$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153580.roa File: AS153580.roa (raw, json) Hash identifier: kq4i60aMP49jkkSbPpy2TMisLS90+PDkjmnvFsj4YVk= Subject key identifier: FD:B3:7E:F1:52:86:EF:51:5F:5A:38:6D:91:38:37:30:7D:39:5E:F7 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 33EBC30C61203CF7C13607F4742D8489EB1CF489 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153580.roa Signing time: Sat 02 May 2026 09:26:26 +0000 ROA not before: Sat 02 May 2026 09:21:26 +0000 ROA not after: Sat 01 May 2027 09:26:26 +0000 asID: 153580 IP address blocks: 163.61.52.0/23 maxlen: 24 2001:df5:9c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:eb:c3:0c:61:20:3c:f7:c1:36:07:f4:74:2d:84:89:eb:1c:f4:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:26 2026 GMT Not After : May 1 09:26:26 2027 GMT Subject: CN=FDB37EF15286EF515F5A386D913837307D395EF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d3:55:00:5f:e5:7c:32:07:51:46:0e:4a:8f: 34:85:0f:72:61:31:03:92:aa:71:93:dd:01:db:5f: 51:b5:92:13:09:21:c7:fe:29:c9:f7:f0:b3:a8:7d: 45:f0:78:b9:0c:32:0e:22:0c:f1:ac:1d:91:fd:bf: 44:ca:32:e6:32:59:ff:1e:78:a6:bc:9f:d1:9e:fc: 26:3f:e3:3a:c7:54:40:62:39:e7:7b:ad:9f:0a:92: 57:c5:54:fa:4c:d0:ae:6d:04:32:ee:95:be:8e:b8: b3:1e:b6:f8:9e:c6:06:36:ea:e0:4a:a3:27:87:6b: 76:d1:47:43:fe:4f:83:0e:c5:52:5a:b3:fc:10:71: 63:fc:ed:2e:6a:08:d7:3d:5d:2e:78:b0:47:97:d6: 0f:04:4a:7c:cc:d8:ea:ea:77:02:e7:1c:78:ab:e4: 14:f7:2c:06:02:b2:eb:db:1d:47:8e:74:ca:62:fc: e2:1e:a6:e9:73:70:82:44:aa:99:20:34:9a:e4:52: 46:3e:c9:a5:4d:74:08:2e:40:30:8c:f3:71:3e:b9: 9f:84:78:e5:97:c0:5a:f0:89:47:4e:ef:51:3a:34: e6:2d:84:2f:18:bf:5b:d0:7e:e5:9c:14:98:07:65: 7b:d2:de:b7:d8:f8:eb:ce:95:0c:9b:f4:e4:e7:71: fd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B3:7E:F1:52:86:EF:51:5F:5A:38:6D:91:38:37:30:7D:39:5E:F7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153580.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.52.0/23 IPv6: 2001:df5:9c0::/48 Signature Algorithm: sha256WithRSAEncryption 44:e8:2e:ad:63:96:16:d9:64:26:9c:a9:42:dd:7a:fe:07:b8: ef:3c:3f:62:c8:39:76:6d:06:32:55:f9:e5:6d:75:c6:0c:19: 01:b9:80:4c:79:ce:d4:72:55:b4:64:4f:ab:78:99:d4:d3:f3: 74:55:d6:5b:6f:e0:e0:eb:17:cc:57:54:5d:c1:60:19:11:b9: c2:cf:83:31:ad:e7:01:c7:6f:21:c1:09:29:ec:00:42:ec:39: 47:1f:a0:e4:ca:fc:8f:40:16:d3:58:47:df:1b:21:e3:9e:9d: 7e:aa:91:31:0b:10:e6:9d:22:35:4a:25:f2:48:24:b8:16:d0: c1:ec:2e:36:b3:d1:a1:08:32:2f:01:68:39:4c:f4:5f:8a:17: 46:9b:11:ea:4c:a7:29:f2:48:54:6e:53:c5:e9:a5:e1:df:15: 0b:81:c2:b9:9e:cb:da:f6:90:2d:e8:70:38:14:2f:0e:d0:fd: 29:12:2c:f6:d6:47:92:be:a1:43:69:7c:49:f1:a9:70:56:f4: 32:88:50:fe:14:c6:a5:f2:76:ab:b2:d5:a7:66:0b:cf:79:f5: 2e:15:71:88:f5:4b:4c:1b:3d:37:48:8f:4c:fa:f6:54:4d:1a: 12:b2:0d:3b:fe:b5:21:12:23:6f:e0:cb:63:9a:36:76:b9:2c: 35:8b:9b:9f -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUM+vDDGEgPPfBNgf0dC2Eiesc9IkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjEyNloX DTI3MDUwMTA5MjYyNlowMzExMC8GA1UEAxMoRkRCMzdFRjE1Mjg2RUY1MTVGNUEz ODZEOTEzODM3MzA3RDM5NUVGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALnTVQBf5XwyB1FGDkqPNIUPcmExA5KqcZPdAdtfUbWSEwkhx/4pyffws6h9 RfB4uQwyDiIM8awdkf2/RMoy5jJZ/x54pryf0Z78Jj/jOsdUQGI553utnwqSV8VU +kzQrm0EMu6Vvo64sx62+J7GBjbq4EqjJ4drdtFHQ/5Pgw7FUlqz/BBxY/ztLmoI 1z1dLniwR5fWDwRKfMzY6up3AucceKvkFPcsBgKy69sdR450ymL84h6m6XNwgkSq mSA0muRSRj7JpU10CC5AMIzzcT65n4R45ZfAWvCJR07vUTo05i2ELxi/W9B+5ZwU mAdle9Let9j4686VDJv05Odx/X0CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBT9s37x UobvUV9aOG2RODcwfTle9zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzNTgwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBoz00MA8EAgACMAkDBwAgAQ31CcAwDQYJKoZIhvcNAQELBQADggEBAETo Lq1jlhbZZCacqULdev4HuO88P2LIOXZtBjJV+eVtdcYMGQG5gEx5ztRyVbRkT6t4 mdTT83RV1ltv4ODrF8xXVF3BYBkRucLPgzGt5wHHbyHBCSnsAELsOUcfoOTK/I9A FtNYR98bIeOenX6qkTELEOadIjVKJfJIJLgW0MHsLjaz0aEIMi8BaDlM9F+KF0ab EepMpynySFRuU8XppeHfFQuBwrmey9r2kC3ocDgULw7Q/SkSLPbWR5K+oUNpfEnx qXBW9DKIUP4UxqXydquy1admC8959S4VcYj1S0wbPTdIj0z69lRNGhKyDTv+tSES I2/gy2OaNna5LDWLm58= -----END CERTIFICATE-----Generated at Sun May 3 00:39:41 2026 by rpki-client