$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152401.roa File: AS152401.roa (raw, json) Hash identifier: EL1+j1TaEzFS15L2/e15947eaUXtI5VZ3XyeXH9yFkc= Subject key identifier: 50:0A:E0:48:93:B5:B0:91:C9:78:31:AB:A8:0D:D0:38:2B:4A:BF:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7467E88C0787697A858D7580551DDD0D78169D1D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152401.roa Signing time: Wed 01 Apr 2026 07:00:00 +0000 ROA not before: Wed 01 Apr 2026 06:55:00 +0000 ROA not after: Wed 31 Mar 2027 07:00:00 +0000 asID: 152401 IP address blocks: 163.227.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:67:e8:8c:07:87:69:7a:85:8d:75:80:55:1d:dd:0d:78:16:9d:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 1 06:55:00 2026 GMT Not After : Mar 31 07:00:00 2027 GMT Subject: CN=500AE04893B5B091C97831ABA80DD0382B4ABF6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:65:cf:59:40:a9:68:2c:83:5a:36:54:f3:d6: 4a:0a:f9:37:95:bb:7c:f9:09:b5:ed:cd:be:6a:4b: 86:fa:4d:e0:c2:5c:21:6c:81:11:da:41:83:8a:44: a8:52:ab:c7:03:2b:96:22:35:c6:c0:9e:97:89:fb: a9:89:39:a2:45:29:6d:7d:4b:c2:de:9b:08:f9:78: af:2e:76:f4:ac:d8:98:5b:8a:f6:2e:b7:bf:d8:fe: 10:7f:06:57:5e:15:0a:20:b6:3d:43:fc:e0:3d:b7: a2:12:34:97:f4:b0:eb:89:28:ac:38:32:13:04:66: 22:a1:e9:0e:d1:c5:f1:ab:5f:7b:02:ea:e1:23:78: 31:01:d4:0a:2d:d3:79:5f:95:b4:13:f4:d0:3d:81: 9d:52:8b:02:4d:a7:f1:b5:d8:72:a6:62:11:a4:fc: 90:00:47:08:5b:0b:26:71:5a:84:16:fa:5a:24:80: 54:65:36:89:aa:7d:b0:8c:4b:3b:32:10:fe:83:dd: da:c9:1b:10:80:81:ae:0c:9c:e8:9f:31:29:94:7f: d3:b5:d4:a7:6e:f5:bb:f8:4f:0e:4e:03:da:3d:ef: d2:cf:25:63:54:9b:65:91:93:73:06:cd:44:c9:fd: ef:61:6f:8a:66:f5:ad:fd:6d:e7:f8:17:59:cb:6d: 67:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:0A:E0:48:93:B5:B0:91:C9:78:31:AB:A8:0D:D0:38:2B:4A:BF:6B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152401.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.64.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:28:00:34:f0:74:a6:fe:cb:5a:a5:75:b9:5c:08:5a:90:41: 8d:5d:27:26:c8:98:00:01:c4:21:37:34:f4:81:2d:2a:14:15: 37:76:9e:f4:58:9c:c6:1a:60:2d:69:a8:2e:8c:7d:4b:1a:3f: 12:b0:50:ea:73:64:e2:50:b6:8f:4e:e3:e8:15:17:1e:dc:00: 4d:03:03:17:82:0b:e2:34:97:91:9d:7d:52:f8:c6:e7:30:1d: a1:b1:a6:ac:21:bf:6a:a5:6c:b7:2d:4f:fd:15:51:fd:68:d7: 2e:b3:e4:3f:01:16:e7:38:14:5c:8a:7c:29:94:78:ac:c1:d9: e4:5f:9d:9b:96:db:d8:dc:42:ba:ea:ff:90:f4:09:16:a3:c2: d8:d9:81:d8:8f:2c:df:c4:64:ad:a4:fc:57:2d:32:79:54:a9: af:ee:9c:a0:00:d7:17:cb:a9:c2:d8:11:43:1e:04:55:7d:20: 79:3f:05:6f:42:6b:98:20:07:6b:8e:81:73:86:67:5c:75:74: 67:97:8e:a1:47:c5:a7:a8:ba:dd:d6:57:fb:30:97:ef:a2:4f: 24:cc:c0:4e:5d:33:14:ab:98:64:0c:7c:2a:f7:90:ea:48:cd: 17:7d:b8:69:17:26:36:f0:7e:cd:53:47:77:77:5c:43:3f:17: 62:64:0b:b3 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUdGfojAeHaXqFjXWAVR3dDXgWnR0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQwMTA2NTUwMFoX DTI3MDMzMTA3MDAwMFowMzExMC8GA1UEAxMoNTAwQUUwNDg5M0I1QjA5MUM5Nzgz MUFCQTgwREQwMzgyQjRBQkY2QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJdlz1lAqWgsg1o2VPPWSgr5N5W7fPkJte3NvmpLhvpN4MJcIWyBEdpBg4pE qFKrxwMrliI1xsCel4n7qYk5okUpbX1Lwt6bCPl4ry529KzYmFuK9i63v9j+EH8G V14VCiC2PUP84D23ohI0l/Sw64korDgyEwRmIqHpDtHF8atfewLq4SN4MQHUCi3T eV+VtBP00D2BnVKLAk2n8bXYcqZiEaT8kABHCFsLJnFahBb6WiSAVGU2iap9sIxL OzIQ/oPd2skbEICBrgyc6J8xKZR/07XUp271u/hPDk4D2j3v0s8lY1SbZZGTcwbN RMn972Fvimb1rf1t5/gXWcttZ/0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRQCuBI k7Wwkcl4MauoDdA4K0q/azAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MjQwMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKPjQDANBgkqhkiG9w0BAQsFAAOCAQEAOigANPB0pv7LWqV1uVwI WpBBjV0nJsiYAAHEITc09IEtKhQVN3ae9FicxhpgLWmoLox9Sxo/ErBQ6nNk4lC2 j07j6BUXHtwATQMDF4IL4jSXkZ19UvjG5zAdobGmrCG/aqVsty1P/RVR/WjXLrPk PwEW5zgUXIp8KZR4rMHZ5F+dm5bb2NxCuur/kPQJFqPC2NmB2I8s38RkraT8Vy0y eVSpr+6coADXF8upwtgRQx4EVX0geT8Fb0JrmCAHa46Bc4ZnXHV0Z5eOoUfFp6i6 3dZX+zCX76JPJMzATl0zFKuYZAx8KveQ6kjNF324aRcmNvB+zVNHd3dcQz8XYmQL sw== -----END CERTIFICATE-----Generated at Fri Apr 17 10:55:13 2026 by rpki-client