$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS153601.roa File: AS153601.roa (raw, json) Hash identifier: fgfIk3bcv0SYDn45gZ+Q+yMpO/hmm24SzFeJzzi5fGE= Subject key identifier: 63:49:97:42:54:D4:DA:77:26:E8:CA:89:9A:4B:3C:A2:9F:57:A9:03 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2BC947A07BC6DA4AD7C409A19BEA9B9C5563A463 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153601.roa Signing time: Sat 02 May 2026 09:24:20 +0000 ROA not before: Sat 02 May 2026 09:19:20 +0000 ROA not after: Sat 01 May 2027 09:24:20 +0000 asID: 153601 IP address blocks: 161.248.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c9:47:a0:7b:c6:da:4a:d7:c4:09:a1:9b:ea:9b:9c:55:63:a4:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:19:20 2026 GMT Not After : May 1 09:24:20 2027 GMT Subject: CN=6349974254D4DA7726E8CA899A4B3CA29F57A903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fc:7f:9b:09:65:d4:c4:29:fb:aa:80:c3:82: 29:93:bb:34:36:7b:3d:bf:7f:26:41:f8:b8:2a:cb: 4b:f8:74:f0:b7:e5:ae:41:35:09:b1:53:c7:01:4c: e7:ca:e9:66:a3:1a:d0:8b:a3:74:f9:a0:ee:90:ee: 93:e4:b3:1f:df:a7:71:54:62:22:32:57:27:f1:40: 94:36:ba:4c:fc:bc:6e:12:68:78:f7:38:85:b7:d2: 22:9e:5b:0d:b7:ad:32:e6:59:2a:ab:0b:2d:46:eb: ba:30:85:7a:3d:c6:37:e7:a2:2a:22:ec:aa:4b:b8: f2:76:94:7c:8e:30:82:29:30:00:80:f5:45:58:88: 38:80:a0:9d:6b:a9:df:e5:e7:6d:e3:e0:00:58:7f: 4e:f3:e3:3c:8f:ed:10:32:8c:14:3e:9c:d2:4b:3a: ea:86:6e:e9:e2:56:24:5c:7d:de:75:36:d1:e5:ae: 34:41:b5:63:72:09:7e:5a:66:6f:ef:93:03:aa:3b: 9f:a6:31:82:77:f2:35:76:9c:db:97:e6:01:ef:11: 91:7c:f4:68:36:ca:b8:94:d2:64:c1:c3:ba:38:ae: cf:b9:1d:1a:02:23:9b:ff:80:61:5a:11:1c:c1:26: 32:6d:3e:4b:65:b9:a0:4c:ce:9a:df:d8:25:17:6b: cc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:49:97:42:54:D4:DA:77:26:E8:CA:89:9A:4B:3C:A2:9F:57:A9:03 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153601.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.248.233.0/24 Signature Algorithm: sha256WithRSAEncryption 04:9d:95:39:d9:c6:f4:77:0f:ae:99:dd:50:99:c0:78:92:84: e8:07:96:f8:b9:74:b5:d7:0f:3f:9d:36:a7:8b:cd:b4:0f:b1: 55:39:69:8e:83:fa:b1:c3:42:82:82:3f:ba:55:a3:df:83:57: 2f:d4:99:0b:96:12:d4:71:02:0e:60:22:ef:4a:8b:3e:63:3e: 84:67:24:a2:0c:0a:7f:e6:e1:95:ac:de:0b:25:ef:00:3a:f5: 09:76:f0:2b:61:75:c2:4d:d8:60:48:09:62:77:70:cb:7e:a6: 09:5e:3e:2a:ea:c5:77:fd:a8:75:89:2a:8c:d2:64:5e:79:2d: ec:bd:ac:d9:ec:fc:1e:32:c2:03:4d:9e:62:81:51:6a:0d:18: 76:1f:e4:60:06:54:ad:43:29:7c:d1:5f:9d:25:c4:2b:00:38: 3a:fd:2f:9a:71:00:2a:7e:5e:07:12:01:07:1f:f9:d8:bc:d1: 4b:6f:0f:d0:be:4e:1a:61:79:30:9d:2d:33:6d:30:a7:e9:ab: ca:b9:23:f5:03:95:7f:4f:a3:1d:46:a9:28:87:19:97:b9:00: 83:6a:d2:40:56:f6:75:25:c0:98:7a:a6:7c:fb:dd:dd:56:b7: ff:6c:13:8b:bc:01:5b:f1:16:2f:d6:4f:6e:ee:64:28:4b:05: a7:83:f2:20 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUK8lHoHvG2krXxAmhm+qbnFVjpGMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTkyMFoX DTI3MDUwMTA5MjQyMFowMzExMC8GA1UEAxMoNjM0OTk3NDI1NEQ0REE3NzI2RThD QTg5OUE0QjNDQTI5RjU3QTkwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ38f5sJZdTEKfuqgMOCKZO7NDZ7Pb9/JkH4uCrLS/h08LflrkE1CbFTxwFM 58rpZqMa0IujdPmg7pDuk+SzH9+ncVRiIjJXJ/FAlDa6TPy8bhJoePc4hbfSIp5b DbetMuZZKqsLLUbrujCFej3GN+eiKiLsqku48naUfI4wgikwAID1RViIOICgnWup 3+XnbePgAFh/TvPjPI/tEDKMFD6c0ks66oZu6eJWJFx93nU20eWuNEG1Y3IJflpm b++TA6o7n6YxgnfyNXac25fmAe8RkXz0aDbKuJTSZMHDujiuz7kdGgIjm/+AYVoR HMEmMm0+S2W5oEzOmt/YJRdrzEMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRjSZdC VNTadyboyomaSzyin1epAzAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUzNjAxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAofjpMA0GCSqGSIb3DQEBCwUAA4IBAQAEnZU52cb0dw+umd1QmcB4koTo B5b4uXS11w8/nTani820D7FVOWmOg/qxw0KCgj+6VaPfg1cv1JkLlhLUcQIOYCLv Sos+Yz6EZySiDAp/5uGVrN4LJe8AOvUJdvArYXXCTdhgSAlid3DLfqYJXj4q6sV3 /ah1iSqM0mReeS3svazZ7PweMsIDTZ5igVFqDRh2H+RgBlStQyl80V+dJcQrADg6 /S+acQAqfl4HEgEHH/nYvNFLbw/Qvk4aYXkwnS0zbTCn6avKuSP1A5V/T6MdRqko hxmXuQCDatJAVvZ1JcCYeqZ8+93dVrf/bBOLvAFb8RYv1k9u7mQoSwWng/Ig -----END CERTIFICATE-----Generated at Sat May 2 21:03:44 2026 by rpki-client