$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153848.roa File: AS153848.roa (raw, json) Hash identifier: gpQyFIPhq1bjvLwYmcRtr5KkIsbsn+vZWae8PpCGdIM= Subject key identifier: 8F:84:12:02:97:49:2A:3A:53:67:51:74:FB:45:81:3B:6F:43:DF:6E Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 34FD1B5BEC42A55E5653D012C7008A5B0B48890D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153848.roa Signing time: Tue 06 May 2025 07:58:04 +0000 ROA not before: Tue 06 May 2025 07:53:04 +0000 ROA not after: Tue 05 May 2026 07:58:04 +0000 asID: 153848 IP address blocks: 163.227.16.0/24 maxlen: 24 2001:df5:56c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:fd:1b:5b:ec:42:a5:5e:56:53:d0:12:c7:00:8a:5b:0b:48:89:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 6 07:53:04 2025 GMT Not After : May 5 07:58:04 2026 GMT Subject: CN=8F84120297492A3A53675174FB45813B6F43DF6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:83:aa:dd:bc:82:58:29:9a:86:bd:35:58:84: fc:99:ff:c6:de:93:07:71:c7:a1:8a:1d:37:23:75: e6:07:5d:6d:51:5d:b7:cf:43:ed:fe:1a:c6:50:41: 99:9f:f3:2e:dc:45:fe:4f:6e:38:7f:ac:ac:ab:3a: 52:42:2b:79:53:56:77:3c:78:09:c7:a4:e4:ad:82: c2:89:bb:3e:56:79:e1:f8:57:5e:a1:cc:04:83:d3: 1a:04:af:e8:43:7a:6c:ef:63:51:81:aa:fd:d1:b3: 16:2e:c1:7c:1f:06:fe:b6:ce:f8:14:26:a9:53:2c: 5b:cf:72:79:75:45:74:31:aa:6b:73:29:ba:e6:bf: 4c:14:64:e3:89:77:a1:22:b7:43:3c:1d:f7:5e:25: 63:b0:fd:3d:fd:f6:91:b9:7b:b7:45:13:3b:32:f5: fb:3f:4c:1b:c9:5d:69:10:13:7a:12:3a:07:b3:22: 69:4d:82:77:85:fe:08:54:7a:98:bb:b6:0f:2f:7c: 9f:17:72:91:24:c5:51:9d:d8:fe:87:c9:93:d5:88: 96:bf:98:f3:fb:27:2c:e7:07:54:c2:12:db:35:d5: ec:75:7f:ba:11:3d:99:95:4e:0e:2d:92:df:cd:87: 09:2e:2f:d0:a4:7b:9e:4b:cd:bd:ad:2b:ba:b8:f2: 6a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:84:12:02:97:49:2A:3A:53:67:51:74:FB:45:81:3B:6F:43:DF:6E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153848.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.16.0/24 IPv6: 2001:df5:56c0::/48 Signature Algorithm: sha256WithRSAEncryption 0a:d2:fe:2d:6e:df:2f:eb:0a:36:3c:24:70:23:b3:d9:05:15: 90:c9:d6:2e:ab:8f:53:a8:d8:60:6a:83:13:00:39:8b:7c:ff: b6:1f:5f:80:f5:33:c0:5e:91:62:40:38:9b:d2:2b:1a:e8:35: 24:12:4e:b4:2f:94:b5:9a:a2:7d:eb:80:81:75:29:53:bd:3c: 37:9e:1d:c4:cd:e3:63:70:92:3c:cb:15:e5:9e:35:f2:95:48: b7:2d:97:b3:8f:64:7c:13:b3:1a:60:22:ad:7c:ff:68:19:7e: 36:79:78:30:27:fd:f1:21:c2:9b:52:1f:f3:d9:7f:6e:b3:b6: 3a:aa:cc:ca:6d:fb:c8:0a:54:3d:e6:ab:60:b1:9f:71:7d:81: 71:98:93:c5:95:33:cc:d9:c5:75:90:47:6d:46:55:c0:c5:b6: 8d:be:51:2b:9e:41:9d:c4:91:fc:05:02:07:16:a9:6e:9e:c2: 7c:8e:db:b3:fd:d2:a4:cd:86:e7:be:d3:65:df:70:02:4d:f1: 74:f5:f1:c9:46:7c:da:ff:91:a1:d3:a4:ae:82:ef:d0:f7:20: 49:75:43:4a:a5:72:e5:93:1a:af:eb:0d:b7:b0:08:fd:77:03: 9a:7b:88:96:af:6a:f9:b4:01:46:5b:a7:ca:c5:78:1b:d8:2f: 90:fb:fe:71 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUNP0bW+xCpV5WU9ASxwCKWwtIiQ0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUwNjA3NTMwNFoX DTI2MDUwNTA3NTgwNFowMzExMC8GA1UEAxMoOEY4NDEyMDI5NzQ5MkEzQTUzNjc1 MTc0RkI0NTgxM0I2RjQzREY2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANODqt28glgpmoa9NViE/Jn/xt6TB3HHoYodNyN15gddbVFdt89D7f4axlBB mZ/zLtxF/k9uOH+srKs6UkIreVNWdzx4Ccek5K2Cwom7PlZ54fhXXqHMBIPTGgSv 6EN6bO9jUYGq/dGzFi7BfB8G/rbO+BQmqVMsW89yeXVFdDGqa3Mpuua/TBRk44l3 oSK3Qzwd914lY7D9Pf32kbl7t0UTOzL1+z9MG8ldaRATehI6B7MiaU2Cd4X+CFR6 mLu2Dy98nxdykSTFUZ3Y/ofJk9WIlr+Y8/snLOcHVMIS2zXV7HV/uhE9mZVODi2S 382HCS4v0KR7nkvNva0rurjyaukCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBSPhBIC l0kqOlNnUXT7RYE7b0PfbjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1Mzg0OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAKPjEDAPBAIAAjAJAwcAIAEN9VbAMA0GCSqGSIb3DQEBCwUAA4IB AQAK0v4tbt8v6wo2PCRwI7PZBRWQydYuq49TqNhgaoMTADmLfP+2H1+A9TPAXpFi QDib0isa6DUkEk60L5S1mqJ964CBdSlTvTw3nh3EzeNjcJI8yxXlnjXylUi3LZez j2R8E7MaYCKtfP9oGX42eXgwJ/3xIcKbUh/z2X9us7Y6qszKbfvIClQ95qtgsZ9x fYFxmJPFlTPM2cV1kEdtRlXAxbaNvlErnkGdxJH8BQIHFqlunsJ8jtuz/dKkzYbn vtNl33ACTfF09fHJRnza/5Gh06Sugu/Q9yBJdUNKpXLlkxqv6w23sAj9dwOae4iW r2r5tAFGW6fKxXgb2C+Q+/5x -----END CERTIFICATE-----Generated at Mon Nov 3 19:33:12 2025 by rpki-client