$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS153986.roa File: AS153986.roa (raw, json) Hash identifier: j5PT3Tiqx3A4ItoqqV+6ric84SwxGa3Xm26KTYezXt4= Subject key identifier: F4:58:60:2B:91:1F:85:C2:6B:44:D8:78:25:E7:A4:74:30:87:32:F7 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 497CE45D108AB2F156ACC408BB15AD2777C4D087 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153986.roa Signing time: Sat 02 May 2026 09:25:19 +0000 ROA not before: Sat 02 May 2026 09:20:19 +0000 ROA not after: Sat 01 May 2027 09:25:19 +0000 asID: 153986 IP address blocks: 165.99.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:7c:e4:5d:10:8a:b2:f1:56:ac:c4:08:bb:15:ad:27:77:c4:d0:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:20:19 2026 GMT Not After : May 1 09:25:19 2027 GMT Subject: CN=F458602B911F85C26B44D87825E7A474308732F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:08:71:d2:79:dc:a8:1c:39:18:60:17:65:d3: f6:c7:c3:5a:b6:d1:cf:c8:61:ff:f8:9f:63:1c:0b: 9d:ae:aa:54:00:1d:58:eb:90:cb:a6:f8:73:8c:93: 25:9f:46:e5:64:02:d9:64:f9:ac:41:bd:17:30:7f: ee:58:03:e4:c8:85:b2:94:db:27:c3:1c:83:f7:b2: 37:8d:c6:d5:e4:64:16:7c:15:af:23:33:b0:d0:29: c5:2f:c4:49:7c:79:63:3c:f2:81:79:40:3e:b9:15: 45:32:90:aa:f6:5a:bd:02:55:b1:6f:5e:82:68:fd: db:84:66:c7:ae:64:14:5c:10:66:0c:bd:94:07:46: 57:55:1a:4f:de:0b:7a:b2:09:84:a2:7c:f7:39:71: 57:78:ae:6f:f1:9e:3a:58:0f:86:69:0c:3d:33:5e: 45:3e:87:b6:8b:a4:7c:68:09:3b:8e:23:49:3d:1f: b3:91:af:43:31:6d:02:0b:ee:bd:4a:67:11:47:6b: ac:23:b4:94:6f:20:f0:38:ae:c5:f9:17:2e:0e:33: e6:59:d6:a4:a2:92:b2:b0:2c:81:a0:8b:6f:6b:34: db:e9:ac:91:8e:ae:e2:27:11:2e:93:81:b6:f4:e2: 31:44:32:ca:a2:da:f5:76:b1:09:b5:68:a1:b8:dd: eb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:58:60:2B:91:1F:85:C2:6B:44:D8:78:25:E7:A4:74:30:87:32:F7 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153986.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.99.194.0/23 Signature Algorithm: sha256WithRSAEncryption 34:1b:7a:04:8d:5c:73:e2:7f:53:21:71:a6:d6:9c:8b:43:1a: 8c:4e:44:f0:57:fb:ac:ed:0d:33:be:4e:87:b9:65:3f:24:11: 1e:6a:27:7b:89:89:33:f7:03:7e:50:69:62:4e:90:7b:1a:81: e7:a3:a3:7f:16:fc:b4:9a:6e:94:92:9c:f5:97:86:63:f7:52: 4f:b6:7c:df:26:de:b4:b6:f5:0c:56:c6:b3:ec:2d:11:2f:2c: b6:91:ba:a2:75:f2:b7:62:43:4d:60:67:93:16:99:d2:25:fd: 7e:9b:a9:cb:04:38:20:f1:e4:d4:88:41:1d:75:a3:69:f9:08: 36:a9:61:23:3c:28:4b:cb:e9:cb:57:15:5d:f0:04:6a:6c:a3: 8f:0f:ec:2f:5d:96:37:b9:b0:bd:9a:11:6d:8b:2a:1d:14:08: b0:d0:ac:8c:89:9f:0e:45:3b:06:b3:92:e1:53:95:04:4a:f9: 51:fa:5e:8a:87:59:a9:2e:9c:db:00:1d:5a:4f:cf:99:13:51: 7b:79:89:61:15:06:03:b7:cb:15:00:55:d8:4c:2b:28:f5:8e: 12:94:e4:11:22:14:fc:b0:74:8f:5a:a5:33:03:53:57:5c:24: 68:ef:fa:fe:ec:60:ff:74:1c:2c:aa:61:ff:de:3e:e5:26:a6: 98:4e:34:9b -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUSXzkXRCKsvFWrMQIuxWtJ3fE0IcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MjAxOVoX DTI3MDUwMTA5MjUxOVowMzExMC8GA1UEAxMoRjQ1ODYwMkI5MTFGODVDMjZCNDRE ODc4MjVFN0E0NzQzMDg3MzJGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKwIcdJ53KgcORhgF2XT9sfDWrbRz8hh//ifYxwLna6qVAAdWOuQy6b4c4yT JZ9G5WQC2WT5rEG9FzB/7lgD5MiFspTbJ8Mcg/eyN43G1eRkFnwVryMzsNApxS/E SXx5YzzygXlAPrkVRTKQqvZavQJVsW9egmj924Rmx65kFFwQZgy9lAdGV1UaT94L erIJhKJ89zlxV3iub/GeOlgPhmkMPTNeRT6HtoukfGgJO44jST0fs5GvQzFtAgvu vUpnEUdrrCO0lG8g8DiuxfkXLg4z5lnWpKKSsrAsgaCLb2s02+mskY6u4icRLpOB tvTiMUQyyqLa9XaxCbVoobjd64ECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBT0WGAr kR+FwmtE2Hgl56R0MIcy9zAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUzOTg2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBpWPCMA0GCSqGSIb3DQEBCwUAA4IBAQA0G3oEjVxz4n9TIXGm1pyLQxqM TkTwV/us7Q0zvk6HuWU/JBEeaid7iYkz9wN+UGliTpB7GoHno6N/Fvy0mm6Ukpz1 l4Zj91JPtnzfJt60tvUMVsaz7C0RLyy2kbqidfK3YkNNYGeTFpnSJf1+m6nLBDgg 8eTUiEEddaNp+Qg2qWEjPChLy+nLVxVd8ARqbKOPD+wvXZY3ubC9mhFtiyodFAiw 0KyMiZ8ORTsGs5LhU5UESvlR+l6Kh1mpLpzbAB1aT8+ZE1F7eYlhFQYDt8sVAFXY TCso9Y4SlOQRIhT8sHSPWqUzA1NXXCRo7/r+7GD/dBwsqmH/3j7lJqaYTjSb -----END CERTIFICATE-----Generated at Sat May 2 21:03:46 2026 by rpki-client