
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153579.roa
File: AS153579.roa (raw, json)
Hash identifier: +orlioVN2zCvvGu0yZnKTbea2wfiSZRj0ZDc9bYXzcM=
Subject key identifier: 07:9A:55:FF:6B:1C:D9:DE:3E:FF:A9:EE:4F:43:7D:F2:B8:B6:65:93
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 53087D8FF09D4400B0B6D9E8BA8071B9CDB31A12
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153579.roa
Signing time: Tue 10 Feb 2026 08:00:00 +0000
ROA not before: Tue 10 Feb 2026 07:55:00 +0000
ROA not after: Tue 09 Feb 2027 08:00:00 +0000
asID: 153579
IP address blocks: 163.61.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:08:7d:8f:f0:9d:44:00:b0:b6:d9:e8:ba:80:71:b9:cd:b3:1a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 10 07:55:00 2026 GMT
Not After : Feb 9 08:00:00 2027 GMT
Subject: CN=079A55FF6B1CD9DE3EFFA9EE4F437DF2B8B66593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:52:87:2e:64:4d:8f:de:a4:7d:f2:5a:02:43:
92:81:28:69:42:97:68:d9:9b:3e:d6:5f:10:6e:0a:
a5:5c:8b:59:6f:d2:51:0f:3c:12:2b:fe:32:29:53:
9d:31:3f:c9:c4:14:c3:63:6b:a4:e6:d5:aa:f0:3e:
1e:28:5b:4e:cd:d8:39:c0:32:f8:96:bf:be:7e:08:
15:60:d9:eb:71:9e:d3:35:a9:80:47:41:3d:c3:9c:
60:b3:36:0c:56:57:60:c6:74:28:eb:8d:73:6e:92:
43:30:0b:0c:16:e0:e4:ca:4b:8f:91:5f:b2:87:d3:
3f:9b:14:f9:a1:c0:b4:1a:4b:b3:34:7e:72:95:38:
1a:ab:3d:0e:79:89:8a:20:35:2a:20:39:55:f9:d4:
c5:e1:13:ae:52:92:9a:d9:49:6c:f9:60:8d:30:09:
05:99:55:ec:04:53:50:43:7c:46:73:74:d2:72:88:
1d:64:e3:98:81:d8:dd:b8:88:27:b4:c8:65:b1:a0:
62:a6:ed:16:5c:d4:5f:19:63:d4:49:5c:4b:da:55:
60:e8:3d:8c:2a:36:2e:4c:8a:7f:c3:a9:1b:42:25:
c9:f3:e9:d3:ba:b3:a6:2a:8e:1e:1b:76:c5:d8:85:
9c:bc:25:bf:8a:ad:c4:3c:46:46:aa:fd:0c:5f:c6:
6c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9A:55:FF:6B:1C:D9:DE:3E:FF:A9:EE:4F:43:7D:F2:B8:B6:65:93
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153579.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.61.78.0/23
Signature Algorithm: sha256WithRSAEncryption
73:c4:94:dd:2d:c0:e3:fb:9f:73:25:86:9f:21:09:de:d2:09:
2d:1e:88:68:70:9a:60:54:4e:e3:da:02:55:32:45:af:6a:c0:
08:b5:5b:fa:74:68:8d:24:84:0b:26:90:92:a9:df:7b:b8:2a:
f8:95:81:0f:58:62:15:d4:da:6e:f0:d2:0e:dc:d6:59:97:4d:
81:61:d1:d2:38:64:a2:00:e2:7b:b0:45:b3:1b:b4:ba:6b:7b:
bc:57:3d:a5:4b:4d:23:6c:13:7d:32:69:6d:bd:20:88:4f:a2:
c5:95:b1:80:34:f3:07:d6:ce:76:2c:48:6c:05:9b:3c:f8:62:
36:4a:98:86:26:ea:cf:f8:c8:0f:da:3f:60:80:ed:28:0c:18:
84:84:a1:be:b1:36:2c:1e:78:ac:a8:38:96:bc:67:f0:25:69:
ea:08:7e:0a:3d:84:bc:e4:f5:45:16:73:90:7e:8d:0e:40:ac:
a0:36:3e:ac:6d:53:f0:56:77:20:65:d9:89:52:ec:ac:85:e9:
b3:bf:89:31:d8:7a:6b:d6:17:42:6d:e1:91:c6:d7:76:45:2b:
30:ff:4d:8c:35:b4:93:6a:30:90:ba:d0:24:80:9a:08:6c:78:
c3:4d:50:5a:11:e7:f4:9c:91:85:77:84:fc:53:f9:e8:16:e1:
7c:45:96:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:02:09 2026 by rpki-client