$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153797.roa File: AS153797.roa (raw, json) Hash identifier: GaBaYBSjnVnBCBVs/DjJHUnJphSgFdrniBfLeQCl44k= Subject key identifier: 06:7A:38:24:C4:22:C4:FB:A9:D0:48:02:32:4B:A5:22:84:A4:E5:C8 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3B2C3CA2EDF443B79BFD73EEB36395507447E927 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153797.roa Signing time: Mon 03 Nov 2025 08:00:47 +0000 ROA not before: Mon 03 Nov 2025 07:55:47 +0000 ROA not after: Mon 02 Nov 2026 08:00:47 +0000 asID: 153797 IP address blocks: 163.227.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:2c:3c:a2:ed:f4:43:b7:9b:fd:73:ee:b3:63:95:50:74:47:e9:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 3 07:55:47 2025 GMT Not After : Nov 2 08:00:47 2026 GMT Subject: CN=067A3824C422C4FBA9D04802324BA52284A4E5C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:75:55:40:79:c0:b8:89:a7:86:eb:38:85:7d: 7b:72:48:3f:f6:1b:ed:65:92:6b:18:b6:a9:ba:a7: d5:58:2c:33:88:10:f0:9c:56:b4:1a:c2:bc:5b:6b: e5:76:6b:be:25:cc:3e:fa:75:c6:18:32:46:b2:7b: 4d:87:02:90:a2:0b:d8:d0:f5:25:f3:b8:5d:64:0c: 4c:50:93:49:af:65:d3:0d:fc:95:26:0b:f2:18:ad: 28:35:9b:4f:62:01:a9:f1:f0:0b:84:82:f3:cb:2f: 55:12:e1:36:2c:65:fd:98:3b:78:7c:63:cc:4d:2d: 12:ae:86:fd:cb:c3:1b:ac:c0:e4:c1:de:28:9c:02: 14:ba:c6:99:16:9e:9b:18:d5:11:25:88:7a:6e:1e: be:63:42:5d:37:83:a2:5c:09:5d:81:6d:41:8b:75: 6a:93:99:d4:b8:70:f1:1f:eb:44:e4:c8:18:a7:14: 0e:ab:37:7e:73:40:49:1a:1c:0a:d9:6b:7d:9c:bb: 17:8e:4b:54:9b:2f:5e:58:26:a5:19:81:81:f6:00: 38:fb:39:ac:b8:cb:74:26:d0:c1:76:57:ff:77:a5: 6d:b4:89:e6:73:c5:fd:22:fe:cc:ab:6b:b5:41:41: df:1f:e0:1c:33:e4:e0:63:25:71:4e:15:61:1c:b1: 7f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7A:38:24:C4:22:C4:FB:A9:D0:48:02:32:4B:A5:22:84:A4:E5:C8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153797.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.95.0/24 Signature Algorithm: sha256WithRSAEncryption 51:1e:df:37:21:9b:8c:f7:cd:23:d1:89:87:c6:41:e4:64:29: 44:06:fb:c4:2f:87:5a:f2:57:5c:5c:7c:6b:58:fc:da:b5:58: a0:7e:73:4a:2d:33:e1:30:62:b1:11:43:8b:c1:c2:a4:a9:8a: 1d:5d:57:a4:97:eb:e3:34:48:8b:17:dc:cb:01:9c:b9:a5:50: c6:e5:c0:02:22:4e:70:51:2d:3d:31:bd:78:bc:9e:5c:b1:d3: c6:b8:b9:34:d0:d0:13:3d:80:8e:3e:6e:73:76:f5:e6:d8:1d: 29:87:cd:73:8a:6f:98:e1:89:6b:b5:d4:8a:12:cd:26:c6:79: 74:82:70:d5:2a:9c:3f:b9:5e:0f:08:8f:fc:e9:b4:5e:4a:13: fc:b2:09:81:ba:4a:db:72:b8:d8:30:c0:37:eb:2c:ff:01:92: e9:c1:de:89:a7:c7:a4:50:f6:15:f2:11:7d:50:1b:2d:e7:19: 18:c1:c7:a9:dd:e8:c7:98:35:fb:a0:e9:7b:53:6f:40:cb:fb: f8:cd:c3:1d:9a:43:1d:4e:b7:79:bf:f4:f5:bd:4b:6e:56:3e: 46:e0:6c:7c:5f:6a:e7:11:44:c3:1a:57:d8:ef:ae:c3:f0:50: 67:00:2a:29:b3:a0:c2:7c:3e:31:24:22:62:53:2a:aa:1b:d9: 38:6a:d5:99 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUOyw8ou30Q7eb/XPus2OVUHRH6ScwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEwMzA3NTU0N1oX DTI2MTEwMjA4MDA0N1owMzExMC8GA1UEAxMoMDY3QTM4MjRDNDIyQzRGQkE5RDA0 ODAyMzI0QkE1MjI4NEE0RTVDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM91VUB5wLiJp4brOIV9e3JIP/Yb7WWSaxi2qbqn1VgsM4gQ8JxWtBrCvFtr 5XZrviXMPvp1xhgyRrJ7TYcCkKIL2ND1JfO4XWQMTFCTSa9l0w38lSYL8hitKDWb T2IBqfHwC4SC88svVRLhNixl/Zg7eHxjzE0tEq6G/cvDG6zA5MHeKJwCFLrGmRae mxjVESWIem4evmNCXTeDolwJXYFtQYt1apOZ1Lhw8R/rROTIGKcUDqs3fnNASRoc CtlrfZy7F45LVJsvXlgmpRmBgfYAOPs5rLjLdCbQwXZX/3elbbSJ5nPF/SL+zKtr tUFB3x/gHDPk4GMlcU4VYRyxf80CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQGejgk xCLE+6nQSAIyS6UihKTlyDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1Mzc5Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKPjXzANBgkqhkiG9w0BAQsFAAOCAQEAUR7fNyGbjPfNI9GJh8ZB 5GQpRAb7xC+HWvJXXFx8a1j82rVYoH5zSi0z4TBisRFDi8HCpKmKHV1XpJfr4zRI ixfcywGcuaVQxuXAAiJOcFEtPTG9eLyeXLHTxri5NNDQEz2Ajj5uc3b15tgdKYfN c4pvmOGJa7XUihLNJsZ5dIJw1SqcP7leDwiP/Om0XkoT/LIJgbpK23K42DDAN+ss /wGS6cHeiafHpFD2FfIRfVAbLecZGMHHqd3ox5g1+6Dpe1NvQMv7+M3DHZpDHU63 eb/09b1LblY+RuBsfF9q5xFEwxpX2O+uw/BQZwAqKbOgwnw+MSQiYlMqqhvZOGrV mQ== -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:20 2025 by rpki-client