$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153615.roa File: AS153615.roa (raw, json) Hash identifier: nG4i0Gh6SHuK4vKedxPofDJZO8Wt71mOuyay91B70/I= Subject key identifier: 02:75:A9:B5:B5:F3:CA:3F:54:B1:7B:B3:88:CE:59:2C:A6:0B:C6:E0 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0840ADFD52D917AA90D0D2BA657E2645BF12E3E2 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153615.roa Signing time: Sat 02 May 2026 09:25:29 +0000 ROA not before: Sat 02 May 2026 09:20:29 +0000 ROA not after: Sat 01 May 2027 09:25:29 +0000 asID: 153615 IP address blocks: 163.61.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:40:ad:fd:52:d9:17:aa:90:d0:d2:ba:65:7e:26:45:bf:12:e3:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:20:29 2026 GMT Not After : May 1 09:25:29 2027 GMT Subject: CN=0275A9B5B5F3CA3F54B17BB388CE592CA60BC6E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d7:fb:7b:18:80:7b:3c:05:86:b2:cd:48:05: 28:c4:2d:f8:2e:4c:63:da:24:39:1e:8a:6f:d4:5e: e6:53:57:f4:e4:97:32:6d:2f:a3:63:40:74:2b:64: 20:8f:f3:cd:17:dd:60:0d:0f:3d:60:ef:2e:bb:8e: 04:56:6b:a8:32:37:bd:8a:5f:8a:22:7b:1f:8f:56: 50:c7:27:36:98:9f:27:b8:15:ed:b8:f3:a2:75:30: 60:eb:a2:dd:99:7e:42:bd:7f:b2:90:14:8c:b8:25: 4f:b2:46:4b:38:95:a3:99:a7:8b:c3:49:15:fc:03: 71:1d:75:8f:94:65:74:6e:cf:12:50:e0:a4:bc:31: 6d:ae:ea:9d:b0:ba:74:d2:e3:ae:dd:a3:fd:77:5f: 7a:ca:cb:64:cc:2d:a4:14:dd:b9:a6:fc:71:41:17: 36:39:77:28:15:15:fc:72:3e:6e:29:7f:84:fb:38: 56:57:d5:53:43:4f:00:da:1d:14:10:b1:60:95:5d: 63:32:79:57:3a:23:ee:7a:bf:20:1e:80:81:cc:57: 1d:07:50:15:fe:27:4b:d2:a7:20:ed:39:d4:f8:20: da:78:72:2b:c6:cb:38:ea:5d:bd:ae:7f:0f:cf:69: 46:17:50:e9:7d:0b:35:46:11:50:70:25:f8:98:c1: 3d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:75:A9:B5:B5:F3:CA:3F:54:B1:7B:B3:88:CE:59:2C:A6:0B:C6:E0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153615.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.134.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:ba:b6:96:79:94:34:d0:1b:aa:c4:62:a0:e3:02:da:77:fa: 85:f4:17:22:39:14:53:5d:86:21:35:58:e9:8b:62:a2:34:8e: af:b4:31:22:49:cb:f0:65:50:72:07:02:d1:87:8c:50:8d:7e: 06:4e:ba:85:5a:a5:79:99:c0:c4:1c:85:62:68:d4:08:ab:60: 4f:48:43:da:d9:a9:67:f0:43:d1:c1:43:51:37:c5:d7:e5:60: 8b:86:4a:6f:2e:ec:7a:27:f1:36:15:8a:36:f8:0a:7c:e9:2b: 49:e9:fb:8a:bd:bd:a2:7e:07:52:c9:3c:4c:d6:bf:75:d8:dd: 78:60:5f:06:74:fe:be:4c:7e:bb:cb:7a:af:7c:8d:de:d1:19: 72:c6:3e:31:55:84:fc:68:32:01:17:6c:87:d6:95:80:13:f4: 76:19:47:67:7d:25:61:58:86:60:99:22:93:15:61:fb:b5:e4: 0c:ba:60:18:5f:03:1c:aa:9e:56:49:53:b7:57:c5:23:59:ae: 70:81:d3:be:67:14:eb:f9:cf:47:2b:4d:00:48:34:8c:46:5c: 5f:08:e5:97:5b:fc:b5:e4:e5:b5:4f:e5:71:65:09:3f:d2:e4: 1f:56:43:0b:11:c9:3f:3f:68:d8:aa:19:cb:d0:eb:0d:33:04: a8:95:e1:0b -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUCECt/VLZF6qQ0NK6ZX4mRb8S4+IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjAyOVoX DTI3MDUwMTA5MjUyOVowMzExMC8GA1UEAxMoMDI3NUE5QjVCNUYzQ0EzRjU0QjE3 QkIzODhDRTU5MkNBNjBCQzZFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOTX+3sYgHs8BYayzUgFKMQt+C5MY9okOR6Kb9Re5lNX9OSXMm0vo2NAdCtk II/zzRfdYA0PPWDvLruOBFZrqDI3vYpfiiJ7H49WUMcnNpifJ7gV7bjzonUwYOui 3Zl+Qr1/spAUjLglT7JGSziVo5mni8NJFfwDcR11j5RldG7PElDgpLwxba7qnbC6 dNLjrt2j/XdfesrLZMwtpBTduab8cUEXNjl3KBUV/HI+bil/hPs4VlfVU0NPANod FBCxYJVdYzJ5Vzoj7nq/IB6AgcxXHQdQFf4nS9KnIO051Pgg2nhyK8bLOOpdva5/ D89pRhdQ6X0LNUYRUHAl+JjBPQsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQCdam1 tfPKP1Sxe7OIzlkspgvG4DAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzNjE1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoz2GMA0GCSqGSIb3DQEBCwUAA4IBAQAMuraWeZQ00BuqxGKg4wLad/qF 9BciORRTXYYhNVjpi2KiNI6vtDEiScvwZVByBwLRh4xQjX4GTrqFWqV5mcDEHIVi aNQIq2BPSEPa2aln8EPRwUNRN8XX5WCLhkpvLux6J/E2FYo2+Ap86StJ6fuKvb2i fgdSyTxM1r912N14YF8GdP6+TH67y3qvfI3e0Rlyxj4xVYT8aDIBF2yH1pWAE/R2 GUdnfSVhWIZgmSKTFWH7teQMumAYXwMcqp5WSVO3V8UjWa5wgdO+ZxTr+c9HK00A SDSMRlxfCOWXW/y15OW1T+VxZQk/0uQfVkMLEck/P2jYqhnL0OsNMwSoleEL -----END CERTIFICATE-----Generated at Sun May 3 00:40:25 2026 by rpki-client