$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153576.roa File: AS153576.roa (raw, json) Hash identifier: vI+t9H7RNS/zncmAWI/do3YMHtc8BGavPB0AkBWKqXs= Subject key identifier: 2E:11:82:55:2F:CB:A6:D4:6C:7B:86:EE:92:42:D6:78:D5:86:94:1D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 13431657E3DEAFABBE80690BE03E78B5E48779EA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153576.roa Signing time: Sat 02 May 2026 09:26:13 +0000 ROA not before: Sat 02 May 2026 09:21:13 +0000 ROA not after: Sat 01 May 2027 09:26:13 +0000 asID: 153576 IP address blocks: 163.61.82.0/23 maxlen: 24 2001:df5:10c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:43:16:57:e3:de:af:ab:be:80:69:0b:e0:3e:78:b5:e4:87:79:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:13 2026 GMT Not After : May 1 09:26:13 2027 GMT Subject: CN=2E1182552FCBA6D46C7B86EE9242D678D586941D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7c:9f:f6:dc:22:f9:e8:af:a4:98:91:4a:e3: b6:53:07:1c:a0:34:07:92:25:93:e9:40:52:a2:2c: 8a:ed:bf:93:b4:b3:44:92:67:fd:1f:6a:21:6d:06: cc:4a:81:96:d7:35:f3:18:b4:a4:24:56:71:79:e6: 1f:1a:75:ef:89:63:70:2b:99:5f:88:21:53:a1:00: 98:66:1a:5e:1f:30:bf:22:bf:5e:72:ac:88:21:71: bc:6b:d5:57:82:95:53:7b:39:5e:a9:0c:2e:45:8e: 4b:60:59:d7:ef:ed:a3:55:d8:e7:f9:c6:27:26:85: 0d:c7:8d:25:8d:b7:a9:fe:6b:29:05:a1:ee:13:4f: d5:ce:87:e2:f4:0e:c7:9c:6d:ac:93:2d:4f:1a:2d: 77:a0:4f:30:d2:22:d5:7d:45:9f:fb:e0:c4:bf:26: 5e:3b:d1:d9:0e:78:bc:3d:2a:40:23:79:71:c6:e7: e6:a8:7f:9e:2c:2f:b2:83:5f:30:60:e7:46:03:88: 14:c9:2b:b9:56:c8:07:17:0b:d3:fb:ef:10:50:af: 2d:e6:6c:99:17:88:a7:b6:39:fe:91:03:b6:8b:1f: e4:e7:d8:fb:1c:0d:5f:cf:3e:66:f6:19:45:70:c7: 82:72:83:fd:b1:0b:a7:72:3a:ea:08:85:ab:fb:42: dc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:11:82:55:2F:CB:A6:D4:6C:7B:86:EE:92:42:D6:78:D5:86:94:1D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153576.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.82.0/23 IPv6: 2001:df5:10c0::/48 Signature Algorithm: sha256WithRSAEncryption 79:02:64:19:30:df:cc:d9:28:17:fc:da:4d:39:a8:41:62:72: da:c2:f8:ab:3d:47:aa:fd:ba:74:59:7b:80:e6:94:f2:56:26: 85:35:38:19:ba:37:89:ce:09:e0:80:d9:96:f1:37:19:39:e6: c5:56:08:6e:ab:90:8a:33:e9:bd:8f:20:6a:82:8d:4f:18:57: 54:47:07:6e:1b:8c:f9:93:eb:8c:00:6e:1a:24:7f:2c:14:76: 7c:a8:ea:21:e9:e9:6c:a2:0c:2c:89:26:59:94:d0:68:39:87: c1:b4:bd:88:89:3d:29:f1:c0:cc:ac:a8:da:33:38:bc:68:c7: 69:d6:f5:99:59:fa:10:94:2f:3c:d6:96:a7:95:61:2d:19:a5: 93:f6:52:93:de:ab:80:bb:01:41:4c:46:63:7e:39:4c:43:50: 4a:43:45:9a:4c:85:fb:2f:c6:f5:14:92:21:df:a6:1c:84:05: 3c:5f:a3:be:bd:42:e3:2e:43:da:3f:74:01:c1:4e:f0:9c:97: 34:03:66:56:82:e5:29:c0:33:a9:9d:4b:6a:99:3b:07:22:cf: bc:74:32:d8:14:bc:e5:dd:4a:5a:06:16:55:24:fb:5f:e4:c5: 5b:db:0a:df:47:71:2b:ce:07:94:e8:0f:5e:cd:af:df:3b:b5: ce:f0:99:cf -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUE0MWV+Per6u+gGkL4D54teSHeeowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjExM1oX DTI3MDUwMTA5MjYxM1owMzExMC8GA1UEAxMoMkUxMTgyNTUyRkNCQTZENDZDN0I4 NkVFOTI0MkQ2NzhENTg2OTQxRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALx8n/bcIvnor6SYkUrjtlMHHKA0B5Ilk+lAUqIsiu2/k7SzRJJn/R9qIW0G zEqBltc18xi0pCRWcXnmHxp174ljcCuZX4ghU6EAmGYaXh8wvyK/XnKsiCFxvGvV V4KVU3s5XqkMLkWOS2BZ1+/to1XY5/nGJyaFDceNJY23qf5rKQWh7hNP1c6H4vQO x5xtrJMtTxotd6BPMNIi1X1Fn/vgxL8mXjvR2Q54vD0qQCN5ccbn5qh/niwvsoNf MGDnRgOIFMkruVbIBxcL0/vvEFCvLeZsmReIp7Y5/pEDtosf5OfY+xwNX88+ZvYZ RXDHgnKD/bELp3I66giFq/tC3JUCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQuEYJV L8um1Gx7hu6SQtZ41YaUHTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzNTc2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBoz1SMA8EAgACMAkDBwAgAQ31EMAwDQYJKoZIhvcNAQELBQADggEBAHkC ZBkw38zZKBf82k05qEFictrC+Ks9R6r9unRZe4DmlPJWJoU1OBm6N4nOCeCA2Zbx Nxk55sVWCG6rkIoz6b2PIGqCjU8YV1RHB24bjPmT64wAbhokfywUdnyo6iHp6Wyi DCyJJlmU0Gg5h8G0vYiJPSnxwMysqNozOLxox2nW9ZlZ+hCULzzWlqeVYS0ZpZP2 UpPeq4C7AUFMRmN+OUxDUEpDRZpMhfsvxvUUkiHfphyEBTxfo769QuMuQ9o/dAHB TvCclzQDZlaC5SnAM6mdS2qZOwciz7x0MtgUvOXdSloGFlUk+1/kxVvbCt9HcSvO B5ToD17Nr987tc7wmc8= -----END CERTIFICATE-----Generated at Sun May 3 00:39:43 2026 by rpki-client