXFJcob2wl1bYGXdj396VdmNO5Ib1MSkYh18EkpGAztzfjk7XluFbY5p 3buqB91zY1GBS4z4veFkaymnEyLYBwyx/33XNZR1+Dz61pqM2ZKYpDq5Mt+j7JUQ n6zehNR83OTso3vDfsNdpLmb05srVQqJFr1C48w+1LrBLKF+fL8KVCVzvwTU4KPy alk+wcHtZm8qYK0rZsvJG9QBlaChKT4jAgk//E5SZlx0KNaW1UPXCOHAe7px -----END CERTIFICATE-----Generated at Sat May 2 21:05:01 2026 by rpki-client