$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153804.roa File: AS153804.roa (raw, json) Hash identifier: 2GwMc6tCf4151WkzMBh6R4OVOqFq7HN5gGP4vLVrms4= Subject key identifier: D1:45:BC:4C:2A:BB:16:84:91:70:F9:5D:FE:19:86:3F:75:D5:11:0A Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 35EDAB77E8993EB9EC328CC3C9DFD9CE1A75F32B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153804.roa Signing time: Sat 14 Jun 2025 01:38:13 +0000 ROA not before: Sat 14 Jun 2025 01:33:13 +0000 ROA not after: Sat 13 Jun 2026 01:38:13 +0000 asID: 153804 IP address blocks: 163.227.52.0/24 maxlen: 24 2001:df5:59c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ed:ab:77:e8:99:3e:b9:ec:32:8c:c3:c9:df:d9:ce:1a:75:f3:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 14 01:33:13 2025 GMT Not After : Jun 13 01:38:13 2026 GMT Subject: CN=D145BC4C2ABB16849170F95DFE19863F75D5110A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ac:e2:1a:1f:33:db:46:d7:6b:df:ff:b5:ea: 69:d9:26:f2:55:6d:79:c6:37:e6:a7:bd:c9:76:4a: ac:e0:aa:64:e7:cd:8f:27:22:26:08:76:2d:c7:61: 01:05:30:cb:11:c1:21:c4:8f:ff:a1:90:6e:a3:3f: b9:86:7a:6d:60:1d:ac:a9:64:76:74:07:03:27:8d: b1:74:72:e0:98:ec:77:83:f5:53:b6:ba:33:7b:98: ba:56:7b:69:dc:7a:a1:d7:07:b2:e2:62:9a:bd:75: 05:07:2e:c5:60:d3:63:43:2d:12:b4:c1:2c:5e:47: dc:eb:b1:93:0d:da:16:49:ca:34:1d:e0:30:5d:46: 5e:22:21:72:a2:9a:9d:3e:19:60:19:7f:b5:19:59: 52:b3:b3:b9:e9:80:39:be:96:91:76:51:8c:28:eb: 2f:cf:f3:a3:df:61:ca:12:c3:47:f1:de:6c:46:c9: 30:c7:b3:2c:66:6b:1c:be:ca:e7:9e:89:1b:5b:a3: f8:83:cc:c2:13:3b:a2:de:fd:56:4e:ba:1a:8d:12: c2:fb:eb:61:61:98:c1:73:e8:8b:0e:b6:7e:42:40: b2:02:47:b1:9d:68:b5:1b:c1:c0:a4:09:57:88:0d: 1d:ef:41:12:7a:9a:43:aa:82:14:81:1b:53:08:c7: b3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:45:BC:4C:2A:BB:16:84:91:70:F9:5D:FE:19:86:3F:75:D5:11:0A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153804.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.52.0/24 IPv6: 2001:df5:59c0::/48 Signature Algorithm: sha256WithRSAEncryption 29:07:77:a2:34:38:40:4b:55:fb:9a:36:27:eb:75:72:8a:d8: 0b:bc:82:db:98:60:ec:67:24:02:cd:92:3c:62:4e:23:ad:2d: 29:50:a8:30:5d:09:83:da:99:81:e8:dc:cd:7c:e0:63:68:6a: c9:ee:71:4e:c3:80:3d:63:c9:31:07:8a:d7:12:21:f3:46:7c: bb:d3:91:15:d1:a9:4c:9c:d6:f7:94:9a:6f:d9:0e:cf:93:c0: ef:24:cc:6b:ae:e1:ea:79:a4:6b:ed:34:6d:53:c2:5b:d9:44: 20:be:bd:d4:b7:a9:a8:15:72:47:0c:62:51:55:fb:6d:7f:77: ad:5b:6d:37:4b:5f:6a:46:01:c7:86:66:c2:fc:17:4f:5b:98: 83:b1:71:52:bc:7f:2e:25:fd:ce:4d:e3:d6:64:27:86:1c:7b: a3:19:e5:85:16:8e:ae:5f:f5:3b:f4:9b:f5:c6:72:00:a0:a8: f3:9c:33:c0:03:58:f2:d9:14:ff:87:98:ea:89:97:51:b4:7f: 34:6a:87:4d:0b:fa:10:50:1f:64:59:f5:8c:7a:90:3b:f9:14: 51:2a:c3:30:53:34:9e:81:fd:58:4f:2a:13:22:97:38:e2:20: 83:1a:e4:52:e0:0f:22:a5:f1:26:69:2a:01:16:5e:4c:5a:fe: 19:56:2c:8a -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUNe2rd+iZPrnsMozDyd/Zzhp18yswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYxNDAxMzMxM1oX DTI2MDYxMzAxMzgxM1owMzExMC8GA1UEAxMoRDE0NUJDNEMyQUJCMTY4NDkxNzBG OTVERkUxOTg2M0Y3NUQ1MTEwQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMSs4hofM9tG12vf/7Xqadkm8lVtecY35qe9yXZKrOCqZOfNjyciJgh2Lcdh AQUwyxHBIcSP/6GQbqM/uYZ6bWAdrKlkdnQHAyeNsXRy4Jjsd4P1U7a6M3uYulZ7 adx6odcHsuJimr11BQcuxWDTY0MtErTBLF5H3Ouxkw3aFknKNB3gMF1GXiIhcqKa nT4ZYBl/tRlZUrOzuemAOb6WkXZRjCjrL8/zo99hyhLDR/HebEbJMMezLGZrHL7K 556JG1uj+IPMwhM7ot79Vk66Go0SwvvrYWGYwXPoiw62fkJAsgJHsZ1otRvBwKQJ V4gNHe9BEnqaQ6qCFIEbUwjHs78CAwEAAaOCAeEwggHdMB0GA1UdDgQWBBTRRbxM KrsWhJFw+V3+GYY/ddURCjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzgwNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAKPjNDAPBAIAAjAJAwcAIAEN9VnAMA0GCSqGSIb3DQEBCwUAA4IB AQApB3eiNDhAS1X7mjYn63VyitgLvILbmGDsZyQCzZI8Yk4jrS0pUKgwXQmD2pmB 6NzNfOBjaGrJ7nFOw4A9Y8kxB4rXEiHzRny705EV0alMnNb3lJpv2Q7Pk8DvJMxr ruHqeaRr7TRtU8Jb2UQgvr3Ut6moFXJHDGJRVfttf3etW203S19qRgHHhmbC/BdP W5iDsXFSvH8uJf3OTePWZCeGHHujGeWFFo6uX/U79Jv1xnIAoKjznDPAA1jy2RT/ h5jqiZdRtH80aodNC/oQUB9kWfWMepA7+RRRKsMwUzSegf1YTyoTIpc44iCDGuRS 4A8ipfEmaSoBFl5MWv4ZViyK -----END CERTIFICATE-----Generated at Mon Nov 3 19:33:05 2025 by rpki-client