$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS153962.roa File: AS153962.roa (raw, json) Hash identifier: rA8m1pRPwjLLl/9hbFkay3Ms0n/Q3kxmr9VUPSCeiUk= Subject key identifier: F8:3D:06:88:96:FA:11:93:12:80:F2:74:14:F4:1C:82:9A:44:45:E0 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2496227A069FECF9AF5110A779ABF74D2B1F88D7 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153962.roa Signing time: Sat 02 May 2026 09:25:06 +0000 ROA not before: Sat 02 May 2026 09:20:06 +0000 ROA not after: Sat 01 May 2027 09:25:06 +0000 asID: 153962 IP address blocks: 165.99.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:96:22:7a:06:9f:ec:f9:af:51:10:a7:79:ab:f7:4d:2b:1f:88:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:20:06 2026 GMT Not After : May 1 09:25:06 2027 GMT Subject: CN=F83D068896FA11931280F27414F41C829A4445E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5f:d1:a8:93:ab:aa:1a:25:15:4d:9b:bf:e0: 78:4a:34:16:1a:da:dc:83:80:2b:ea:e9:cc:40:c0: 39:bc:0f:63:a6:10:b8:ec:a4:d7:7c:26:2c:63:f0: 79:8e:e4:bf:6b:a7:7a:d4:0b:5e:2b:e0:78:a2:d5: 2e:0d:41:58:89:68:ba:b2:14:f4:ba:fa:89:ec:c2: a5:e5:b3:e0:aa:23:f0:32:db:70:72:0c:b4:02:5e: 70:03:a9:61:74:37:45:b5:c1:ec:8d:ed:85:df:37: 53:b0:c5:d0:01:b9:d3:71:df:26:0d:14:3e:15:2f: 04:2b:d3:b1:fb:b9:4f:20:08:15:fc:1d:36:97:12: 64:3d:f6:0a:c2:e5:95:10:e1:65:e1:c2:2c:0c:f0: 5c:f4:66:06:07:60:c8:02:fc:b6:36:0e:a7:94:b9: 5c:5b:55:63:aa:d5:ad:05:04:ca:fe:0e:26:3b:11: 36:f7:c5:62:26:45:c8:57:83:81:c4:9e:21:c7:e9: e1:11:7c:87:42:7a:52:51:90:d0:37:cf:1d:84:1e: d0:6a:0c:dd:69:14:fa:52:2c:9d:cc:2d:0a:65:5c: 03:b8:4e:0d:4d:09:38:18:f0:16:b1:6a:67:5e:e5: 0f:c4:0a:67:0a:91:c8:1d:87:16:67:39:38:21:3b: fc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3D:06:88:96:FA:11:93:12:80:F2:74:14:F4:1C:82:9A:44:45:E0 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153962.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.99.186.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:0b:67:aa:60:36:77:4a:c2:95:7d:01:b4:52:54:5e:4c:1f: e6:e5:54:dc:98:75:0c:ed:5a:c9:8c:69:1e:73:72:b7:da:94: 1d:d4:99:9e:53:32:1a:e2:c3:6a:83:fe:40:b4:68:7b:9c:6c: 58:51:1f:f2:e9:59:d5:b4:1a:87:49:c3:d5:36:cd:6c:3e:a4: ce:ef:c5:2e:fb:69:32:9a:3e:56:15:58:75:f0:f4:51:67:2f: 8f:b8:5b:d2:0d:61:5e:42:50:be:39:4f:30:0c:16:ba:ca:72: 66:b9:09:46:26:2b:d2:c9:61:12:9b:bc:73:38:c5:80:ed:ef: 86:4a:52:13:4d:fa:5c:c1:1b:d5:48:ad:65:7a:fd:4d:e7:3f: c6:d5:a5:cf:08:49:e4:97:90:66:74:ee:c9:18:b0:7d:3c:ea: 8f:a7:e6:fb:0d:79:16:2e:c0:c5:46:b2:5d:b2:db:2e:13:bf: 1a:76:9e:a1:98:32:35:61:a4:22:16:d6:8c:cf:8b:1b:f7:fd: ed:f5:a8:fb:c6:18:39:28:10:2a:58:1f:ab:18:12:df:92:14: 3b:60:67:36:4b:e9:9a:95:01:31:df:e9:78:ea:88:03:30:ee: eb:f9:32:93:44:aa:24:df:0f:c5:a9:ba:4b:b7:54:0c:6a:d0: cc:00:ef:7d -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUJJYiegaf7PmvURCneav3TSsfiNcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MjAwNloX DTI3MDUwMTA5MjUwNlowMzExMC8GA1UEAxMoRjgzRDA2ODg5NkZBMTE5MzEyODBG Mjc0MTRGNDFDODI5QTQ0NDVFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL1f0aiTq6oaJRVNm7/geEo0Fhra3IOAK+rpzEDAObwPY6YQuOyk13wmLGPw eY7kv2unetQLXivgeKLVLg1BWIlourIU9Lr6iezCpeWz4Koj8DLbcHIMtAJecAOp YXQ3RbXB7I3thd83U7DF0AG503HfJg0UPhUvBCvTsfu5TyAIFfwdNpcSZD32CsLl lRDhZeHCLAzwXPRmBgdgyAL8tjYOp5S5XFtVY6rVrQUEyv4OJjsRNvfFYiZFyFeD gcSeIcfp4RF8h0J6UlGQ0DfPHYQe0GoM3WkU+lIsncwtCmVcA7hODU0JOBjwFrFq Z17lD8QKZwqRyB2HFmc5OCE7/GcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBT4PQaI lvoRkxKA8nQU9ByCmkRF4DAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUzOTYyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQApWO6MA0GCSqGSIb3DQEBCwUAA4IBAQCfC2eqYDZ3SsKVfQG0UlReTB/m 5VTcmHUM7VrJjGkec3K32pQd1JmeUzIa4sNqg/5AtGh7nGxYUR/y6VnVtBqHScPV Ns1sPqTO78Uu+2kymj5WFVh18PRRZy+PuFvSDWFeQlC+OU8wDBa6ynJmuQlGJivS yWESm7xzOMWA7e+GSlITTfpcwRvVSK1lev1N5z/G1aXPCEnkl5BmdO7JGLB9POqP p+b7DXkWLsDFRrJdstsuE78adp6hmDI1YaQiFtaMz4sb9/3t9aj7xhg5KBAqWB+r GBLfkhQ7YGc2S+malQEx3+l46ogDMO7r+TKTRKok3w/FqbpLt1QMatDMAO99 -----END CERTIFICATE-----Generated at Sat May 2 21:04:39 2026 by rpki-client