$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153843.roa File: AS153843.roa (raw, json) Hash identifier: Pm59ZivTHQITDfuv3RD2GXhWQsygvQ2uS1+KG34Clww= Subject key identifier: 29:8C:C1:EF:98:1D:93:CF:EC:E9:BF:C7:79:B3:97:33:75:83:C8:78 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7F47DBFE3525CA9D2F078BDCE3E6890863188C46 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153843.roa Signing time: Tue 06 May 2025 04:55:13 +0000 ROA not before: Tue 06 May 2025 04:50:13 +0000 ROA not after: Tue 05 May 2026 04:55:13 +0000 asID: 153843 IP address blocks: 163.227.138.0/24 maxlen: 24 2001:df5:6ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:47:db:fe:35:25:ca:9d:2f:07:8b:dc:e3:e6:89:08:63:18:8c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 6 04:50:13 2025 GMT Not After : May 5 04:55:13 2026 GMT Subject: CN=298CC1EF981D93CFECE9BFC779B397337583C878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:98:83:6f:47:81:18:78:c4:e0:8d:87:29:a5: cc:00:03:9d:53:e6:67:c5:33:1f:f4:3c:84:88:ec: 6b:5d:fb:3a:97:d8:4a:22:b5:d9:59:f4:1f:bc:1d: f0:18:48:61:ae:5b:04:f7:d4:d0:d1:54:98:b5:c0: de:1b:d6:ee:8d:e6:a5:62:65:88:5f:9d:7e:0f:a8: 93:f3:38:4b:be:c3:91:53:a7:ae:a2:97:9c:07:77: d4:f2:92:84:52:f5:bf:95:ed:d1:be:cf:0d:55:b4: e5:de:fb:6d:64:73:09:d0:3b:56:88:0b:d3:d9:0a: 22:de:39:de:a6:72:aa:54:49:db:47:7b:e8:48:09: 98:8c:fb:a5:06:30:9f:89:d8:c5:3d:52:08:37:1d: 1f:64:72:93:d9:27:23:2d:af:7f:21:62:2e:5b:01: 80:bc:0a:39:8a:83:57:6d:1f:a4:5c:a0:fc:8d:bf: 8f:ce:9f:bf:ed:e7:70:79:05:9b:7b:5b:29:e5:4a: 71:fe:bf:38:f3:6a:5f:ab:0d:f2:54:f0:72:04:cb: 49:ff:35:e6:37:b4:95:58:1a:36:a3:82:dd:32:f7: 4f:60:81:14:06:b0:f1:99:d9:69:b2:a9:6e:05:cf: e5:f2:27:14:cd:a1:c1:4c:cb:0d:7f:fc:a4:aa:55: 31:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8C:C1:EF:98:1D:93:CF:EC:E9:BF:C7:79:B3:97:33:75:83:C8:78 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153843.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.138.0/24 IPv6: 2001:df5:6ac0::/48 Signature Algorithm: sha256WithRSAEncryption 39:9b:ce:4a:07:9d:9c:61:6e:1c:ad:68:29:32:37:c2:07:7f: 3e:6f:6c:00:ae:aa:fb:df:6a:1b:47:a9:68:91:58:73:8b:8e: b5:ed:cd:2d:c7:b2:5c:e5:c7:ca:31:aa:0f:6f:3d:09:ba:ab: 5a:f7:8c:00:d1:b8:1a:61:f8:71:61:22:c0:e4:c4:16:ce:2b: 26:45:c5:a8:e9:ed:c4:68:b6:c0:82:6d:4c:89:d8:5c:ef:8c: 8f:db:5b:fc:0e:3c:6d:a4:32:98:45:92:ab:e3:61:62:95:4c: 2f:26:16:b6:b1:4c:1a:43:71:85:f1:1f:d5:86:dd:91:fc:8c: ec:52:57:36:5c:e0:1d:84:6c:47:5b:3c:22:38:64:46:bb:b2: b0:5a:6b:0c:f2:62:53:81:32:4c:b6:d5:1a:14:23:ff:7c:3a: 8f:31:dd:e6:f0:ba:59:2d:7f:e3:a3:3a:19:54:70:dd:5b:a9: 59:8d:43:f5:c4:2a:82:4b:86:d3:2f:22:b2:f3:e7:1e:0a:a6: 29:6f:93:8d:66:8d:0b:8a:0a:5a:28:a1:97:35:21:81:ed:d2: 33:ab:c0:f3:d8:be:f6:20:97:d7:1a:0c:4b:c5:06:86:f8:4c: 09:57:66:e7:a1:30:7a:77:b0:81:9c:2c:80:5d:f4:56:52:7d: f7:7e:27:bb -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUf0fb/jUlyp0vB4vc4+aJCGMYjEYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUwNjA0NTAxM1oX DTI2MDUwNTA0NTUxM1owMzExMC8GA1UEAxMoMjk4Q0MxRUY5ODFEOTNDRkVDRTlC RkM3NzlCMzk3MzM3NTgzQzg3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPGYg29HgRh4xOCNhymlzAADnVPmZ8UzH/Q8hIjsa137OpfYSiK12Vn0H7wd 8BhIYa5bBPfU0NFUmLXA3hvW7o3mpWJliF+dfg+ok/M4S77DkVOnrqKXnAd31PKS hFL1v5Xt0b7PDVW05d77bWRzCdA7VogL09kKIt453qZyqlRJ20d76EgJmIz7pQYw n4nYxT1SCDcdH2Ryk9knIy2vfyFiLlsBgLwKOYqDV20fpFyg/I2/j86fv+3ncHkF m3tbKeVKcf6/OPNqX6sN8lTwcgTLSf815je0lVgaNqOC3TL3T2CBFAaw8ZnZabKp bgXP5fInFM2hwUzLDX/8pKpVMS8CAwEAAaOCAeEwggHdMB0GA1UdDgQWBBQpjMHv mB2Tz+zpv8d5s5czdYPIeDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1Mzg0My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAKPjijAPBAIAAjAJAwcAIAEN9WrAMA0GCSqGSIb3DQEBCwUAA4IB AQA5m85KB52cYW4crWgpMjfCB38+b2wArqr732obR6lokVhzi4617c0tx7Jc5cfK MaoPbz0Juqta94wA0bgaYfhxYSLA5MQWzismRcWo6e3EaLbAgm1Midhc74yP21v8 DjxtpDKYRZKr42FilUwvJha2sUwaQ3GF8R/Vht2R/IzsUlc2XOAdhGxHWzwiOGRG u7KwWmsM8mJTgTJMttUaFCP/fDqPMd3m8LpZLX/jozoZVHDdW6lZjUP1xCqCS4bT LyKy8+ceCqYpb5ONZo0LigpaKKGXNSGB7dIzq8Dz2L72IJfXGgxLxQaG+EwJV2bn oTB6d7CBnCyAXfRWUn33fie7 -----END CERTIFICATE-----Generated at Mon Nov 3 19:33:28 2025 by rpki-client