$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153154.roa File: AS153154.roa (raw, json) Hash identifier: nVXAiZyCGHFU4y2xV5NlEeqNCA3dutCz+drsA2HmQaY= Subject key identifier: 78:91:60:E5:59:09:60:23:3F:2D:7F:3D:BD:B7:4A:DD:E7:AD:51:D9 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 29BD98B542FA0C8DD02F000888E43DE0D54C65EC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153154.roa Signing time: Sat 02 May 2026 09:25:49 +0000 ROA not before: Sat 02 May 2026 09:20:49 +0000 ROA not after: Sat 01 May 2027 09:25:49 +0000 asID: 153154 IP address blocks: 2001:df4:8dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:bd:98:b5:42:fa:0c:8d:d0:2f:00:08:88:e4:3d:e0:d5:4c:65:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:20:49 2026 GMT Not After : May 1 09:25:49 2027 GMT Subject: CN=789160E5590960233F2D7F3DBDB74ADDE7AD51D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:39:21:a2:01:5c:ca:56:15:15:9d:6b:af:c8: 9d:da:25:02:6f:17:29:18:86:61:0d:68:6b:47:91: b3:ee:d4:63:af:b5:1a:03:33:76:f1:c1:56:4d:75: a1:5c:d1:0a:bc:a2:aa:0d:08:09:ad:33:3d:b7:31: 06:a3:02:2d:fc:c2:aa:f1:c3:e3:a7:e7:fb:36:d5: 54:c8:cf:3c:e7:50:00:b3:02:8e:5b:3f:90:68:b7: 82:e1:e1:5b:98:0a:5b:71:80:64:87:95:03:7f:01: d9:ef:0c:dc:58:47:e7:1f:b5:d8:4d:0b:38:76:27: 08:cc:4f:76:27:ce:c2:2f:5e:28:f3:02:68:26:0f: f5:f9:d9:f8:f0:17:fa:f8:6a:1d:f2:68:cb:8c:f4: ed:3a:99:97:5f:07:55:af:05:76:5a:dc:70:ef:60: 0a:74:a5:de:18:77:93:59:5f:98:a2:b5:13:6c:b9: 0a:38:ab:72:b6:22:b1:e1:7c:46:c3:4e:48:34:b7: 40:52:e3:49:94:a8:8c:3f:bb:24:74:c8:c4:38:f2: 5c:09:f4:f4:98:a3:85:44:6e:db:47:44:8b:73:e2: 3f:83:b5:df:14:26:39:a5:2f:51:cb:1e:5c:84:01: e0:ce:4e:1a:00:ec:45:2a:68:c8:f4:89:c6:ad:1d: f4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:91:60:E5:59:09:60:23:3F:2D:7F:3D:BD:B7:4A:DD:E7:AD:51:D9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153154.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:8dc0::/48 Signature Algorithm: sha256WithRSAEncryption 0a:32:ba:e7:08:20:e6:00:30:d1:13:2c:91:41:40:27:15:37: 4e:21:ea:5b:d1:b5:e1:24:79:66:d3:fd:63:8e:a9:a6:bf:c2: 95:a4:da:5d:47:20:74:84:cc:f0:e5:f8:ac:69:80:8b:86:31: 1e:53:f1:db:0d:e3:51:a0:d5:cd:39:0e:2e:70:bf:69:fe:97: d2:a0:f6:2c:df:05:41:b8:45:74:0a:72:fb:75:f7:8f:8e:02: 69:67:1d:ce:05:12:cb:4e:6d:85:d1:6f:7c:70:13:dd:8d:35: 0f:50:0c:f7:0b:aa:4d:8d:0b:a3:bd:f7:8f:42:ba:08:93:a7: 1c:06:70:27:1e:1a:b2:27:45:62:0d:d5:f0:85:18:78:e2:dd: ed:45:0b:87:46:16:c6:6e:c6:11:4b:6b:cc:f1:80:14:a4:70: f3:96:d2:d6:0c:55:04:92:6b:f1:b9:29:d1:9e:6e:0b:c5:7a: bc:66:50:93:e6:30:59:c6:dc:3a:52:6f:59:9a:86:be:14:d4: e7:80:65:5d:06:48:08:4a:ee:95:28:17:fd:07:13:7f:ad:92: 54:f9:96:56:80:3f:3d:bd:c8:f8:5b:44:4d:d1:1c:70:4e:0f: 41:6d:07:8f:3a:0f:e0:e4:d0:ba:8c:9e:1f:e4:e7:f1:74:36: 90:b4:8d:6b -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUKb2YtUL6DI3QLwAIiOQ94NVMZewwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjA0OVoX DTI3MDUwMTA5MjU0OVowMzExMC8GA1UEAxMoNzg5MTYwRTU1OTA5NjAyMzNGMkQ3 RjNEQkRCNzRBRERFN0FENTFEOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKw5IaIBXMpWFRWda6/IndolAm8XKRiGYQ1oa0eRs+7UY6+1GgMzdvHBVk11 oVzRCryiqg0ICa0zPbcxBqMCLfzCqvHD46fn+zbVVMjPPOdQALMCjls/kGi3guHh W5gKW3GAZIeVA38B2e8M3FhH5x+12E0LOHYnCMxPdifOwi9eKPMCaCYP9fnZ+PAX +vhqHfJoy4z07TqZl18HVa8FdlrccO9gCnSl3hh3k1lfmKK1E2y5CjircrYiseF8 RsNOSDS3QFLjSZSojD+7JHTIxDjyXAn09JijhURu20dEi3PiP4O13xQmOaUvUcse XIQB4M5OGgDsRSpoyPSJxq0d9FMCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBR4kWDl WQlgIz8tfz29t0rd561R2TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzMTU0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9I3AMA0GCSqGSIb3DQEBCwUAA4IBAQAKMrrnCCDmADDREyyRQUAn FTdOIepb0bXhJHlm0/1jjqmmv8KVpNpdRyB0hMzw5fisaYCLhjEeU/HbDeNRoNXN OQ4ucL9p/pfSoPYs3wVBuEV0CnL7dfePjgJpZx3OBRLLTm2F0W98cBPdjTUPUAz3 C6pNjQujvfePQroIk6ccBnAnHhqyJ0ViDdXwhRh44t3tRQuHRhbGbsYRS2vM8YAU pHDzltLWDFUEkmvxuSnRnm4LxXq8ZlCT5jBZxtw6Um9Zmoa+FNTngGVdBkgISu6V KBf9BxN/rZJU+ZZWgD89vcj4W0RN0RxwTg9BbQePOg/g5NC6jJ4f5OfxdDaQtI1r -----END CERTIFICATE-----Generated at Sun May 3 00:40:20 2026 by rpki-client