$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS153577.roa File: AS153577.roa (raw, json) Hash identifier: ibpwb4w/OGICGi4+slJoP2jlTrywUR9+0jtKepiVCto= Subject key identifier: 15:55:81:21:B8:50:99:23:B2:78:0C:9A:65:86:A3:CA:BF:1B:5C:2D Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 78FD5A062A899461DC548581796D5E01D8C51635 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153577.roa Signing time: Sat 02 May 2026 09:22:59 +0000 ROA not before: Sat 02 May 2026 09:17:59 +0000 ROA not after: Sat 01 May 2027 09:22:59 +0000 asID: 153577 IP address blocks: 144.79.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:fd:5a:06:2a:89:94:61:dc:54:85:81:79:6d:5e:01:d8:c5:16:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:17:59 2026 GMT Not After : May 1 09:22:59 2027 GMT Subject: CN=15558121B8509923B2780C9A6586A3CABF1B5C2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:db:1c:fc:84:73:cb:2c:71:b9:c2:50:da:70: b4:78:2d:72:7b:5e:e7:c0:44:bd:dd:cd:4e:20:e3: 1b:ff:1b:b8:18:d5:0a:16:c7:21:a0:b7:8e:f9:f9: 33:9e:97:2c:a9:ad:f5:5e:c5:3c:88:d7:3a:9a:b2: 51:8d:73:b3:38:8b:38:73:bc:cd:da:1e:8c:be:cc: 62:f0:04:9b:1a:a3:eb:7a:27:9b:da:76:46:47:48: a0:54:6a:8f:af:81:fa:9a:5e:7d:b3:4a:20:ac:34: c4:b2:23:ce:41:79:31:97:38:77:7d:4d:7c:44:9e: af:0c:7e:20:68:dd:e0:3e:56:91:e7:9c:11:cf:80: 1b:97:4f:39:a6:c2:7e:d6:50:70:44:01:a9:74:87: 73:8e:14:6a:d9:a5:52:16:14:9c:4c:52:68:8f:e6: e2:76:d4:fe:69:c5:4c:6e:44:68:02:06:ff:2f:c1: 7e:de:e9:e8:42:6b:f6:d6:78:5c:4a:fd:03:b6:20: b7:2a:62:6a:a7:31:cd:7e:ac:ae:5b:46:4f:78:17: 3d:00:01:ce:7a:ae:62:57:b2:77:7b:cb:ca:21:bc: 35:96:b9:c9:e5:4a:e2:c3:89:d7:31:51:eb:b1:be: 89:fb:ba:4a:90:36:99:db:96:4b:34:06:54:c0:65: 9c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:55:81:21:B8:50:99:23:B2:78:0C:9A:65:86:A3:CA:BF:1B:5C:2D X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153577.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.240.0/24 Signature Algorithm: sha256WithRSAEncryption 92:8d:dc:b0:5f:cb:7d:6b:e1:21:34:fb:59:7d:00:d7:42:09: 27:d4:2a:e7:dd:78:6b:b2:6e:a1:83:a0:f7:be:a3:77:36:b6: a5:9c:75:17:06:56:14:ce:b6:63:12:cb:d1:0a:ea:ec:51:14: d2:54:03:b8:dd:b1:07:d5:bd:bb:46:45:c6:3a:77:f1:35:67: 04:88:c7:b9:88:11:94:9b:1d:41:af:dc:7f:72:41:79:86:71: 08:94:3c:7b:83:ad:fa:7c:28:9c:53:57:9f:4d:ee:be:3e:6c: 17:57:df:9d:2d:ff:b4:54:f1:2d:f4:ec:4a:39:d2:9d:ce:f2: 0d:7c:e6:6a:ff:73:e6:0f:2a:e5:5e:fc:25:53:ec:f4:1a:2b: 62:b7:97:35:53:33:cb:23:17:1f:2f:c2:92:9d:bc:00:17:ab: 07:63:5c:dc:04:2c:f6:cc:f6:bb:aa:23:68:2a:dc:32:9c:38: d7:b1:06:d7:0f:a8:2f:e9:34:d6:6f:96:a1:58:64:cb:f9:3f: 44:3d:e3:f6:09:bf:5f:8f:ca:da:f6:32:82:fe:1a:df:ab:2f: 59:8d:f0:d4:a6:d6:46:32:08:a0:75:e3:13:42:ad:13:48:83: ed:e0:bc:3c:a3:84:2d:4e:bf:24:69:07:6e:89:44:98:3e:7c: 5b:48:cb:42 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUeP1aBiqJlGHcVIWBeW1eAdjFFjUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTc1OVoX DTI3MDUwMTA5MjI1OVowMzExMC8GA1UEAxMoMTU1NTgxMjFCODUwOTkyM0IyNzgw QzlBNjU4NkEzQ0FCRjFCNUMyRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK3bHPyEc8sscbnCUNpwtHgtcnte58BEvd3NTiDjG/8buBjVChbHIaC3jvn5 M56XLKmt9V7FPIjXOpqyUY1zsziLOHO8zdoejL7MYvAEmxqj63onm9p2RkdIoFRq j6+B+ppefbNKIKw0xLIjzkF5MZc4d31NfESerwx+IGjd4D5WkeecEc+AG5dPOabC ftZQcEQBqXSHc44UatmlUhYUnExSaI/m4nbU/mnFTG5EaAIG/y/Bft7p6EJr9tZ4 XEr9A7YgtypiaqcxzX6srltGT3gXPQABznquYleyd3vLyiG8NZa5yeVK4sOJ1zFR 67G+ifu6SpA2mduWSzQGVMBlnIUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQVVYEh uFCZI7J4DJplhqPKvxtcLTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUzNTc3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAkE/wMA0GCSqGSIb3DQEBCwUAA4IBAQCSjdywX8t9a+EhNPtZfQDXQgkn 1Crn3Xhrsm6hg6D3vqN3NralnHUXBlYUzrZjEsvRCursURTSVAO43bEH1b27RkXG OnfxNWcEiMe5iBGUmx1Br9x/ckF5hnEIlDx7g636fCicU1efTe6+PmwXV9+dLf+0 VPEt9OxKOdKdzvINfOZq/3PmDyrlXvwlU+z0Gitit5c1UzPLIxcfL8KSnbwAF6sH Y1zcBCz2zPa7qiNoKtwynDjXsQbXD6gv6TTWb5ahWGTL+T9EPeP2Cb9fj8ra9jKC /hrfqy9ZjfDUptZGMgigdeMTQq0TSIPt4Lw8o4QtTr8kaQduiUSYPnxbSMtC -----END CERTIFICATE-----Generated at Sat May 2 21:03:33 2026 by rpki-client