$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153693.roa File: AS153693.roa (raw, json) Hash identifier: uOtkBFBMw2FRXhycKpuxilEIxBnnD6VIoYUZiJFA2AY= Subject key identifier: 49:96:25:D0:DD:83:20:DA:AA:24:22:38:EF:79:9F:D9:B6:F1:F1:94 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4A419D461B009CC3D579F67E0FC04FD8C742635E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153693.roa Signing time: Wed 11 Feb 2026 08:00:00 +0000 ROA not before: Wed 11 Feb 2026 07:55:00 +0000 ROA not after: Wed 10 Feb 2027 08:00:00 +0000 asID: 153693 IP address blocks: 163.223.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:41:9d:46:1b:00:9c:c3:d5:79:f6:7e:0f:c0:4f:d8:c7:42:63:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 11 07:55:00 2026 GMT Not After : Feb 10 08:00:00 2027 GMT Subject: CN=499625D0DD8320DAAA242238EF799FD9B6F1F194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8a:65:6c:82:a8:91:30:d0:54:ed:89:82:24: f2:b8:39:0c:0c:98:02:89:0c:59:27:f7:e4:e7:f5: 47:e1:02:87:28:fc:7f:e4:72:48:37:a4:84:b9:1f: 0c:bb:71:5a:23:e8:9f:de:a9:27:16:bd:2d:9b:06: d2:a1:5b:df:ac:5f:34:d9:aa:8f:ec:7e:aa:df:b7: 1d:d7:d9:34:2c:2d:69:8a:0c:c3:37:b7:e0:6f:ea: bb:da:19:c0:e3:7c:3a:fa:04:dc:ec:8f:4b:b7:49: 12:c7:57:64:72:69:d0:3c:75:ea:87:2b:96:e2:a7: 6a:2c:aa:c7:41:0b:c8:5a:95:cf:46:a2:5a:b1:51: 3a:21:e4:ea:89:c3:d4:9f:87:f3:ce:8f:a4:c4:f4: 8a:57:27:44:00:22:e7:8b:d1:8d:ed:99:21:22:02: b7:ee:2b:ea:82:53:9a:0a:7b:c4:54:02:16:c9:86: c5:8d:1e:c0:a9:83:91:90:b3:31:11:6a:47:d5:7b: a6:05:86:7c:c7:f6:8d:67:dd:14:a9:ea:b3:73:44: 87:ae:c5:2e:ce:66:41:b1:1a:ed:93:c3:27:69:13: eb:b5:2e:e4:41:1a:1f:d0:fe:d4:12:b1:0a:94:9e: 63:48:bf:99:c2:9a:c4:87:78:d6:bb:8c:16:cd:44: c7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:96:25:D0:DD:83:20:DA:AA:24:22:38:EF:79:9F:D9:B6:F1:F1:94 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153693.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.223.25.0/24 Signature Algorithm: sha256WithRSAEncryption 95:0d:91:e2:2a:11:78:fe:3f:25:d7:60:bd:54:c8:9b:16:3e: 9b:5a:6f:4d:c9:e4:53:68:c4:39:82:95:65:86:2a:d5:27:1d: c4:53:4e:1b:fc:63:7e:d4:a2:15:8d:bc:d1:6f:d2:0f:14:fd: 49:95:7e:f0:93:71:4d:d8:64:74:08:b8:e7:09:35:c1:17:dc: fe:df:f9:14:c9:af:95:97:98:19:aa:63:ff:3a:08:e9:2a:6b: 74:61:a2:da:9b:51:07:b6:e7:d2:70:65:f9:c3:62:0c:a9:64: de:0f:0b:b4:64:53:69:c8:0a:86:f1:69:49:57:ab:99:da:90: dc:c1:a5:f7:fe:17:fc:e5:40:ba:21:c1:38:29:7f:33:aa:14: 44:7e:a6:a8:93:c0:33:0c:da:41:3f:c6:da:5c:ea:9c:8e:10: 7c:2a:43:fe:8e:2c:af:d1:1e:7f:37:8c:c5:4b:53:83:0c:d4: 2a:be:ab:50:0a:22:c1:60:53:b0:8a:88:9d:ea:29:21:e9:e4: 44:2f:67:7a:93:06:ff:3c:e0:05:43:63:c7:9b:7a:14:35:4b: 64:0b:40:d7:9e:65:65:47:86:7f:00:3c:d1:e2:a0:06:a3:cb: 78:c8:06:1d:9d:03:3b:96:cc:52:6b:27:57:96:80:bc:60:57: 29:68:b4:d8 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUSkGdRhsAnMPVefZ+D8BP2MdCY14wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIxMTA3NTUwMFoX DTI3MDIxMDA4MDAwMFowMzExMC8GA1UEAxMoNDk5NjI1RDBERDgzMjBEQUFBMjQy MjM4RUY3OTlGRDlCNkYxRjE5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6KZWyCqJEw0FTtiYIk8rg5DAyYAokMWSf35Of1R+EChyj8f+RySDekhLkf DLtxWiPon96pJxa9LZsG0qFb36xfNNmqj+x+qt+3HdfZNCwtaYoMwze34G/qu9oZ wON8OvoE3OyPS7dJEsdXZHJp0Dx16ocrluKnaiyqx0ELyFqVz0aiWrFROiHk6onD 1J+H886PpMT0ilcnRAAi54vRje2ZISICt+4r6oJTmgp7xFQCFsmGxY0ewKmDkZCz MRFqR9V7pgWGfMf2jWfdFKnqs3NEh67FLs5mQbEa7ZPDJ2kT67Uu5EEaH9D+1BKx CpSeY0i/mcKaxId41ruMFs1Ex1ECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRJliXQ 3YMg2qokIjjveZ/ZtvHxlDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzY5My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKPfGTANBgkqhkiG9w0BAQsFAAOCAQEAlQ2R4ioReP4/JddgvVTI mxY+m1pvTcnkU2jEOYKVZYYq1ScdxFNOG/xjftSiFY280W/SDxT9SZV+8JNxTdhk dAi45wk1wRfc/t/5FMmvlZeYGapj/zoI6SprdGGi2ptRB7bn0nBl+cNiDKlk3g8L tGRTacgKhvFpSVermdqQ3MGl9/4X/OVAuiHBOCl/M6oURH6mqJPAMwzaQT/G2lzq nI4QfCpD/o4sr9EefzeMxUtTgwzUKr6rUAoiwWBTsIqIneopIenkRC9nepMG/zzg BUNjx5t6FDVLZAtA155lZUeGfwA80eKgBqPLeMgGHZ0DO5bMUmsnV5aAvGBXKWi0 2A== -----END CERTIFICATE-----Generated at Mon Mar 2 03:01:44 2026 by rpki-client