$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153848.roa File: AS153848.roa (raw, json) Hash identifier: DlakTDXmliYm9vyiTgaKqmP6nuIcIKjdfSv5N0zYGzY= Subject key identifier: B4:36:BD:E6:B5:C9:84:77:A8:4E:B2:1E:6A:4E:D5:96:F6:80:52:24 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 55E379FA2EAFFF84E3E871675D350E9C57B6FE4F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153848.roa Signing time: Tue 07 Apr 2026 08:00:04 +0000 ROA not before: Tue 07 Apr 2026 07:55:04 +0000 ROA not after: Tue 06 Apr 2027 08:00:04 +0000 asID: 153848 IP address blocks: 163.227.16.0/24 maxlen: 24 2001:df5:56c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:e3:79:fa:2e:af:ff:84:e3:e8:71:67:5d:35:0e:9c:57:b6:fe:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 7 07:55:04 2026 GMT Not After : Apr 6 08:00:04 2027 GMT Subject: CN=B436BDE6B5C98477A84EB21E6A4ED596F6805224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3e:90:69:14:46:b2:b8:fa:eb:75:37:dc:b6: b5:da:bd:72:b3:38:41:ef:47:92:9f:a6:5c:b9:f2: e1:69:e8:11:2b:b5:4c:62:78:50:f2:84:54:e8:4c: 01:24:3b:59:11:4e:cf:fe:a0:01:71:df:5c:d1:c3: b1:82:8d:72:b3:8b:20:f9:d6:96:33:a2:c6:b0:93: 73:a7:63:6a:7c:ca:d4:d8:38:24:d1:d3:53:4a:a3: b1:06:5f:95:7f:e3:4b:4e:55:7d:d5:56:fa:dd:d7: 4f:0a:c1:a8:ad:9e:ce:6a:f1:2c:e8:23:ff:06:7c: d4:03:df:43:cd:66:49:41:15:6f:e0:ce:b5:08:fb: 0e:07:f4:80:81:b3:ca:44:9c:db:df:c6:af:ce:24: b8:09:50:a3:56:21:5c:b4:a3:30:f3:f5:f4:8b:d2: 46:01:93:28:f3:dd:c2:92:dd:89:64:6c:08:45:1d: 10:4e:34:13:0e:af:a3:58:23:a6:a4:fa:b0:50:e7: 45:ee:34:46:66:81:cf:82:1c:bc:89:e8:4c:12:8e: ce:10:af:8d:4c:d8:08:51:55:b1:51:d4:13:09:65: 8f:4d:ae:0e:c4:56:34:10:db:c4:33:20:50:2e:49: 87:59:25:30:7a:71:d7:d8:a9:1d:2e:52:20:41:8b: 10:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:36:BD:E6:B5:C9:84:77:A8:4E:B2:1E:6A:4E:D5:96:F6:80:52:24 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153848.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.16.0/24 IPv6: 2001:df5:56c0::/48 Signature Algorithm: sha256WithRSAEncryption 19:ea:3a:f6:32:98:c6:b5:14:3c:9a:81:a7:f4:b4:4e:1c:b6: 61:2c:78:e3:ce:3c:06:e7:3b:f8:a4:3d:a0:f4:86:15:8f:6f: d0:3c:87:fa:1a:22:b2:6f:d9:10:45:12:c7:55:d2:8e:8d:03: b8:d6:49:f2:f3:1b:9f:04:0c:06:e0:da:c2:94:1f:07:aa:f2: b9:c4:58:19:10:af:ec:73:de:10:b8:c7:7d:38:53:25:23:ea: 8a:14:75:ee:6d:ea:f7:46:58:b0:52:53:6d:70:7c:cc:f4:0f: 3c:14:36:35:e1:29:47:cc:39:81:18:fe:db:91:ef:8d:9d:bb: 1d:00:ea:cb:ce:c3:d8:69:37:74:8d:67:0d:c7:92:de:6e:3e: cd:c8:30:a4:e0:e9:1c:82:76:17:4e:6d:2a:50:43:95:67:e6: 2f:3c:de:6f:0d:e7:09:58:1d:59:ab:f0:d3:3e:05:22:e9:25: 60:28:3f:9e:ce:d0:53:05:c6:4f:af:d8:90:51:83:bf:95:fd: a8:49:d7:74:0d:46:9a:98:fe:66:27:15:fb:3a:b0:9e:95:2d: 15:18:6f:fb:5f:88:bb:a6:6b:cd:b7:a6:b6:43:0b:e8:3e:01: 48:eb:12:99:8c:07:ab:c7:7a:cf:ac:19:0b:86:52:cf:87:da: e0:18:b7:fa -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUVeN5+i6v/4Tj6HFnXTUOnFe2/k8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQwNzA3NTUwNFoX DTI3MDQwNjA4MDAwNFowMzExMC8GA1UEAxMoQjQzNkJERTZCNUM5ODQ3N0E4NEVC MjFFNkE0RUQ1OTZGNjgwNTIyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALE+kGkURrK4+ut1N9y2tdq9crM4Qe9Hkp+mXLny4WnoESu1TGJ4UPKEVOhM ASQ7WRFOz/6gAXHfXNHDsYKNcrOLIPnWljOixrCTc6djanzK1Ng4JNHTU0qjsQZf lX/jS05VfdVW+t3XTwrBqK2ezmrxLOgj/wZ81APfQ81mSUEVb+DOtQj7Dgf0gIGz ykSc29/Gr84kuAlQo1YhXLSjMPP19IvSRgGTKPPdwpLdiWRsCEUdEE40Ew6vo1gj pqT6sFDnRe40RmaBz4IcvInoTBKOzhCvjUzYCFFVsVHUEwllj02uDsRWNBDbxDMg UC5Jh1klMHpx19ipHS5SIEGLEJUCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBS0Nr3m tcmEd6hOsh5qTtWW9oBSJDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1Mzg0OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAKPjEDAPBAIAAjAJAwcAIAEN9VbAMA0GCSqGSIb3DQEBCwUAA4IB AQAZ6jr2MpjGtRQ8moGn9LROHLZhLHjjzjwG5zv4pD2g9IYVj2/QPIf6GiKyb9kQ RRLHVdKOjQO41kny8xufBAwG4NrClB8HqvK5xFgZEK/sc94QuMd9OFMlI+qKFHXu ber3RliwUlNtcHzM9A88FDY14SlHzDmBGP7bke+NnbsdAOrLzsPYaTd0jWcNx5Le bj7NyDCk4OkcgnYXTm0qUEOVZ+YvPN5vDecJWB1Zq/DTPgUi6SVgKD+eztBTBcZP r9iQUYO/lf2oSdd0DUaamP5mJxX7OrCelS0VGG/7X4i7pmvNt6a2QwvoPgFI6xKZ jAerx3rPrBkLhlLPh9rgGLf6 -----END CERTIFICATE-----Generated at Fri Apr 17 13:33:53 2026 by rpki-client