$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153727.roa File: AS153727.roa (raw, json) Hash identifier: r8uUtQsZMGrk1XNN3TlY+/rjY311y9t/5cPt1Phtq5c= Subject key identifier: 66:F4:91:DD:DE:E7:EE:99:B1:24:CC:3E:A2:67:9C:1B:FC:6F:6B:E7 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5047E643EE3EF23A437AD5CD969D6E239352E1A6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153727.roa Signing time: Tue 07 Apr 2026 05:00:01 +0000 ROA not before: Tue 07 Apr 2026 04:55:01 +0000 ROA not after: Tue 06 Apr 2027 05:00:01 +0000 asID: 153727 IP address blocks: 163.223.137.0/24 maxlen: 24 2001:df5:42c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:47:e6:43:ee:3e:f2:3a:43:7a:d5:cd:96:9d:6e:23:93:52:e1:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 7 04:55:01 2026 GMT Not After : Apr 6 05:00:01 2027 GMT Subject: CN=66F491DDDEE7EE99B124CC3EA2679C1BFC6F6BE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:75:93:62:5c:2e:50:08:97:e8:ca:dd:34:a4: 15:93:2e:a0:c6:6e:5e:b1:c4:6c:7e:6e:ea:35:31: 26:d3:c4:81:7a:44:8e:ee:4a:56:ec:77:c9:05:4a: 9e:90:76:d6:b8:6d:88:7e:19:eb:a2:5d:26:f3:14: a4:f5:95:05:68:d6:e1:9c:2f:fe:69:27:21:ec:bc: ac:11:8d:03:da:ce:8e:58:82:67:9f:20:89:48:75: 92:26:73:9b:21:ce:22:d3:64:b1:5f:67:b2:da:46: 8d:77:25:aa:2e:22:ec:f2:c3:57:15:16:44:65:9b: 14:d5:8f:a8:33:ce:04:eb:20:5c:38:75:59:c8:2d: 2e:dc:2b:39:3f:cc:1c:6c:e9:73:79:4f:4e:9d:87: bf:00:06:ab:0c:f0:87:e0:c6:13:dc:24:99:90:a4: 11:de:02:22:10:8b:38:13:aa:29:f9:66:52:3c:24: 98:d3:25:c9:4b:fa:49:db:89:c7:63:60:4a:17:5a: 2d:7f:46:54:83:10:5f:83:4b:db:84:55:5e:2f:a6: 19:87:b1:dd:7a:cf:ba:be:57:36:c3:47:61:4d:1d: 02:e3:cd:c6:7b:d3:f2:a4:ab:14:1c:f3:69:d2:89: b0:d6:d4:de:7a:65:17:f3:07:0b:6b:13:7d:d5:5d: b0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F4:91:DD:DE:E7:EE:99:B1:24:CC:3E:A2:67:9C:1B:FC:6F:6B:E7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153727.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.223.137.0/24 IPv6: 2001:df5:42c0::/48 Signature Algorithm: sha256WithRSAEncryption 56:12:8e:de:90:fc:8f:16:fe:71:19:82:6d:7f:0f:85:1f:16: 61:52:71:33:a9:5d:3b:cd:fe:f0:b1:91:3c:ce:13:8b:f6:76: db:b1:66:05:44:d1:0b:d5:53:9c:75:ca:73:cf:a4:77:ff:ce: d7:7f:7b:60:3a:28:37:6a:03:1c:36:ac:3f:9f:b0:ac:2d:75: ed:1b:de:2c:ae:94:d9:55:20:85:90:4f:af:0f:20:bb:42:53: 72:de:d5:ce:dd:e6:d1:09:97:dd:03:4f:48:38:c9:43:59:ec: 38:3f:cb:62:4a:58:e3:f4:a3:e3:0d:34:81:4a:9c:3f:c7:e5: 34:11:6d:1c:75:99:87:04:4f:a6:2d:52:d4:61:87:bb:5d:4d: 86:cc:c9:59:9f:13:61:98:f0:42:ca:80:c7:98:27:c9:90:a4: fa:49:78:4f:ac:c8:2e:d8:66:ba:07:d7:d1:c3:d6:9a:5b:48: 89:e5:62:81:38:a7:59:f3:44:df:29:5c:78:fc:ed:1f:9b:19: 16:4e:be:37:1f:f3:a0:a3:c8:6d:73:6c:2a:a8:1d:6b:62:e5: e0:21:79:a2:7f:e7:2e:15:6d:8b:1c:e0:a7:30:63:87:59:e5: 0c:90:8a:87:0f:bd:90:e4:17:dd:22:0b:a7:cd:ee:f3:73:44: 75:5a:17:59 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUUEfmQ+4+8jpDetXNlp1uI5NS4aYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQwNzA0NTUwMVoX DTI3MDQwNjA1MDAwMVowMzExMC8GA1UEAxMoNjZGNDkxRERERUU3RUU5OUIxMjRD QzNFQTI2NzlDMUJGQzZGNkJFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOh1k2JcLlAIl+jK3TSkFZMuoMZuXrHEbH5u6jUxJtPEgXpEju5KVux3yQVK npB21rhtiH4Z66JdJvMUpPWVBWjW4Zwv/mknIey8rBGNA9rOjliCZ58giUh1kiZz myHOItNksV9nstpGjXclqi4i7PLDVxUWRGWbFNWPqDPOBOsgXDh1WcgtLtwrOT/M HGzpc3lPTp2HvwAGqwzwh+DGE9wkmZCkEd4CIhCLOBOqKflmUjwkmNMlyUv6SduJ x2NgShdaLX9GVIMQX4NL24RVXi+mGYex3XrPur5XNsNHYU0dAuPNxnvT8qSrFBzz adKJsNbU3nplF/MHC2sTfdVdsDkCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBRm9JHd 3ufumbEkzD6iZ5wb/G9r5zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzcyNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAKPfiTAPBAIAAjAJAwcAIAEN9ULAMA0GCSqGSIb3DQEBCwUAA4IB AQBWEo7ekPyPFv5xGYJtfw+FHxZhUnEzqV07zf7wsZE8zhOL9nbbsWYFRNEL1VOc dcpzz6R3/87Xf3tgOig3agMcNqw/n7CsLXXtG94srpTZVSCFkE+vDyC7QlNy3tXO 3ebRCZfdA09IOMlDWew4P8tiSljj9KPjDTSBSpw/x+U0EW0cdZmHBE+mLVLUYYe7 XU2GzMlZnxNhmPBCyoDHmCfJkKT6SXhPrMgu2Ga6B9fRw9aaW0iJ5WKBOKdZ80Tf KVx4/O0fmxkWTr43H/Ogo8htc2wqqB1rYuXgIXmif+cuFW2LHOCnMGOHWeUMkIqH D72Q5BfdIgunze7zc0R1WhdZ -----END CERTIFICATE-----Generated at Fri Apr 17 13:33:46 2026 by rpki-client