$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153577.roa File: AS153577.roa (raw, json) Hash identifier: mjXkS8uS+YHcNTeY8VEmXDU3EIwYNdVteOilpOZ3DgU= Subject key identifier: 47:3D:20:5F:88:A1:2F:D8:6B:83:88:DC:B8:50:4D:DD:A1:C7:90:7A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3D189B5F2D4A67A03090009775EAA0EB94C92C43 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153577.roa Signing time: Sat 02 May 2026 09:25:27 +0000 ROA not before: Sat 02 May 2026 09:20:27 +0000 ROA not after: Sat 01 May 2027 09:25:27 +0000 asID: 153577 IP address blocks: 163.61.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:18:9b:5f:2d:4a:67:a0:30:90:00:97:75:ea:a0:eb:94:c9:2c:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:20:27 2026 GMT Not After : May 1 09:25:27 2027 GMT Subject: CN=473D205F88A12FD86B8388DCB8504DDDA1C7907A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:14:99:9a:1e:cc:b7:a8:29:3d:9c:20:4a:d7: f4:d5:48:0b:bd:e9:31:76:fb:14:86:48:a6:f7:49: 8c:a7:d0:fb:25:df:fd:4e:05:23:37:68:b3:8f:3f: eb:40:8f:e4:e7:01:48:08:c1:cb:3f:58:98:f7:8a: 46:ea:73:7f:81:de:7c:75:05:59:ec:e4:5a:84:d6: c2:91:01:e9:fd:e5:2b:64:68:e4:62:eb:78:2a:d0: bd:3c:da:58:07:27:b9:ba:7a:b0:85:6c:c4:46:5e: e4:3c:bc:a9:75:1c:e3:a1:ad:dc:34:43:31:bb:37: ef:4a:94:b3:44:74:43:a2:11:23:ec:16:96:87:d9: d1:12:8d:e6:2f:01:9c:4c:b2:60:47:69:0e:bc:d2: 33:a8:0f:ff:b4:70:c8:f7:1a:90:b1:85:f0:a9:1e: 14:18:cb:2e:25:28:3b:9a:d5:15:0e:a0:0c:2b:db: d7:4e:fe:27:30:68:89:3a:ca:0a:bb:d3:1f:92:ab: 54:bc:d5:20:a0:a7:b6:d1:55:be:97:53:f6:8d:e1: 76:ea:dd:4d:ec:f2:0d:6d:d7:13:67:97:6e:b5:1e: 24:bd:4e:80:d6:88:ea:50:07:bf:08:07:86:9e:3c: cd:22:b4:77:28:be:76:f7:3c:95:b6:95:42:61:13: 8b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3D:20:5F:88:A1:2F:D8:6B:83:88:DC:B8:50:4D:DD:A1:C7:90:7A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153577.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.54.0/24 Signature Algorithm: sha256WithRSAEncryption 68:f5:8a:82:ba:3c:10:43:08:ce:12:c7:27:7d:a2:cf:c8:5d: aa:a8:34:03:ed:fb:b1:cb:aa:33:23:12:c0:34:df:39:12:ca: fe:47:00:e4:f5:67:38:95:a7:c9:81:95:3d:9d:31:1b:36:6c: e7:fe:5f:6c:d5:de:4e:bb:e4:0a:e4:93:fa:7d:f5:6d:fe:ca: c6:5a:57:22:0a:55:8b:32:ab:69:59:c5:6d:99:75:3a:46:8c: bc:52:28:f9:b3:a7:66:10:86:db:5b:15:54:5a:38:a5:2b:d2: ef:5e:cd:fa:e0:3b:05:2f:a4:05:b7:7a:62:f9:b7:21:88:27: 69:c5:93:76:fa:50:f6:e5:4e:80:aa:15:9f:a3:6c:16:05:82: 0c:52:d1:01:fc:b5:51:42:2c:72:97:38:c5:f1:98:46:25:d8: cc:6b:af:b1:71:02:08:10:3a:e1:8c:7e:ef:e4:dd:e8:f5:d3: a1:59:a2:dd:b0:e4:dd:08:2b:b2:36:d4:5d:23:ca:f6:bd:21: c7:52:ef:49:da:13:27:3b:2d:f8:5c:2d:8a:f2:45:0a:98:11: 78:12:0b:cd:7d:19:eb:7f:1e:6a:34:5a:54:8f:4f:c1:23:5a: bd:54:2b:bf:bd:15:b3:a5:d5:0b:c6:79:3d:fc:62:41:36:c8: 5a:3c:87:e8 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUPRibXy1KZ6AwkACXdeqg65TJLEMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjAyN1oX DTI3MDUwMTA5MjUyN1owMzExMC8GA1UEAxMoNDczRDIwNUY4OEExMkZEODZCODM4 OERDQjg1MDRERERBMUM3OTA3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKYUmZoezLeoKT2cIErX9NVIC73pMXb7FIZIpvdJjKfQ+yXf/U4FIzdos48/ 60CP5OcBSAjByz9YmPeKRupzf4HefHUFWezkWoTWwpEB6f3lK2Ro5GLreCrQvTza WAcnubp6sIVsxEZe5Dy8qXUc46Gt3DRDMbs370qUs0R0Q6IRI+wWlofZ0RKN5i8B nEyyYEdpDrzSM6gP/7RwyPcakLGF8KkeFBjLLiUoO5rVFQ6gDCvb107+JzBoiTrK CrvTH5KrVLzVIKCnttFVvpdT9o3hdurdTezyDW3XE2eXbrUeJL1OgNaI6lAHvwgH hp48zSK0dyi+dvc8lbaVQmETi0MCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRHPSBf iKEv2GuDiNy4UE3doceQejAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzNTc3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoz02MA0GCSqGSIb3DQEBCwUAA4IBAQBo9YqCujwQQwjOEscnfaLPyF2q qDQD7fuxy6ozIxLANN85Esr+RwDk9Wc4lafJgZU9nTEbNmzn/l9s1d5Ou+QK5JP6 ffVt/srGWlciClWLMqtpWcVtmXU6Roy8Uij5s6dmEIbbWxVUWjilK9LvXs364DsF L6QFt3pi+bchiCdpxZN2+lD25U6AqhWfo2wWBYIMUtEB/LVRQixylzjF8ZhGJdjM a6+xcQIIEDrhjH7v5N3o9dOhWaLdsOTdCCuyNtRdI8r2vSHHUu9J2hMnOy34XC2K 8kUKmBF4EgvNfRnrfx5qNFpUj0/BI1q9VCu/vRWzpdULxnk9/GJBNshaPIfo -----END CERTIFICATE-----Generated at Sun May 3 00:39:43 2026 by rpki-client