$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153615.roa File: AS153615.roa (raw, json) Hash identifier: 5LmFBCWGN1ljdysBuO1QEY4Z99tnlVpThELkbZJx29I= Subject key identifier: 99:52:16:51:B4:72:05:9E:D5:FE:A8:EF:E2:C8:BA:1B:F6:A4:29:E6 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 22C119563AE8DC568A01C1BDE847684639F43022 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153615.roa Signing time: Fri 18 Sep 2026 03:59:27 +0000 ROA not before: Fri 18 Sep 2026 03:54:27 +0000 ROA not after: Fri 17 Sep 2027 03:59:27 +0000 asID: 153615 IP address blocks: 163.61.134.0/24 maxlen: 24 2001:df5:16c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:c1:19:56:3a:e8:dc:56:8a:01:c1:bd:e8:47:68:46:39:f4:30:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 18 03:54:27 2026 GMT Not After : Sep 17 03:59:27 2027 GMT Subject: CN=99521651B472059ED5FEA8EFE2C8BA1BF6A429E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:db:7e:01:8d:f1:99:25:37:42:d9:f0:7d:ab: 64:98:e6:cd:de:ae:24:ff:bd:7d:0c:76:11:15:97: 5e:a0:91:4c:9a:49:4a:85:11:fd:57:36:99:7e:9a: 84:20:e0:ed:42:53:dc:04:c7:4c:10:97:71:ad:5b: eb:55:6e:3f:b8:94:41:07:5e:a4:6b:df:37:83:93: 9d:b9:cd:35:f9:0f:3e:50:47:f5:b8:51:14:b9:35: 1f:ba:a3:c3:b5:0f:54:b8:59:76:b8:a7:1f:ba:6d: bd:91:52:b2:fe:eb:a5:13:e1:90:fa:e8:34:2a:d8: 15:ab:6f:bb:b1:85:b9:9c:b9:d8:18:9e:12:8c:11: c7:3e:29:22:cd:1b:bd:d9:fd:0d:94:bf:78:99:58: d2:a5:ec:01:ff:04:81:54:bf:94:07:9f:1f:5a:a7: ed:1d:c4:cc:30:df:65:b5:9a:f6:59:6a:29:ea:72: 21:26:82:ea:d9:7f:9c:8e:b6:5d:b2:31:a2:fd:b7: fa:6c:12:61:20:5e:46:61:c2:b5:13:fa:24:47:fc: 64:23:dd:25:69:41:c6:61:21:84:9c:1b:45:7b:ed: c2:01:04:dd:d1:82:0b:7d:9b:8e:f0:d5:6b:63:e9: 02:63:9e:a7:2e:03:5c:49:15:05:e0:18:56:a8:6a: 69:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:52:16:51:B4:72:05:9E:D5:FE:A8:EF:E2:C8:BA:1B:F6:A4:29:E6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153615.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.134.0/24 IPv6: 2001:df5:16c0::/48 Signature Algorithm: sha256WithRSAEncryption 6c:3b:f7:e6:4d:1b:9b:fc:06:5c:ac:76:26:d3:a5:8b:54:84: 5f:20:ad:85:23:47:72:3b:0f:1b:89:4b:19:28:a6:14:24:d7: 7c:2a:23:cd:16:a0:94:56:d0:a7:63:53:18:ba:91:6a:91:0f: cd:02:c4:b0:e8:88:ea:49:61:59:24:54:f8:2a:1b:62:96:a8: f3:70:fb:ad:03:2c:78:e0:b2:3c:27:1e:ad:43:97:da:8d:2e: 6c:8c:88:87:e0:01:a8:aa:f9:23:34:4d:59:0b:aa:e8:97:e5: d2:7f:25:f9:6a:42:36:b8:d6:86:e6:99:45:9d:67:a8:e2:f1: d0:fb:09:22:e1:c8:a1:ba:8f:ce:bf:a6:a1:b2:c5:19:02:63: 22:03:3a:54:ff:bb:ce:5b:19:fb:37:3f:f0:be:6d:e4:bc:47: 37:43:79:52:73:98:fd:1e:a2:ab:f7:01:bf:43:3f:8e:d9:9a: 77:ad:fa:90:1f:f2:43:ff:36:ae:30:c5:1b:4b:b6:ef:86:f2: 6f:f3:6d:97:5f:32:20:e9:21:74:bf:2e:d4:0a:d9:9a:a5:81: 70:c1:4d:d5:5b:6b:66:73:60:5e:d4:4b:2f:b0:18:b3:88:31: 77:5e:37:ec:e8:7b:54:fc:01:61:20:80:c4:a5:40:bb:da:c5: 27:12:da:1f -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUIsEZVjro3FaKAcG96EdoRjn0MCIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkxODAzNTQyN1oX DTI3MDkxNzAzNTkyN1owMzExMC8GA1UEAxMoOTk1MjE2NTFCNDcyMDU5RUQ1RkVB OEVGRTJDOEJBMUJGNkE0MjlFNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM7bfgGN8ZklN0LZ8H2rZJjmzd6uJP+9fQx2ERWXXqCRTJpJSoUR/Vc2mX6a hCDg7UJT3ATHTBCXca1b61VuP7iUQQdepGvfN4OTnbnNNfkPPlBH9bhRFLk1H7qj w7UPVLhZdrinH7ptvZFSsv7rpRPhkProNCrYFatvu7GFuZy52BieEowRxz4pIs0b vdn9DZS/eJlY0qXsAf8EgVS/lAefH1qn7R3EzDDfZbWa9llqKepyISaC6tl/nI62 XbIxov23+mwSYSBeRmHCtRP6JEf8ZCPdJWlBxmEhhJwbRXvtwgEE3dGCC32bjvDV a2PpAmOepy4DXEkVBeAYVqhqaZMCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBSZUhZR tHIFntX+qO/iyLob9qQp5jAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzNjE1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAoz2GMA8EAgACMAkDBwAgAQ31FsAwDQYJKoZIhvcNAQELBQADggEBAGw7 9+ZNG5v8BlysdibTpYtUhF8grYUjR3I7DxuJSxkophQk13wqI80WoJRW0KdjUxi6 kWqRD80CxLDoiOpJYVkkVPgqG2KWqPNw+60DLHjgsjwnHq1Dl9qNLmyMiIfgAaiq +SM0TVkLquiX5dJ/JflqQja41obmmUWdZ6ji8dD7CSLhyKG6j86/pqGyxRkCYyID OlT/u85bGfs3P/C+beS8RzdDeVJzmP0eoqv3Ab9DP47Zmnet+pAf8kP/Nq4wxRtL tu+G8m/zbZdfMiDpIXS/LtQK2ZqlgXDBTdVba2ZzYF7USy+wGLOIMXdeN+zoe1T8 AWEggMSlQLvaxScS2h8= -----END CERTIFICATE-----Generated at Mon Sep 21 05:48:18 2026 by rpki-client