$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS153922.roa File: AS153922.roa (raw, json) Hash identifier: zPsIvpxygQLFz6F4ir/PL/vfoa6pAfWoKCCSY4MRqTg= Subject key identifier: F4:DF:D3:65:F1:0C:64:06:4B:BB:52:3F:94:35:5D:8C:10:D3:F1:75 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2423B57649970C1960F062FDBBC3769A15138419 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153922.roa Signing time: Sat 02 May 2026 09:24:54 +0000 ROA not before: Sat 02 May 2026 09:19:54 +0000 ROA not after: Sat 01 May 2027 09:24:54 +0000 asID: 153922 IP address blocks: 165.99.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:23:b5:76:49:97:0c:19:60:f0:62:fd:bb:c3:76:9a:15:13:84:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:19:54 2026 GMT Not After : May 1 09:24:54 2027 GMT Subject: CN=F4DFD365F10C64064BBB523F94355D8C10D3F175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:00:66:86:cc:6e:8e:87:29:92:97:30:cd:8e: 98:04:fa:e7:ae:a7:36:50:d5:64:01:d4:f9:35:e8: 86:71:b0:1b:2e:da:56:d4:94:bb:70:f0:43:e5:98: a3:d1:ba:dd:35:df:40:0d:4b:3f:80:07:54:69:31: 09:29:41:ba:7f:16:aa:f7:44:33:d7:ab:ed:35:1e: 5d:46:0d:83:7d:07:ad:28:5f:01:42:f1:63:c6:f6: b1:b5:c0:46:c2:33:5f:c4:66:7f:f0:ab:14:ba:c9: 47:14:f7:19:f6:5b:a6:48:33:55:60:b5:8b:e6:bb: da:19:4f:8e:18:9b:aa:54:d1:9e:71:1f:ed:1d:20: 9b:cb:44:d8:b7:74:c9:c1:af:f6:63:e7:19:d2:4f: a1:3b:fe:16:5d:2d:96:12:c9:05:f9:51:52:98:bd: da:e9:31:4f:d1:43:fa:34:a2:ea:7b:1d:67:ea:0e: ba:75:8d:a3:fb:0c:f7:35:04:f5:e6:57:16:fe:10: f9:b2:fa:98:52:57:c4:92:14:d8:87:18:10:c8:d0: ea:38:6f:4f:99:b6:61:7a:9d:b7:66:d0:31:b1:38: 99:a7:ec:2a:c4:58:84:cd:d0:3a:07:a5:d4:12:01: 22:75:2b:07:8a:c6:f0:7b:0d:e8:87:b7:23:61:6d: 04:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DF:D3:65:F1:0C:64:06:4B:BB:52:3F:94:35:5D:8C:10:D3:F1:75 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153922.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.99.87.0/24 Signature Algorithm: sha256WithRSAEncryption 20:88:32:ed:8f:fb:08:94:44:43:cc:b8:8d:c5:c7:56:e0:61: 1b:5c:d4:e5:75:81:f6:6d:a7:07:56:1f:3e:84:bd:3a:cf:4f: a2:48:00:9c:83:c8:eb:57:ee:d4:37:49:00:69:3b:6f:f8:bf: 3c:d1:0a:63:94:fd:0f:e6:bf:26:24:ae:05:13:42:37:b2:31: 1f:a8:d0:bd:1a:47:a0:91:d2:d9:7a:77:41:e4:ad:93:9c:71: ad:b7:4b:6c:9f:33:16:b8:7c:8c:1a:fc:5c:cc:aa:e0:a8:bb: b2:08:5c:91:16:9a:78:d3:bf:34:be:4a:2a:04:f6:1a:af:f8: 9c:ad:d6:f8:20:88:e2:35:30:cb:75:25:c7:80:aa:82:08:a9: 2c:6c:a8:bb:f3:0a:e4:cd:f2:f0:6f:ca:75:51:6b:25:5f:c5: 11:1f:63:ce:4f:eb:3e:8f:4c:11:4f:39:44:e5:64:2a:20:ea: a9:9a:15:14:97:aa:d3:16:3c:ad:af:df:10:42:67:05:e5:a4: c3:5a:7e:9b:1b:63:6c:95:74:9c:ba:75:19:99:bc:67:37:bf: d7:01:fe:0f:1d:c2:4e:c7:a1:b3:ac:01:e0:57:88:aa:52:99: af:df:a4:7c:b3:d7:a4:df:2f:ec:6b:23:46:43:c7:dd:ec:3c: fd:bd:b9:4f -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUJCO1dkmXDBlg8GL9u8N2mhUThBkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTk1NFoX DTI3MDUwMTA5MjQ1NFowMzExMC8GA1UEAxMoRjRERkQzNjVGMTBDNjQwNjRCQkI1 MjNGOTQzNTVEOEMxMEQzRjE3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANwAZobMbo6HKZKXMM2OmAT6566nNlDVZAHU+TXohnGwGy7aVtSUu3DwQ+WY o9G63TXfQA1LP4AHVGkxCSlBun8WqvdEM9er7TUeXUYNg30HrShfAULxY8b2sbXA RsIzX8Rmf/CrFLrJRxT3GfZbpkgzVWC1i+a72hlPjhibqlTRnnEf7R0gm8tE2Ld0 ycGv9mPnGdJPoTv+Fl0tlhLJBflRUpi92ukxT9FD+jSi6nsdZ+oOunWNo/sM9zUE 9eZXFv4Q+bL6mFJXxJIU2IcYEMjQ6jhvT5m2YXqdt2bQMbE4mafsKsRYhM3QOgel 1BIBInUrB4rG8HsN6Ie3I2FtBAUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBT039Nl 8QxkBku7Uj+UNV2MENPxdTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUzOTIyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQApWNXMA0GCSqGSIb3DQEBCwUAA4IBAQAgiDLtj/sIlERDzLiNxcdW4GEb XNTldYH2bacHVh8+hL06z0+iSACcg8jrV+7UN0kAaTtv+L880QpjlP0P5r8mJK4F E0I3sjEfqNC9GkegkdLZendB5K2TnHGtt0tsnzMWuHyMGvxczKrgqLuyCFyRFpp4 0780vkoqBPYar/icrdb4IIjiNTDLdSXHgKqCCKksbKi78wrkzfLwb8p1UWslX8UR H2POT+s+j0wRTzlE5WQqIOqpmhUUl6rTFjytr98QQmcF5aTDWn6bG2NslXScunUZ mbxnN7/XAf4PHcJOx6GzrAHgV4iqUpmv36R8s9ek3y/sayNGQ8fd7Dz9vblP -----END CERTIFICATE-----Generated at Sat May 2 21:03:51 2026 by rpki-client