$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153904.roa File: AS153904.roa (raw, json) Hash identifier: cgVqCR6NVRDB35kOFuc1UMKcOHrVJVLH1VYzehGbDh8= Subject key identifier: 9C:4E:7F:0D:FD:24:2D:3D:70:2E:63:5F:13:CD:F3:47:0B:C0:A0:29 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 72DE5EB253F2599764249FA6421B0C3E1A577823 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153904.roa Signing time: Mon 14 Sep 2026 07:33:56 +0000 ROA not before: Mon 14 Sep 2026 07:28:56 +0000 ROA not after: Mon 13 Sep 2027 07:33:56 +0000 asID: 153904 IP address blocks: 103.167.222.0/24 maxlen: 24 163.227.253.0/24 maxlen: 24 2001:df5:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:de:5e:b2:53:f2:59:97:64:24:9f:a6:42:1b:0c:3e:1a:57:78:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 14 07:28:56 2026 GMT Not After : Sep 13 07:33:56 2027 GMT Subject: CN=9C4E7F0DFD242D3D702E635F13CDF3470BC0A029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8e:51:c0:c7:6e:b3:d4:4a:42:b7:c0:ee:f7: 2d:f9:da:19:6d:82:01:04:6a:c7:7f:5d:ea:b2:cc: 95:21:e4:b5:b3:bf:1c:41:d5:13:41:60:7c:21:ac: 0c:af:2b:26:0f:ad:17:bc:5e:9f:7a:55:ef:43:cb: 7f:82:27:24:18:f2:aa:c2:07:ee:f9:c5:c4:39:d3: 22:4b:8b:83:a3:24:5f:36:8f:e8:66:5a:95:be:9c: 6f:e3:fd:e2:2d:df:5d:c4:45:22:d9:87:86:94:80: 1c:1a:cd:29:3f:91:73:76:b2:08:62:42:62:79:66: 0f:e1:74:df:78:86:0b:4d:65:97:6e:a8:4f:e3:2c: 75:80:3f:a3:a2:1a:cf:cc:3f:78:15:02:ff:1c:6a: cc:e9:61:22:26:37:16:41:e2:c3:09:dc:5c:8f:6f: aa:05:9c:8d:98:2f:2b:ad:04:90:af:f2:65:1b:dc: c3:27:49:ee:7f:ea:66:20:36:c4:08:1b:03:cc:05: c8:b1:47:25:cd:9d:b1:26:8f:75:09:ef:ff:28:30: f9:b3:8e:43:fb:a8:de:fd:2a:4d:7a:ed:5e:f6:43: a5:fe:2d:bf:8a:29:a4:bc:8c:00:67:10:c4:af:db: f3:c4:6a:b6:d3:4d:f0:2f:46:8b:26:a8:a3:6a:8e: 9b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4E:7F:0D:FD:24:2D:3D:70:2E:63:5F:13:CD:F3:47:0B:C0:A0:29 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153904.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.222.0/24 163.227.253.0/24 IPv6: 2001:df5:80c0::/48 Signature Algorithm: sha256WithRSAEncryption 2a:c6:23:b6:74:00:b7:18:da:83:6d:2a:b2:99:78:61:c3:2a: 6f:8d:ce:84:5a:6b:e5:e2:a4:0d:46:d6:3e:bf:ec:44:2b:f8: bd:2f:ed:d1:01:03:0e:ea:ab:46:82:bf:38:01:d9:00:e3:aa: d1:74:8d:47:06:87:e6:63:07:f0:bb:61:ca:ea:af:75:84:3f: 11:4b:22:8c:48:4a:b7:9a:9f:8c:b3:82:dd:c9:bf:45:4c:7c: 70:9d:bb:53:42:88:eb:5c:9e:29:92:b0:bf:3b:1a:ef:56:92: 64:f5:27:90:66:81:de:18:77:fc:54:5c:ea:d2:b5:45:68:84: b8:8b:56:04:96:40:f5:2a:1a:60:46:ce:c9:64:9b:82:0a:39: 58:ae:4d:63:d8:06:00:25:a9:0a:c0:b6:b3:3b:c0:ae:c2:1c: 8c:47:7d:cb:91:f3:99:72:91:33:56:92:ca:81:1e:20:48:f5: 21:06:fa:99:e2:92:48:4e:3f:94:b4:38:35:3a:64:03:3e:4d: ab:0c:3a:70:4a:a0:26:9e:de:a7:c0:a1:fa:38:53:7e:fe:aa: f8:82:17:f0:fb:84:a3:32:f7:a8:a3:4c:e3:e1:da:3b:71:e5: fd:fb:ef:ad:53:f5:7a:74:3a:51:53:88:78:f8:06:36:54:02: 2d:fa:f3:8d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIUct5eslPyWZdkJJ+mQhsMPhpXeCMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkxNDA3Mjg1NloX DTI3MDkxMzA3MzM1NlowMzExMC8GA1UEAxMoOUM0RTdGMERGRDI0MkQzRDcwMkU2 MzVGMTNDREYzNDcwQkMwQTAyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANOOUcDHbrPUSkK3wO73LfnaGW2CAQRqx39d6rLMlSHktbO/HEHVE0FgfCGs DK8rJg+tF7xen3pV70PLf4InJBjyqsIH7vnFxDnTIkuLg6MkXzaP6GZalb6cb+P9 4i3fXcRFItmHhpSAHBrNKT+Rc3ayCGJCYnlmD+F033iGC01ll26oT+MsdYA/o6Ia z8w/eBUC/xxqzOlhIiY3FkHiwwncXI9vqgWcjZgvK60EkK/yZRvcwydJ7n/qZiA2 xAgbA8wFyLFHJc2dsSaPdQnv/ygw+bOOQ/uo3v0qTXrtXvZDpf4tv4oppLyMAGcQ xK/b88RqttNN8C9Giyaoo2qOmzkCAwEAAaOCAeMwggHfMB0GA1UdDgQWBBScTn8N /SQtPXAuY18TzfNHC8CgKTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzOTA0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIA ATAMAwQAZ6feAwQAo+P9MA8EAgACMAkDBwAgAQ31gMAwDQYJKoZIhvcNAQELBQAD ggEBACrGI7Z0ALcY2oNtKrKZeGHDKm+NzoRaa+XipA1G1j6/7EQr+L0v7dEBAw7q q0aCvzgB2QDjqtF0jUcGh+ZjB/C7Ycrqr3WEPxFLIoxISrean4yzgt3Jv0VMfHCd u1NCiOtcnimSsL87Gu9WkmT1J5Bmgd4Yd/xUXOrStUVohLiLVgSWQPUqGmBGzslk m4IKOViuTWPYBgAlqQrAtrM7wK7CHIxHfcuR85lykTNWksqBHiBI9SEG+pnikkhO P5S0ODU6ZAM+TasMOnBKoCae3qfAofo4U37+qviCF/D7hKMy96ijTOPh2jtx5f37 761T9Xp0OlFTiHj4BjZUAi36840= -----END CERTIFICATE-----Generated at Mon Sep 21 01:22:54 2026 by rpki-client