$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153559.roa File: AS153559.roa (raw, json) Hash identifier: jjhbX6oBljITQPAQaFnutDDaBGfHglmT9RETYHG4cPg= Subject key identifier: 44:5C:6B:DF:83:14:DD:72:31:19:55:66:8A:59:A6:C3:8D:B4:9B:68 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0FAF3CE7E382CE3ED1E3E63E86441547DA0FC60B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153559.roa Signing time: Sat 02 May 2026 09:26:18 +0000 ROA not before: Sat 02 May 2026 09:21:18 +0000 ROA not after: Sat 01 May 2027 09:26:18 +0000 asID: 153559 IP address blocks: 163.47.46.0/24 maxlen: 24 2001:df4:fec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:af:3c:e7:e3:82:ce:3e:d1:e3:e6:3e:86:44:15:47:da:0f:c6:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:18 2026 GMT Not After : May 1 09:26:18 2027 GMT Subject: CN=445C6BDF8314DD72311955668A59A6C38DB49B68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d3:04:73:97:d4:34:c8:ec:de:3f:55:d4:00: fe:dd:7c:08:08:15:70:3c:03:e1:72:61:78:ff:23: 9e:68:07:0c:3e:70:4a:47:e2:3b:d3:b9:5f:20:e9: 70:33:b5:2b:13:9a:ff:ff:93:c3:2b:03:82:47:11: 91:7c:bd:41:22:07:6d:ea:a1:27:0b:85:14:62:fd: ae:1d:ac:02:78:9f:a8:67:1e:84:6a:98:90:9b:14: 14:7a:56:cf:73:4b:99:8a:53:dc:aa:60:50:d2:13: 6e:b8:b0:9a:c9:eb:94:a4:96:93:ad:9e:b9:40:45: 17:9d:66:44:25:10:13:ec:76:66:3b:14:81:2d:97: db:81:2c:1e:19:a4:29:6c:9e:fd:42:60:a3:4d:55: 32:d4:06:68:20:ae:42:39:59:0c:ad:22:5e:92:cb: 41:68:2d:33:b9:29:5f:4d:9e:5d:a4:3a:f2:55:d9: 44:3d:ba:9b:09:0e:22:bf:7b:94:3e:d8:79:d1:0e: 36:49:03:fd:eb:94:41:35:87:96:ec:de:58:b2:9d: e8:24:ae:eb:da:22:15:5e:f2:f2:fe:54:2f:d2:52: 1c:ad:7a:b3:b6:c9:5b:e1:7b:ba:1a:92:2e:70:a9: a9:62:6b:a0:ae:86:6a:ea:00:7c:71:e2:5b:cd:d3: 70:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5C:6B:DF:83:14:DD:72:31:19:55:66:8A:59:A6:C3:8D:B4:9B:68 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153559.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.47.46.0/24 IPv6: 2001:df4:fec0::/48 Signature Algorithm: sha256WithRSAEncryption 58:36:4b:cf:b0:41:a4:f0:44:4a:1c:de:bd:b2:b3:8e:7b:68: 97:89:76:6f:89:a6:f6:0c:98:93:d1:6f:36:5a:a6:41:70:75: 90:9a:ca:6f:71:5a:c3:4e:3a:94:69:81:53:7e:04:05:a6:8e: cf:54:5f:77:01:e8:7c:13:61:00:17:ad:71:a3:7c:6e:c5:24: 25:b8:55:9d:70:dd:33:95:a3:14:8b:4a:05:04:49:1c:81:d3: 95:25:73:df:3d:6a:95:99:32:1c:b6:9b:85:df:07:46:7a:2c: 62:de:b5:2b:07:fd:c5:b1:f2:36:35:7e:e9:96:66:48:da:e5: 42:ff:24:a3:62:b0:0b:d6:71:38:6e:35:6f:cd:ce:4c:e8:75: 0c:1a:05:85:40:a8:91:b2:08:16:0c:13:0a:84:e4:e1:b6:5b: 3d:5c:29:dc:3c:9f:30:87:d5:d6:17:6f:c1:1f:ab:0d:06:6c: 9b:c1:0e:fb:c4:28:c1:02:d1:e2:1c:e3:ec:e1:8b:ae:99:4b: 47:bc:29:c9:90:ef:69:fe:9a:db:95:5b:88:fa:61:55:14:1d: e4:3b:50:61:17:1c:d6:f8:14:06:65:2f:1e:5d:83:f6:77:c6: d7:9d:9f:1e:6c:e1:e4:50:43:5c:f9:78:8a:c6:0d:fa:8a:5e: 95:a0:3a:ee -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUD6885+OCzj7R4+Y+hkQVR9oPxgswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjExOFoX DTI3MDUwMTA5MjYxOFowMzExMC8GA1UEAxMoNDQ1QzZCREY4MzE0REQ3MjMxMTk1 NTY2OEE1OUE2QzM4REI0OUI2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN7TBHOX1DTI7N4/VdQA/t18CAgVcDwD4XJheP8jnmgHDD5wSkfiO9O5XyDp cDO1KxOa//+TwysDgkcRkXy9QSIHbeqhJwuFFGL9rh2sAnifqGcehGqYkJsUFHpW z3NLmYpT3KpgUNITbriwmsnrlKSWk62euUBFF51mRCUQE+x2ZjsUgS2X24EsHhmk KWye/UJgo01VMtQGaCCuQjlZDK0iXpLLQWgtM7kpX02eXaQ68lXZRD26mwkOIr97 lD7YedEONkkD/euUQTWHluzeWLKd6CSu69oiFV7y8v5UL9JSHK16s7bJW+F7uhqS LnCpqWJroK6GauoAfHHiW83TcGECAwEAAaOCAd0wggHZMB0GA1UdDgQWBBREXGvf gxTdcjEZVWaKWabDjbSbaDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzNTU5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAoy8uMA8EAgACMAkDBwAgAQ30/sAwDQYJKoZIhvcNAQELBQADggEBAFg2 S8+wQaTwREoc3r2ys457aJeJdm+JpvYMmJPRbzZapkFwdZCaym9xWsNOOpRpgVN+ BAWmjs9UX3cB6HwTYQAXrXGjfG7FJCW4VZ1w3TOVoxSLSgUESRyB05Ulc989apWZ Mhy2m4XfB0Z6LGLetSsH/cWx8jY1fumWZkja5UL/JKNisAvWcThuNW/NzkzodQwa BYVAqJGyCBYMEwqE5OG2Wz1cKdw8nzCH1dYXb8Efqw0GbJvBDvvEKMEC0eIc4+zh i66ZS0e8KcmQ72n+mtuVW4j6YVUUHeQ7UGEXHNb4FAZlLx5dg/Z3xtednx5s4eRQ Q1z5eIrGDfqKXpWgOu4= -----END CERTIFICATE-----Generated at Sun May 3 01:40:39 2026 by rpki-client