$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153584.roa File: AS153584.roa (raw, json) Hash identifier: P8Diye6UZNuWD6CI9Qw9lWi8BAAIhtkFpExql0EWoHE= Subject key identifier: 66:F3:BA:BB:24:50:79:68:C8:A6:5F:99:72:8E:8B:A0:8C:2E:BB:A7 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1C93BE8B3608214D27889D56B7EEB57CE0563D0F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153584.roa Signing time: Sat 02 May 2026 09:26:43 +0000 ROA not before: Sat 02 May 2026 09:21:43 +0000 ROA not after: Sat 01 May 2027 09:26:43 +0000 asID: 153584 IP address blocks: 163.47.28.0/24 maxlen: 24 2001:df4:fdc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:93:be:8b:36:08:21:4d:27:88:9d:56:b7:ee:b5:7c:e0:56:3d:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:43 2026 GMT Not After : May 1 09:26:43 2027 GMT Subject: CN=66F3BABB24507968C8A65F99728E8BA08C2EBBA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:82:f5:d6:d8:26:c9:fa:df:1f:b3:00:f6:fb: 03:6e:20:59:de:9a:15:fe:fe:96:3d:ed:dc:03:b1: 0a:f8:a0:45:a3:9f:90:3b:bc:15:bf:37:4a:a7:d6: f3:ba:a8:5e:e4:40:8e:97:b7:02:28:c6:43:49:61: d7:5e:9a:4d:08:ce:2f:66:84:52:75:45:a1:a2:b6: c4:06:6c:42:95:e8:a7:7f:3e:ed:19:b4:f9:53:ec: 63:63:3f:ed:36:1d:3b:08:a5:c4:77:fa:4c:bb:1a: 7b:09:a1:6d:2e:47:ce:d9:7c:16:69:9f:b4:03:62: 37:ea:5b:61:c5:52:2b:df:2f:f6:bd:73:ab:36:9f: 19:9f:8e:17:ed:eb:8d:25:62:c7:c7:77:de:9a:5e: 70:9b:9e:6b:9c:d7:aa:4f:ec:e5:96:46:26:b7:c1: 4a:85:36:a3:aa:fe:bb:3e:60:8e:66:c3:1a:aa:8e: bb:03:46:78:d8:cc:71:6a:ce:14:f2:cd:ef:5a:79: f1:3e:a6:5d:79:f5:e0:5c:3f:d1:00:08:b7:e9:3c: 07:4a:c2:97:86:49:e4:c6:a2:8a:17:2c:a3:b5:10: 3a:b5:fc:c1:46:92:76:1d:ee:51:92:2b:43:c1:c9: f5:8b:02:b4:3b:37:1f:45:63:1f:b5:51:9f:1f:5b: 2a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F3:BA:BB:24:50:79:68:C8:A6:5F:99:72:8E:8B:A0:8C:2E:BB:A7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153584.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.47.28.0/24 IPv6: 2001:df4:fdc0::/48 Signature Algorithm: sha256WithRSAEncryption 6c:47:81:5a:47:f6:c9:65:a2:d5:ff:3c:5a:84:2c:74:bb:2c: f7:6b:d8:0e:2c:f1:f6:b4:66:4d:68:4f:db:f3:21:9a:b2:3f: 6f:0f:d5:c7:52:6d:89:19:d5:30:00:e7:2f:74:41:f1:c4:b5: 85:41:78:34:b9:a0:ed:93:81:15:0e:ba:30:6b:fc:8b:a0:46: c3:38:ee:0a:81:0f:77:2e:ed:36:dd:3f:0f:a2:8a:29:02:bf: c7:3f:46:81:81:62:21:44:66:5d:52:b7:62:51:8b:6c:1f:eb: 6d:c7:59:65:c9:a4:19:75:8c:fd:a7:14:df:92:c5:47:e3:2e: 55:ee:c0:da:0b:a8:ef:bd:a4:eb:bd:32:a2:fd:06:7a:a2:a3: d5:4d:eb:14:82:e1:e7:38:3f:4e:e9:d3:4a:ae:df:da:47:25: d5:ef:2f:dc:20:47:96:08:6e:96:b7:b8:4d:b9:52:c6:1f:88: 1e:4a:f1:6e:da:4a:61:2c:4f:16:af:57:56:09:36:73:ae:00: 05:c3:69:43:77:9b:fa:99:cb:b5:ae:cb:27:48:54:1c:65:77: d1:ce:9b:fd:c7:85:92:db:d3:6e:e4:b3:2b:bc:2a:e9:41:15: 95:47:97:24:41:b2:54:84:af:e8:02:fe:40:62:95:bd:1d:9b: a9:cb:98:60 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUHJO+izYIIU0niJ1Wt+61fOBWPQ8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjE0M1oX DTI3MDUwMTA5MjY0M1owMzExMC8GA1UEAxMoNjZGM0JBQkIyNDUwNzk2OEM4QTY1 Rjk5NzI4RThCQTA4QzJFQkJBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL6C9dbYJsn63x+zAPb7A24gWd6aFf7+lj3t3AOxCvigRaOfkDu8Fb83SqfW 87qoXuRAjpe3AijGQ0lh116aTQjOL2aEUnVFoaK2xAZsQpXop38+7Rm0+VPsY2M/ 7TYdOwilxHf6TLsaewmhbS5Hztl8FmmftANiN+pbYcVSK98v9r1zqzafGZ+OF+3r jSVix8d33ppecJuea5zXqk/s5ZZGJrfBSoU2o6r+uz5gjmbDGqqOuwNGeNjMcWrO FPLN71p58T6mXXn14Fw/0QAIt+k8B0rCl4ZJ5Maiihcso7UQOrX8wUaSdh3uUZIr Q8HJ9YsCtDs3H0VjH7VRnx9bKhECAwEAAaOCAd0wggHZMB0GA1UdDgQWBBRm87q7 JFB5aMimX5lyjougjC67pzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzNTg0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAoy8cMA8EAgACMAkDBwAgAQ30/cAwDQYJKoZIhvcNAQELBQADggEBAGxH gVpH9sllotX/PFqELHS7LPdr2A4s8fa0Zk1oT9vzIZqyP28P1cdSbYkZ1TAA5y90 QfHEtYVBeDS5oO2TgRUOujBr/IugRsM47gqBD3cu7TbdPw+iiikCv8c/RoGBYiFE Zl1St2JRi2wf623HWWXJpBl1jP2nFN+SxUfjLlXuwNoLqO+9pOu9MqL9Bnqio9VN 6xSC4ec4P07p00qu39pHJdXvL9wgR5YIbpa3uE25UsYfiB5K8W7aSmEsTxavV1YJ NnOuAAXDaUN3m/qZy7WuyydIVBxld9HOm/3HhZLb027ksyu8KulBFZVHlyRBslSE r+gC/kBilb0dm6nLmGA= -----END CERTIFICATE-----Generated at Sun May 3 00:39:35 2026 by rpki-client