$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153092.roa File: AS153092.roa (raw, json) Hash identifier: QLlypGwrcfh8viwXC7HQnJX8cqZP/pSACzpBAJxy+uA= Subject key identifier: 3D:E5:BE:6B:B7:7D:F9:2F:2B:96:95:36:48:AC:FA:C8:5D:41:FA:E0 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5F76EB69D2BC86F56B84F9BD48AA63D5AF64D5BC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153092.roa Signing time: Sat 02 May 2026 21:20:48 +0000 ROA not before: Sat 02 May 2026 21:15:48 +0000 ROA not after: Sat 01 May 2027 21:20:48 +0000 asID: 153092 IP address blocks: 103.80.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:76:eb:69:d2:bc:86:f5:6b:84:f9:bd:48:aa:63:d5:af:64:d5:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:15:48 2026 GMT Not After : May 1 21:20:48 2027 GMT Subject: CN=3DE5BE6BB77DF92F2B96953648ACFAC85D41FAE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bb:2a:28:e5:17:dc:5e:54:9e:1f:2d:da:17: f3:79:89:36:0d:bd:32:1f:1f:cc:01:23:aa:f2:4b: 44:3c:73:f5:24:78:1b:75:01:77:32:82:8e:b3:89: be:e1:33:3d:b5:92:8c:c2:b1:49:84:e5:c7:4f:be: 56:90:ad:94:ea:84:bb:91:f8:d7:5a:02:1e:13:07: f3:d9:f4:bf:34:9f:cd:f4:38:a2:2b:0c:7f:e3:69: 0c:36:a8:8e:3e:8a:5d:a4:cc:cf:a4:47:6a:7f:6f: a9:50:43:f4:74:34:0b:13:56:33:b4:47:cb:da:3c: b1:a8:70:1e:0f:51:70:a4:ae:bc:87:38:6d:2b:39: 06:43:ba:50:3d:b4:42:66:fc:ed:85:bf:53:62:2b: b1:d3:55:35:24:9e:8c:e2:fc:83:aa:8e:0c:22:eb: 93:68:8b:6d:b3:c8:eb:b2:b7:2f:59:6a:b1:d6:78: d1:26:90:f8:79:99:41:2a:5a:a6:0e:9f:ab:f3:b7: c5:5b:3b:ca:0a:33:c4:41:71:c2:89:0c:72:d8:23: 1f:1a:a0:2a:7a:8d:b2:ce:cf:f6:3b:a6:86:c5:a4: 57:72:8a:27:2f:9f:8d:68:2c:2f:0b:4d:37:48:7c: 4f:73:ad:1b:90:ff:c2:7a:94:b0:f5:85:bb:a8:e5: c8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E5:BE:6B:B7:7D:F9:2F:2B:96:95:36:48:AC:FA:C8:5D:41:FA:E0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153092.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.80.214.0/23 Signature Algorithm: sha256WithRSAEncryption 38:09:61:49:fd:64:e8:f6:c5:b7:88:41:5a:35:ec:44:02:8f: 87:ef:bb:a9:6f:02:20:72:fe:6f:7b:dc:70:6b:5c:cd:69:09: 7b:16:40:a6:db:cf:3f:ae:2a:7e:33:d9:54:3a:6b:cc:dc:8e: ce:92:49:79:7e:5a:9e:ef:52:ac:5d:c3:fe:73:38:2d:75:ef: c1:17:ce:c2:52:14:28:72:b8:b7:3b:9e:a7:ad:18:59:e2:51: 5d:00:5f:c2:54:87:17:76:6f:7a:bf:c7:35:3e:f4:e5:b0:07: cf:b6:f7:fa:4a:69:4b:31:90:d8:1c:77:4c:12:20:4e:84:e8: db:05:1c:87:e3:ff:98:8f:32:71:89:04:8d:5e:8c:8c:15:b1: cb:1e:0e:fe:7a:e9:50:c0:d4:09:69:ea:ab:e9:95:e9:ce:12: b4:8b:00:48:2e:2d:f0:a3:21:e5:f0:48:a7:98:76:6b:9e:d8: 45:b2:07:45:4c:83:a0:65:39:a8:38:e7:45:ac:bd:42:61:73: 23:35:ef:4f:71:3e:ca:4c:cb:3d:67:ab:71:d7:d8:c5:5b:05: f6:2c:2a:6c:2d:4d:0a:ce:46:26:77:2a:ee:d5:0a:de:92:81: 07:1f:14:1c:93:a1:ca:6b:7f:4a:cd:96:18:f2:66:21:cb:d2: 3a:ab:bc:07 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUX3bradK8hvVrhPm9SKpj1a9k1bwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTU0OFoX DTI3MDUwMTIxMjA0OFowMzExMC8GA1UEAxMoM0RFNUJFNkJCNzdERjkyRjJCOTY5 NTM2NDhBQ0ZBQzg1RDQxRkFFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANW7KijlF9xeVJ4fLdoX83mJNg29Mh8fzAEjqvJLRDxz9SR4G3UBdzKCjrOJ vuEzPbWSjMKxSYTlx0++VpCtlOqEu5H411oCHhMH89n0vzSfzfQ4oisMf+NpDDao jj6KXaTMz6RHan9vqVBD9HQ0CxNWM7RHy9o8sahwHg9RcKSuvIc4bSs5BkO6UD20 Qmb87YW/U2IrsdNVNSSejOL8g6qODCLrk2iLbbPI67K3L1lqsdZ40SaQ+HmZQSpa pg6fq/O3xVs7ygozxEFxwokMctgjHxqgKnqNss7P9jumhsWkV3KKJy+fjWgsLwtN N0h8T3OtG5D/wnqUsPWFu6jlyC8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQ95b5r t335LyuWlTZIrPrIXUH64DAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzMDkyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ1DWMA0GCSqGSIb3DQEBCwUAA4IBAQA4CWFJ/WTo9sW3iEFaNexEAo+H 77upbwIgcv5ve9xwa1zNaQl7FkCm288/rip+M9lUOmvM3I7Okkl5flqe71KsXcP+ czgtde/BF87CUhQocri3O56nrRhZ4lFdAF/CVIcXdm96v8c1PvTlsAfPtvf6SmlL MZDYHHdMEiBOhOjbBRyH4/+YjzJxiQSNXoyMFbHLHg7+eulQwNQJaeqr6ZXpzhK0 iwBILi3woyHl8EinmHZrnthFsgdFTIOgZTmoOOdFrL1CYXMjNe9PcT7KTMs9Z6tx 19jFWwX2LCpsLU0KzkYmdyru1QrekoEHHxQck6HKa39KzZYY8mYhy9I6q7wH -----END CERTIFICATE-----Generated at Sun May 3 01:40:40 2026 by rpki-client