$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS153658.roa File: AS153658.roa (raw, json) Hash identifier: QVJai77Ac89MGq2+mRBkp6JyiARXIKtrOL0VbqiZ2c8= Subject key identifier: 5A:63:BA:27:08:32:05:2D:6B:27:59:3E:25:51:1D:CB:D0:34:C8:C8 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 17D3AD450A7704FFCCAA6A08A7CA0C89AA16A6FA Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153658.roa Signing time: Mon 20 Jul 2026 06:08:37 +0000 ROA not before: Mon 20 Jul 2026 06:03:37 +0000 ROA not after: Mon 19 Jul 2027 06:08:37 +0000 asID: 153658 IP address blocks: 162.4.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:d3:ad:45:0a:77:04:ff:cc:aa:6a:08:a7:ca:0c:89:aa:16:a6:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jul 20 06:03:37 2026 GMT Not After : Jul 19 06:08:37 2027 GMT Subject: CN=5A63BA270832052D6B27593E25511DCBD034C8C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e4:84:61:e1:a1:1d:10:36:f2:54:35:87:6f: d5:65:89:21:ca:6a:b9:e6:32:2c:70:0c:66:ef:19: 91:b4:c0:35:1c:92:77:ad:d9:d0:d0:d9:84:37:c1: d0:03:2d:8c:a5:9a:5b:2d:14:b3:43:68:84:71:ac: 5d:06:74:1a:91:1a:e9:2f:78:2c:9e:04:fc:de:42: d8:e7:c5:a9:8c:1a:7a:fd:bc:8c:9d:ec:67:80:0d: 16:26:f5:84:6a:90:10:37:c2:90:18:9d:64:bd:5f: 6d:3d:1d:b8:1e:42:5e:ab:e6:19:d5:ed:d2:11:66: f9:a3:ca:94:9a:25:29:8f:72:37:57:b2:17:07:2c: 89:89:67:ec:fc:4d:18:a7:62:f2:ec:f8:a4:4f:8e: b6:52:19:cd:7b:09:0c:d6:ed:9d:b0:f4:f1:11:3c: ee:9a:e0:94:69:8d:41:0f:40:18:00:f4:0e:c1:cc: 99:b3:94:81:e5:80:b5:d2:d3:8c:36:f4:20:cd:3e: ed:c7:bb:5c:0a:9d:ff:37:bc:24:ed:0a:7e:6b:b2: 2b:db:02:41:17:04:c0:11:ad:64:31:4b:28:f9:a4: 83:7c:70:58:ce:86:98:94:f6:82:a5:f7:92:e3:3b: bb:a7:d9:27:f4:01:26:27:7c:91:98:1c:a6:4e:c9: 71:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:63:BA:27:08:32:05:2D:6B:27:59:3E:25:51:1D:CB:D0:34:C8:C8 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS153658.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.182.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:55:f4:b5:54:83:f2:bd:1d:26:c4:5b:f5:32:89:ce:22:76: eb:a4:6b:f8:66:b3:be:42:56:d5:68:c3:97:0d:52:e6:a6:26: 02:5c:17:30:1c:e8:93:88:fe:51:d3:fe:7d:36:95:48:16:2b: 2f:15:11:1e:e0:e3:47:7d:24:f4:a6:76:bb:4a:13:68:0f:8a: 51:7d:91:8d:ec:a0:bf:29:9a:33:67:b3:b0:bc:b6:49:83:bb: 8c:99:50:7f:c2:ec:b2:1c:10:22:11:8f:14:44:77:b9:63:2d: 92:0d:0d:a4:93:4e:1a:46:17:9c:60:c0:f9:66:40:bb:cd:43: 66:0e:9d:07:30:7c:32:0f:e9:fe:94:1a:d7:d6:ac:50:90:34: ba:b1:ba:06:79:14:c4:68:4c:76:d7:6e:96:fa:b8:46:71:d6: 8d:37:8c:d3:b1:1a:fd:03:0c:31:3b:93:0a:2a:0e:d9:f7:94: 77:cc:10:28:2d:db:ec:18:66:3b:d8:c5:1b:d7:1f:38:bd:b2: 91:19:b9:99:7f:5e:91:73:20:70:7d:bd:07:6d:d7:21:40:12: 90:bf:e5:57:6b:db:70:3b:73:67:34:ee:66:e1:68:69:6d:d4: ee:b3:54:f9:c8:20:56:b6:4f:7b:95:2f:70:b1:a6:05:5f:e4: 0e:d0:50:8e -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUF9OtRQp3BP/MqmoIp8oMiaoWpvowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDcyMDA2MDMzN1oX DTI3MDcxOTA2MDgzN1owMzExMC8GA1UEAxMoNUE2M0JBMjcwODMyMDUyRDZCMjc1 OTNFMjU1MTFEQ0JEMDM0QzhDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALrkhGHhoR0QNvJUNYdv1WWJIcpqueYyLHAMZu8ZkbTANRySd63Z0NDZhDfB 0AMtjKWaWy0Us0NohHGsXQZ0GpEa6S94LJ4E/N5C2OfFqYwaev28jJ3sZ4ANFib1 hGqQEDfCkBidZL1fbT0duB5CXqvmGdXt0hFm+aPKlJolKY9yN1eyFwcsiYln7PxN GKdi8uz4pE+OtlIZzXsJDNbtnbD08RE87prglGmNQQ9AGAD0DsHMmbOUgeWAtdLT jDb0IM0+7ce7XAqd/ze8JO0KfmuyK9sCQRcEwBGtZDFLKPmkg3xwWM6GmJT2gqX3 kuM7u6fZJ/QBJid8kZgcpk7JcUkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRaY7on CDIFLWsnWT4lUR3L0DTIyDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUzNjU4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAogS2MA0GCSqGSIb3DQEBCwUAA4IBAQAtVfS1VIPyvR0mxFv1MonOInbr pGv4ZrO+QlbVaMOXDVLmpiYCXBcwHOiTiP5R0/59NpVIFisvFREe4ONHfST0pna7 ShNoD4pRfZGN7KC/KZozZ7OwvLZJg7uMmVB/wuyyHBAiEY8URHe5Yy2SDQ2kk04a RhecYMD5ZkC7zUNmDp0HMHwyD+n+lBrX1qxQkDS6sboGeRTEaEx2126W+rhGcdaN N4zTsRr9AwwxO5MKKg7Z95R3zBAoLdvsGGY72MUb1x84vbKRGbmZf16RcyBwfb0H bdchQBKQv+VXa9twO3NnNO5m4WhpbdTus1T5yCBWtk97lS9wsaYFX+QO0FCO -----END CERTIFICATE-----Generated at Fri Jul 24 02:15:28 2026 by rpki-client