$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153876.roa File: AS153876.roa (raw, json) Hash identifier: 8n7mwTGIVOxlsQVwfM6qcvoD8kyjHFUvCekzd51mASY= Subject key identifier: 1D:92:E8:D0:52:A7:74:8D:8A:BE:A1:FB:BF:90:14:33:71:83:FC:42 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 52D0495538E9BAABCE4F8287841B1D4650BB9876 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153876.roa Signing time: Wed 15 Apr 2026 10:00:00 +0000 ROA not before: Wed 15 Apr 2026 09:55:00 +0000 ROA not after: Wed 14 Apr 2027 10:00:00 +0000 asID: 153876 IP address blocks: 163.227.183.0/24 maxlen: 24 2001:df5:7740::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:d0:49:55:38:e9:ba:ab:ce:4f:82:87:84:1b:1d:46:50:bb:98:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 15 09:55:00 2026 GMT Not After : Apr 14 10:00:00 2027 GMT Subject: CN=1D92E8D052A7748D8ABEA1FBBF9014337183FC42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:86:18:fc:0c:34:34:e8:fa:43:da:34:e2: 20:4b:2f:bf:b9:a5:92:9d:cb:1f:2e:31:22:52:42: 38:02:a3:d9:d9:e5:20:f1:56:b7:d8:af:f5:40:05: ef:3b:2a:8c:7d:ed:58:12:73:34:de:b0:5e:5d:1e: a6:76:0a:51:c9:75:ef:8b:08:4b:1a:63:da:95:8f: 16:cc:6e:90:17:b2:b6:9b:a0:00:f6:97:42:10:ae: 92:18:8b:1b:41:18:b4:97:89:e6:d6:7a:c3:5a:c2: f8:1b:10:56:d5:46:06:a2:b2:91:08:83:b6:f7:fc: d1:ff:97:52:32:21:a4:5a:8d:be:71:13:b0:8b:a2: e1:8d:8b:75:d5:5f:26:e2:da:1e:b6:9e:40:50:91: 88:1a:4d:80:e9:aa:57:1c:85:aa:ec:03:bc:08:c2: 29:c0:5a:d4:4d:10:0b:cb:4d:1b:cc:5d:9d:3f:e0: 04:ea:52:62:7d:a3:b4:ff:16:27:4e:b8:2e:6a:83: 85:ec:2f:7f:5e:53:11:6b:0d:55:e8:c4:56:b1:13: a3:b6:9c:3b:1e:b7:16:e6:b5:2b:c9:23:cb:ef:ba: da:fd:ad:b4:f3:2b:98:e5:2d:84:b2:e0:f1:05:e8: cc:20:3d:9c:0c:27:93:b3:46:78:d0:29:bd:5e:59: 46:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:92:E8:D0:52:A7:74:8D:8A:BE:A1:FB:BF:90:14:33:71:83:FC:42 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153876.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.183.0/24 IPv6: 2001:df5:7740::/48 Signature Algorithm: sha256WithRSAEncryption 07:1d:c2:d7:96:48:c5:9a:7d:d1:62:d5:19:e9:20:6e:73:ce: fd:47:65:e3:6f:f7:1f:15:6b:1a:31:0d:6c:20:1a:de:05:e3: fd:57:14:65:77:3c:55:21:59:98:dc:bc:a6:b1:0d:f8:a3:41: 3a:72:a7:6e:00:74:52:a5:62:6f:0d:3f:f6:eb:6d:5d:4d:22: e9:28:d8:d2:f8:1e:19:06:0c:5a:4b:a7:77:29:7d:32:8e:55: 2e:34:67:44:61:ed:7f:84:05:01:9d:59:e1:de:f4:50:02:90: 85:be:62:af:2d:3a:a9:43:49:99:8c:f1:cf:21:94:d5:af:1b: a1:e4:03:59:59:bb:ca:ca:13:1c:65:b0:04:c4:19:1d:fa:9a: 10:4c:a9:f3:f6:25:fc:f1:32:24:5b:3c:fd:f7:38:af:48:84: 04:b0:f9:f1:27:e4:65:46:81:66:46:85:0d:8b:f3:a0:b3:a0: 69:37:07:dd:91:16:3e:b3:1b:90:ac:4f:02:ce:2d:84:86:3e: d0:06:3e:59:72:4e:3d:06:43:fd:fc:2c:33:32:30:07:24:ba: c1:18:b4:b5:1a:3d:91:4b:6c:87:2b:9b:65:5c:b8:ef:23:7f: d4:3e:37:86:39:a9:f4:33:fa:d5:32:3b:05:14:19:a5:8b:dd: e7:5a:87:44 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUUtBJVTjpuqvOT4KHhBsdRlC7mHYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQxNTA5NTUwMFoX DTI3MDQxNDEwMDAwMFowMzExMC8GA1UEAxMoMUQ5MkU4RDA1MkE3NzQ4RDhBQkVB MUZCQkY5MDE0MzM3MTgzRkM0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALlKhhj8DDQ06PpD2jTiIEsvv7mlkp3LHy4xIlJCOAKj2dnlIPFWt9iv9UAF 7zsqjH3tWBJzNN6wXl0epnYKUcl174sISxpj2pWPFsxukBeytpugAPaXQhCukhiL G0EYtJeJ5tZ6w1rC+BsQVtVGBqKykQiDtvf80f+XUjIhpFqNvnETsIui4Y2LddVf JuLaHraeQFCRiBpNgOmqVxyFquwDvAjCKcBa1E0QC8tNG8xdnT/gBOpSYn2jtP8W J064LmqDhewvf15TEWsNVejEVrETo7acOx63Fua1K8kjy++62v2ttPMrmOUthLLg 8QXozCA9nAwnk7NGeNApvV5ZRiUCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBQdkujQ Uqd0jYq+ofu/kBQzcYP8QjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1Mzg3Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAKPjtzAPBAIAAjAJAwcAIAEN9XdAMA0GCSqGSIb3DQEBCwUAA4IB AQAHHcLXlkjFmn3RYtUZ6SBuc879R2Xjb/cfFWsaMQ1sIBreBeP9VxRldzxVIVmY 3LymsQ34o0E6cqduAHRSpWJvDT/2621dTSLpKNjS+B4ZBgxaS6d3KX0yjlUuNGdE Ye1/hAUBnVnh3vRQApCFvmKvLTqpQ0mZjPHPIZTVrxuh5ANZWbvKyhMcZbAExBkd +poQTKnz9iX88TIkWzz99zivSIQEsPnxJ+RlRoFmRoUNi/Ogs6BpNwfdkRY+sxuQ rE8Czi2Ehj7QBj5Zck49BkP9/CwzMjAHJLrBGLS1Gj2RS2yHK5tlXLjvI3/UPjeG Oan0M/rVMjsFFBmli93nWodE -----END CERTIFICATE-----Generated at Fri Apr 17 13:34:04 2026 by rpki-client