$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153582.roa File: AS153582.roa (raw, json) Hash identifier: NVHoOLzkCsbht14+TgUoZ8/2BOTA51m6UQXSG9EBzXc= Subject key identifier: 2B:3B:DC:90:DF:49:60:21:F4:09:F2:07:FD:A0:7E:D0:92:62:80:55 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 755CF1FDF73BE71C358328820FA66907E313E21B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153582.roa Signing time: Sat 02 May 2026 09:26:23 +0000 ROA not before: Sat 02 May 2026 09:21:23 +0000 ROA not after: Sat 01 May 2027 09:26:23 +0000 asID: 153582 IP address blocks: 163.61.55.0/24 maxlen: 24 2001:df5:a40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:5c:f1:fd:f7:3b:e7:1c:35:83:28:82:0f:a6:69:07:e3:13:e2:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:23 2026 GMT Not After : May 1 09:26:23 2027 GMT Subject: CN=2B3BDC90DF496021F409F207FDA07ED092628055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ed:de:8c:01:5c:31:22:39:49:90:34:62:d7: fc:42:a0:39:32:20:1b:5a:2e:30:b7:10:3e:e7:8f: 96:bc:95:eb:0f:92:a9:8c:3f:27:91:5e:ca:cd:b2: d4:8b:29:ca:10:95:7e:a3:2b:ef:b5:02:82:46:32: 30:60:11:58:04:e6:77:a3:f8:c9:47:f3:3f:f6:f8: 19:5f:d1:c9:d4:16:c5:2c:3b:58:9f:a6:be:c6:24: 24:a1:f6:54:7d:34:38:61:27:9d:b3:b6:e7:eb:4f: 9e:33:d8:af:db:2e:07:1f:4a:7d:b0:96:5d:1b:14: 04:a0:2f:76:07:bc:66:1e:cf:62:00:15:4f:75:9f: 67:c6:9e:09:e3:f1:3f:f6:3f:a5:56:57:1c:81:0b: 28:3c:ff:87:35:c3:de:26:6d:79:b2:7c:04:ba:3b: 9c:17:9d:10:7b:2e:ed:20:f1:ea:fc:17:21:08:cd: 02:b3:e8:5a:c9:db:90:7e:66:ec:b0:0b:1c:3b:92: 8c:6a:a4:48:04:1f:43:46:9f:d4:a6:12:96:77:d4: 7a:18:f4:ec:94:d0:9e:4e:04:2f:61:55:f8:fa:c2: 78:f2:bc:17:51:80:fe:c7:fa:e1:64:30:f3:81:a8: 28:e0:8a:f4:9d:43:0a:3d:c1:6a:d2:8a:c9:0c:93: ec:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3B:DC:90:DF:49:60:21:F4:09:F2:07:FD:A0:7E:D0:92:62:80:55 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153582.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.55.0/24 IPv6: 2001:df5:a40::/48 Signature Algorithm: sha256WithRSAEncryption 0c:5c:d2:1b:5c:96:30:b5:59:70:68:2e:f6:2b:f9:d7:64:1e: 6d:14:5b:ba:72:6e:70:00:14:07:8f:db:84:64:21:85:79:a1: c2:9e:c6:fd:d9:dd:81:c4:6f:69:2b:e9:d2:d1:31:99:96:05: 01:16:74:8d:fa:16:3a:37:ab:32:84:56:c0:17:7d:a3:6f:f3: 54:b6:bc:b6:b8:f8:76:a9:8e:d3:d7:d5:ae:3f:62:c8:a8:a4: b7:40:6d:0f:e4:79:a2:7e:d7:e5:99:5a:1d:d7:f9:0a:17:b4: fa:1f:dc:e1:0e:27:de:0d:68:b9:a0:c0:0e:42:3d:eb:89:eb: c8:36:b6:40:01:9a:24:3c:9f:f3:b7:77:3d:14:14:34:9e:13: a5:14:06:a7:01:2e:ae:6b:0c:76:6b:7b:3f:45:b4:45:4c:71: 67:6e:3c:2b:a6:69:91:0a:0a:28:ec:71:6e:2c:ec:f7:4f:9a: 57:e7:62:8a:1a:74:c8:79:f8:ae:5f:58:1d:2b:22:c7:7c:ea: b2:35:c1:49:c2:10:fd:f8:54:a5:e4:bb:d5:e5:73:1f:dd:a3: e1:f6:40:fb:33:46:a0:57:fa:45:c3:70:f7:4b:3d:e6:d7:4f: 92:cf:66:c4:f0:14:d0:93:f9:5a:4a:80:14:cf:99:8a:c3:11: e2:cf:68:13 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUdVzx/fc75xw1gyiCD6ZpB+MT4hswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjEyM1oX DTI3MDUwMTA5MjYyM1owMzExMC8GA1UEAxMoMkIzQkRDOTBERjQ5NjAyMUY0MDlG MjA3RkRBMDdFRDA5MjYyODA1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/t3owBXDEiOUmQNGLX/EKgOTIgG1ouMLcQPuePlryV6w+SqYw/J5Feys2y 1IspyhCVfqMr77UCgkYyMGARWATmd6P4yUfzP/b4GV/RydQWxSw7WJ+mvsYkJKH2 VH00OGEnnbO25+tPnjPYr9suBx9KfbCWXRsUBKAvdge8Zh7PYgAVT3WfZ8aeCePx P/Y/pVZXHIELKDz/hzXD3iZtebJ8BLo7nBedEHsu7SDx6vwXIQjNArPoWsnbkH5m 7LALHDuSjGqkSAQfQ0af1KYSlnfUehj07JTQnk4EL2FV+PrCePK8F1GA/sf64WQw 84GoKOCK9J1DCj3BatKKyQyT7I8CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQrO9yQ 30lgIfQJ8gf9oH7QkmKAVTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzNTgyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAoz03MA8EAgACMAkDBwAgAQ31CkAwDQYJKoZIhvcNAQELBQADggEBAAxc 0htcljC1WXBoLvYr+ddkHm0UW7pybnAAFAeP24RkIYV5ocKexv3Z3YHEb2kr6dLR MZmWBQEWdI36Fjo3qzKEVsAXfaNv81S2vLa4+HapjtPX1a4/YsiopLdAbQ/keaJ+ 1+WZWh3X+QoXtPof3OEOJ94NaLmgwA5CPeuJ68g2tkABmiQ8n/O3dz0UFDSeE6UU BqcBLq5rDHZrez9FtEVMcWduPCumaZEKCijscW4s7PdPmlfnYooadMh5+K5fWB0r Isd86rI1wUnCEP34VKXku9Xlcx/do+H2QPszRqBX+kXDcPdLPebXT5LPZsTwFNCT +VpKgBTPmYrDEeLPaBM= -----END CERTIFICATE-----Generated at Sun May 3 00:39:37 2026 by rpki-client