$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153646.roa File: AS153646.roa (raw, json) Hash identifier: jpHAQ4kSPSBiPQteLwn2tANpxu10uUgT1cnolZTFvqM= Subject key identifier: CE:EF:17:D0:B6:34:89:09:C8:21:E2:DD:AF:75:0B:8C:20:9E:FA:CA Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0DA353A58D01BB30392BE7453420452C11DFE70C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153646.roa Signing time: Wed 04 Feb 2026 02:00:00 +0000 ROA not before: Wed 04 Feb 2026 01:55:00 +0000 ROA not after: Wed 03 Feb 2027 02:00:00 +0000 asID: 153646 IP address blocks: 163.61.196.0/23 maxlen: 24 2001:df5:1ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:a3:53:a5:8d:01:bb:30:39:2b:e7:45:34:20:45:2c:11:df:e7:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 4 01:55:00 2026 GMT Not After : Feb 3 02:00:00 2027 GMT Subject: CN=CEEF17D0B6348909C821E2DDAF750B8C209EFACA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2e:74:55:c3:3f:b2:9c:c2:e8:95:64:d4:34: 96:c6:44:46:95:a6:ea:48:79:1e:b2:af:c8:79:05: 8b:e3:45:36:a6:7c:52:f8:a0:e0:32:b5:1c:2c:04: 7c:39:4e:3e:46:12:67:f9:56:2c:de:d6:1e:26:4f: 58:ab:f4:19:76:b5:17:78:7e:ef:f8:7e:6b:0e:1f: f3:78:97:c9:10:ec:e5:db:15:6a:9d:5a:45:f9:96: 4b:2b:88:6a:89:93:96:8b:c8:97:29:e9:6c:8e:9a: 69:18:48:96:6f:d1:fe:22:a6:5e:25:bd:36:c4:2b: 5e:63:90:91:a6:a3:9d:57:3d:be:d2:73:db:2b:30: e0:22:47:08:9c:5d:ca:4b:63:a9:79:36:9a:db:10: f3:e5:b9:8c:1d:6a:ed:4b:60:ad:5a:96:dd:f5:cf: e8:62:de:b7:1d:3b:f4:c2:af:43:f5:8f:c3:43:22: 46:3f:7b:2f:0c:4a:a9:90:53:c7:6e:6b:f3:c5:85: 59:25:86:09:38:c5:6e:1d:b6:08:34:d5:f3:30:34: f7:c8:6d:df:f3:93:91:0e:08:b6:36:17:38:15:a3: d8:97:f7:11:1e:88:4f:6a:b0:ed:4c:fa:2b:51:96: 7f:a6:f3:d1:4f:24:5c:78:2e:26:5c:07:b9:4d:af: a6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EF:17:D0:B6:34:89:09:C8:21:E2:DD:AF:75:0B:8C:20:9E:FA:CA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153646.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.196.0/23 IPv6: 2001:df5:1ec0::/48 Signature Algorithm: sha256WithRSAEncryption 95:11:d9:88:df:cb:f5:a5:23:f5:8e:a9:d6:e1:a3:77:5f:7b: 5a:44:38:e0:29:85:4b:9a:ae:c0:64:d5:56:1a:e2:fe:5f:1d: 3d:0a:56:ad:c5:bd:54:c0:27:e9:fe:1a:5a:2e:7f:48:09:ce: 38:2d:61:d9:85:1c:4c:e2:d1:49:63:4b:70:b0:00:a7:2a:a3: 0c:50:ec:c2:0c:6f:5e:88:75:9e:3e:ce:af:c7:ba:3f:fc:9a: c5:09:93:6f:d9:3d:34:bc:ec:54:79:79:e3:66:2f:46:dd:59: 1c:88:49:ce:c1:78:ff:ef:87:a1:2d:1d:29:8f:bf:59:db:4d: 1b:f1:42:ac:5c:be:92:ef:85:8d:86:a5:2c:78:55:c7:ca:ef: f2:34:6f:7c:a4:3f:89:bc:20:e5:b6:e6:eb:2d:59:2a:92:57: 27:7f:8d:58:4d:a0:6b:9c:a8:92:70:f7:5a:cf:f1:61:cc:9f: c9:aa:e1:c2:e7:16:f9:e8:96:6c:63:a6:c4:96:a1:0d:d9:b9: fb:74:35:7d:5f:4f:b1:fb:d7:b4:8e:49:fc:eb:fd:4b:2b:34: d5:9a:6e:93:54:48:9b:69:d2:62:54:a6:92:8b:4b:0d:d4:d4: 50:5b:64:dd:0b:0f:88:d5:a4:53:77:fb:d6:35:e1:c3:e8:de: 55:f5:26:27 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUDaNTpY0BuzA5K+dFNCBFLBHf5wwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIwNDAxNTUwMFoX DTI3MDIwMzAyMDAwMFowMzExMC8GA1UEAxMoQ0VFRjE3RDBCNjM0ODkwOUM4MjFF MkREQUY3NTBCOEMyMDlFRkFDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANsudFXDP7KcwuiVZNQ0lsZERpWm6kh5HrKvyHkFi+NFNqZ8Uvig4DK1HCwE fDlOPkYSZ/lWLN7WHiZPWKv0GXa1F3h+7/h+aw4f83iXyRDs5dsVap1aRfmWSyuI aomTlovIlynpbI6aaRhIlm/R/iKmXiW9NsQrXmOQkaajnVc9vtJz2ysw4CJHCJxd yktjqXk2mtsQ8+W5jB1q7UtgrVqW3fXP6GLetx079MKvQ/WPw0MiRj97LwxKqZBT x25r88WFWSWGCTjFbh22CDTV8zA098ht3/OTkQ4ItjYXOBWj2Jf3ER6IT2qw7Uz6 K1GWf6bz0U8kXHguJlwHuU2vpq8CAwEAAaOCAeEwggHdMB0GA1UdDgQWBBTO7xfQ tjSJCcgh4t2vdQuMIJ76yjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzY0Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAaM9xDAPBAIAAjAJAwcAIAEN9R7AMA0GCSqGSIb3DQEBCwUAA4IB AQCVEdmI38v1pSP1jqnW4aN3X3taRDjgKYVLmq7AZNVWGuL+Xx09Clatxb1UwCfp /hpaLn9ICc44LWHZhRxM4tFJY0twsACnKqMMUOzCDG9eiHWePs6vx7o//JrFCZNv 2T00vOxUeXnjZi9G3VkciEnOwXj/74ehLR0pj79Z200b8UKsXL6S74WNhqUseFXH yu/yNG98pD+JvCDltubrLVkqklcnf41YTaBrnKiScPdaz/FhzJ/JquHC5xb56JZs Y6bElqEN2bn7dDV9X0+x+9e0jkn86/1LKzTVmm6TVEibadJiVKaSi0sN1NRQW2Td Cw+I1aRTd/vWNeHD6N5V9SYn -----END CERTIFICATE-----Generated at Sun Mar 1 22:01:05 2026 by rpki-client