$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153823.roa File: AS153823.roa (raw, json) Hash identifier: tYOczr8Fx6dM27TxcVSV6bJ3Lr8erw0tpB1OAZoA7QM= Subject key identifier: 26:5B:E4:3E:30:59:3D:E1:B6:21:37:7A:81:E9:57:5E:9E:65:95:C8 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4914F0FBF832ABB7F7439F77FC1D1BE101F93995 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153823.roa Signing time: Fri 10 Apr 2026 03:00:00 +0000 ROA not before: Fri 10 Apr 2026 02:55:00 +0000 ROA not after: Fri 09 Apr 2027 03:00:00 +0000 asID: 153823 IP address blocks: 163.227.143.0/24 maxlen: 24 2001:df5:6f40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 05:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:14:f0:fb:f8:32:ab:b7:f7:43:9f:77:fc:1d:1b:e1:01:f9:39:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 10 02:55:00 2026 GMT Not After : Apr 9 03:00:00 2027 GMT Subject: CN=265BE43E30593DE1B621377A81E9575E9E6595C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5e:3c:cf:8d:de:81:8c:4a:f1:9c:75:5f:d0: c5:54:24:a7:2f:96:4b:cf:2a:0b:c9:d1:fd:f7:72: 22:5e:bc:42:e6:76:b0:a8:a4:f9:06:c1:9e:25:3f: 31:2b:36:6f:68:4a:10:da:2f:41:33:38:86:2c:02: 1b:78:bd:69:91:9e:2c:11:3e:7b:ae:8d:ae:f9:1b: 7b:de:d6:ff:56:39:d6:ee:90:71:95:e2:ba:19:bb: d4:b3:87:06:ee:02:43:7f:9d:ab:98:c0:fb:d7:eb: 99:f4:6b:78:d7:18:b2:b5:64:4e:76:91:84:55:32: 70:f7:6a:34:bd:e1:b8:c9:aa:ae:05:90:52:67:b1: fd:77:cc:45:b8:35:30:a8:fd:9a:74:e6:7c:cf:08: e3:72:3a:44:c0:de:b9:71:ca:16:c9:b5:bd:1f:47: 48:07:db:66:1a:20:bd:f4:f9:35:1e:0f:c1:e6:dd: 33:51:bd:b2:10:2f:75:0b:d6:3f:80:06:fe:c6:1c: 7d:b1:b6:77:13:15:4a:29:5b:c7:0c:6b:8c:07:5c: 7a:57:27:f3:75:93:97:af:a9:04:06:00:e6:1a:2c: a2:c7:52:01:ce:ba:3c:f9:67:28:9c:d0:6f:81:30: 4b:94:e9:09:fc:50:9c:a3:3c:06:df:9e:01:7c:94: 87:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:5B:E4:3E:30:59:3D:E1:B6:21:37:7A:81:E9:57:5E:9E:65:95:C8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153823.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.143.0/24 IPv6: 2001:df5:6f40::/48 Signature Algorithm: sha256WithRSAEncryption 70:ed:3b:8d:2a:73:58:62:03:4a:e8:dc:49:8c:f4:ca:eb:3f: 98:a1:d5:6e:63:bd:c1:1a:a4:00:ac:c8:c5:74:e1:e9:2c:d3: 06:27:bc:e9:52:b4:71:c0:69:d5:8b:37:fd:2e:39:c0:d1:bd: 54:54:a2:44:8d:36:65:df:eb:bc:3d:29:f8:bc:59:70:35:8c: 09:97:4e:5c:8c:44:e8:94:31:f2:3b:8d:cc:a7:8b:fe:4c:fc: 1e:19:a0:44:a2:50:ca:11:1a:5e:4e:47:22:ed:b1:28:bb:8b: ba:3f:93:28:fd:10:fa:d6:11:ad:06:42:15:dc:42:77:90:b9: ad:f1:79:fc:a0:fe:59:0f:a6:f8:b9:ff:40:72:15:8b:f2:f2: f9:27:15:cc:78:67:2a:40:2a:22:44:b3:41:05:d2:a8:3f:7e: 63:98:62:cd:64:1f:eb:a8:f0:e5:2e:83:db:3e:7d:2a:c7:4a: ac:b5:1a:a7:87:39:86:f2:58:fe:0a:59:f4:cd:92:98:52:66: 5f:7b:6e:8a:46:b8:30:30:e6:1c:39:a7:0b:4c:d0:f4:37:77: 3a:23:b0:ef:14:6d:c7:97:a0:75:fa:27:19:ab:4b:3a:f5:b1: 7a:9a:57:15:da:a7:4b:a3:67:8f:84:00:87:00:f6:c9:2f:c1: fc:32:ec:c6 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUSRTw+/gyq7f3Q593/B0b4QH5OZUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQxMDAyNTUwMFoX DTI3MDQwOTAzMDAwMFowMzExMC8GA1UEAxMoMjY1QkU0M0UzMDU5M0RFMUI2MjEz NzdBODFFOTU3NUU5RTY1OTVDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMhePM+N3oGMSvGcdV/QxVQkpy+WS88qC8nR/fdyIl68QuZ2sKik+QbBniU/ MSs2b2hKENovQTM4hiwCG3i9aZGeLBE+e66Nrvkbe97W/1Y51u6QcZXiuhm71LOH Bu4CQ3+dq5jA+9frmfRreNcYsrVkTnaRhFUycPdqNL3huMmqrgWQUmex/XfMRbg1 MKj9mnTmfM8I43I6RMDeuXHKFsm1vR9HSAfbZhogvfT5NR4PwebdM1G9shAvdQvW P4AG/sYcfbG2dxMVSilbxwxrjAdcelcn83WTl6+pBAYA5hososdSAc66PPlnKJzQ b4EwS5TpCfxQnKM8Bt+eAXyUhwcCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBQmW+Q+ MFk94bYhN3qB6VdenmWVyDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzgyMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAKPjjzAPBAIAAjAJAwcAIAEN9W9AMA0GCSqGSIb3DQEBCwUAA4IB AQBw7TuNKnNYYgNK6NxJjPTK6z+YodVuY73BGqQArMjFdOHpLNMGJ7zpUrRxwGnV izf9LjnA0b1UVKJEjTZl3+u8PSn4vFlwNYwJl05cjETolDHyO43Mp4v+TPweGaBE olDKERpeTkci7bEou4u6P5Mo/RD61hGtBkIV3EJ3kLmt8Xn8oP5ZD6b4uf9AchWL 8vL5JxXMeGcqQCoiRLNBBdKoP35jmGLNZB/rqPDlLoPbPn0qx0qstRqnhzmG8lj+ Cln0zZKYUmZfe26KRrgwMOYcOacLTND0N3c6I7DvFG3Hl6B1+icZq0s69bF6mlcV 2qdLo2ePhACHAPbJL8H8MuzG -----END CERTIFICATE-----Generated at Fri Apr 17 08:16:39 2026 by rpki-client