$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS153131.roa File: AS153131.roa (raw, json) Hash identifier: 35iV5ahktzwwvGnawLvU+0cPLwpRWtqPX2RxR+kVH6s= Subject key identifier: CC:89:4A:D1:AC:1A:1D:64:B6:2D:74:ED:0F:7E:F1:54:B9:D5:0A:6A Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 46481894884413A495D6EDC03BED9317CAFEC459 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153131.roa Signing time: Sun 03 May 2026 08:13:56 +0000 ROA not before: Sun 03 May 2026 08:08:56 +0000 ROA not after: Sun 02 May 2027 08:13:56 +0000 asID: 153131 IP address blocks: 160.191.12.0/23 maxlen: 23 160.191.12.0/24 maxlen: 24 160.191.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:48:18:94:88:44:13:a4:95:d6:ed:c0:3b:ed:93:17:ca:fe:c4:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 08:08:56 2026 GMT Not After : May 2 08:13:56 2027 GMT Subject: CN=CC894AD1AC1A1D64B62D74ED0F7EF154B9D50A6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cf:27:25:be:37:07:10:b3:4b:6f:d4:9f:79: 9e:e3:36:40:a2:a6:82:ee:2d:aa:a9:f7:0f:30:5c: 49:32:b9:af:dd:9f:77:73:ee:10:1c:f7:01:b4:a9: 0e:72:a0:1a:54:59:93:6c:ff:10:1f:55:97:bd:96: e3:2c:2f:82:a0:c3:f9:05:d1:aa:ef:e2:c0:19:44: 84:ba:73:07:4c:de:c0:bd:03:f5:ae:74:e4:05:44: 3d:af:f0:a5:22:5e:ce:00:95:6d:22:63:ef:06:79: 1d:71:ea:2d:45:4a:d2:7f:11:2e:72:29:d8:ef:a1: 2a:f3:3f:56:6f:bf:95:ed:49:68:7c:86:6e:6e:3b: 96:c8:91:93:4b:65:d5:85:ad:e1:b3:7d:d3:76:1b: a1:91:a9:d2:f5:bd:45:fc:91:af:b6:34:95:ab:a4: 56:9b:df:e2:c1:71:25:02:b4:b1:e7:9a:2f:87:fb: dc:cd:c4:04:5c:2c:91:8d:08:2e:dd:4a:a6:04:be: 39:81:c7:a7:fb:e3:32:9d:a8:c2:b0:f5:eb:c7:36: 2a:94:48:59:94:79:f5:9e:e4:99:d4:b6:65:31:c5: ec:9f:74:d2:79:47:d9:5c:c8:7e:a3:dc:11:75:55: 65:a0:96:83:cb:2b:a9:b5:65:49:a1:80:4c:32:48: a6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:89:4A:D1:AC:1A:1D:64:B6:2D:74:ED:0F:7E:F1:54:B9:D5:0A:6A X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.12.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:e7:0f:71:10:5d:df:2e:3c:f5:12:e5:9f:69:26:5a:d2:58: 96:0a:94:6f:1b:38:fa:23:41:e9:ec:2d:de:85:ec:99:83:69: 02:32:3c:ea:f8:d2:67:9a:72:6f:94:9b:58:8d:0a:16:f8:6b: a2:4e:6b:3f:e3:08:f3:5e:a2:df:17:bd:6c:6d:ef:c1:f9:ea: 5e:88:f2:11:00:01:e4:38:3d:7a:cc:68:4c:94:3c:d3:50:fa: 7b:77:ed:28:3a:74:48:35:c5:d6:dc:4e:6d:e6:86:a9:37:88: 80:dc:69:02:87:c1:10:16:a4:92:a4:e3:a1:17:a9:a4:2c:1a: 38:98:47:50:0f:dc:40:e7:4b:bb:b7:e3:b4:32:57:14:f3:95: 4d:7a:d7:93:7e:f2:e6:7f:31:7a:0a:c8:c3:0f:2c:af:19:b0: b9:4c:b2:04:41:41:cf:dd:5d:ce:c1:a7:aa:3e:bb:c2:2c:2b: de:09:16:84:f6:46:7b:42:eb:7a:5e:94:22:a6:43:d6:a7:e7: cd:c0:97:9b:79:cf:9b:6d:bc:89:d2:17:1a:7b:c4:d0:73:5c: 3b:86:a1:c5:ca:52:1c:64:a0:5b:4a:63:80:7f:7b:c6:d3:13: 22:8e:5b:d3:a2:1b:d8:ec:43:69:5f:fb:73:b9:94:5d:54:4a: 07:41:42:49 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIURkgYlIhEE6SV1u3AO+2TF8r+xFkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzA4MDg1NloX DTI3MDUwMjA4MTM1NlowMzExMC8GA1UEAxMoQ0M4OTRBRDFBQzFBMUQ2NEI2MkQ3 NEVEMEY3RUYxNTRCOUQ1MEE2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL7PJyW+NwcQs0tv1J95nuM2QKKmgu4tqqn3DzBcSTK5r92fd3PuEBz3AbSp DnKgGlRZk2z/EB9Vl72W4ywvgqDD+QXRqu/iwBlEhLpzB0zewL0D9a505AVEPa/w pSJezgCVbSJj7wZ5HXHqLUVK0n8RLnIp2O+hKvM/Vm+/le1JaHyGbm47lsiRk0tl 1YWt4bN903YboZGp0vW9RfyRr7Y0laukVpvf4sFxJQK0seeaL4f73M3EBFwskY0I Lt1KpgS+OYHHp/vjMp2owrD168c2KpRIWZR59Z7kmdS2ZTHF7J900nlH2VzIfqPc EXVVZaCWg8srqbVlSaGATDJIpo8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTMiUrR rBodZLYtdO0PfvFUudUKajAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUzMTMxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBoL8MMA0GCSqGSIb3DQEBCwUAA4IBAQBb5w9xEF3fLjz1EuWfaSZa0liW CpRvGzj6I0Hp7C3eheyZg2kCMjzq+NJnmnJvlJtYjQoW+GuiTms/4wjzXqLfF71s be/B+epeiPIRAAHkOD16zGhMlDzTUPp7d+0oOnRINcXW3E5t5oapN4iA3GkCh8EQ FqSSpOOhF6mkLBo4mEdQD9xA50u7t+O0MlcU85VNeteTfvLmfzF6CsjDDyyvGbC5 TLIEQUHP3V3OwaeqPrvCLCveCRaE9kZ7Qut6XpQipkPWp+fNwJebec+bbbyJ0hca e8TQc1w7hqHFylIcZKBbSmOAf3vG0xMijlvTohvY7ENpX/tzuZRdVEoHQUJJ -----END CERTIFICATE-----Generated at Tue May 12 23:04:29 2026 by rpki-client