$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153769.roa File: AS153769.roa (raw, json) Hash identifier: XZjjVq3y2hm7ALV+HG+G7qONXiZOdH2FF/D+xB4+DbQ= Subject key identifier: E6:AB:8F:5D:56:A3:93:EE:A1:EA:79:44:BF:C1:64:E6:19:5A:96:48 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6D2528DD085FBBDDD5E894BFF62D6D0845DF9A7F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153769.roa Signing time: Sat 02 May 2026 09:26:37 +0000 ROA not before: Sat 02 May 2026 09:21:37 +0000 ROA not after: Sat 01 May 2027 09:26:37 +0000 asID: 153769 IP address blocks: 163.61.247.0/24 maxlen: 24 2001:df5:2840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:25:28:dd:08:5f:bb:dd:d5:e8:94:bf:f6:2d:6d:08:45:df:9a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:37 2026 GMT Not After : May 1 09:26:37 2027 GMT Subject: CN=E6AB8F5D56A393EEA1EA7944BFC164E6195A9648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a9:e3:84:9e:2f:00:c1:2d:4d:13:af:b3:41: 79:37:d4:b8:ea:ce:7f:b1:3f:5d:d2:25:75:4c:05: d4:01:f9:a0:9a:d5:39:5f:a9:08:f5:a8:7b:5c:c4: 1f:38:2d:65:fb:a6:06:d4:a2:7f:5f:48:36:a7:af: 1d:a6:f2:d7:95:64:b4:23:ea:44:8d:68:01:09:64: b7:07:c2:1e:a7:1a:54:22:eb:f3:61:f7:a3:74:9b: 89:3e:b3:3d:f5:4d:f6:ec:84:93:62:1b:c6:7b:55: da:29:bb:d4:14:68:89:e4:62:0f:ca:7e:5c:7c:bb: 2e:48:18:d5:13:a0:d3:8c:f6:58:05:ef:53:d4:c1: e5:c7:cc:c7:7b:d7:80:8f:d8:31:c4:9e:15:3a:bf: 86:60:1f:1f:2d:85:08:11:d0:4f:d7:1b:40:fa:46: 00:fd:f4:91:f2:29:19:9e:98:61:84:66:6d:6c:f0: fb:34:4a:2b:ed:07:b2:5d:78:54:e9:11:3a:d3:10: d4:1d:20:c3:ee:ae:e0:73:94:1c:c1:2e:76:c8:30: af:df:ce:e5:8c:42:fd:a0:2d:98:3f:44:25:a6:aa: 89:84:64:ea:22:c9:47:a1:c0:a6:8e:89:85:4b:8c: 9c:3a:33:19:f8:17:5e:37:3a:52:c5:83:3a:34:06: 9f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AB:8F:5D:56:A3:93:EE:A1:EA:79:44:BF:C1:64:E6:19:5A:96:48 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153769.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.247.0/24 IPv6: 2001:df5:2840::/48 Signature Algorithm: sha256WithRSAEncryption 7a:e3:c8:b9:82:1a:0e:bc:eb:a2:ca:fa:0d:45:ba:d4:9c:42: 76:d7:2d:f2:67:8c:77:29:ca:c5:41:d5:99:4a:7b:63:cb:f8: 29:b2:2f:c3:e5:1b:85:97:bd:b6:41:41:8a:26:3e:cd:17:9a: a7:ad:72:01:31:96:90:a8:7a:45:77:74:3b:60:94:13:4a:84: 47:f4:c4:44:1d:e3:dd:50:23:c5:50:4f:b2:ef:a1:4e:6f:5f: c9:46:87:6f:54:89:c5:f1:42:03:33:81:c4:d0:ef:75:82:9f: 67:bf:41:66:1f:3b:f8:58:ed:25:c2:9e:bb:b6:45:6c:ee:68: f3:36:8d:53:c3:73:ab:d0:b2:31:d4:05:40:62:7b:f1:47:b7: 80:cc:81:79:24:21:03:b2:64:ee:4a:c9:93:6c:4b:49:c0:4a: 47:af:f7:b6:89:21:9d:1a:05:66:fe:e0:d0:30:65:92:d3:b8: 00:3d:f0:32:c7:70:f0:43:f4:ef:aa:f1:fd:1e:cf:84:03:10: 0e:b3:31:76:b1:81:45:96:7a:af:fc:62:dd:5e:45:d4:e4:32: 64:f4:1c:f7:b8:8c:52:b8:c0:40:c0:80:95:d7:fb:ee:ce:93: d3:cb:b7:be:60:cc:4c:24:65:86:73:d4:fe:94:e7:90:6b:64: a7:2e:10:f8 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUbSUo3Qhfu93V6JS/9i1tCEXfmn8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjEzN1oX DTI3MDUwMTA5MjYzN1owMzExMC8GA1UEAxMoRTZBQjhGNUQ1NkEzOTNFRUExRUE3 OTQ0QkZDMTY0RTYxOTVBOTY0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM2p44SeLwDBLU0Tr7NBeTfUuOrOf7E/XdIldUwF1AH5oJrVOV+pCPWoe1zE HzgtZfumBtSif19INqevHaby15VktCPqRI1oAQlktwfCHqcaVCLr82H3o3SbiT6z PfVN9uyEk2IbxntV2im71BRoieRiD8p+XHy7LkgY1ROg04z2WAXvU9TB5cfMx3vX gI/YMcSeFTq/hmAfHy2FCBHQT9cbQPpGAP30kfIpGZ6YYYRmbWzw+zRKK+0Hsl14 VOkROtMQ1B0gw+6u4HOUHMEudsgwr9/O5YxC/aAtmD9EJaaqiYRk6iLJR6HApo6J hUuMnDozGfgXXjc6UsWDOjQGn2kCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBTmq49d VqOT7qHqeUS/wWTmGVqWSDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzNzY5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAoz33MA8EAgACMAkDBwAgAQ31KEAwDQYJKoZIhvcNAQELBQADggEBAHrj yLmCGg6866LK+g1FutScQnbXLfJnjHcpysVB1ZlKe2PL+CmyL8PlG4WXvbZBQYom Ps0XmqetcgExlpCoekV3dDtglBNKhEf0xEQd491QI8VQT7LvoU5vX8lGh29UicXx QgMzgcTQ73WCn2e/QWYfO/hY7SXCnru2RWzuaPM2jVPDc6vQsjHUBUBie/FHt4DM gXkkIQOyZO5KyZNsS0nASkev97aJIZ0aBWb+4NAwZZLTuAA98DLHcPBD9O+q8f0e z4QDEA6zMXaxgUWWeq/8Yt1eRdTkMmT0HPe4jFK4wEDAgJXX++7Ok9PLt75gzEwk ZYZz1P6U55BrZKcuEPg= -----END CERTIFICATE-----Generated at Sun May 3 00:39:37 2026 by rpki-client