$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153924.roa File: AS153924.roa (raw, json) Hash identifier: vVTEs/wg7qvVT9tVyQRH4DKVmiV2OeEe4UsY8JsLywY= Subject key identifier: CE:CF:73:64:B4:66:A7:F5:F1:92:15:77:F8:C2:2B:97:CA:F2:FA:B0 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 349585E5849B0A72ED5E04B16E3A54DEC6ED416B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153924.roa Signing time: Sat 02 May 2026 08:37:05 +0000 ROA not before: Sat 02 May 2026 08:32:05 +0000 ROA not after: Sat 01 May 2027 08:37:05 +0000 asID: 153924 IP address blocks: 2001:df5:9940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:95:85:e5:84:9b:0a:72:ed:5e:04:b1:6e:3a:54:de:c6:ed:41:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:32:05 2026 GMT Not After : May 1 08:37:05 2027 GMT Subject: CN=CECF7364B466A7F5F1921577F8C22B97CAF2FAB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:50:6d:ac:14:04:85:d4:26:36:07:3e:8b:da: 19:06:7a:43:1a:da:4f:38:09:79:71:53:78:6d:5b: 0e:95:1a:5d:df:86:d8:37:63:7d:f4:22:4c:53:02: 40:c0:ef:54:ed:15:9c:e2:45:e3:35:3b:cc:b8:5d: f4:cd:eb:d6:e2:58:5b:b1:f0:f5:85:ec:83:5b:3e: 82:d1:4d:d7:a0:78:2b:ca:b1:6f:b3:e9:18:f1:d2: aa:d9:41:ec:8d:82:47:86:06:2c:3b:eb:a4:ec:cb: 1b:8b:62:39:be:b9:bd:62:ee:e4:d2:eb:d4:28:d2: 95:0d:bb:c0:55:1e:9b:63:a6:1f:89:de:fe:99:92: 56:33:c5:07:0d:aa:bf:05:0d:27:4a:13:b1:39:45: 9a:71:16:22:cc:4a:f7:9a:dd:82:f7:dd:f7:a0:b4: 3a:41:11:c2:4f:63:65:68:70:48:6e:2e:bb:47:48: a2:bc:be:65:42:11:02:fe:e5:d1:a3:e2:e9:6a:a6: 2a:dd:58:1d:8f:11:79:4a:00:ea:56:05:0c:e8:b9: aa:dc:97:39:14:c3:7f:10:1f:a0:29:b3:57:88:47: 76:d5:f1:8c:14:ff:73:b3:e4:ee:97:09:e1:6e:a1: 56:71:2b:84:78:4c:8f:d3:62:18:2c:a3:1d:5b:fa: f8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CF:73:64:B4:66:A7:F5:F1:92:15:77:F8:C2:2B:97:CA:F2:FA:B0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153924.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:9940::/48 Signature Algorithm: sha256WithRSAEncryption 50:53:21:4b:c7:82:4f:23:ae:15:0a:e2:25:a3:7c:3d:64:ad: 3f:95:53:f5:b7:43:35:49:8e:83:88:49:55:da:68:15:8b:6e: 65:95:b8:7e:33:45:0e:a2:fa:f0:04:ec:ae:7c:58:c8:4e:3d: e4:58:38:61:74:44:70:1b:89:9e:da:4f:c6:a4:d4:d4:0e:4a: ca:a8:1c:bf:5f:ec:46:48:15:0d:77:c9:50:b7:24:11:d8:39: 68:75:d5:1a:b3:27:23:11:6f:8f:59:67:a4:b6:9b:a6:bc:71: da:3e:4c:42:f8:43:04:84:d8:c9:f1:bd:60:01:2b:ee:64:4c: 1c:4c:6f:f3:e0:fa:cb:c3:92:dc:25:44:94:3c:27:f8:fc:1d: df:f6:0f:c5:d4:39:06:3e:71:4b:11:4b:6c:c5:bd:e2:9f:7d: 10:de:6f:4d:90:d7:30:c2:76:cd:0f:d6:10:05:64:72:ab:b4: b1:f2:f5:b7:15:d9:02:3a:6f:0f:e1:b9:52:71:8f:38:ea:de: a2:dc:4c:a9:51:6f:65:a0:df:21:72:4a:81:e7:b3:7d:bb:d3: c0:c4:38:d4:eb:8e:95:a7:14:c0:99:25:54:6b:55:9c:98:11: a1:f5:cb:3c:d0:f3:f1:fd:31:08:4e:c8:e6:c2:18:06:b7:4f: bb:65:72:04 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUNJWF5YSbCnLtXgSxbjpU3sbtQWswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzIwNVoX DTI3MDUwMTA4MzcwNVowMzExMC8GA1UEAxMoQ0VDRjczNjRCNDY2QTdGNUYxOTIx NTc3RjhDMjJCOTdDQUYyRkFCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJRQbawUBIXUJjYHPovaGQZ6QxraTzgJeXFTeG1bDpUaXd+G2DdjffQiTFMC QMDvVO0VnOJF4zU7zLhd9M3r1uJYW7Hw9YXsg1s+gtFN16B4K8qxb7PpGPHSqtlB 7I2CR4YGLDvrpOzLG4tiOb65vWLu5NLr1CjSlQ27wFUem2OmH4ne/pmSVjPFBw2q vwUNJ0oTsTlFmnEWIsxK95rdgvfd96C0OkERwk9jZWhwSG4uu0dIory+ZUIRAv7l 0aPi6WqmKt1YHY8ReUoA6lYFDOi5qtyXORTDfxAfoCmzV4hHdtXxjBT/c7Pk7pcJ 4W6hVnErhHhMj9NiGCyjHVv6+CMCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBTOz3Nk tGan9fGSFXf4wiuXyvL6sDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzOTI0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9ZlAMA0GCSqGSIb3DQEBCwUAA4IBAQBQUyFLx4JPI64VCuIlo3w9 ZK0/lVP1t0M1SY6DiElV2mgVi25llbh+M0UOovrwBOyufFjITj3kWDhhdERwG4me 2k/GpNTUDkrKqBy/X+xGSBUNd8lQtyQR2DloddUasycjEW+PWWektpumvHHaPkxC +EMEhNjJ8b1gASvuZEwcTG/z4PrLw5LcJUSUPCf4/B3f9g/F1DkGPnFLEUtsxb3i n30Q3m9NkNcwwnbND9YQBWRyq7Sx8vW3FdkCOm8P4blScY846t6i3EypUW9loN8h ckqB57N9u9PAxDjU646VpxTAmSVUa1WcmBGh9cs80PPx/TEITsjmwhgGt0+7ZXIE -----END CERTIFICATE-----Generated at Sun May 3 00:40:25 2026 by rpki-client