$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS153925.roa File: AS153925.roa (raw, json) Hash identifier: Ykm+JnhRvs1ySskHgQbblRsHoYR+iB0q6kKOBlf/fls= Subject key identifier: A4:AF:CD:F2:D3:C3:42:4D:F6:CE:B9:1E:D8:E8:BF:F4:5B:48:A7:AB Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 6369EBCA281D78332C7C1BFACFCD3F83F0100FD3 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153925.roa Signing time: Sat 02 May 2026 09:25:08 +0000 ROA not before: Sat 02 May 2026 09:20:08 +0000 ROA not after: Sat 01 May 2027 09:25:08 +0000 asID: 153925 IP address blocks: 165.99.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:69:eb:ca:28:1d:78:33:2c:7c:1b:fa:cf:cd:3f:83:f0:10:0f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:20:08 2026 GMT Not After : May 1 09:25:08 2027 GMT Subject: CN=A4AFCDF2D3C3424DF6CEB91ED8E8BFF45B48A7AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:35:b4:18:bf:fd:7a:2d:04:7b:4e:8d:6e:54: 5e:df:9b:a3:b5:3c:c8:fa:5f:6b:6f:1d:57:87:be: b5:2a:fa:81:58:e4:f7:74:97:9a:8f:94:28:e9:25: cd:58:a3:f0:1f:c3:ac:fd:c8:fb:64:da:6d:49:c5: 3b:19:62:07:af:50:26:ff:b7:e4:77:7e:c6:12:3e: 4c:da:ed:f3:48:d8:10:0e:5a:dc:52:d3:dd:d3:72: db:29:34:bc:7b:55:7f:e0:7b:fd:b3:b0:99:3e:6e: d8:4d:f8:2c:dc:92:38:3b:f2:8e:22:9c:c8:09:60: 6a:b0:2b:f3:05:c2:d1:49:95:50:04:3c:fa:a2:ca: cd:28:6c:3b:70:5c:57:fb:1e:82:5c:95:18:06:e8: 53:61:16:eb:bb:51:6d:dd:af:7f:74:94:83:c4:87: 1b:5f:d0:03:77:d0:83:6f:da:29:70:40:f3:25:bb: e8:9b:d4:87:f6:9c:45:af:e5:dd:5a:0f:d6:a2:64: 0b:29:73:b8:87:00:95:b3:34:e4:9a:8d:73:d3:f7: 89:2d:f5:9c:91:89:23:8a:76:eb:92:4f:a6:f5:f6: 3d:b7:28:a6:35:95:16:57:9b:20:31:22:1b:69:83: d9:25:76:65:18:bd:17:96:f7:4f:80:a1:21:a5:c8: c7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:AF:CD:F2:D3:C3:42:4D:F6:CE:B9:1E:D8:E8:BF:F4:5B:48:A7:AB X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153925.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.99.95.0/24 Signature Algorithm: sha256WithRSAEncryption 25:63:11:d5:14:75:5c:06:42:ee:e0:27:d0:cb:2f:e5:80:1b: 76:79:be:c2:4b:0c:0f:72:d0:6d:85:0d:11:a8:27:c5:40:73: 8d:0d:af:15:da:b4:59:b0:b2:97:89:42:aa:f8:14:b8:d2:62: f5:11:76:40:d0:1c:f7:26:8e:25:97:cb:97:a8:c9:83:04:15: 3d:95:60:1e:0c:2b:15:b7:ea:d5:c0:a4:e5:ea:23:09:b1:a3: 0c:17:82:2f:48:37:f2:ff:26:0c:64:39:83:fe:af:c1:96:98: 2b:49:d9:f4:db:35:cd:77:cc:c7:77:83:0a:74:3e:c3:fc:31: 82:c3:48:4e:53:d3:78:b7:bc:61:37:49:0b:0d:87:37:66:b3: 1c:f6:08:0b:b8:7a:4c:f6:35:9a:2b:a2:cb:e7:4d:43:95:6d: 59:1f:bc:61:a2:07:19:39:03:4c:bc:c7:7d:1b:77:a1:1f:c1: cb:d1:34:d2:70:a0:f2:c0:eb:02:ad:16:21:45:17:51:e5:15: 55:1e:19:64:db:20:58:f0:35:64:20:03:07:a8:a4:13:b9:c6: d9:fd:86:b4:79:02:77:9b:86:7b:8f:c8:a9:26:d4:05:0e:f8: 87:5f:ff:7d:c1:83:2a:bd:b9:d1:bf:9c:e7:18:e6:06:79:40: 73:ed:69:57 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUY2nryigdeDMsfBv6z80/g/AQD9MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MjAwOFoX DTI3MDUwMTA5MjUwOFowMzExMC8GA1UEAxMoQTRBRkNERjJEM0MzNDI0REY2Q0VC OTFFRDhFOEJGRjQ1QjQ4QTdBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANE1tBi//XotBHtOjW5UXt+bo7U8yPpfa28dV4e+tSr6gVjk93SXmo+UKOkl zVij8B/DrP3I+2TabUnFOxliB69QJv+35Hd+xhI+TNrt80jYEA5a3FLT3dNy2yk0 vHtVf+B7/bOwmT5u2E34LNySODvyjiKcyAlgarAr8wXC0UmVUAQ8+qLKzShsO3Bc V/seglyVGAboU2EW67tRbd2vf3SUg8SHG1/QA3fQg2/aKXBA8yW76JvUh/acRa/l 3VoP1qJkCylzuIcAlbM05JqNc9P3iS31nJGJI4p265JPpvX2PbcopjWVFlebIDEi G2mD2SV2ZRi9F5b3T4ChIaXIx6sCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSkr83y 08NCTfbOuR7Y6L/0W0inqzAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUzOTI1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQApWNfMA0GCSqGSIb3DQEBCwUAA4IBAQAlYxHVFHVcBkLu4CfQyy/lgBt2 eb7CSwwPctBthQ0RqCfFQHONDa8V2rRZsLKXiUKq+BS40mL1EXZA0Bz3Jo4ll8uX qMmDBBU9lWAeDCsVt+rVwKTl6iMJsaMMF4IvSDfy/yYMZDmD/q/BlpgrSdn02zXN d8zHd4MKdD7D/DGCw0hOU9N4t7xhN0kLDYc3ZrMc9ggLuHpM9jWaK6LL501DlW1Z H7xhogcZOQNMvMd9G3ehH8HL0TTScKDywOsCrRYhRRdR5RVVHhlk2yBY8DVkIAMH qKQTucbZ/Ya0eQJ3m4Z7j8ipJtQFDviHX/99wYMqvbnRv5znGOYGeUBz7WlX -----END CERTIFICATE-----Generated at Sat May 2 21:05:17 2026 by rpki-client