$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153579.roa File: AS153579.roa (raw, json) Hash identifier: VS18EK/Pi9P9IG/vU4TraJPEAEqfCGwBsAwZiSdL8gs= Subject key identifier: E3:96:B9:4C:1D:76:19:C7:63:C0:24:69:92:4A:92:48:67:03:EA:45 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 11B8D50B582A295D0C7F21712D277D2CC0852715 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153579.roa Signing time: Sat 02 May 2026 09:25:23 +0000 ROA not before: Sat 02 May 2026 09:20:23 +0000 ROA not after: Sat 01 May 2027 09:25:23 +0000 asID: 153579 IP address blocks: 163.61.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:b8:d5:0b:58:2a:29:5d:0c:7f:21:71:2d:27:7d:2c:c0:85:27:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:20:23 2026 GMT Not After : May 1 09:25:23 2027 GMT Subject: CN=E396B94C1D7619C763C02469924A92486703EA45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:13:74:15:92:fb:f7:4c:82:ce:ca:05:8b:46: 38:7a:08:6f:36:fb:e3:52:c7:4f:2c:df:83:46:92: 17:d3:ec:12:d7:21:d4:38:7d:19:cd:82:7c:4f:51: cf:f0:18:74:f3:9b:99:a4:91:8f:24:a2:c9:b3:e8: cb:e5:bb:d3:dd:b1:53:d1:9d:db:4b:55:4e:4d:96: 3b:b8:9b:ac:16:e6:f8:de:e4:91:e9:a2:89:02:fb: 99:1c:be:a7:38:93:4d:53:0c:6b:20:b2:f5:7d:87: dc:25:85:59:5c:92:00:25:3d:0a:96:87:8a:63:51: 31:1a:9c:6a:d1:31:14:21:ba:a4:19:c6:8c:37:22: df:2a:85:22:a3:f2:7e:8f:f1:c0:b7:09:3f:3e:f8: 9d:29:03:8c:11:ea:91:e3:bc:00:fa:dc:34:f9:a8: 34:46:75:03:59:68:b8:c9:da:e1:60:dd:26:90:be: c0:a5:e1:e2:14:26:a0:bf:74:4c:ea:ce:33:5d:8d: 17:77:b1:36:d6:2f:55:23:e3:53:6f:a4:3c:b5:93: df:f2:82:2e:be:91:fd:17:6b:71:da:ba:44:d3:9d: 5a:00:bb:7d:fb:90:26:3b:7d:9b:21:0b:71:84:e6: 1b:10:aa:20:f9:8b:f4:b7:5e:50:2a:c7:dc:6b:58: 8a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:96:B9:4C:1D:76:19:C7:63:C0:24:69:92:4A:92:48:67:03:EA:45 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153579.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.78.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:47:59:86:eb:f6:0b:72:57:69:52:71:84:e3:1a:08:df:b0: 44:c8:97:20:1b:f2:d1:8a:bc:26:f3:91:aa:b9:16:63:85:f2: 31:0b:05:bf:b3:f4:8f:09:dc:67:64:04:a6:5e:55:d2:44:9e: 4e:4e:ca:6f:2b:5d:f9:48:d6:7c:ce:17:02:ca:ba:09:6d:d0: f5:d2:61:ce:d0:2b:70:9b:93:30:78:ba:e9:55:fe:15:04:5b: f7:68:41:e4:c8:cd:b9:9c:74:22:a5:4c:3e:00:a2:e8:a6:c5: 21:fa:18:a8:66:d7:ce:86:61:d4:c8:cf:cb:26:50:f3:ed:25: 50:b0:65:eb:7e:18:44:a5:ac:a5:c5:2d:16:6b:eb:04:e8:d4: 61:20:ff:54:7a:ad:3b:ea:da:93:ba:45:2f:3e:21:84:d4:5c: bf:05:8f:b5:cf:66:34:2b:03:3a:51:1b:30:9d:56:f4:c6:b9: 33:54:e7:39:f2:45:fa:9d:bd:f2:a9:da:d9:33:6b:3e:99:cc: aa:f7:a6:7c:a1:de:19:04:21:35:c4:3a:f4:6d:d0:1c:d5:45: f5:6d:59:7f:e2:ad:63:c3:d4:40:90:fe:ef:c1:a1:51:37:96: 8c:ba:90:fe:a2:68:f6:23:6a:26:14:aa:63:15:61:7b:69:af: 97:4a:97:8a -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUEbjVC1gqKV0MfyFxLSd9LMCFJxUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjAyM1oX DTI3MDUwMTA5MjUyM1owMzExMC8GA1UEAxMoRTM5NkI5NEMxRDc2MTlDNzYzQzAy NDY5OTI0QTkyNDg2NzAzRUE0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALETdBWS+/dMgs7KBYtGOHoIbzb741LHTyzfg0aSF9PsEtch1Dh9Gc2CfE9R z/AYdPObmaSRjySiybPoy+W7092xU9Gd20tVTk2WO7ibrBbm+N7kkemiiQL7mRy+ pziTTVMMayCy9X2H3CWFWVySACU9CpaHimNRMRqcatExFCG6pBnGjDci3yqFIqPy fo/xwLcJPz74nSkDjBHqkeO8APrcNPmoNEZ1A1louMna4WDdJpC+wKXh4hQmoL90 TOrOM12NF3exNtYvVSPjU2+kPLWT3/KCLr6R/Rdrcdq6RNOdWgC7ffuQJjt9myEL cYTmGxCqIPmL9LdeUCrH3GtYimsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTjlrlM HXYZx2PAJGmSSpJIZwPqRTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzNTc5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBoz1OMA0GCSqGSIb3DQEBCwUAA4IBAQCbR1mG6/YLcldpUnGE4xoI37BE yJcgG/LRirwm85GquRZjhfIxCwW/s/SPCdxnZASmXlXSRJ5OTspvK135SNZ8zhcC yroJbdD10mHO0Ctwm5MweLrpVf4VBFv3aEHkyM25nHQipUw+AKLopsUh+hioZtfO hmHUyM/LJlDz7SVQsGXrfhhEpaylxS0Wa+sE6NRhIP9Ueq076tqTukUvPiGE1Fy/ BY+1z2Y0KwM6URswnVb0xrkzVOc58kX6nb3yqdrZM2s+mcyq96Z8od4ZBCE1xDr0 bdAc1UX1bVl/4q1jw9RAkP7vwaFRN5aMupD+omj2I2omFKpjFWF7aa+XSpeK -----END CERTIFICATE-----Generated at Sun May 3 00:39:42 2026 by rpki-client