$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153583.roa File: AS153583.roa (raw, json) Hash identifier: PkLNy1EDGMc4WxL7vJa3AXV4cgaGN50WvwDWcxlpmOs= Subject key identifier: 0C:95:F1:C2:0D:2E:D1:64:AC:1B:92:03:C8:B9:AC:A9:C6:FA:93:8B Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 596981BBDE2CFF9789EE562A4A7DA5185D27B285 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153583.roa Signing time: Sat 02 May 2026 09:26:49 +0000 ROA not before: Sat 02 May 2026 09:21:49 +0000 ROA not after: Sat 01 May 2027 09:26:49 +0000 asID: 153583 IP address blocks: 163.61.13.0/24 maxlen: 24 2001:df5:140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:69:81:bb:de:2c:ff:97:89:ee:56:2a:4a:7d:a5:18:5d:27:b2:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:49 2026 GMT Not After : May 1 09:26:49 2027 GMT Subject: CN=0C95F1C20D2ED164AC1B9203C8B9ACA9C6FA938B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:31:6a:4b:d9:f7:1e:e3:74:67:d1:25:b5:9a: e3:ab:f9:1a:92:33:41:f5:d0:bd:ea:47:a5:ac:ca: d8:94:b8:38:bc:d0:52:9b:1a:38:67:9b:ec:4d:71: 92:af:68:e8:4e:a1:ff:fd:2f:6e:47:97:6e:be:4e: 2c:ba:a4:5e:7a:33:95:a3:0d:ff:f0:8f:1d:8e:04: 7f:3e:83:46:7e:f0:27:c6:de:f1:ee:09:52:2a:83: d7:07:da:83:69:b5:01:1b:8b:6a:44:c5:b4:66:b6: a0:a7:9b:d8:80:ec:69:97:ae:ea:ad:1e:3d:f6:86: 09:a5:28:39:7d:fa:cc:b9:21:4f:4d:84:0a:a0:ac: d7:d6:0d:b2:06:71:89:ce:e4:a1:c6:2e:da:eb:95: ec:75:21:d0:52:37:00:3d:a9:f8:4b:f7:f2:1e:64: 81:e6:af:aa:bc:1a:c3:88:34:12:7e:f0:1d:57:0a: a0:fd:e1:ac:8e:78:6a:0d:b8:d4:1b:f7:1f:97:c2: c6:35:5a:4c:31:80:bc:7d:23:17:ec:8c:10:61:bc: 91:9d:cb:d4:69:ad:28:07:38:a8:e9:a7:dd:c2:f4: 4c:31:8f:79:28:d4:a2:f2:88:47:33:76:a1:27:0b: 62:f9:5d:9d:48:cd:f2:16:43:72:d4:80:7b:ae:a2: 7d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:95:F1:C2:0D:2E:D1:64:AC:1B:92:03:C8:B9:AC:A9:C6:FA:93:8B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153583.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.13.0/24 IPv6: 2001:df5:140::/48 Signature Algorithm: sha256WithRSAEncryption 42:13:b3:bb:d3:b7:3b:db:f0:42:5b:be:5c:3b:a3:0a:9c:bf: bd:18:a3:94:55:d8:30:f2:db:9b:0e:c3:0f:25:53:85:1d:69: a2:46:2f:7e:5b:9f:6d:0a:fa:b4:f8:31:fa:14:16:b6:6c:c3: 67:e3:f2:ce:4b:54:b1:52:14:b0:e1:2c:ce:ea:d7:6b:21:5e: 3e:cb:d4:98:a6:27:5d:e9:00:c5:06:4e:80:bb:0b:20:16:dc: da:bc:1e:e0:3b:74:e4:cc:61:35:4e:d4:03:ec:1e:35:78:9f: 63:1b:30:a4:fe:51:b2:c1:df:25:d6:41:e7:1a:db:bd:9b:a7: 56:87:7b:78:98:a3:2d:13:67:be:9e:45:95:e4:c1:35:47:e1: b8:3e:84:ea:93:4d:ff:21:cc:a2:31:6e:3d:3d:c7:67:0e:4d: df:ab:e7:bf:e8:98:16:bf:8e:40:fd:21:9e:2a:d8:b7:1b:1a: 55:9f:06:94:13:38:62:2f:6f:b6:63:36:53:a0:09:9b:0f:8e: b8:49:5d:cc:35:fe:ad:b1:8c:7e:fe:4c:40:31:84:82:47:50: 28:5e:cb:8f:3a:14:38:d4:4a:c3:5a:e0:7b:70:c5:7e:4b:c7: db:b8:99:68:8e:aa:2c:e7:fa:ae:0c:ae:28:3f:f2:b3:50:55: 2a:d2:f2:c7 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUWWmBu94s/5eJ7lYqSn2lGF0nsoUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjE0OVoX DTI3MDUwMTA5MjY0OVowMzExMC8GA1UEAxMoMEM5NUYxQzIwRDJFRDE2NEFDMUI5 MjAzQzhCOUFDQTlDNkZBOTM4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMYxakvZ9x7jdGfRJbWa46v5GpIzQfXQvepHpazK2JS4OLzQUpsaOGeb7E1x kq9o6E6h//0vbkeXbr5OLLqkXnozlaMN//CPHY4Efz6DRn7wJ8be8e4JUiqD1wfa g2m1ARuLakTFtGa2oKeb2IDsaZeu6q0ePfaGCaUoOX36zLkhT02ECqCs19YNsgZx ic7kocYu2uuV7HUh0FI3AD2p+Ev38h5kgeavqrwaw4g0En7wHVcKoP3hrI54ag24 1Bv3H5fCxjVaTDGAvH0jF+yMEGG8kZ3L1GmtKAc4qOmn3cL0TDGPeSjUovKIRzN2 oScLYvldnUjN8hZDctSAe66ifVMCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQMlfHC DS7RZKwbkgPIuaypxvqTizAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzNTgzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAoz0NMA8EAgACMAkDBwAgAQ31AUAwDQYJKoZIhvcNAQELBQADggEBAEIT s7vTtzvb8EJbvlw7owqcv70Yo5RV2DDy25sOww8lU4UdaaJGL35bn20K+rT4MfoU FrZsw2fj8s5LVLFSFLDhLM7q12shXj7L1JimJ13pAMUGToC7CyAW3Nq8HuA7dOTM YTVO1APsHjV4n2MbMKT+UbLB3yXWQeca272bp1aHe3iYoy0TZ76eRZXkwTVH4bg+ hOqTTf8hzKIxbj09x2cOTd+r57/omBa/jkD9IZ4q2LcbGlWfBpQTOGIvb7ZjNlOg CZsPjrhJXcw1/q2xjH7+TEAxhIJHUChey486FDjUSsNa4HtwxX5Lx9u4mWiOqizn +q4Mrig/8rNQVSrS8sc= -----END CERTIFICATE-----Generated at Sun May 3 00:39:43 2026 by rpki-client