$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153839.roa File: AS153839.roa (raw, json) Hash identifier: JPIFwON0lu0dceAJIsR8NYb+ZpXghiplG0mk+U0FkN4= Subject key identifier: B4:D6:E6:D0:C9:D1:7D:3D:E0:FE:83:0F:36:1D:FD:9A:D0:EC:C6:F2 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: E280D6593FE1280E15186C9314B260CA685435 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153839.roa Signing time: Wed 11 Jun 2025 06:41:38 +0000 ROA not before: Wed 11 Jun 2025 06:36:38 +0000 ROA not after: Wed 10 Jun 2026 06:41:38 +0000 asID: 153839 IP address blocks: 163.227.100.0/24 maxlen: 24 2001:df5:61c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: e2:80:d6:59:3f:e1:28:0e:15:18:6c:93:14:b2:60:ca:68:54:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 11 06:36:38 2025 GMT Not After : Jun 10 06:41:38 2026 GMT Subject: CN=B4D6E6D0C9D17D3DE0FE830F361DFD9AD0ECC6F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:17:7d:27:95:2e:14:98:6d:14:c5:07:61:67: 79:cf:ea:0c:c6:be:64:dd:e4:b6:7a:53:45:6f:f3: 8a:3a:d5:dc:27:32:f0:5c:7e:19:60:09:75:6c:32: b9:c6:12:fa:bf:3f:78:59:07:d7:b9:21:01:a5:70: 47:4c:52:47:22:e9:89:ed:b3:48:1e:81:7c:e4:60: ad:15:23:f2:88:bd:53:66:ee:bb:7d:ca:0b:2a:7b: a2:a6:b8:e8:78:88:f3:f8:79:90:36:06:b0:71:8b: 7e:7d:f1:61:14:ec:e6:68:b0:4b:d9:55:4b:59:35: 3b:f2:38:40:2d:ec:58:ad:ee:af:79:2e:a1:9d:5e: 18:84:b0:b8:95:86:52:b1:38:f1:9f:fd:d0:d9:ca: 2a:62:75:57:cd:72:01:a0:a1:c5:c4:48:05:8d:3c: 5d:09:91:0e:8b:3a:29:fc:5d:27:b2:92:19:e8:27: 02:ee:77:2d:e0:a4:ab:2f:40:fa:5b:77:a1:e7:6d: b6:65:e3:20:af:13:ee:59:e7:44:2a:08:08:ac:b2: 33:17:ee:3d:fc:e9:ac:3e:bf:55:86:90:c8:97:dc: 14:43:81:7f:59:d2:fb:fc:94:a1:eb:2f:69:45:78: b9:32:b3:12:4c:d2:d3:d4:1f:77:0a:9f:82:5d:17: 2a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D6:E6:D0:C9:D1:7D:3D:E0:FE:83:0F:36:1D:FD:9A:D0:EC:C6:F2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.100.0/24 IPv6: 2001:df5:61c0::/48 Signature Algorithm: sha256WithRSAEncryption 4f:ee:fe:aa:2b:9a:02:93:30:bb:f3:c5:24:90:e1:60:ce:d8: c6:8a:24:8b:2b:a3:70:02:6b:45:21:12:ba:05:0a:49:5e:f5: 46:69:e0:d7:97:18:a1:e8:00:5a:c0:33:5f:96:08:0b:15:54: 48:3c:ea:22:46:1d:e8:46:4e:16:f5:0a:c9:6a:8c:d6:8c:ad: d3:44:c5:79:77:73:2c:64:3b:34:5c:62:f0:f7:b8:96:c9:ba: bd:d9:d9:8f:be:b3:81:de:2f:2b:9f:85:bd:60:22:05:6f:cf: 05:4c:ec:3b:61:82:51:8d:ee:12:5b:18:ed:50:c3:a9:e7:57: 7f:1e:8b:bd:64:e6:97:c3:8c:11:43:94:e0:72:c6:db:fa:5d: 50:ff:dc:11:f9:38:1f:96:7a:24:b5:78:24:db:3a:fc:59:1f: 42:79:5f:d5:1f:d4:66:26:88:cd:77:01:eb:00:83:7c:a5:63: fc:3f:db:99:d6:96:2d:33:90:c8:bc:da:85:4c:6b:70:5a:43: c9:c4:ef:cc:52:36:cd:d9:d6:a2:e0:c2:57:a5:26:22:00:b6: c1:cb:a8:8e:30:c2:26:1a:c9:c7:8a:b0:64:64:ef:26:c3:6b: 80:16:4e:14:30:b2:9f:53:4c:f1:02:39:c1:55:eb:79:4e:4a: 15:de:a0:51 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUAOKA1lk/4SgOFRhskxSyYMpoVDUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYxMTA2MzYzOFoX DTI2MDYxMDA2NDEzOFowMzExMC8GA1UEAxMoQjRENkU2RDBDOUQxN0QzREUwRkU4 MzBGMzYxREZEOUFEMEVDQzZGMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKgXfSeVLhSYbRTFB2Fnec/qDMa+ZN3ktnpTRW/zijrV3Ccy8Fx+GWAJdWwy ucYS+r8/eFkH17khAaVwR0xSRyLpie2zSB6BfORgrRUj8oi9U2buu33KCyp7oqa4 6HiI8/h5kDYGsHGLfn3xYRTs5miwS9lVS1k1O/I4QC3sWK3ur3kuoZ1eGISwuJWG UrE48Z/90NnKKmJ1V81yAaChxcRIBY08XQmRDos6KfxdJ7KSGegnAu53LeCkqy9A +lt3oedttmXjIK8T7lnnRCoICKyyMxfuPfzprD6/VYaQyJfcFEOBf1nS+/yUoesv aUV4uTKzEkzS09Qfdwqfgl0XKvUCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBS01ubQ ydF9PeD+gw82Hf2a0OzG8jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzgzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAKPjZDAPBAIAAjAJAwcAIAEN9WHAMA0GCSqGSIb3DQEBCwUAA4IB AQBP7v6qK5oCkzC788UkkOFgztjGiiSLK6NwAmtFIRK6BQpJXvVGaeDXlxih6ABa wDNflggLFVRIPOoiRh3oRk4W9QrJaozWjK3TRMV5d3MsZDs0XGLw97iWybq92dmP vrOB3i8rn4W9YCIFb88FTOw7YYJRje4SWxjtUMOp51d/Hou9ZOaXw4wRQ5Tgcsbb +l1Q/9wR+TgflnoktXgk2zr8WR9CeV/VH9RmJojNdwHrAIN8pWP8P9uZ1pYtM5DI vNqFTGtwWkPJxO/MUjbN2dai4MJXpSYiALbBy6iOMMImGsnHirBkZO8mw2uAFk4U MLKfU0zxAjnBVet5TkoV3qBR -----END CERTIFICATE-----Generated at Mon Nov 3 19:33:28 2025 by rpki-client