$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153943.roa File: AS153943.roa (raw, json) Hash identifier: egQcKpHsxr664Nem6c+qBjguUKDXsJDSj9NQMMZasdE= Subject key identifier: D5:B5:71:42:86:72:35:23:3F:14:D1:55:58:2C:23:C2:F0:FA:D1:35 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 473326B12EDB1C712DFF8B1CA4C5D6708238FF94 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153943.roa Signing time: Sat 02 May 2026 21:35:23 +0000 ROA not before: Sat 02 May 2026 21:30:23 +0000 ROA not after: Sat 01 May 2027 21:35:23 +0000 asID: 153943 IP address blocks: 103.154.72.0/23 maxlen: 24 2406:5540::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:33:26:b1:2e:db:1c:71:2d:ff:8b:1c:a4:c5:d6:70:82:38:ff:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:30:23 2026 GMT Not After : May 1 21:35:23 2027 GMT Subject: CN=D5B57142867235233F14D155582C23C2F0FAD135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a9:65:42:a2:f0:f6:84:f0:f0:4a:13:f9:1f: 78:de:46:49:fc:ce:9e:bb:fa:35:62:1f:ac:3b:f4: 92:54:b8:a4:fc:c3:2c:32:49:5f:d3:22:ac:71:9d: 51:16:47:28:01:01:0d:8b:2b:6f:e0:95:72:33:37: 5a:72:3d:8c:0e:ff:94:27:ca:07:ef:d4:b4:1f:33: 91:8f:a3:03:60:73:3e:d5:6b:b4:dc:65:ca:e3:3d: 9f:53:d0:de:e6:08:54:6f:41:1b:8e:c2:7d:88:41: f2:a0:9e:16:4f:f3:73:62:16:68:7b:37:18:1f:47: 9c:6b:36:86:5a:18:13:c4:1e:d6:a0:c0:b9:7a:1d: d7:81:b6:ef:b0:12:14:50:55:a3:11:eb:64:d8:38: 7c:32:79:58:37:c6:60:b6:dd:f0:ce:6c:88:6d:c6: 10:1a:b8:62:f2:96:73:9a:07:3f:88:85:b7:18:d8: b9:b1:36:51:e3:13:52:56:35:dc:2c:64:63:f1:35: b9:ac:4a:10:b6:9b:18:1c:62:21:c0:49:57:d0:e2: 6c:69:35:4e:9b:8f:66:ca:d0:38:1b:a6:f3:b2:fe: 5c:02:d1:b6:d5:8a:96:81:0f:c8:26:3f:20:0e:48: cc:a8:74:53:cc:7d:42:6e:ee:ef:62:03:20:29:57: 88:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B5:71:42:86:72:35:23:3F:14:D1:55:58:2C:23:C2:F0:FA:D1:35 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153943.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.154.72.0/23 IPv6: 2406:5540::/32 Signature Algorithm: sha256WithRSAEncryption 4c:ed:5d:36:3f:ef:cd:b7:b2:f3:34:19:a4:e0:5f:23:e8:69: e0:3a:c0:a1:da:5c:6e:3e:6b:28:8d:d0:89:d7:be:95:1a:2f: f0:e9:c7:f8:3e:8b:58:66:3b:3c:d6:d0:07:07:ce:49:65:77: 89:17:f7:26:66:d4:f3:39:f5:39:42:6e:00:e4:3e:40:ef:e4: 6b:9b:72:93:61:d8:85:f9:7b:6a:b5:47:91:48:a0:5d:6a:53: f7:55:aa:a5:6e:7d:8f:4e:23:c2:10:5b:16:37:e8:58:47:2d: 86:59:a4:16:cc:51:76:05:3b:db:03:10:08:8a:f8:69:0b:d4: 48:ee:63:91:01:64:48:63:d9:35:eb:54:3f:2c:59:fa:08:07: ad:92:26:2f:d2:6c:8e:3e:9c:9d:bf:28:50:79:58:f7:15:90: 71:7a:be:27:4d:49:9b:40:11:b1:9a:d1:6c:bd:36:75:f7:5e: 2c:bd:99:97:b0:fb:46:61:9e:2a:d7:1e:68:86:5f:7e:34:f5: 7c:05:ef:0f:94:57:6e:ff:77:ca:45:a7:53:72:53:6e:89:ad: d1:f5:89:49:5c:f5:9c:d7:22:23:15:6a:42:08:15:bd:1d:18: f9:8e:61:0b:76:89:5b:6a:83:f7:01:67:8c:53:69:e1:6d:93: 20:1a:8b:99 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIURzMmsS7bHHEt/4scpMXWcII4/5QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMzAyM1oX DTI3MDUwMTIxMzUyM1owMzExMC8GA1UEAxMoRDVCNTcxNDI4NjcyMzUyMzNGMTRE MTU1NTgyQzIzQzJGMEZBRDEzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJGpZUKi8PaE8PBKE/kfeN5GSfzOnrv6NWIfrDv0klS4pPzDLDJJX9MirHGd URZHKAEBDYsrb+CVcjM3WnI9jA7/lCfKB+/UtB8zkY+jA2BzPtVrtNxlyuM9n1PQ 3uYIVG9BG47CfYhB8qCeFk/zc2IWaHs3GB9HnGs2hloYE8Qe1qDAuXod14G277AS FFBVoxHrZNg4fDJ5WDfGYLbd8M5siG3GEBq4YvKWc5oHP4iFtxjYubE2UeMTUlY1 3CxkY/E1uaxKELabGBxiIcBJV9DibGk1TpuPZsrQOBum87L+XALRttWKloEPyCY/ IA5IzKh0U8x9Qm7u72IDIClXiA0CAwEAAaOCAdswggHXMB0GA1UdDgQWBBTVtXFC hnI1Iz8U0VVYLCPC8PrRNTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzOTQzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIA ATAGAwQBZ5pIMA0EAgACMAcDBQAkBlVAMA0GCSqGSIb3DQEBCwUAA4IBAQBM7V02 P+/Nt7LzNBmk4F8j6GngOsCh2lxuPmsojdCJ176VGi/w6cf4PotYZjs81tAHB85J ZXeJF/cmZtTzOfU5Qm4A5D5A7+Rrm3KTYdiF+XtqtUeRSKBdalP3Vaqlbn2PTiPC EFsWN+hYRy2GWaQWzFF2BTvbAxAIivhpC9RI7mORAWRIY9k161Q/LFn6CAetkiYv 0myOPpydvyhQeVj3FZBxer4nTUmbQBGxmtFsvTZ1914svZmXsPtGYZ4q1x5ohl9+ NPV8Be8PlFdu/3fKRadTclNuia3R9YlJXPWc1yIjFWpCCBW9HRj5jmELdolbaoP3 AWeMU2nhbZMgGouZ -----END CERTIFICATE-----Generated at Sun May 3 00:39:51 2026 by rpki-client