$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153816.roa File: AS153816.roa (raw, json) Hash identifier: WSDV5F3fA53kuqVQAhLri7U7o1+Amuytx40I5wy6Hn8= Subject key identifier: DA:78:37:19:C9:5D:04:04:B2:61:F7:4D:13:84:78:AD:E8:80:0B:28 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 449B6EAD0526F324D72D9FFEFF414A65B033B1C8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153816.roa Signing time: Sat 02 May 2026 09:25:24 +0000 ROA not before: Sat 02 May 2026 09:20:24 +0000 ROA not after: Sat 01 May 2027 09:25:24 +0000 asID: 153816 IP address blocks: 163.61.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:9b:6e:ad:05:26:f3:24:d7:2d:9f:fe:ff:41:4a:65:b0:33:b1:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:20:24 2026 GMT Not After : May 1 09:25:24 2027 GMT Subject: CN=DA783719C95D0404B261F74D138478ADE8800B28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a7:9f:f5:38:e3:a2:78:f3:b9:49:65:75:5e: 18:9b:ef:e3:1f:f8:41:86:f4:bf:fe:c6:c6:3b:ed: 6d:5a:8f:a0:70:d3:3a:e1:b8:dc:f2:1c:39:7d:d0: 67:18:5a:06:53:b3:1b:68:4e:65:26:f7:7b:1c:54: 6a:49:a9:dc:65:c2:04:a0:cc:ce:5e:a1:10:6f:45: 9e:4b:62:cc:99:17:17:6f:dd:82:64:e6:36:bb:22: e7:af:d6:e5:82:13:86:8b:3b:73:98:19:2c:78:4c: 9d:55:26:d1:b2:89:89:a5:ca:e4:cc:f9:76:0b:bf: f3:17:80:72:02:7d:c5:c5:c3:61:ed:8c:aa:d0:3e: 9e:bc:b3:8b:29:ac:af:5b:1d:3c:29:ad:98:f0:dd: d7:1d:d5:83:ed:34:d8:cd:c0:4f:7b:5b:e9:3a:cf: be:f5:65:cb:9e:19:31:08:cc:06:59:15:17:52:a2: 08:a3:ac:a6:fd:06:69:6c:36:f8:1a:ae:71:b1:6c: a3:7c:bf:e0:29:54:b9:75:4c:42:3c:82:3d:5c:8b: 6c:b4:27:65:89:09:64:6b:82:72:6c:be:26:f6:4a: 35:66:6e:39:15:da:12:b0:98:93:26:21:be:41:9d: 57:f2:64:04:ae:37:df:66:ab:c6:cd:e9:92:75:59: 37:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:78:37:19:C9:5D:04:04:B2:61:F7:4D:13:84:78:AD:E8:80:0B:28 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153816.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.201.0/24 Signature Algorithm: sha256WithRSAEncryption a5:e7:f8:bb:ea:19:98:43:06:11:01:11:10:ed:0d:32:b6:c8: 44:01:91:b0:0c:e4:ab:88:f6:cf:3c:d2:d8:4a:07:eb:22:51: 24:6c:21:22:0a:40:36:a8:43:50:f5:48:d9:3d:6c:24:ff:9e: de:55:9a:43:b8:65:07:80:25:1a:bd:87:14:34:23:93:e8:c8: db:a4:8b:67:52:18:8f:05:9a:9e:34:1a:15:3f:eb:68:7d:6c: 79:19:e9:06:ea:9b:bc:49:eb:ab:63:d6:ae:6f:20:06:1a:a9: 75:1c:6b:bd:ec:f8:ee:e2:ee:e7:8d:9c:e1:d9:8e:d1:dc:4b: 6a:e7:4e:cb:cf:fd:f7:b2:8b:7a:da:74:fd:8a:a6:6a:36:8d: 27:42:b7:2e:65:c8:9d:40:e7:35:f4:60:03:b2:c6:01:4b:3b: 35:35:35:21:e9:c1:b8:fa:73:02:3b:6a:b1:8a:a8:4c:15:28: e4:a0:21:79:91:28:cd:d3:56:72:40:45:83:ff:d0:9e:25:52: c0:1d:c0:c9:d3:51:63:d2:cf:1d:d6:57:bb:89:46:29:c5:ae: 12:e9:12:41:70:ea:ea:17:5e:5c:8d:da:c3:c3:63:c9:c4:e3: af:ed:a6:02:3e:3f:28:df:92:f2:5b:fb:20:a2:2e:50:9e:ad: 4b:61:bb:74 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIURJturQUm8yTXLZ/+/0FKZbAzscgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjAyNFoX DTI3MDUwMTA5MjUyNFowMzExMC8GA1UEAxMoREE3ODM3MTlDOTVEMDQwNEIyNjFG NzREMTM4NDc4QURFODgwMEIyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM6nn/U446J487lJZXVeGJvv4x/4QYb0v/7GxjvtbVqPoHDTOuG43PIcOX3Q ZxhaBlOzG2hOZSb3exxUakmp3GXCBKDMzl6hEG9FnktizJkXF2/dgmTmNrsi56/W 5YIThos7c5gZLHhMnVUm0bKJiaXK5Mz5dgu/8xeAcgJ9xcXDYe2MqtA+nryziyms r1sdPCmtmPDd1x3Vg+002M3AT3tb6TrPvvVly54ZMQjMBlkVF1KiCKOspv0GaWw2 +BqucbFso3y/4ClUuXVMQjyCPVyLbLQnZYkJZGuCcmy+JvZKNWZuORXaErCYkyYh vkGdV/JkBK4332arxs3pknVZN+sCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTaeDcZ yV0EBLJh900ThHit6IALKDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzODE2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoz3JMA0GCSqGSIb3DQEBCwUAA4IBAQCl5/i76hmYQwYRAREQ7Q0ytshE AZGwDOSriPbPPNLYSgfrIlEkbCEiCkA2qENQ9UjZPWwk/57eVZpDuGUHgCUavYcU NCOT6MjbpItnUhiPBZqeNBoVP+tofWx5GekG6pu8SeurY9aubyAGGql1HGu97Pju 4u7njZzh2Y7R3Etq507Lz/33sot62nT9iqZqNo0nQrcuZcidQOc19GADssYBSzs1 NTUh6cG4+nMCO2qxiqhMFSjkoCF5kSjN01ZyQEWD/9CeJVLAHcDJ01Fj0s8d1le7 iUYpxa4S6RJBcOrqF15cjdrDw2PJxOOv7aYCPj8o35LyW/sgoi5Qnq1LYbt0 -----END CERTIFICATE-----Generated at Sun May 3 00:39:49 2026 by rpki-client