$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS153554.roa File: AS153554.roa (raw, json) Hash identifier: 36GihwqtzkmZ7BPOqqTsxVavOUFhzMxtLy+GITW+NXY= Subject key identifier: B1:40:C2:1B:FA:B9:30:E1:A3:E8:7D:E3:B4:15:89:00:ED:4F:18:2D Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 3FA123A9C8405E05547901FC521813A739EA0498 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153554.roa Signing time: Sat 02 May 2026 09:24:14 +0000 ROA not before: Sat 02 May 2026 09:19:14 +0000 ROA not after: Sat 01 May 2027 09:24:14 +0000 asID: 153554 IP address blocks: 161.248.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a1:23:a9:c8:40:5e:05:54:79:01:fc:52:18:13:a7:39:ea:04:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:19:14 2026 GMT Not After : May 1 09:24:14 2027 GMT Subject: CN=B140C21BFAB930E1A3E87DE3B4158900ED4F182D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e8:e1:61:6c:9c:4c:55:9e:31:a6:6d:69:ba: 27:f6:ea:ae:be:a5:0b:99:11:1e:9c:87:c1:f2:c3: ba:59:1f:87:c1:d3:3b:ae:e8:1e:9f:75:ec:0d:d0: 71:c3:d2:27:01:4b:26:07:c7:c7:a6:a2:c1:05:ae: 96:16:89:dd:fb:00:81:7b:df:db:63:a0:b2:28:77: f5:c0:6f:cc:d4:8d:36:6e:58:29:1d:55:95:ce:0a: c5:93:5d:90:cc:67:27:6a:43:dd:bb:40:b2:34:f2: 60:2d:bc:a6:28:a2:1d:00:16:67:2a:e2:12:02:68: 0d:6a:b8:33:8f:25:8d:df:80:be:2c:a8:af:58:33: ca:db:de:88:32:c4:cd:08:76:01:d5:2a:a4:11:79: a5:b3:8c:a2:3a:37:40:1f:c3:57:07:13:4d:d0:14: af:15:9c:24:56:45:2f:19:92:52:f3:61:fd:d0:3d: 8c:68:52:1e:1e:26:55:6f:47:8f:d6:cd:46:2a:a1: 69:bb:a6:23:aa:a4:9c:61:53:98:10:8f:4d:95:45: 52:fe:1c:7f:62:77:2a:c9:52:21:96:6c:5c:b3:78: 5f:7c:f8:a2:95:d7:ae:49:08:b1:91:ca:3d:8e:d1: b4:3b:5c:88:de:6f:00:78:bf:2f:13:81:44:09:0e: d2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:40:C2:1B:FA:B9:30:E1:A3:E8:7D:E3:B4:15:89:00:ED:4F:18:2D X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153554.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.248.158.0/24 Signature Algorithm: sha256WithRSAEncryption 45:74:38:ee:eb:d2:42:a6:8e:69:a2:4b:31:48:d7:fa:f0:0e: 6e:87:06:7b:6b:f0:6f:99:b5:3e:24:14:6d:43:f1:fa:09:19: d0:69:21:a7:d5:b1:2e:6b:f4:78:8c:bc:e6:a2:05:bf:e3:ee: a2:79:b4:fb:c1:a3:3b:23:f9:af:4e:00:d8:eb:1e:17:ff:ac: 2b:8b:29:1b:51:28:75:de:a4:f7:d7:42:4b:49:20:1f:50:32: f5:c2:38:dd:39:e8:71:4e:96:fb:dc:8f:5f:c8:e4:4b:2e:d4: 78:df:0a:de:97:be:e6:ad:e9:68:bf:f3:c7:c3:09:54:79:88: d0:ab:7c:b0:1c:0c:d3:e4:de:62:a0:7e:b7:87:a6:37:16:b6: e0:e0:ed:26:6d:cc:f8:89:bf:43:35:b1:6d:16:a0:b6:6c:a3: 85:84:9c:1d:6d:d5:2e:35:cb:e3:d2:e1:ca:0e:40:1d:69:4e: bb:94:c4:e9:f3:20:49:1e:3c:6b:d8:bd:f0:ef:a5:32:13:69: 77:88:05:69:a7:07:f8:b7:41:68:2d:59:8a:30:c6:14:e3:83: a4:7e:f2:c7:5f:e0:e7:bf:7b:cf:ff:7d:d2:c7:82:c6:6c:af: 35:c0:b8:91:cf:16:fa:33:2d:ca:05:63:d1:b5:ac:a5:4b:e9: db:53:d4:68 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUP6EjqchAXgVUeQH8UhgTpznqBJgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTkxNFoX DTI3MDUwMTA5MjQxNFowMzExMC8GA1UEAxMoQjE0MEMyMUJGQUI5MzBFMUEzRTg3 REUzQjQxNTg5MDBFRDRGMTgyRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ/o4WFsnExVnjGmbWm6J/bqrr6lC5kRHpyHwfLDulkfh8HTO67oHp917A3Q ccPSJwFLJgfHx6aiwQWulhaJ3fsAgXvf22Ogsih39cBvzNSNNm5YKR1Vlc4KxZNd kMxnJ2pD3btAsjTyYC28piiiHQAWZyriEgJoDWq4M48ljd+Aviyor1gzytveiDLE zQh2AdUqpBF5pbOMojo3QB/DVwcTTdAUrxWcJFZFLxmSUvNh/dA9jGhSHh4mVW9H j9bNRiqhabumI6qknGFTmBCPTZVFUv4cf2J3KslSIZZsXLN4X3z4opXXrkkIsZHK PY7RtDtciN5vAHi/LxOBRAkO0vcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSxQMIb +rkw4aPofeO0FYkA7U8YLTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUzNTU0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAofieMA0GCSqGSIb3DQEBCwUAA4IBAQBFdDju69JCpo5poksxSNf68A5u hwZ7a/BvmbU+JBRtQ/H6CRnQaSGn1bEua/R4jLzmogW/4+6iebT7waM7I/mvTgDY 6x4X/6wriykbUSh13qT310JLSSAfUDL1wjjdOehxTpb73I9fyORLLtR43wrel77m relov/PHwwlUeYjQq3ywHAzT5N5ioH63h6Y3Frbg4O0mbcz4ib9DNbFtFqC2bKOF hJwdbdUuNcvj0uHKDkAdaU67lMTp8yBJHjxr2L3w76UyE2l3iAVppwf4t0FoLVmK MMYU44OkfvLHX+Dnv3vP/33Sx4LGbK81wLiRzxb6My3KBWPRtaylS+nbU9Ro -----END CERTIFICATE-----Generated at Sat May 2 21:03:32 2026 by rpki-client