$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153609.roa File: AS153609.roa (raw, json) Hash identifier: haLTkVkcis4qYwulf3ZO6BwPJaUs+wOKhodMzq9wEI8= Subject key identifier: 60:12:09:FB:A1:11:04:E1:AA:49:15:9A:7F:68:9D:65:E1:AC:C1:90 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 38D538903DD3297A0AE7EF7C7BDADCC68F4B0D69 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153609.roa Signing time: Sat 02 May 2026 09:26:42 +0000 ROA not before: Sat 02 May 2026 09:21:42 +0000 ROA not after: Sat 01 May 2027 09:26:42 +0000 asID: 153609 IP address blocks: 163.61.49.0/24 maxlen: 24 2001:df5:8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:d5:38:90:3d:d3:29:7a:0a:e7:ef:7c:7b:da:dc:c6:8f:4b:0d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:42 2026 GMT Not After : May 1 09:26:42 2027 GMT Subject: CN=601209FBA11104E1AA49159A7F689D65E1ACC190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:32:a4:15:ac:ac:43:89:07:14:cc:1a:38:7b: 28:eb:7b:80:ea:b6:7e:b0:76:75:6a:29:7c:8a:70: 18:49:e3:dc:f0:73:b6:1e:1c:47:9c:7c:d8:a8:59: dd:8d:c3:cf:71:bf:cf:e7:ee:c8:da:15:41:d1:c8: 09:34:92:4b:81:07:1e:cb:65:0b:8e:3b:07:b5:38: 34:9a:4d:ae:80:7c:10:86:92:62:48:a6:26:84:d5: fe:0e:6c:f2:e5:bd:ff:f2:21:66:e4:3d:b8:a6:3b: a8:7e:0f:e0:a7:15:93:3f:81:78:76:14:ac:25:85: 5a:29:2e:87:58:93:26:23:5a:ca:be:58:ce:05:a8: fb:60:22:e5:8b:16:96:2d:3e:90:61:d3:d0:6e:34: de:1f:93:e7:36:a9:e4:ff:7d:46:c3:14:70:ef:74: af:6a:73:89:b2:09:43:fe:e6:17:e8:fc:e8:7d:16: 18:ed:0c:b1:34:22:e1:e2:ff:06:1d:f6:e7:d0:dc: 74:e2:40:42:f7:b7:0a:22:16:4d:e3:35:0c:8c:49: b6:5d:44:5c:3b:4f:6f:79:af:03:e5:a3:13:f9:a6: 2d:87:ff:a0:d8:55:1a:df:08:5d:92:a3:86:6b:23: c2:5c:d6:88:de:aa:07:da:e7:02:1c:05:7b:25:14: c7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:12:09:FB:A1:11:04:E1:AA:49:15:9A:7F:68:9D:65:E1:AC:C1:90 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153609.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.49.0/24 IPv6: 2001:df5:8c0::/48 Signature Algorithm: sha256WithRSAEncryption a4:59:01:97:a5:59:03:f6:8c:22:1d:e8:eb:62:51:cb:c0:f3: ab:57:be:ff:40:67:02:4c:a1:78:bf:ec:19:07:2e:82:8f:b7: fb:46:ca:56:13:e2:54:ab:56:78:50:53:6e:ec:cd:0d:1f:9c: 0f:31:f0:e0:f1:30:10:60:e8:f9:f6:ab:c8:66:6b:56:59:9d: f4:97:1e:e2:07:ea:e8:7b:e1:8c:f7:e9:e7:1c:1f:7c:60:67: 1c:ed:ef:da:f5:7c:ec:e8:5f:bc:45:28:04:bf:2b:8d:ab:a3: 6b:6b:65:d2:44:81:b1:2c:56:76:83:16:4e:79:49:5a:08:9c: 7f:da:66:8a:ae:d5:f0:3e:b8:6e:0d:0c:69:fe:ab:3e:a6:dd: a5:bf:a9:ad:96:c4:b9:0a:98:b8:3e:d0:dd:ac:16:2f:31:09: 99:ef:06:f7:c6:15:06:13:48:ea:e9:b0:e8:25:85:9b:76:1b: 2d:d1:b2:d1:16:e2:6e:2e:d8:86:54:7a:44:22:ce:a1:07:06: 71:6a:20:3d:f9:ce:13:84:81:d2:94:cb:de:9c:d3:f5:71:4f: 33:b7:3e:37:39:8f:b0:e9:b3:93:62:e4:a8:ed:b7:27:a2:fa: a2:cc:14:eb:78:76:7d:58:0a:5f:15:92:c0:d6:f7:5b:52:e6: 94:b5:ef:ee -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUONU4kD3TKXoK5+98e9rcxo9LDWkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjE0MloX DTI3MDUwMTA5MjY0MlowMzExMC8GA1UEAxMoNjAxMjA5RkJBMTExMDRFMUFBNDkx NTlBN0Y2ODlENjVFMUFDQzE5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKsypBWsrEOJBxTMGjh7KOt7gOq2frB2dWopfIpwGEnj3PBzth4cR5x82KhZ 3Y3Dz3G/z+fuyNoVQdHICTSSS4EHHstlC447B7U4NJpNroB8EIaSYkimJoTV/g5s 8uW9//IhZuQ9uKY7qH4P4KcVkz+BeHYUrCWFWikuh1iTJiNayr5YzgWo+2Ai5YsW li0+kGHT0G403h+T5zap5P99RsMUcO90r2pzibIJQ/7mF+j86H0WGO0MsTQi4eL/ Bh3259DcdOJAQve3CiIWTeM1DIxJtl1EXDtPb3mvA+WjE/mmLYf/oNhVGt8IXZKj hmsjwlzWiN6qB9rnAhwFeyUUx/ECAwEAAaOCAd0wggHZMB0GA1UdDgQWBBRgEgn7 oREE4apJFZp/aJ1l4azBkDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzNjA5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAoz0xMA8EAgACMAkDBwAgAQ31CMAwDQYJKoZIhvcNAQELBQADggEBAKRZ AZelWQP2jCId6OtiUcvA86tXvv9AZwJMoXi/7BkHLoKPt/tGylYT4lSrVnhQU27s zQ0fnA8x8ODxMBBg6Pn2q8hma1ZZnfSXHuIH6uh74Yz36eccH3xgZxzt79r1fOzo X7xFKAS/K42ro2trZdJEgbEsVnaDFk55SVoInH/aZoqu1fA+uG4NDGn+qz6m3aW/ qa2WxLkKmLg+0N2sFi8xCZnvBvfGFQYTSOrpsOglhZt2Gy3RstEW4m4u2IZUekQi zqEHBnFqID35zhOEgdKUy96c0/VxTzO3Pjc5j7Dps5Ni5Kjttyei+qLMFOt4dn1Y Cl8VksDW91tS5pS17+4= -----END CERTIFICATE-----Generated at Sun May 3 01:40:56 2026 by rpki-client