$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153801.roa File: AS153801.roa (raw, json) Hash identifier: ruLm1hyOqNXJTHSTuHmbZDUe3Z/DuAEp3sD50ozhcRw= Subject key identifier: B7:9A:A7:5B:C8:91:4A:76:DE:76:C7:11:07:EA:4A:FE:F4:67:DF:84 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7C1AD3BC9BACA7DE7FC5465933C25207B7927CEB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153801.roa Signing time: Tue 14 Apr 2026 12:00:00 +0000 ROA not before: Tue 14 Apr 2026 11:55:00 +0000 ROA not after: Tue 13 Apr 2027 12:00:00 +0000 asID: 153801 IP address blocks: 163.227.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:1a:d3:bc:9b:ac:a7:de:7f:c5:46:59:33:c2:52:07:b7:92:7c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 14 11:55:00 2026 GMT Not After : Apr 13 12:00:00 2027 GMT Subject: CN=B79AA75BC8914A76DE76C71107EA4AFEF467DF84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:65:5b:57:05:1d:3e:a8:e4:54:fc:c5:9d:04: be:fb:31:d4:68:b7:6f:c5:ed:25:af:e3:b4:06:10: 89:5e:7d:55:45:c9:7b:21:f0:91:76:3e:f7:d8:ec: 56:14:fa:a2:87:22:ee:83:43:83:a5:1b:4b:2c:0e: 8e:e7:d3:2f:f7:3d:39:a8:23:f3:63:1b:b7:32:68: 41:17:f6:82:8b:3b:b3:30:6f:07:e9:66:a7:09:96: 72:78:6b:e2:99:8f:42:59:3b:f4:5c:8f:a0:c9:e0: 9f:28:57:96:72:d6:f4:a8:2d:ee:4e:c3:7d:08:08: c6:77:98:07:6d:53:30:1a:6f:51:97:92:45:ef:da: 31:67:cf:7e:36:12:96:f0:d3:19:c3:b4:4a:f3:9d: b2:54:fd:4b:8a:55:15:d1:58:5d:8b:08:e7:ac:c0: eb:7f:9b:91:bb:b0:d3:8f:ac:e1:cf:9f:b3:45:fc: 75:17:44:5e:37:ef:20:16:cc:13:96:9b:92:2e:d7: a8:61:7c:5b:d5:3f:03:2c:c2:35:e8:36:b5:00:8b: 88:54:c8:3e:0a:22:51:16:af:84:50:88:46:ce:7c: ba:43:6f:7d:0c:e4:ae:83:a9:9c:ce:31:dd:98:3d: 66:9b:20:26:ee:a2:58:7a:57:5b:60:83:89:46:78: 15:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:9A:A7:5B:C8:91:4A:76:DE:76:C7:11:07:EA:4A:FE:F4:67:DF:84 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153801.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.0.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:c0:5c:fe:78:0b:9d:fb:4e:0b:18:4d:a1:27:a2:f6:e1:2d: 1f:1a:66:1c:be:53:df:c6:d8:02:3d:d4:70:b9:d9:b8:ec:1f: 52:5b:d5:c3:71:74:8d:41:68:ed:c5:69:92:62:74:a1:5a:18: 2f:5e:42:90:ec:cc:e1:8e:ed:66:38:b9:06:70:65:2b:48:d9: 70:85:94:58:02:fe:24:d4:6f:8e:60:85:bf:05:6c:e4:aa:4e: 50:83:b3:1b:a9:32:83:fb:f6:25:d9:a2:d0:04:6c:37:c7:a7: 62:5c:d4:b0:94:65:5b:04:3c:20:db:dc:48:27:a7:fd:c6:3b: f3:55:8c:98:7a:e9:8f:5a:95:d9:51:70:52:61:95:63:6e:a2: 99:c7:10:a7:f2:d5:5e:96:ec:a3:20:2f:2a:0e:40:f8:62:87: 89:2f:2e:74:ea:6b:65:ec:a5:e3:71:91:44:36:b8:66:f8:71: c5:a6:0a:41:ae:b9:50:d3:7d:43:61:28:24:9e:4e:90:bc:1c: 0f:0e:27:11:74:55:b3:d0:81:13:09:bf:09:7c:b7:8a:9a:89: db:94:47:d3:fd:4c:bb:07:b2:06:6f:14:00:f8:c6:05:6e:9e: 97:15:28:0f:6b:09:6f:82:3c:ab:69:28:27:a2:8f:ad:14:37: 66:93:f8:37 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUfBrTvJusp95/xUZZM8JSB7eSfOswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQxNDExNTUwMFoX DTI3MDQxMzEyMDAwMFowMzExMC8GA1UEAxMoQjc5QUE3NUJDODkxNEE3NkRFNzZD NzExMDdFQTRBRkVGNDY3REY4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKVlW1cFHT6o5FT8xZ0Evvsx1Gi3b8XtJa/jtAYQiV59VUXJeyHwkXY+99js VhT6ooci7oNDg6UbSywOjufTL/c9Oagj82MbtzJoQRf2gos7szBvB+lmpwmWcnhr 4pmPQlk79FyPoMngnyhXlnLW9Kgt7k7DfQgIxneYB21TMBpvUZeSRe/aMWfPfjYS lvDTGcO0SvOdslT9S4pVFdFYXYsI56zA63+bkbuw04+s4c+fs0X8dRdEXjfvIBbM E5abki7XqGF8W9U/AyzCNeg2tQCLiFTIPgoiURavhFCIRs58ukNvfQzkroOpnM4x 3Zg9ZpsgJu6iWHpXW2CDiUZ4FVkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBS3mqdb yJFKdt52xxEH6kr+9GffhDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzgwMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKPjADANBgkqhkiG9w0BAQsFAAOCAQEADcBc/ngLnftOCxhNoSei 9uEtHxpmHL5T38bYAj3UcLnZuOwfUlvVw3F0jUFo7cVpkmJ0oVoYL15CkOzM4Y7t Zji5BnBlK0jZcIWUWAL+JNRvjmCFvwVs5KpOUIOzG6kyg/v2Jdmi0ARsN8enYlzU sJRlWwQ8INvcSCen/cY781WMmHrpj1qV2VFwUmGVY26imccQp/LVXpbsoyAvKg5A +GKHiS8udOprZeyl43GRRDa4ZvhxxaYKQa65UNN9Q2EoJJ5OkLwcDw4nEXRVs9CB Ewm/CXy3ipqJ25RH0/1MuweyBm8UAPjGBW6elxUoD2sJb4I8q2koJ6KPrRQ3ZpP4 Nw== -----END CERTIFICATE-----Generated at Fri Apr 17 13:33:57 2026 by rpki-client