$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153111.roa File: AS153111.roa (raw, json) Hash identifier: ifU5ZTCnPq0XEaSyJ8i7GwofXEZfjEa6bdBuMlnMxB4= Subject key identifier: BA:62:15:8F:8A:8B:78:F2:AA:D0:53:72:2B:2B:28:75:9D:BC:A7:47 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 09E11A4CF5FF0E72FDFAB70414AE7DB6AF9606C8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153111.roa Signing time: Sat 02 May 2026 08:34:49 +0000 ROA not before: Sat 02 May 2026 08:29:49 +0000 ROA not after: Sat 01 May 2027 08:34:49 +0000 asID: 153111 IP address blocks: 103.184.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e1:1a:4c:f5:ff:0e:72:fd:fa:b7:04:14:ae:7d:b6:af:96:06:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:29:49 2026 GMT Not After : May 1 08:34:49 2027 GMT Subject: CN=BA62158F8A8B78F2AAD053722B2B28759DBCA747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e8:40:42:3f:cc:e6:71:2b:e3:ae:a0:88:78: 3a:64:92:dd:f0:90:aa:bf:0a:c7:c3:e9:08:25:58: bc:43:40:24:8c:60:7c:d1:62:e8:3b:b9:44:f6:79: 7b:bc:2e:21:18:59:e4:0b:0c:76:dd:62:9a:a0:b0: c7:51:99:27:09:1c:60:e6:ef:91:3f:f8:40:d7:38: a7:6f:be:e2:0f:96:cf:80:20:40:77:36:98:66:f7: eb:bb:e5:21:a8:a1:66:8a:46:14:80:ac:d1:cf:23: b2:5e:b3:d3:cc:a6:3b:97:17:9f:d4:a5:e1:26:5e: 43:24:54:73:f9:38:f9:4e:52:6c:25:4d:49:69:44: ac:cf:33:72:3b:9b:c1:01:55:32:c9:44:69:1c:c0: 72:b1:5b:42:8e:60:f0:84:c1:c9:26:18:0a:07:d2: eb:64:34:b4:48:f5:d6:ff:81:42:c4:50:06:db:b5: 41:76:55:a0:4b:0f:30:d0:d9:ae:4c:4c:81:cf:9c: 0d:fd:86:dd:1a:46:34:1b:ab:46:a7:56:47:79:05: 51:72:5d:02:3c:ce:cb:b8:ed:d8:87:a5:23:26:58: b3:5e:71:62:75:59:ac:53:86:d7:1d:96:68:29:9c: 5b:f4:08:62:d8:87:6a:04:ec:a8:a3:e3:ef:2c:0e: 77:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:62:15:8F:8A:8B:78:F2:AA:D0:53:72:2B:2B:28:75:9D:BC:A7:47 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153111.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.14.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:85:dc:ed:93:58:e9:23:22:e4:20:da:5c:3f:fe:f3:c9:2c: 87:e1:9c:c8:00:f7:34:4e:ff:2a:1a:45:41:1e:e9:d5:d2:2c: 7f:0e:99:b3:a8:79:62:9b:1a:74:d6:58:a0:3d:cb:ea:6d:97: 82:5c:b1:9b:46:37:2f:cf:b8:8d:39:ad:33:ba:db:fe:e5:e8: a0:e6:cb:06:21:7e:8e:58:eb:a8:72:33:6f:16:35:14:74:9c: 2b:fc:eb:7a:53:81:5c:e2:71:d5:8b:4c:a7:ce:44:a1:93:f8: a3:74:15:27:ed:3e:1d:6b:5a:99:9f:8d:d8:f3:a2:d8:42:6f: 3b:a4:fd:e4:35:4f:76:fb:46:a1:e3:49:a9:d5:3a:fe:9d:de: ca:7b:38:67:eb:f7:d5:92:4b:5e:17:9a:d5:e5:4e:52:04:8e: 20:20:fe:22:ef:99:34:64:ec:60:06:19:13:43:0b:c1:19:dd: bf:25:05:32:e9:dc:02:55:59:70:4d:ba:79:3d:64:2e:f9:3f: e7:dc:2f:7c:cb:3a:6d:f7:23:5a:6b:33:49:33:32:d9:fb:2e: 81:7b:67:50:cd:5c:cb:6d:d6:c2:a4:bd:d7:1a:e1:49:a6:a2: 5f:5b:b6:e5:ac:e6:ae:5b:af:85:11:43:d8:48:14:1a:c4:50: 76:74:4b:8b -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUCeEaTPX/DnL9+rcEFK59tq+WBsgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4Mjk0OVoX DTI3MDUwMTA4MzQ0OVowMzExMC8GA1UEAxMoQkE2MjE1OEY4QThCNzhGMkFBRDA1 MzcyMkIyQjI4NzU5REJDQTc0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALLoQEI/zOZxK+OuoIh4OmSS3fCQqr8Kx8PpCCVYvENAJIxgfNFi6Du5RPZ5 e7wuIRhZ5AsMdt1imqCwx1GZJwkcYObvkT/4QNc4p2++4g+Wz4AgQHc2mGb367vl IaihZopGFICs0c8jsl6z08ymO5cXn9Sl4SZeQyRUc/k4+U5SbCVNSWlErM8zcjub wQFVMslEaRzAcrFbQo5g8ITBySYYCgfS62Q0tEj11v+BQsRQBtu1QXZVoEsPMNDZ rkxMgc+cDf2G3RpGNBurRqdWR3kFUXJdAjzOy7jt2IelIyZYs15xYnVZrFOG1x2W aCmcW/QIYtiHagTsqKPj7ywOd6ECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBS6YhWP iot48qrQU3IrKyh1nbynRzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzMTExLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ7gOMA0GCSqGSIb3DQEBCwUAA4IBAQBshdztk1jpIyLkINpcP/7zySyH 4ZzIAPc0Tv8qGkVBHunV0ix/DpmzqHlimxp01ligPcvqbZeCXLGbRjcvz7iNOa0z utv+5eig5ssGIX6OWOuocjNvFjUUdJwr/Ot6U4Fc4nHVi0ynzkShk/ijdBUn7T4d a1qZn43Y86LYQm87pP3kNU92+0ah40mp1Tr+nd7Kezhn6/fVkkteF5rV5U5SBI4g IP4i75k0ZOxgBhkTQwvBGd2/JQUy6dwCVVlwTbp5PWQu+T/n3C98yzpt9yNaazNJ MzLZ+y6Be2dQzVzLbdbCpL3XGuFJpqJfW7blrOauW6+FEUPYSBQaxFB2dEuL -----END CERTIFICATE-----Generated at Sun May 3 00:40:27 2026 by rpki-client