$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153670.roa File: AS153670.roa (raw, json) Hash identifier: JN9A8Y6OHlE/KBWLe45YjS5T5WthiuJ01qqOaJGuY+w= Subject key identifier: 89:AA:55:15:0C:6D:28:B3:F3:A9:09:5F:22:B5:0F:97:48:F3:1D:92 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5539A0AD4A132624296BDD8C631CA7C0C25DBF60 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153670.roa Signing time: Sat 02 May 2026 09:25:32 +0000 ROA not before: Sat 02 May 2026 09:20:32 +0000 ROA not after: Sat 01 May 2027 09:25:32 +0000 asID: 153670 IP address blocks: 163.61.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:39:a0:ad:4a:13:26:24:29:6b:dd:8c:63:1c:a7:c0:c2:5d:bf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:20:32 2026 GMT Not After : May 1 09:25:32 2027 GMT Subject: CN=89AA55150C6D28B3F3A9095F22B50F9748F31D92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7c:ca:d3:e2:e4:e4:0e:0a:b0:50:2f:76:d5: 1b:2e:02:fc:2d:e2:1e:02:2b:97:83:3d:7b:78:52: 82:ac:83:5b:1a:8a:72:8c:0d:53:50:d4:3e:e5:a4: 10:bb:cb:da:44:d6:bb:fa:9d:f6:ef:16:62:48:78: 11:ed:52:bc:81:4b:75:59:e4:05:a1:9e:50:34:70: 3f:00:2f:b5:01:a5:41:b3:ee:ec:41:48:f0:e1:60: 24:d3:30:1e:dd:9e:65:4a:e8:7e:22:c4:dd:cc:e7: c5:76:14:61:8c:2d:60:26:b3:69:a1:1a:57:cd:ad: d8:02:e9:d7:af:2f:c1:93:4d:0c:4b:48:d4:01:62: ae:fe:c5:f3:e2:68:f9:14:e0:a1:1a:21:26:51:c4: 8c:a2:5a:4b:94:72:a0:13:c7:ba:e6:f7:40:63:c2: 41:16:1f:4d:73:ff:a8:72:13:ac:13:71:a3:60:9b: be:dd:71:fb:da:4d:85:c7:23:3e:53:31:6c:de:81: c3:25:f4:5a:59:c2:9b:a6:66:e1:99:2a:48:f7:fd: e4:8c:d2:41:64:d3:7b:25:44:9b:fe:8a:34:7b:1d: 7c:78:02:1d:9c:35:c0:1e:54:28:47:39:53:ae:9e: 0a:cb:a5:19:c4:fb:df:5c:5b:0b:2a:d5:61:91:62: 1f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AA:55:15:0C:6D:28:B3:F3:A9:09:5F:22:B5:0F:97:48:F3:1D:92 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153670.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.251.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:89:aa:af:a5:ec:07:a5:9e:d0:80:a1:84:a5:72:b6:44:ee: 90:7c:9c:a7:4c:61:bd:68:57:98:97:9a:27:8c:08:0b:bc:5b: 02:d9:ec:1b:e6:be:7b:05:68:da:25:ba:bc:4d:8c:48:23:b7: 5a:6f:04:6e:1a:51:42:b6:e7:26:dd:43:78:f8:b8:c1:5f:87: c4:08:c5:f3:f3:8f:2a:af:b4:17:52:89:4e:df:0d:d4:47:8e: 66:7a:f7:1b:ae:6a:34:85:0f:5d:c2:b1:9e:53:e0:c9:f0:0b: a8:13:06:37:f0:50:a4:74:25:6d:c4:20:9b:2a:bf:44:03:55: aa:6b:c2:7b:83:55:2b:4a:eb:00:ee:e2:7e:65:48:69:2d:90: 8c:11:f0:97:0e:11:9b:7e:50:d7:73:e5:f0:17:f4:cd:eb:64: 37:0d:e9:45:c0:50:f6:a3:38:c0:7a:9b:f6:a5:3a:b7:73:26: 0f:54:0f:5a:bf:1e:19:86:d3:a0:7f:b0:6c:83:fc:36:0f:67: 3c:bd:89:7c:f7:0e:79:a7:c1:ad:d2:d9:d2:84:80:37:98:08: 9b:99:e8:a1:d9:7d:a6:28:d0:af:60:fb:b1:77:3c:32:09:1a: 78:c8:a1:90:51:c2:85:66:dc:95:aa:7c:53:61:4c:9f:5d:75: a1:23:c2:32 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUVTmgrUoTJiQpa92MYxynwMJdv2AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjAzMloX DTI3MDUwMTA5MjUzMlowMzExMC8GA1UEAxMoODlBQTU1MTUwQzZEMjhCM0YzQTkw OTVGMjJCNTBGOTc0OEYzMUQ5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANF8ytPi5OQOCrBQL3bVGy4C/C3iHgIrl4M9e3hSgqyDWxqKcowNU1DUPuWk ELvL2kTWu/qd9u8WYkh4Ee1SvIFLdVnkBaGeUDRwPwAvtQGlQbPu7EFI8OFgJNMw Ht2eZUrofiLE3cznxXYUYYwtYCazaaEaV82t2ALp168vwZNNDEtI1AFirv7F8+Jo +RTgoRohJlHEjKJaS5RyoBPHuub3QGPCQRYfTXP/qHITrBNxo2Cbvt1x+9pNhccj PlMxbN6BwyX0WlnCm6Zm4ZkqSPf95IzSQWTTeyVEm/6KNHsdfHgCHZw1wB5UKEc5 U66eCsulGcT731xbCyrVYZFiH+MCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSJqlUV DG0os/OpCV8itQ+XSPMdkjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzNjcwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoz37MA0GCSqGSIb3DQEBCwUAA4IBAQAaiaqvpewHpZ7QgKGEpXK2RO6Q fJynTGG9aFeYl5onjAgLvFsC2ewb5r57BWjaJbq8TYxII7dabwRuGlFCtucm3UN4 +LjBX4fECMXz848qr7QXUolO3w3UR45mevcbrmo0hQ9dwrGeU+DJ8AuoEwY38FCk dCVtxCCbKr9EA1Wqa8J7g1UrSusA7uJ+ZUhpLZCMEfCXDhGbflDXc+XwF/TN62Q3 DelFwFD2ozjAepv2pTq3cyYPVA9avx4ZhtOgf7Bsg/w2D2c8vYl89w55p8Gt0tnS hIA3mAibmeih2X2mKNCvYPuxdzwyCRp4yKGQUcKFZtyVqnxTYUyfXXWhI8Iy -----END CERTIFICATE-----Generated at Sun May 3 01:40:55 2026 by rpki-client