$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153961.roa File: AS153961.roa (raw, json) Hash identifier: sPLW782vtcA9SUW5nkv17zdVDipNNBFEB+a/OVhsw/g= Subject key identifier: 6D:68:B8:F5:81:68:5A:9B:4C:AD:B6:D7:69:08:F2:CF:40:02:5D:6D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0D01463D97B06CB255454CB19DB4F599E6631E69 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153961.roa Signing time: Sat 02 May 2026 09:26:27 +0000 ROA not before: Sat 02 May 2026 09:21:27 +0000 ROA not after: Sat 01 May 2027 09:26:27 +0000 asID: 153961 IP address blocks: 2001:df5:ab40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:01:46:3d:97:b0:6c:b2:55:45:4c:b1:9d:b4:f5:99:e6:63:1e:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:27 2026 GMT Not After : May 1 09:26:27 2027 GMT Subject: CN=6D68B8F581685A9B4CADB6D76908F2CF40025D6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:87:7f:ea:8b:29:60:32:cb:c1:00:aa:d5:2c: 19:aa:7b:19:52:e3:4d:74:24:74:0e:43:65:62:8b: a0:08:23:19:3a:a9:cd:b0:a3:82:0a:c4:d7:d8:b1: d4:fc:28:46:a8:8e:a8:ec:ca:c7:1d:10:f3:0a:a1: b4:e0:65:9f:9d:8d:75:bc:6b:0c:3e:37:59:5c:8e: 5f:1a:2c:a1:0d:bc:62:e0:bc:a6:2b:e9:76:a4:9c: 4f:71:b6:ea:88:10:5d:7a:4b:7a:c1:d4:52:af:17: 06:26:52:24:a5:e6:83:56:00:f8:5c:ec:b5:84:61: 1d:5d:d8:bb:b3:ba:81:b6:4e:cb:20:6d:10:79:16: 78:da:0e:ed:45:bb:99:07:75:af:ae:42:fa:2f:e8: a1:99:8b:8a:82:e9:91:57:78:c4:c5:7c:56:53:4c: 90:0c:33:26:af:19:b7:11:f1:ad:4c:4d:23:28:8c: b6:3a:ad:d0:b0:25:b2:52:96:01:e3:25:bc:4e:52: c5:96:0a:67:98:38:59:67:e8:69:2a:b0:0e:68:e0: fd:f4:f6:d2:a0:e8:c3:0c:53:79:6a:94:38:c5:ca: ac:4b:89:d1:21:16:65:d9:40:b6:43:19:bd:e8:51: 31:62:7e:0c:b4:e6:fb:fe:f5:fc:3b:bb:53:71:f5: 1f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:68:B8:F5:81:68:5A:9B:4C:AD:B6:D7:69:08:F2:CF:40:02:5D:6D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153961.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:ab40::/48 Signature Algorithm: sha256WithRSAEncryption 33:54:44:8b:b9:eb:08:73:0f:20:99:27:3b:95:0a:fb:99:15: f5:15:de:25:74:d8:0b:16:a8:21:5d:db:f7:bc:60:0e:d5:9e: 3e:00:7f:ed:ed:ac:3a:69:cc:3f:70:bf:73:35:f5:76:6c:e2: 8a:c1:25:22:6e:3b:ee:f1:d3:b6:48:5b:86:7a:2f:05:83:98: 71:d8:c7:60:08:f5:42:5c:f2:c7:d3:8d:69:93:4f:34:86:ec: 91:dd:ee:5a:7b:3c:f6:ea:20:f1:1f:29:04:cf:b6:c4:f5:ca: 60:13:27:8e:6c:13:49:08:df:ba:e4:0b:b8:95:6b:b9:5e:1d: be:3d:f2:fd:b6:8b:74:a5:65:b7:13:1e:58:e5:76:ab:42:d1: 2d:80:e4:91:54:64:3e:0c:9a:90:a3:92:a6:01:88:ba:bf:4e: b0:65:68:1c:a0:c4:b6:37:35:75:cd:27:28:b2:c2:86:8f:55: 2e:19:5e:c9:a0:3f:8f:35:1e:22:99:dd:f4:ae:e6:42:8d:bb: 0c:8d:0d:e9:92:4b:d9:b4:39:9d:8b:1b:59:15:b1:61:e9:f9: 0d:69:4e:71:6e:d2:cb:66:d1:ca:2b:10:d0:52:80:75:3d:86: 5c:8b:c0:1c:b5:d0:12:77:6e:d7:b6:0d:2e:52:52:76:c6:3a: bb:5d:76:e1 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUDQFGPZewbLJVRUyxnbT1meZjHmkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjEyN1oX DTI3MDUwMTA5MjYyN1owMzExMC8GA1UEAxMoNkQ2OEI4RjU4MTY4NUE5QjRDQURC NkQ3NjkwOEYyQ0Y0MDAyNUQ2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWHf+qLKWAyy8EAqtUsGap7GVLjTXQkdA5DZWKLoAgjGTqpzbCjggrE19ix 1PwoRqiOqOzKxx0Q8wqhtOBln52NdbxrDD43WVyOXxosoQ28YuC8pivpdqScT3G2 6ogQXXpLesHUUq8XBiZSJKXmg1YA+FzstYRhHV3Yu7O6gbZOyyBtEHkWeNoO7UW7 mQd1r65C+i/ooZmLioLpkVd4xMV8VlNMkAwzJq8ZtxHxrUxNIyiMtjqt0LAlslKW AeMlvE5SxZYKZ5g4WWfoaSqwDmjg/fT20qDowwxTeWqUOMXKrEuJ0SEWZdlAtkMZ vehRMWJ+DLTm+/71/Du7U3H1H48CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRtaLj1 gWham0ytttdpCPLPQAJdbTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzOTYxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9atAMA0GCSqGSIb3DQEBCwUAA4IBAQAzVESLuesIcw8gmSc7lQr7 mRX1Fd4ldNgLFqghXdv3vGAO1Z4+AH/t7aw6acw/cL9zNfV2bOKKwSUibjvu8dO2 SFuGei8Fg5hx2MdgCPVCXPLH041pk080huyR3e5aezz26iDxHykEz7bE9cpgEyeO bBNJCN+65Au4lWu5Xh2+PfL9tot0pWW3Ex5Y5XarQtEtgOSRVGQ+DJqQo5KmAYi6 v06wZWgcoMS2NzV1zScossKGj1UuGV7JoD+PNR4imd30ruZCjbsMjQ3pkkvZtDmd ixtZFbFh6fkNaU5xbtLLZtHKKxDQUoB1PYZci8ActdASd27Xtg0uUlJ2xjq7XXbh -----END CERTIFICATE-----Generated at Sun May 3 00:40:21 2026 by rpki-client