$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153728.roa File: AS153728.roa (raw, json) Hash identifier: CwlqLWXO/adsjIHQqlWkColYOgf8KrKCxytNU2s9ELM= Subject key identifier: 2E:72:33:DF:C9:97:40:AE:4E:F4:0A:CD:1B:ED:02:ED:5E:1B:AA:0C Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6E56A79DA8920BDAD42636D507B9184192DDD848 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153728.roa Signing time: Tue 14 Apr 2026 12:00:00 +0000 ROA not before: Tue 14 Apr 2026 11:55:00 +0000 ROA not after: Tue 13 Apr 2027 12:00:00 +0000 asID: 153728 IP address blocks: 163.223.172.0/24 maxlen: 24 2001:df5:46c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:56:a7:9d:a8:92:0b:da:d4:26:36:d5:07:b9:18:41:92:dd:d8:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 14 11:55:00 2026 GMT Not After : Apr 13 12:00:00 2027 GMT Subject: CN=2E7233DFC99740AE4EF40ACD1BED02ED5E1BAA0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:65:b0:05:26:22:44:60:73:de:60:cf:b1:e3: fd:b6:90:58:eb:89:9d:c8:cf:b8:3f:2f:eb:35:8a: 56:ee:cc:56:d8:d3:c3:33:fc:1a:7b:0d:00:a8:b0: 98:9a:2d:f1:c7:d3:d1:45:c9:93:29:07:de:8b:3a: b5:c3:11:b0:ff:81:47:6e:47:42:eb:b9:04:4c:b6: 05:2d:5c:16:ac:53:66:f8:dc:11:4f:96:a5:95:f2: 09:d0:a2:9c:11:c8:88:0e:f0:42:c7:e0:5d:21:1c: 02:57:e5:5e:2d:db:00:9c:95:fc:0a:30:7b:02:db: dd:45:cc:8e:fc:f0:98:5b:f0:c1:bc:f6:b6:4c:4e: a6:b4:5b:bb:22:12:24:25:0d:6e:1b:4d:e3:6d:b0: d7:a0:2f:e5:49:99:d5:8f:4d:b1:5a:d4:00:aa:13: e4:f0:75:d3:6b:46:d7:8e:92:cf:8d:25:3d:13:47: d1:0a:33:ef:b0:30:07:2a:51:e9:79:cf:08:63:96: 6a:31:24:a4:64:12:a7:8c:f7:70:62:12:8f:03:63: 29:c3:36:3a:0d:43:c5:98:da:66:4f:a2:53:1d:c6: 8e:71:3d:9e:a6:cb:e1:e4:b3:85:22:09:56:8a:43: b0:b5:07:fc:f4:90:fa:dc:be:85:e5:69:0f:6f:c3: d0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:72:33:DF:C9:97:40:AE:4E:F4:0A:CD:1B:ED:02:ED:5E:1B:AA:0C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153728.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.223.172.0/24 IPv6: 2001:df5:46c0::/48 Signature Algorithm: sha256WithRSAEncryption 58:33:14:5d:ec:84:94:41:ec:60:d9:1b:7c:59:11:a2:ba:34: 5c:9c:30:5d:65:77:46:b8:f0:21:17:56:4a:1b:d8:6d:f4:63: e6:ef:99:22:39:8d:1a:2f:c3:33:3c:85:be:fe:b6:5d:9d:e0: 6e:6e:2b:f0:37:e4:a6:99:9f:ab:5f:04:63:c4:84:c5:ec:db: 72:e4:46:14:41:15:ad:a4:a2:2f:30:a8:08:27:de:6a:95:73: 2f:e1:95:0d:5b:28:3a:8b:39:c8:0a:d2:55:14:c1:46:2a:79: 06:66:54:92:5b:86:f0:52:2a:e4:80:25:3f:44:24:3c:53:19: 70:55:fb:3e:45:b6:5b:ba:7c:22:15:d7:9b:bc:9f:36:9c:24: 61:f1:e2:bc:32:d3:b4:b6:fe:e5:2a:99:ba:38:cd:65:a4:77: 68:4d:11:29:de:7e:e0:f8:a1:1c:f2:25:b9:64:e7:1e:db:4c: 9f:51:50:67:f4:cb:de:e1:34:99:a4:ac:d0:98:4f:04:00:53: a9:11:90:8b:34:be:32:ce:0a:c8:ec:a1:62:eb:13:5e:20:df: a5:ee:a3:1d:be:81:c3:cc:8e:77:ea:1a:ca:f3:75:38:0a:83: fe:84:ea:cb:bb:92:3a:18:b0:48:60:15:88:97:c5:69:63:4f: ca:bf:1c:f9 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUblannaiSC9rUJjbVB7kYQZLd2EgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQxNDExNTUwMFoX DTI3MDQxMzEyMDAwMFowMzExMC8GA1UEAxMoMkU3MjMzREZDOTk3NDBBRTRFRjQw QUNEMUJFRDAyRUQ1RTFCQUEwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMBlsAUmIkRgc95gz7Hj/baQWOuJncjPuD8v6zWKVu7MVtjTwzP8GnsNAKiw mJot8cfT0UXJkykH3os6tcMRsP+BR25HQuu5BEy2BS1cFqxTZvjcEU+WpZXyCdCi nBHIiA7wQsfgXSEcAlflXi3bAJyV/AowewLb3UXMjvzwmFvwwbz2tkxOprRbuyIS JCUNbhtN422w16Av5UmZ1Y9NsVrUAKoT5PB102tG146Sz40lPRNH0Qoz77AwBypR 6XnPCGOWajEkpGQSp4z3cGISjwNjKcM2Og1DxZjaZk+iUx3GjnE9nqbL4eSzhSIJ VopDsLUH/PSQ+ty+heVpD2/D0HECAwEAAaOCAeEwggHdMB0GA1UdDgQWBBQucjPf yZdArk70Cs0b7QLtXhuqDDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzcyOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAKPfrDAPBAIAAjAJAwcAIAEN9UbAMA0GCSqGSIb3DQEBCwUAA4IB AQBYMxRd7ISUQexg2Rt8WRGiujRcnDBdZXdGuPAhF1ZKG9ht9GPm75kiOY0aL8Mz PIW+/rZdneBubivwN+SmmZ+rXwRjxITF7Nty5EYUQRWtpKIvMKgIJ95qlXMv4ZUN Wyg6iznICtJVFMFGKnkGZlSSW4bwUirkgCU/RCQ8UxlwVfs+RbZbunwiFdebvJ82 nCRh8eK8MtO0tv7lKpm6OM1lpHdoTREp3n7g+KEc8iW5ZOce20yfUVBn9Mve4TSZ pKzQmE8EAFOpEZCLNL4yzgrI7KFi6xNeIN+l7qMdvoHDzI536hrK83U4CoP+hOrL u5I6GLBIYBWIl8VpY0/Kvxz5 -----END CERTIFICATE-----Generated at Fri Apr 17 13:33:54 2026 by rpki-client