$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153753.roa File: AS153753.roa (raw, json) Hash identifier: mqgtiwC5FI7H+6F0eZmsthXJ16YgHFlfjpwnLI7Sbdg= Subject key identifier: 17:94:E3:B6:FE:07:78:FA:1A:45:17:FB:EB:4E:97:2C:14:23:19:58 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 35D8B3ECADBA5B9A8A115A2FD345EBF6E8B5363F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153753.roa Signing time: Wed 28 Oct 2026 05:29:37 +0000 ROA not before: Wed 28 Oct 2026 05:24:37 +0000 ROA not after: Wed 27 Oct 2027 05:29:37 +0000 asID: 153753 IP address blocks: 101.1.31.0/24 maxlen: 24 163.128.149.0/24 maxlen: 24 2001:df6:df40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d8:b3:ec:ad:ba:5b:9a:8a:11:5a:2f:d3:45:eb:f6:e8:b5:36:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 28 05:24:37 2026 GMT Not After : Oct 27 05:29:37 2027 GMT Subject: CN=1794E3B6FE0778FA1A4517FBEB4E972C14231958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:aa:5e:57:ad:39:3a:4a:3b:ac:7f:44:ce:4c: c6:82:67:86:df:49:b1:15:5f:43:56:4f:a4:a5:e3: 29:5f:dc:7c:bb:87:fd:45:c2:90:95:06:cd:3b:9a: 70:3c:2b:9e:bb:3e:83:ac:2f:76:42:15:85:ce:cc: 11:ea:a0:9c:10:82:85:96:a9:7f:aa:36:b1:08:8d: d6:c7:f4:84:91:5f:7b:00:6e:54:dc:4b:fc:17:f7: 7a:fc:de:07:45:46:28:81:bc:11:85:b4:23:47:19: 18:8d:23:a4:f3:a5:4c:97:2b:08:2f:1d:f5:ea:3c: e8:5b:a9:ba:6a:83:dc:f0:c2:de:4f:57:bf:b1:58: 16:d3:70:fb:1f:e9:ae:59:48:e3:9f:ab:58:16:15: ef:36:ef:45:ae:28:15:6a:95:3f:45:93:29:52:8f: a5:47:ee:ca:69:0a:e1:68:60:80:6c:a7:05:b8:17: 52:f9:d1:d6:f4:ab:c3:67:4f:5f:ee:eb:45:32:f0: ed:0c:1b:b3:3c:68:b7:08:34:9c:fd:9d:9a:d4:9d: b7:e7:5f:5b:51:bb:6e:26:17:a3:c0:3c:d6:49:7c: 9a:f9:28:9a:54:76:07:6d:d6:14:51:29:d0:7d:65: 58:2e:59:38:7c:9a:32:3f:6d:39:97:d3:9d:2a:5b: 0b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:94:E3:B6:FE:07:78:FA:1A:45:17:FB:EB:4E:97:2C:14:23:19:58 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153753.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.1.31.0/24 163.128.149.0/24 IPv6: 2001:df6:df40::/48 Signature Algorithm: sha256WithRSAEncryption 42:a0:0a:19:67:6f:d4:a6:e1:cf:eb:45:48:95:da:18:93:93: 5c:fe:53:09:9b:3e:81:50:24:07:1f:26:3f:cf:92:34:9c:40: f3:f1:3a:e3:6e:19:f8:27:23:dd:0b:a6:99:8e:6b:1f:65:82: 35:01:9b:52:cd:7e:36:4a:a0:78:d9:a0:95:17:e3:42:42:fb: 7e:5d:30:4a:7b:f2:95:57:f5:21:20:01:d3:33:1a:ab:4b:af: f3:25:0f:96:2c:25:3d:82:0f:19:2c:2a:ec:80:39:c2:a0:6e: b7:28:75:7c:67:20:11:95:1b:d1:58:44:bf:86:14:77:29:d6: 2e:f6:05:1c:09:94:b5:c8:38:60:98:4a:eb:41:74:1e:20:0e: 0f:e6:f8:91:66:62:a8:c5:1c:a4:de:cf:b3:d0:d5:7c:ea:bb: 00:18:67:42:59:f7:2d:e4:56:b7:ce:97:8b:b3:57:c0:b4:14: 8c:eb:9b:27:db:c9:2b:c4:da:12:b7:cb:0c:3d:c6:d5:22:15: a1:50:93:9e:72:35:69:1c:e8:84:97:56:bb:30:f6:1b:3b:68: a5:24:8b:02:cb:a8:1c:3f:31:c1:a8:b9:5f:bf:96:9f:67:6d: 5c:5e:8b:6d:13:91:3c:33:cd:b9:3e:45:7e:fe:31:19:fe:e5: 47:8d:f8:60 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIUNdiz7K26W5qKEVov00Xr9ui1Nj8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAyODA1MjQzN1oX DTI3MTAyNzA1MjkzN1owMzExMC8GA1UEAxMoMTc5NEUzQjZGRTA3NzhGQTFBNDUx N0ZCRUI0RTk3MkMxNDIzMTk1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALmqXletOTpKO6x/RM5MxoJnht9JsRVfQ1ZPpKXjKV/cfLuH/UXCkJUGzTua cDwrnrs+g6wvdkIVhc7MEeqgnBCChZapf6o2sQiN1sf0hJFfewBuVNxL/Bf3evze B0VGKIG8EYW0I0cZGI0jpPOlTJcrCC8d9eo86FupumqD3PDC3k9Xv7FYFtNw+x/p rllI45+rWBYV7zbvRa4oFWqVP0WTKVKPpUfuymkK4WhggGynBbgXUvnR1vSrw2dP X+7rRTLw7Qwbszxotwg0nP2dmtSdt+dfW1G7biYXo8A81kl8mvkomlR2B23WFFEp 0H1lWC5ZOHyaMj9tOZfTnSpbC88CAwEAAaOCAeMwggHfMB0GA1UdDgQWBBQXlOO2 /gd4+hpFF/vrTpcsFCMZWDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzNzUzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIA ATAMAwQAZQEfAwQAo4CVMA8EAgACMAkDBwAgAQ3230AwDQYJKoZIhvcNAQELBQAD ggEBAEKgChlnb9Sm4c/rRUiV2hiTk1z+UwmbPoFQJAcfJj/PkjScQPPxOuNuGfgn I90LppmOax9lgjUBm1LNfjZKoHjZoJUX40JC+35dMEp78pVX9SEgAdMzGqtLr/Ml D5YsJT2CDxksKuyAOcKgbrcodXxnIBGVG9FYRL+GFHcp1i72BRwJlLXIOGCYSutB dB4gDg/m+JFmYqjFHKTez7PQ1XzquwAYZ0JZ9y3kVrfOl4uzV8C0FIzrmyfbySvE 2hK3yww9xtUiFaFQk55yNWkc6ISXVrsw9hs7aKUkiwLLqBw/McGouV+/lp9nbVxe i20TkTwzzbk+RX7+MRn+5UeN+GA= -----END CERTIFICATE-----Generated at Mon Nov 9 15:40:13 2026 by rpki-client