$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153816.roa File: AS153816.roa (raw, json) Hash identifier: lMjBisrb6CnqvL2Y6g61X7GmXaVNRyJRD98JTJg4sZM= Subject key identifier: FC:CC:5E:91:47:DD:80:D0:15:09:08:BB:97:9B:63:AB:21:9E:AB:78 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 44B0CAB1C5EAE74036DE03EC4EB73CF7CA6E42E5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153816.roa Signing time: Wed 15 Apr 2026 10:00:00 +0000 ROA not before: Wed 15 Apr 2026 09:55:00 +0000 ROA not after: Wed 14 Apr 2027 10:00:00 +0000 asID: 153816 IP address blocks: 163.61.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b0:ca:b1:c5:ea:e7:40:36:de:03:ec:4e:b7:3c:f7:ca:6e:42:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 15 09:55:00 2026 GMT Not After : Apr 14 10:00:00 2027 GMT Subject: CN=FCCC5E9147DD80D0150908BB979B63AB219EAB78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:09:36:df:d2:af:5a:32:e8:2a:fc:32:35:c4: fa:5d:42:c2:3b:d7:92:71:8e:90:39:0d:d2:cb:a2: a5:03:96:23:d7:19:da:6e:f0:64:92:e1:c1:4c:84: ac:00:58:ef:75:b6:93:fb:cf:2e:5d:02:f5:dc:55: db:83:2a:9e:b1:ef:36:bc:05:5b:6b:61:9c:b1:ea: ca:9f:9c:fb:ee:6a:31:5f:d3:c5:e4:e5:7d:4e:b0: 9c:c4:82:bf:23:3c:4f:a5:b9:f3:1b:05:80:15:cc: 70:bf:a3:fb:09:80:64:c9:2d:6e:a1:ea:0d:15:c5: 97:8a:77:47:e2:10:7a:34:6f:52:c1:78:45:83:b9: 34:d1:cb:47:d6:73:1a:2f:e3:ac:21:31:6f:1e:71: 4f:b8:25:78:ae:35:85:0b:a7:1d:d3:97:e8:b9:0c: be:62:7b:94:8e:54:d1:5d:45:a6:e0:fe:2e:98:1c: a3:68:95:68:6d:75:55:40:8a:6c:8d:4a:a0:a2:a7: 0d:e1:b0:9f:ee:ee:31:a6:e9:07:e1:56:8f:2e:23: 61:66:97:a6:fa:26:4a:03:d4:ff:a7:b1:83:71:c1: 64:03:b3:3e:6d:f1:ad:c0:59:d2:b8:d6:c5:85:9d: 46:3c:f5:7b:d8:2a:0a:3d:57:0e:78:d4:fe:4f:e4: 31:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CC:5E:91:47:DD:80:D0:15:09:08:BB:97:9B:63:AB:21:9E:AB:78 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153816.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.201.0/24 Signature Algorithm: sha256WithRSAEncryption 94:b3:5a:a3:8b:20:0c:77:00:83:69:7c:ef:80:cb:ef:f7:f9: 74:01:f3:d0:fe:37:f1:d7:d4:3e:1c:05:ae:d8:94:7a:25:cf: cb:55:b7:74:65:3d:3e:97:15:75:f6:ee:41:f8:8b:4c:f0:bf: 4b:64:06:f1:b0:6a:86:23:b2:7d:62:a0:80:82:8b:12:97:65: c8:77:1a:86:2f:5d:bc:b8:34:66:ae:0d:33:91:5e:0a:ab:bb: b0:9f:3d:4e:85:74:af:55:ee:24:2c:fc:8a:2e:0d:02:42:63: 74:7e:a6:9c:0a:6c:f0:e3:e8:4c:b2:f3:14:6b:fa:db:be:c6: 13:80:e6:b3:39:a3:44:9b:b9:dc:8c:cc:6d:f8:81:e6:39:2d: 95:e5:d8:cc:f8:36:05:c6:b5:e0:74:0b:aa:04:cf:55:e6:7a: 44:3c:40:9c:74:39:77:8c:dd:1a:df:d6:c8:13:dc:bb:b3:60: 99:9b:80:59:3c:87:a0:4e:50:76:fa:37:81:86:44:39:ae:a2: 0e:6a:90:3e:7e:36:d8:0e:f8:74:65:8a:a8:87:39:5a:2e:67: fb:b9:43:a6:b6:d4:c7:b4:92:58:b7:f1:31:b3:05:13:f4:84: b4:f7:8a:25:f5:84:66:ff:fa:23:e7:ae:f8:51:a3:d0:6e:b3: 6b:86:1d:7f -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIURLDKscXq50A23gPsTrc898puQuUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQxNTA5NTUwMFoX DTI3MDQxNDEwMDAwMFowMzExMC8GA1UEAxMoRkNDQzVFOTE0N0REODBEMDE1MDkw OEJCOTc5QjYzQUIyMTlFQUI3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMgJNt/Sr1oy6Cr8MjXE+l1CwjvXknGOkDkN0suipQOWI9cZ2m7wZJLhwUyE rABY73W2k/vPLl0C9dxV24MqnrHvNrwFW2thnLHqyp+c++5qMV/TxeTlfU6wnMSC vyM8T6W58xsFgBXMcL+j+wmAZMktbqHqDRXFl4p3R+IQejRvUsF4RYO5NNHLR9Zz Gi/jrCExbx5xT7gleK41hQunHdOX6LkMvmJ7lI5U0V1FpuD+Lpgco2iVaG11VUCK bI1KoKKnDeGwn+7uMabpB+FWjy4jYWaXpvomSgPU/6exg3HBZAOzPm3xrcBZ0rjW xYWdRjz1e9gqCj1XDnjU/k/kMb0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBT8zF6R R92A0BUJCLuXm2OrIZ6reDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzgxNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKM9yTANBgkqhkiG9w0BAQsFAAOCAQEAlLNao4sgDHcAg2l874DL 7/f5dAHz0P438dfUPhwFrtiUeiXPy1W3dGU9PpcVdfbuQfiLTPC/S2QG8bBqhiOy fWKggIKLEpdlyHcahi9dvLg0Zq4NM5FeCqu7sJ89ToV0r1XuJCz8ii4NAkJjdH6m nAps8OPoTLLzFGv6277GE4DmszmjRJu53IzMbfiB5jktleXYzPg2Bca14HQLqgTP VeZ6RDxAnHQ5d4zdGt/WyBPcu7NgmZuAWTyHoE5Qdvo3gYZEOa6iDmqQPn422A74 dGWKqIc5Wi5n+7lDprbUx7SSWLfxMbMFE/SEtPeKJfWEZv/6I+eu+FGj0G6za4Yd fw== -----END CERTIFICATE-----Generated at Fri Apr 17 13:33:43 2026 by rpki-client