$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153575.roa File: AS153575.roa (raw, json) Hash identifier: WHEdwyI6g+ZFTpuZ+ZXv4qyyYqtUWUqUtexizEVwOfQ= Subject key identifier: BA:CD:29:42:15:53:84:00:FD:90:26:1D:E5:5F:15:4C:DE:A4:A0:EE Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 772C505B4C392B2ED4B55437500E88EA2AC7468B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153575.roa Signing time: Sat 02 May 2026 09:26:14 +0000 ROA not before: Sat 02 May 2026 09:21:14 +0000 ROA not after: Sat 01 May 2027 09:26:14 +0000 asID: 153575 IP address blocks: 163.61.80.0/23 maxlen: 24 2001:df5:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:2c:50:5b:4c:39:2b:2e:d4:b5:54:37:50:0e:88:ea:2a:c7:46:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:14 2026 GMT Not After : May 1 09:26:14 2027 GMT Subject: CN=BACD294215538400FD90261DE55F154CDEA4A0EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:70:1c:94:32:55:3d:84:49:6d:66:9d:55:27: 6e:3d:94:e8:00:d3:40:f9:83:12:bd:02:23:ee:ee: 80:f8:c5:7e:7e:fc:6a:d2:e5:c6:97:1c:a5:ea:f1: 8e:55:16:9c:58:d9:48:73:08:da:69:8a:61:e3:dd: 25:db:a0:f7:35:b3:09:36:ab:67:2f:00:b9:2a:6a: fa:b6:11:55:fc:4a:f4:14:10:78:6d:8c:bf:3f:88: 72:82:3e:0d:70:18:f4:73:f5:fa:7e:8f:31:f7:49: 68:b2:86:61:d5:89:17:80:b7:94:f1:ee:13:45:02: 81:92:98:cb:24:dd:1b:44:69:86:20:d4:82:c1:64: e7:e9:8d:3f:93:42:84:90:2e:a2:86:55:15:b3:0c: 4f:49:3e:0e:d0:35:b6:85:4e:02:18:3e:92:ff:55: e6:a7:53:5e:60:f0:84:f7:30:1b:71:ee:71:07:99: 1b:8e:56:eb:1d:10:8d:06:7e:9b:72:9f:11:c6:22: 39:07:cb:6b:72:01:26:55:da:5b:a0:5e:61:4b:61: 4f:e4:31:2f:1d:69:54:f4:9e:fd:9a:e4:a9:84:e4: 64:11:9a:53:f0:04:ff:b3:4b:56:c7:17:08:a0:6f: 83:fb:4d:82:1b:51:0e:5d:14:73:c5:3c:76:7a:08: 54:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CD:29:42:15:53:84:00:FD:90:26:1D:E5:5F:15:4C:DE:A4:A0:EE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153575.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.80.0/23 IPv6: 2001:df5:1040::/48 Signature Algorithm: sha256WithRSAEncryption 4a:06:c6:fd:74:1d:46:cf:ae:b9:4a:38:84:50:19:da:77:09: 77:73:37:a8:f5:d9:f4:53:73:91:d2:27:5c:cb:3d:2e:44:61: 1a:f9:1f:3b:38:3e:91:8c:17:05:65:dd:8a:8c:61:d6:55:f6: ab:71:4d:bb:41:e1:f5:c9:56:d2:2d:8a:0c:9b:ab:c7:45:b7: 86:6b:46:c7:99:ac:88:c7:fc:6f:7e:87:7a:c3:c1:eb:24:7f: 39:3c:32:79:76:93:09:1a:6d:89:dd:1a:74:50:07:a8:ad:f2: 58:2c:b8:7c:a5:47:ec:ce:5b:18:1f:a4:b3:02:f0:fe:d0:38: dd:67:db:e4:67:6c:aa:0f:5d:a9:79:69:bd:e7:0b:dc:aa:21: 89:a3:52:ba:00:f5:6a:51:3b:94:8d:19:5f:9a:e6:80:10:99: 04:0e:20:a6:7d:bc:4a:bc:41:99:2c:47:dd:4e:29:0a:9f:8f: 06:dd:16:b3:5c:49:83:f9:41:58:65:b0:94:2f:44:86:7e:ab: b4:3c:19:a3:01:c7:50:16:a6:3a:a2:08:3e:a8:43:89:12:84: 62:d8:c1:cb:53:e4:f7:04:23:e8:31:63:cf:82:dd:be:43:02: 15:ca:fb:ff:5e:f6:04:9a:77:24:35:23:3b:0f:81:ff:d8:cc: c9:de:f7:1d -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUdyxQW0w5Ky7UtVQ3UA6I6irHRoswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjExNFoX DTI3MDUwMTA5MjYxNFowMzExMC8GA1UEAxMoQkFDRDI5NDIxNTUzODQwMEZEOTAy NjFERTU1RjE1NENERUE0QTBFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL5wHJQyVT2ESW1mnVUnbj2U6ADTQPmDEr0CI+7ugPjFfn78atLlxpccperx jlUWnFjZSHMI2mmKYePdJdug9zWzCTarZy8AuSpq+rYRVfxK9BQQeG2Mvz+IcoI+ DXAY9HP1+n6PMfdJaLKGYdWJF4C3lPHuE0UCgZKYyyTdG0RphiDUgsFk5+mNP5NC hJAuooZVFbMMT0k+DtA1toVOAhg+kv9V5qdTXmDwhPcwG3HucQeZG45W6x0QjQZ+ m3KfEcYiOQfLa3IBJlXaW6BeYUthT+QxLx1pVPSe/ZrkqYTkZBGaU/AE/7NLVscX CKBvg/tNghtRDl0Uc8U8dnoIVKsCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBS6zSlC FVOEAP2QJh3lXxVM3qSg7jAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzNTc1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBoz1QMA8EAgACMAkDBwAgAQ31EEAwDQYJKoZIhvcNAQELBQADggEBAEoG xv10HUbPrrlKOIRQGdp3CXdzN6j12fRTc5HSJ1zLPS5EYRr5Hzs4PpGMFwVl3YqM YdZV9qtxTbtB4fXJVtItigybq8dFt4ZrRseZrIjH/G9+h3rDweskfzk8Mnl2kwka bYndGnRQB6it8lgsuHylR+zOWxgfpLMC8P7QON1n2+RnbKoPXal5ab3nC9yqIYmj UroA9WpRO5SNGV+a5oAQmQQOIKZ9vEq8QZksR91OKQqfjwbdFrNcSYP5QVhlsJQv RIZ+q7Q8GaMBx1AWpjqiCD6oQ4kShGLYwctT5PcEI+gxY8+C3b5DAhXK+/9e9gSa dyQ1IzsPgf/YzMne9x0= -----END CERTIFICATE-----Generated at Sun May 3 00:39:38 2026 by rpki-client