$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS153904.roa File: AS153904.roa (raw, json) Hash identifier: JgFIDysV3aIbguia1QlzfG2/PFwYHigptZsuWN9vM+k= Subject key identifier: 19:B1:08:E4:F0:A9:05:18:F2:CD:7A:C7:DC:82:2D:91:FC:30:72:52 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 4F2D47950601D951387822F2D9F319A8BF6C6082 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153904.roa Signing time: Mon 14 Sep 2026 07:35:09 +0000 ROA not before: Mon 14 Sep 2026 07:30:09 +0000 ROA not after: Mon 13 Sep 2027 07:35:09 +0000 asID: 153904 IP address blocks: 157.10.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:2d:47:95:06:01:d9:51:38:78:22:f2:d9:f3:19:a8:bf:6c:60:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Sep 14 07:30:09 2026 GMT Not After : Sep 13 07:35:09 2027 GMT Subject: CN=19B108E4F0A90518F2CD7AC7DC822D91FC307252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:78:52:a4:86:1d:46:7e:64:b6:88:1b:43:2b: 5b:d6:9d:ab:71:c7:93:11:e5:aa:0f:ea:ab:ce:27: cc:e9:e1:6e:80:60:df:33:c6:e6:d0:1f:a8:e8:41: 24:85:a8:51:e5:96:19:a6:01:40:1c:6d:41:e9:40: 97:62:fc:7b:ba:16:8e:ab:98:35:eb:2d:48:c2:58: 81:69:8c:70:ca:fc:56:e1:6f:82:fa:c4:e8:ab:81: f0:7a:af:c1:f3:f9:67:0a:3b:8a:63:fc:8b:da:12: 0e:99:be:48:45:67:88:80:60:af:c0:5f:d9:ed:f2: d3:0d:f2:79:dd:1b:4a:f4:1e:ec:5c:01:5d:bd:68: dc:28:c9:50:9f:d3:9d:c4:9a:7c:0d:5b:08:4d:82: 5a:34:95:23:4a:f6:c5:fc:5f:33:3f:02:92:fa:5d: f3:19:61:06:13:8c:20:17:37:4e:b1:8e:41:16:e3: be:62:ed:1b:71:b7:ee:94:e6:0c:a3:b4:3a:38:db: e2:29:06:46:74:41:de:c5:85:29:01:7b:4a:98:b7: c0:7e:e9:d7:7f:15:2c:4b:a8:c5:eb:b8:20:9b:6a: f2:b8:36:71:7d:31:91:1b:7c:cf:90:88:61:d8:85: a9:e2:ff:d3:5d:85:96:c5:ec:d9:d7:64:30:0b:75: e7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B1:08:E4:F0:A9:05:18:F2:CD:7A:C7:DC:82:2D:91:FC:30:72:52 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153904.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.237.0/24 Signature Algorithm: sha256WithRSAEncryption 23:ca:ce:b9:76:f0:48:20:ae:6c:ac:52:99:df:36:f0:53:5d: a6:34:4e:64:c7:d0:c5:a2:b4:ec:f4:d5:6b:47:a2:d2:35:07: 76:65:71:4d:4e:37:f6:5e:14:11:68:8f:5e:d4:16:ae:a2:90: a8:e6:5c:1c:c9:44:f6:7c:ce:76:54:32:b9:f2:f4:b5:50:4d: 26:b5:4e:2e:db:d3:54:1d:8d:4d:73:f5:bd:ed:01:d2:20:3b: 61:7d:42:0c:b2:2d:52:4a:bc:5c:c1:9f:0e:29:82:1e:f1:d4: 2b:a3:6a:3d:45:0f:ca:3a:84:3b:97:31:71:2b:b6:4f:d5:b9: 55:74:76:be:f0:fd:d2:4e:19:ef:3f:43:51:9d:a9:7a:99:70: 35:93:0c:68:70:7c:75:50:1c:ed:d3:c8:c1:ef:5a:e7:a3:88: 68:44:ba:39:bd:96:3b:d0:56:e0:d2:5b:64:9e:56:5e:2c:07: 4e:bd:bf:39:b7:46:27:c6:0b:4d:81:1b:13:11:a2:b7:15:94: 6a:9b:34:60:00:32:66:2b:f7:63:36:f6:13:5e:33:db:fb:f2: 8a:8c:b4:67:d2:7f:6b:20:02:38:8b:60:da:d3:59:25:34:30: 6b:10:5b:26:62:87:e7:4c:c5:f9:a0:10:fb:68:97:e5:f1:2d: 64:28:09:b5 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUTy1HlQYB2VE4eCLy2fMZqL9sYIIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDkxNDA3MzAwOVoX DTI3MDkxMzA3MzUwOVowMzExMC8GA1UEAxMoMTlCMTA4RTRGMEE5MDUxOEYyQ0Q3 QUM3REM4MjJEOTFGQzMwNzI1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZ4UqSGHUZ+ZLaIG0MrW9adq3HHkxHlqg/qq84nzOnhboBg3zPG5tAfqOhB JIWoUeWWGaYBQBxtQelAl2L8e7oWjquYNestSMJYgWmMcMr8VuFvgvrE6KuB8Hqv wfP5Zwo7imP8i9oSDpm+SEVniIBgr8Bf2e3y0w3yed0bSvQe7FwBXb1o3CjJUJ/T ncSafA1bCE2CWjSVI0r2xfxfMz8Ckvpd8xlhBhOMIBc3TrGOQRbjvmLtG3G37pTm DKO0Ojjb4ikGRnRB3sWFKQF7Spi3wH7p138VLEuoxeu4IJtq8rg2cX0xkRt8z5CI YdiFqeL/012FlsXs2ddkMAt1500CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQZsQjk 8KkFGPLNesfcgi2R/DByUjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUzOTA0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAnQrtMA0GCSqGSIb3DQEBCwUAA4IBAQAjys65dvBIIK5srFKZ3zbwU12m NE5kx9DForTs9NVrR6LSNQd2ZXFNTjf2XhQRaI9e1BauopCo5lwcyUT2fM52VDK5 8vS1UE0mtU4u29NUHY1Nc/W97QHSIDthfUIMsi1SSrxcwZ8OKYIe8dQro2o9RQ/K OoQ7lzFxK7ZP1blVdHa+8P3SThnvP0NRnal6mXA1kwxocHx1UBzt08jB71rno4ho RLo5vZY70Fbg0ltknlZeLAdOvb85t0YnxgtNgRsTEaK3FZRqmzRgADJmK/djNvYT XjPb+/KKjLRn0n9rIAI4i2Da01klNDBrEFsmYofnTMX5oBD7aJfl8S1kKAm1 -----END CERTIFICATE-----Generated at Thu Sep 17 12:16:46 2026 by rpki-client