$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153618.roa File: AS153618.roa (raw, json) Hash identifier: JXR0KM9pcCX2TWe/FIQVfO6L/1j6x8u4yvyFXSysJKQ= Subject key identifier: D5:51:C1:E6:A0:84:B4:0B:61:3C:5F:F4:73:B4:CE:F6:95:D1:2A:94 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 196BF5B9872CAC8CB0A26D8A16657B1F1D45ADB4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153618.roa Signing time: Sat 02 May 2026 09:25:28 +0000 ROA not before: Sat 02 May 2026 09:20:28 +0000 ROA not after: Sat 01 May 2027 09:25:28 +0000 asID: 153618 IP address blocks: 163.61.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:6b:f5:b9:87:2c:ac:8c:b0:a2:6d:8a:16:65:7b:1f:1d:45:ad:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:20:28 2026 GMT Not After : May 1 09:25:28 2027 GMT Subject: CN=D551C1E6A084B40B613C5FF473B4CEF695D12A94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:dd:de:4b:ee:64:cb:87:fd:f0:a9:66:bf:1a: 25:f8:68:98:f5:b0:31:69:79:d4:56:d1:7d:59:e7: 35:39:2a:92:9d:90:fd:14:44:6f:69:28:d6:3e:5d: 21:45:5c:00:e2:92:33:59:c1:0c:d8:e4:21:cf:b9: e4:e2:3d:31:a7:67:fd:d4:bf:a2:93:fb:55:46:fb: 6f:26:4d:06:00:39:fb:5f:14:99:1d:74:4c:2b:32: 90:ab:a1:4b:88:aa:09:4c:b4:07:4b:55:62:35:28: b6:39:3c:c8:b2:73:87:0a:b1:e9:3f:78:66:8f:4a: e3:ae:18:93:36:a9:62:50:53:4e:af:39:b3:6a:e6: ae:1f:dc:8e:ff:77:4a:94:28:91:d8:22:f1:89:28: d6:69:d9:07:c6:45:25:ca:b7:48:7d:de:5e:66:b3: c4:59:94:5b:48:71:b0:a7:36:0b:7c:50:f1:0f:32: 02:67:50:09:a3:f6:ca:59:c9:55:35:b5:d0:e1:ef: 87:6f:c6:bd:8e:25:0b:3c:7b:b8:3e:d3:0b:1f:99: 82:7c:bd:6d:08:5d:55:aa:64:ed:2e:54:27:8d:4a: 39:2a:a6:e5:41:01:1e:c5:19:05:3e:68:96:66:6f: 13:51:ad:dc:63:2d:79:3e:ba:a6:2b:65:0f:e4:7d: 0f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:51:C1:E6:A0:84:B4:0B:61:3C:5F:F4:73:B4:CE:F6:95:D1:2A:94 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.146.0/23 Signature Algorithm: sha256WithRSAEncryption 38:31:f8:e1:8f:b7:6e:6b:dc:cf:f6:71:cc:8d:0d:f9:c9:af: a6:0c:8f:13:99:a2:7a:4a:21:63:76:3b:2a:30:43:49:03:06: a7:b2:02:c6:03:b6:86:b5:95:dc:55:21:e4:ba:87:25:97:68: d2:48:77:b8:39:b0:91:37:b5:fb:4e:b9:ae:82:98:51:85:92: 4b:60:ac:29:af:1b:d9:5b:fe:c1:07:9d:af:24:97:94:01:f0: 30:74:e7:19:a4:ad:0c:c6:5a:45:16:da:a2:09:cf:9f:d5:7a: ff:21:06:a6:10:a3:32:9d:a3:20:43:3b:78:1b:89:e0:2f:a2: 33:64:d5:44:1f:cb:3f:5e:0d:50:3d:89:e3:8b:c0:ea:46:ff: 2e:be:aa:51:41:16:11:72:51:d3:ff:75:df:cf:35:8d:58:88: bb:0f:46:cd:42:e3:15:6c:ff:b5:96:a4:a3:93:6f:8f:40:c7: 7a:57:cb:76:87:16:ad:05:d8:64:97:af:3f:c7:f8:8e:70:98: 21:5c:5a:a7:99:72:bd:5f:0b:c9:36:e3:90:d7:45:d1:b0:00: 73:6a:db:79:07:11:fd:82:05:58:05:89:c6:d3:ca:35:be:da: 25:68:0a:87:90:24:a4:be:c0:e8:92:24:9b:a0:73:6b:ec:fc: 11:81:1c:d6 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUGWv1uYcsrIywom2KFmV7Hx1FrbQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjAyOFoX DTI3MDUwMTA5MjUyOFowMzExMC8GA1UEAxMoRDU1MUMxRTZBMDg0QjQwQjYxM0M1 RkY0NzNCNENFRjY5NUQxMkE5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKTd3kvuZMuH/fCpZr8aJfhomPWwMWl51FbRfVnnNTkqkp2Q/RREb2ko1j5d IUVcAOKSM1nBDNjkIc+55OI9Madn/dS/opP7VUb7byZNBgA5+18UmR10TCsykKuh S4iqCUy0B0tVYjUotjk8yLJzhwqx6T94Zo9K464YkzapYlBTTq85s2rmrh/cjv93 SpQokdgi8Yko1mnZB8ZFJcq3SH3eXmazxFmUW0hxsKc2C3xQ8Q8yAmdQCaP2ylnJ VTW10OHvh2/GvY4lCzx7uD7TCx+Zgny9bQhdVapk7S5UJ41KOSqm5UEBHsUZBT5o lmZvE1Gt3GMteT66pitlD+R9D6sCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTVUcHm oIS0C2E8X/RztM72ldEqlDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzNjE4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBoz2SMA0GCSqGSIb3DQEBCwUAA4IBAQA4Mfjhj7dua9zP9nHMjQ35ya+m DI8TmaJ6SiFjdjsqMENJAwansgLGA7aGtZXcVSHkuocll2jSSHe4ObCRN7X7Trmu gphRhZJLYKwprxvZW/7BB52vJJeUAfAwdOcZpK0MxlpFFtqiCc+f1Xr/IQamEKMy naMgQzt4G4ngL6IzZNVEH8s/Xg1QPYnji8DqRv8uvqpRQRYRclHT/3XfzzWNWIi7 D0bNQuMVbP+1lqSjk2+PQMd6V8t2hxatBdhkl68/x/iOcJghXFqnmXK9XwvJNuOQ 10XRsABzatt5BxH9ggVYBYnG08o1vtolaAqHkCSkvsDokiSboHNr7PwRgRzW -----END CERTIFICATE-----Generated at Sun May 3 00:39:53 2026 by rpki-client