$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153665.roa File: AS153665.roa (raw, json) Hash identifier: PjuJnx08ykwTimI4dfnoBEE9oeUjueM4TcEVbAS6qNs= Subject key identifier: 35:F2:3E:2B:12:2B:E1:DB:C7:E9:A7:31:9D:68:76:39:EE:5C:85:D6 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3A46D1FEA9167C573034C428D095338B53D7F637 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153665.roa Signing time: Sat 02 May 2026 09:25:21 +0000 ROA not before: Sat 02 May 2026 09:20:21 +0000 ROA not after: Sat 01 May 2027 09:25:21 +0000 asID: 153665 IP address blocks: 163.61.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:46:d1:fe:a9:16:7c:57:30:34:c4:28:d0:95:33:8b:53:d7:f6:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:20:21 2026 GMT Not After : May 1 09:25:21 2027 GMT Subject: CN=35F23E2B122BE1DBC7E9A7319D687639EE5C85D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d4:d4:11:ab:73:5c:35:ba:f9:1a:c5:dd:6a: 64:97:84:87:c0:ad:bc:a5:cd:ea:3f:bf:d6:3e:a1: ca:61:2e:01:05:67:af:4b:0c:15:5b:95:6c:24:bd: 77:4b:92:59:f3:eb:91:ff:65:a1:64:fd:31:b6:e6: db:a2:48:c6:54:b6:f4:5c:9f:22:c8:3f:e6:b9:1e: a4:64:f8:d4:fa:ff:28:30:07:43:5c:d2:e8:ee:cd: 67:fb:c9:19:9b:dd:d3:d4:20:e0:1a:ce:72:83:e3: 8e:37:7a:24:65:00:16:7c:0b:04:3e:86:92:65:4c: 42:ad:0c:22:81:4a:10:4d:65:67:a8:72:dd:5e:f3: df:8e:22:54:2a:1c:3e:b2:5e:40:99:09:19:68:53: 35:3b:d1:aa:27:f0:be:86:44:f6:5e:85:37:96:d3: 31:b4:23:19:ad:03:5f:67:ca:0c:ce:9e:04:44:49: 32:a0:77:5d:e5:54:fe:cd:40:43:86:26:34:34:6f: d0:52:7a:ba:76:b2:3f:75:68:1e:1e:2e:bc:29:b0: 14:4c:f6:d7:93:28:4e:58:ea:57:9f:00:6b:57:95: 12:2e:e6:f4:d8:88:80:ae:0f:a6:fe:ac:bc:92:4a: 7f:23:66:4e:c6:22:46:38:0e:f9:79:0e:20:07:fb: 6f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F2:3E:2B:12:2B:E1:DB:C7:E9:A7:31:9D:68:76:39:EE:5C:85:D6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153665.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.158.0/24 Signature Algorithm: sha256WithRSAEncryption 37:65:7c:b7:65:1f:68:6d:64:35:70:e4:84:e7:43:e4:19:87: a3:c5:33:6c:a8:eb:65:32:89:03:c6:9d:1a:f7:38:3b:26:f2: c9:26:0d:e8:f4:e7:64:f1:3b:48:d8:b9:b3:0d:46:ad:26:2a: 9f:16:7f:2d:9f:ec:e1:b5:cc:9e:e2:33:b4:66:84:58:fb:ea: 17:7c:d0:4e:c7:0f:2f:ee:c9:07:9f:cf:ba:21:08:48:93:50: 00:ce:13:95:e6:a2:21:83:d7:c4:73:df:d2:74:45:b5:47:8d: d2:38:f0:05:c3:a6:7f:68:fc:cb:59:5c:56:78:7a:b9:f2:6e: db:27:ba:96:50:bf:22:a9:1a:fc:40:53:17:29:21:15:2a:70: aa:6d:7d:02:0e:c0:93:ee:56:28:8c:0a:61:40:5a:e8:bf:dc: 78:b4:95:ac:fe:55:f4:96:ea:31:1e:ea:78:10:e7:09:4e:25: a8:d3:38:32:91:2a:b9:72:ff:51:5a:0f:2a:29:f4:02:e9:fc: bb:2f:f5:ef:89:f9:89:83:11:83:1d:2e:0f:e1:c5:da:bc:a6: a3:16:28:88:31:6d:fa:c4:15:64:bb:95:30:48:a3:15:ee:cf: f7:90:a9:62:b3:cd:31:47:d5:f2:e6:11:60:7c:74:07:7c:e8: 1a:dd:21:8f -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUOkbR/qkWfFcwNMQo0JUzi1PX9jcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjAyMVoX DTI3MDUwMTA5MjUyMVowMzExMC8GA1UEAxMoMzVGMjNFMkIxMjJCRTFEQkM3RTlB NzMxOUQ2ODc2MzlFRTVDODVENjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANXU1BGrc1w1uvkaxd1qZJeEh8CtvKXN6j+/1j6hymEuAQVnr0sMFVuVbCS9 d0uSWfPrkf9loWT9Mbbm26JIxlS29FyfIsg/5rkepGT41Pr/KDAHQ1zS6O7NZ/vJ GZvd09Qg4BrOcoPjjjd6JGUAFnwLBD6GkmVMQq0MIoFKEE1lZ6hy3V7z344iVCoc PrJeQJkJGWhTNTvRqifwvoZE9l6FN5bTMbQjGa0DX2fKDM6eBERJMqB3XeVU/s1A Q4YmNDRv0FJ6unayP3VoHh4uvCmwFEz215MoTljqV58Aa1eVEi7m9NiIgK4Ppv6s vJJKfyNmTsYiRjgO+XkOIAf7bxcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQ18j4r Eivh28fppzGdaHY57lyF1jAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzNjY1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoz2eMA0GCSqGSIb3DQEBCwUAA4IBAQA3ZXy3ZR9obWQ1cOSE50PkGYej xTNsqOtlMokDxp0a9zg7JvLJJg3o9Odk8TtI2LmzDUatJiqfFn8tn+zhtcye4jO0 ZoRY++oXfNBOxw8v7skHn8+6IQhIk1AAzhOV5qIhg9fEc9/SdEW1R43SOPAFw6Z/ aPzLWVxWeHq58m7bJ7qWUL8iqRr8QFMXKSEVKnCqbX0CDsCT7lYojAphQFrov9x4 tJWs/lX0luoxHup4EOcJTiWo0zgykSq5cv9RWg8qKfQC6fy7L/XvifmJgxGDHS4P 4cXavKajFiiIMW36xBVku5UwSKMV7s/3kKlis80xR9Xy5hFgfHQHfOga3SGP -----END CERTIFICATE-----Generated at Sun May 3 00:39:37 2026 by rpki-client