$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153636.roa File: AS153636.roa (raw, json) Hash identifier: bNUefjcb+JnTxuLv1P+lxKZbOg/zpY+ts11GOU5rjDg= Subject key identifier: 13:9F:48:10:23:DA:49:3E:9B:9F:4A:E9:71:14:C9:AD:68:C1:47:93 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 73596CA5AB291792BC06D86108468A0CA8637D9C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153636.roa Signing time: Wed 25 Feb 2026 07:00:00 +0000 ROA not before: Wed 25 Feb 2026 06:55:00 +0000 ROA not after: Wed 24 Feb 2027 07:00:00 +0000 asID: 153636 IP address blocks: 163.61.50.0/23 maxlen: 24 2001:df5:940::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:59:6c:a5:ab:29:17:92:bc:06:d8:61:08:46:8a:0c:a8:63:7d:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 25 06:55:00 2026 GMT Not After : Feb 24 07:00:00 2027 GMT Subject: CN=139F481023DA493E9B9F4AE97114C9AD68C14793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9d:4d:d2:ec:dc:e5:ca:ab:e7:ea:f7:b8:95: ec:d6:5c:20:ed:63:d6:9e:94:e7:33:40:58:e7:d0: bc:39:86:af:74:f5:5c:36:4e:a8:43:17:b6:08:bf: d0:fe:46:48:8f:a4:15:0b:a1:7b:c6:0d:e5:73:f8: e0:3f:a7:2d:5c:59:75:c2:53:df:70:74:e3:64:e6: ae:18:90:1f:c1:a4:ad:0c:41:c6:55:39:90:5f:81: a3:5a:a1:14:64:a9:45:2f:1d:87:10:61:93:b4:cf: 52:70:9b:36:32:e9:b2:97:bc:bb:fc:92:98:70:1c: 38:2e:ed:85:b3:c9:65:6e:93:1d:75:ab:28:8e:29: 02:40:e4:c1:aa:cb:68:57:00:31:9c:b6:12:58:ad: ab:44:cc:c5:b4:22:82:7e:9e:cd:b2:7b:cb:15:ea: aa:cd:75:91:25:d7:67:bc:62:54:fc:72:ba:b2:36: 2c:8d:25:a6:f6:b8:ea:9f:1f:8e:e2:46:2c:01:49: 30:2d:c4:a5:59:42:e6:8c:f6:77:f4:ca:2a:58:ab: 74:35:a6:62:36:5d:56:33:66:ae:78:d8:ca:ce:45: 36:4e:14:5a:98:2a:75:a0:6e:21:87:eb:e9:6c:7c: 7b:90:42:5f:e1:87:74:ff:de:f8:cb:95:1f:68:23: a2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9F:48:10:23:DA:49:3E:9B:9F:4A:E9:71:14:C9:AD:68:C1:47:93 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.50.0/23 IPv6: 2001:df5:940::/48 Signature Algorithm: sha256WithRSAEncryption 2d:81:f3:44:d5:f7:16:24:f9:6a:b7:c7:ed:c2:21:6b:d3:21: 68:65:0b:f9:8e:c8:1d:8b:35:a3:77:66:95:4a:e9:9f:85:b0: 50:37:e7:62:ad:f3:b0:ba:10:3e:67:09:53:10:1e:f4:ca:e5: 61:dc:1a:68:9f:c0:5e:f1:62:30:0e:7c:20:2d:ee:b1:3f:01: ef:6f:88:cd:ef:36:52:95:7d:f5:20:eb:de:1b:46:04:23:d4: fc:3a:83:d1:3b:b5:95:a3:66:e8:0e:0e:06:5c:42:71:9c:78: ab:e7:68:04:94:22:be:42:c0:c2:53:28:c9:c8:e3:43:74:48: 03:28:8f:e1:2c:d1:b1:51:e7:a5:23:bd:d4:6b:60:0f:e3:cf: 51:02:a2:db:dd:ef:eb:81:06:80:7d:52:a2:e0:c2:64:18:9d: b8:d8:9b:3e:4a:59:5b:79:f1:80:92:b8:98:5c:2f:15:e8:3c: 3f:2f:36:5d:36:7a:09:1c:17:6b:67:a6:e8:56:8b:7d:0b:29: ae:92:0b:15:fa:f5:ee:d3:d7:f8:09:5d:54:9e:36:20:50:4e: 57:aa:0d:2b:31:8d:4c:4d:e9:99:1f:cc:c6:77:7f:3c:4f:17: 26:1a:45:90:02:4d:d6:e4:02:aa:d3:e8:4d:ba:5e:73:aa:43: 2a:11:01:00 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUc1lspaspF5K8BthhCEaKDKhjfZwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyNTA2NTUwMFoX DTI3MDIyNDA3MDAwMFowMzExMC8GA1UEAxMoMTM5RjQ4MTAyM0RBNDkzRTlCOUY0 QUU5NzExNEM5QUQ2OEMxNDc5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALedTdLs3OXKq+fq97iV7NZcIO1j1p6U5zNAWOfQvDmGr3T1XDZOqEMXtgi/ 0P5GSI+kFQuhe8YN5XP44D+nLVxZdcJT33B042TmrhiQH8GkrQxBxlU5kF+Bo1qh FGSpRS8dhxBhk7TPUnCbNjLpspe8u/ySmHAcOC7thbPJZW6THXWrKI4pAkDkwarL aFcAMZy2Elitq0TMxbQign6ezbJ7yxXqqs11kSXXZ7xiVPxyurI2LI0lpva46p8f juJGLAFJMC3EpVlC5oz2d/TKKlirdDWmYjZdVjNmrnjYys5FNk4UWpgqdaBuIYfr 6Wx8e5BCX+GHdP/e+MuVH2gjohsCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBQTn0gQ I9pJPpufSulxFMmtaMFHkzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzYzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAaM9MjAPBAIAAjAJAwcAIAEN9QlAMA0GCSqGSIb3DQEBCwUAA4IB AQAtgfNE1fcWJPlqt8ftwiFr0yFoZQv5jsgdizWjd2aVSumfhbBQN+dirfOwuhA+ ZwlTEB70yuVh3Bpon8Be8WIwDnwgLe6xPwHvb4jN7zZSlX31IOveG0YEI9T8OoPR O7WVo2boDg4GXEJxnHir52gElCK+QsDCUyjJyONDdEgDKI/hLNGxUeelI73Ua2AP 489RAqLb3e/rgQaAfVKi4MJkGJ242Js+SllbefGAkriYXC8V6Dw/LzZdNnoJHBdr Z6boVot9CymukgsV+vXu09f4CV1UnjYgUE5Xqg0rMY1MTemZH8zGd388TxcmGkWQ Ak3W5AKq0+hNul5zqkMqEQEA -----END CERTIFICATE-----Generated at Mon Mar 2 03:01:52 2026 by rpki-client