$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153658.roa File: AS153658.roa (raw, json) Hash identifier: wDCuI8T1CuGZiiM7+c1PRatSDwkNh8xTHc1HAeHDBWg= Subject key identifier: 5E:CB:09:F3:40:50:30:6A:D5:09:43:B3:0B:EF:0A:EE:AD:94:E6:A5 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 71548F2C16E82B8B1B26CF79BABAEF21E9641B37 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153658.roa Signing time: Mon 30 Mar 2026 07:00:00 +0000 ROA not before: Mon 30 Mar 2026 06:55:00 +0000 ROA not after: Mon 29 Mar 2027 07:00:00 +0000 asID: 153658 IP address blocks: 163.61.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:54:8f:2c:16:e8:2b:8b:1b:26:cf:79:ba:ba:ef:21:e9:64:1b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 30 06:55:00 2026 GMT Not After : Mar 29 07:00:00 2027 GMT Subject: CN=5ECB09F34050306AD50943B30BEF0AEEAD94E6A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e8:18:08:63:45:80:e1:98:f6:98:8a:80:d9: a4:f0:ab:37:ba:f7:d8:c0:59:e3:2c:1f:80:b1:89: 0f:24:6e:f0:e3:b4:13:20:eb:8f:25:28:9b:d4:1e: ca:28:32:7d:dd:10:b4:e0:f2:0b:f6:ac:c2:cb:17: 54:c3:67:3b:88:c8:25:a4:d3:cb:c7:c9:47:31:9d: e0:42:5b:b2:8b:61:81:8e:7e:69:63:d9:a8:50:3a: d4:41:d2:67:76:66:0c:33:3b:d4:7f:6d:03:58:d7: d6:21:b7:df:2d:23:30:06:78:c1:58:2b:17:d2:b0: 9f:df:01:aa:66:dd:68:0f:3b:82:17:96:c5:2e:95: bd:d3:43:a8:29:14:fe:68:13:61:c1:e2:2b:2e:9f: a8:c2:c9:f5:ff:af:d2:99:58:76:68:39:ea:17:aa: b3:67:51:0b:26:2c:b7:8b:e3:ee:3d:59:d9:86:68: a3:86:0a:b2:46:81:35:96:9c:28:50:1b:33:bd:65: b2:d3:77:cc:17:96:5a:d9:99:0d:e8:d7:9b:65:9a: fa:62:f1:ee:9d:94:1d:eb:b4:c9:4d:56:87:6e:db: 6a:82:3b:cc:ce:56:28:3e:af:23:10:04:56:c0:c5: d6:b8:2a:8f:81:85:ca:1a:01:27:ad:63:f7:8f:01: 09:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CB:09:F3:40:50:30:6A:D5:09:43:B3:0B:EF:0A:EE:AD:94:E6:A5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153658.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.254.0/24 Signature Algorithm: sha256WithRSAEncryption 29:10:26:8b:6f:bf:21:a7:d7:67:56:6d:ee:f5:73:f8:15:cd: f9:c1:c8:fd:04:6c:93:30:fb:46:d0:7a:fc:71:67:c2:73:ec: 15:4c:1d:06:ff:7c:e1:70:ba:24:ba:c5:68:9a:76:e9:d5:ac: 17:6f:d9:2b:f0:c7:ee:81:0d:43:19:48:60:d9:bc:5a:fe:36: 21:4a:b1:e4:7d:94:2b:c7:39:9b:74:bc:18:51:ec:45:b6:88: d3:83:79:19:14:87:a6:b9:21:9f:cb:ba:3b:7b:71:e7:e9:ce: b8:af:13:86:64:16:0e:94:f2:34:45:3a:6a:31:58:45:d6:05: 67:ad:ec:94:0f:35:64:11:86:91:0f:6e:05:67:eb:7c:c6:2e: 08:ad:ba:38:f7:2e:70:c4:13:b5:4f:72:72:45:6e:d1:25:c6: 2d:be:31:f2:9f:59:54:be:b2:12:93:46:c0:71:a8:8c:e4:5e: 2c:1e:cc:c8:d4:4c:ee:a6:47:d0:85:11:5f:59:77:97:99:95: 17:94:8b:f9:bf:f2:92:2a:59:45:f4:db:a6:d7:b0:5d:83:97: a9:a7:f0:4e:bc:22:b5:4f:ae:63:6e:20:ff:7d:18:99:23:d7: da:61:e9:32:17:81:85:c8:05:38:a2:73:d9:be:d5:da:7d:a4: 53:08:18:e6 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUcVSPLBboK4sbJs95urrvIelkGzcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMzMDA2NTUwMFoX DTI3MDMyOTA3MDAwMFowMzExMC8GA1UEAxMoNUVDQjA5RjM0MDUwMzA2QUQ1MDk0 M0IzMEJFRjBBRUVBRDk0RTZBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK7oGAhjRYDhmPaYioDZpPCrN7r32MBZ4ywfgLGJDyRu8OO0EyDrjyUom9Qe yigyfd0QtODyC/aswssXVMNnO4jIJaTTy8fJRzGd4EJbsothgY5+aWPZqFA61EHS Z3ZmDDM71H9tA1jX1iG33y0jMAZ4wVgrF9Kwn98BqmbdaA87gheWxS6VvdNDqCkU /mgTYcHiKy6fqMLJ9f+v0plYdmg56heqs2dRCyYst4vj7j1Z2YZoo4YKskaBNZac KFAbM71lstN3zBeWWtmZDejXm2Wa+mLx7p2UHeu0yU1Wh27baoI7zM5WKD6vIxAE VsDF1rgqj4GFyhoBJ61j948BCTcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBReywnz QFAwatUJQ7ML7wrurZTmpTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzY1OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKM9/jANBgkqhkiG9w0BAQsFAAOCAQEAKRAmi2+/IafXZ1Zt7vVz +BXN+cHI/QRskzD7RtB6/HFnwnPsFUwdBv984XC6JLrFaJp26dWsF2/ZK/DH7oEN QxlIYNm8Wv42IUqx5H2UK8c5m3S8GFHsRbaI04N5GRSHprkhn8u6O3tx5+nOuK8T hmQWDpTyNEU6ajFYRdYFZ63slA81ZBGGkQ9uBWfrfMYuCK26OPcucMQTtU9yckVu 0SXGLb4x8p9ZVL6yEpNGwHGojOReLB7MyNRM7qZH0IURX1l3l5mVF5SL+b/ykipZ RfTbptewXYOXqafwTrwitU+uY24g/30YmSPX2mHpMheBhcgFOKJz2b7V2n2kUwgY 5g== -----END CERTIFICATE-----Generated at Fri Apr 17 13:33:47 2026 by rpki-client