$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153140.roa File: AS153140.roa (raw, json) Hash identifier: 0VnqG7CZ3bDKb4wYkcPBHH6vPnmGPLJcLMjs1eiXIJw= Subject key identifier: 03:4F:9F:7B:BF:9D:25:56:BF:45:63:F6:87:6D:E0:F5:4E:5A:92:4C Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5F99081EA88974386AB20B612F03EA43D7956B7C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153140.roa Signing time: Sat 02 May 2026 09:25:47 +0000 ROA not before: Sat 02 May 2026 09:20:47 +0000 ROA not after: Sat 01 May 2027 09:25:47 +0000 asID: 153140 IP address blocks: 2001:df4:64c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:99:08:1e:a8:89:74:38:6a:b2:0b:61:2f:03:ea:43:d7:95:6b:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:20:47 2026 GMT Not After : May 1 09:25:47 2027 GMT Subject: CN=034F9F7BBF9D2556BF4563F6876DE0F54E5A924C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7b:95:a1:8a:9b:6c:7b:3f:5a:f5:83:50:e8: f8:33:c1:53:bc:dd:4b:a7:34:7e:63:be:6c:0d:9a: 87:ea:bd:91:32:80:a1:ea:f2:b7:c5:85:22:37:de: 41:a7:d9:7f:7d:1a:2f:93:38:41:e0:d4:cf:7a:a5: b0:1a:ad:84:a8:50:d6:10:7c:89:be:9e:4a:29:55: d7:54:0c:4b:4a:fd:87:e8:18:17:43:51:6a:ce:79: 96:87:d8:e6:21:ff:a2:ae:99:d4:8d:65:08:f4:f2: a8:55:29:82:43:6f:25:a5:25:09:fb:ab:cb:20:51: be:82:f1:62:5d:2d:ae:a5:90:c6:84:49:e4:82:0e: 57:0c:6f:7a:69:7e:ef:a7:39:ea:91:ee:2e:4b:cf: aa:c0:d4:3e:4c:c1:57:e5:dc:53:de:ce:4e:ff:01: cb:a3:cf:23:7d:01:75:d0:5c:d2:fa:d8:63:5a:e9: 7d:8c:00:c9:95:2b:48:2d:a3:c9:9b:93:0e:25:03: 46:ab:48:ea:8d:e2:e3:dc:d7:f8:5f:4d:87:8f:67: 53:31:de:57:a9:e9:9b:4b:6c:bb:e9:fc:e9:7c:b9: 38:13:ec:a1:64:d1:d8:68:16:cd:44:c6:1e:fc:73: 9d:93:ab:40:ec:80:58:9a:43:0c:55:5e:eb:c4:de: 22:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4F:9F:7B:BF:9D:25:56:BF:45:63:F6:87:6D:E0:F5:4E:5A:92:4C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153140.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:64c0::/48 Signature Algorithm: sha256WithRSAEncryption 17:91:96:14:c9:fc:c5:76:76:d2:fd:01:bb:9e:3b:37:13:98: 3f:f7:18:43:02:3f:b4:14:ed:6c:8b:1b:c8:7e:62:36:d4:6a: 89:c2:d8:95:ac:44:a8:36:a2:22:e8:e8:07:ac:5b:76:42:ed: 61:b8:02:62:b9:dc:22:7f:8e:6e:c3:15:70:1b:db:7d:5c:33: 31:64:4b:a3:e9:96:9e:ed:a4:67:22:ac:c0:e0:ac:56:86:57: 6f:df:4c:1f:69:06:bf:65:62:6f:56:76:3c:ed:b3:35:1a:2d: 78:1e:e7:39:02:21:02:e9:1e:56:24:5d:7e:64:eb:5b:ad:25: fc:ff:30:f6:0a:d4:1a:53:8e:3c:bb:f0:59:f5:86:ae:ed:87: 78:b6:8b:24:7c:34:68:bf:8c:50:d7:91:25:a9:7c:d8:af:d4: 86:11:17:37:ad:d5:fc:e7:1e:16:55:c2:cb:ab:71:43:41:1c: 15:7d:1b:28:82:30:6f:4d:32:9d:a1:7c:0b:d4:d4:dc:b0:28: 7b:21:62:b0:3c:d0:55:30:f2:cf:46:9d:a7:3f:2e:05:7d:27: 35:18:2c:52:3b:d9:f1:8c:fa:72:62:82:9b:91:df:41:6e:1b: 8e:19:53:35:80:9d:92:f4:36:58:b0:38:01:e3:62:76:29:39: 86:64:b2:58 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUX5kIHqiJdDhqsgthLwPqQ9eVa3wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjA0N1oX DTI3MDUwMTA5MjU0N1owMzExMC8GA1UEAxMoMDM0RjlGN0JCRjlEMjU1NkJGNDU2 M0Y2ODc2REUwRjU0RTVBOTI0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALB7laGKm2x7P1r1g1Do+DPBU7zdS6c0fmO+bA2ah+q9kTKAoeryt8WFIjfe QafZf30aL5M4QeDUz3qlsBqthKhQ1hB8ib6eSilV11QMS0r9h+gYF0NRas55lofY 5iH/oq6Z1I1lCPTyqFUpgkNvJaUlCfuryyBRvoLxYl0trqWQxoRJ5IIOVwxveml+ 76c56pHuLkvPqsDUPkzBV+XcU97OTv8By6PPI30BddBc0vrYY1rpfYwAyZUrSC2j yZuTDiUDRqtI6o3i49zX+F9Nh49nUzHeV6npm0tsu+n86Xy5OBPsoWTR2GgWzUTG HvxznZOrQOyAWJpDDFVe68TeIu0CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQDT597 v50lVr9FY/aHbeD1TlqSTDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzMTQwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9GTAMA0GCSqGSIb3DQEBCwUAA4IBAQAXkZYUyfzFdnbS/QG7njs3 E5g/9xhDAj+0FO1sixvIfmI21GqJwtiVrESoNqIi6OgHrFt2Qu1huAJiudwif45u wxVwG9t9XDMxZEuj6Zae7aRnIqzA4KxWhldv30wfaQa/ZWJvVnY87bM1Gi14Huc5 AiEC6R5WJF1+ZOtbrSX8/zD2CtQaU448u/BZ9Yau7Yd4toskfDRov4xQ15ElqXzY r9SGERc3rdX85x4WVcLLq3FDQRwVfRsogjBvTTKdoXwL1NTcsCh7IWKwPNBVMPLP Rp2nPy4FfSc1GCxSO9nxjPpyYoKbkd9BbhuOGVM1gJ2S9DZYsDgB42J2KTmGZLJY -----END CERTIFICATE-----Generated at Sun May 3 00:41:49 2026 by rpki-client