$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153889.roa File: AS153889.roa (raw, json) Hash identifier: 0FirLeZHR8fq+zEDhiWuvSRcOvSwO9bKXMmtOwr46To= Subject key identifier: B9:C2:BD:97:50:E6:DD:43:2A:EF:43:BB:09:EB:44:B3:B1:43:5D:24 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3BBA86917A11C8FBAFF2E75CA7DAECBF6857CADA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153889.roa Signing time: Thu 12 Jun 2025 06:29:22 +0000 ROA not before: Thu 12 Jun 2025 06:24:22 +0000 ROA not after: Thu 11 Jun 2026 06:29:22 +0000 asID: 153889 IP address blocks: 163.227.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ba:86:91:7a:11:c8:fb:af:f2:e7:5c:a7:da:ec:bf:68:57:ca:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 12 06:24:22 2025 GMT Not After : Jun 11 06:29:22 2026 GMT Subject: CN=B9C2BD9750E6DD432AEF43BB09EB44B3B1435D24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7e:99:5c:8d:31:94:74:d4:ed:f9:74:4a:e8: 89:fb:f6:2c:cd:bd:5e:2e:01:88:23:76:bc:a0:4d: 4c:9b:41:1c:3e:63:be:d4:8a:e5:81:06:f5:32:40: 0f:4b:8b:2e:36:93:2e:d7:4c:21:ed:8b:e3:d5:d9: 30:21:36:06:f9:cb:38:6c:2f:92:e8:cd:75:cb:3f: 07:7f:1d:51:b6:68:14:a6:50:2f:c5:b4:f8:7c:9d: f6:1d:a7:6e:66:50:14:32:2f:ed:99:87:f5:64:1a: 58:d0:06:5f:4e:53:ad:be:3d:b1:ab:be:d0:42:1c: 61:b3:69:fd:ea:44:e8:b3:ad:b0:b0:ac:ac:15:87: 2d:d3:9a:ef:56:38:66:fe:bb:96:a2:50:fe:f1:a9: 70:ce:1f:02:50:91:7f:2d:66:f0:3d:19:43:14:67: 35:49:52:f7:1a:51:2e:cb:fb:1d:29:08:55:30:bc: 8f:fd:bf:19:e5:56:66:a1:94:cc:90:0d:7c:aa:98: 22:c4:a7:a8:53:ec:17:9e:77:03:0b:e6:71:87:7f: e9:07:79:36:7f:89:88:d4:37:ee:4a:38:e0:a9:3e: 08:dd:21:fe:08:e0:d0:2d:d2:a5:3a:a4:94:51:ce: e9:88:45:d2:81:4d:e0:ae:fc:5b:f4:85:1d:a2:e4: a7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C2:BD:97:50:E6:DD:43:2A:EF:43:BB:09:EB:44:B3:B1:43:5D:24 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153889.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.250.0/23 Signature Algorithm: sha256WithRSAEncryption 95:36:1d:72:bc:3f:0d:67:11:f6:ec:89:54:26:bd:d9:1d:d3: 42:a8:66:71:7b:ef:9a:67:19:86:b0:84:c8:31:9d:8c:9f:f2: a0:59:7a:88:48:b5:97:8e:cc:b6:d6:d1:99:1d:81:c9:e7:0a: 7c:84:8f:5e:d9:f8:76:69:01:3f:57:16:d4:25:df:04:96:22: 43:f3:3f:29:e4:8d:2d:f2:8e:09:00:dc:e8:4c:a9:56:4e:1d: ea:43:a2:c2:d6:81:31:2e:a3:66:61:07:4a:a4:46:59:24:66: c5:ca:91:c6:19:96:39:1e:d8:a3:5a:f8:89:1c:84:96:e9:34: 73:16:f4:f9:4e:0a:ba:89:eb:54:a2:d7:a6:12:7d:56:39:5e: ba:68:47:06:c5:95:55:1f:b5:28:50:23:88:f7:a6:e0:16:10: 83:91:f9:9d:ed:56:8b:e1:72:28:09:c1:c3:c2:85:ca:54:8c: a4:03:ea:1c:c1:2a:17:d8:e7:f5:47:29:bc:64:36:1d:13:c9: fc:3c:16:6d:21:ef:12:46:c7:b8:a2:2b:15:b7:98:e7:31:ee: d5:b1:ed:69:89:16:0c:26:01:f8:21:fe:d5:9e:56:73:4b:46: 19:5c:58:3b:65:3e:41:8a:2a:23:87:be:d3:89:01:a1:89:da: 87:a3:e7:8a -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUO7qGkXoRyPuv8udcp9rsv2hXytowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYxMjA2MjQyMloX DTI2MDYxMTA2MjkyMlowMzExMC8GA1UEAxMoQjlDMkJEOTc1MEU2REQ0MzJBRUY0 M0JCMDlFQjQ0QjNCMTQzNUQyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOl+mVyNMZR01O35dEroifv2LM29Xi4BiCN2vKBNTJtBHD5jvtSK5YEG9TJA D0uLLjaTLtdMIe2L49XZMCE2BvnLOGwvkujNdcs/B38dUbZoFKZQL8W0+Hyd9h2n bmZQFDIv7ZmH9WQaWNAGX05Trb49sau+0EIcYbNp/epE6LOtsLCsrBWHLdOa71Y4 Zv67lqJQ/vGpcM4fAlCRfy1m8D0ZQxRnNUlS9xpRLsv7HSkIVTC8j/2/GeVWZqGU zJANfKqYIsSnqFPsF553AwvmcYd/6Qd5Nn+JiNQ37ko44Kk+CN0h/gjg0C3SpTqk lFHO6YhF0oFN4K78W/SFHaLkp6MCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBS5wr2X UObdQyrvQ7sJ60SzsUNdJDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1Mzg4OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaPj+jANBgkqhkiG9w0BAQsFAAOCAQEAlTYdcrw/DWcR9uyJVCa9 2R3TQqhmcXvvmmcZhrCEyDGdjJ/yoFl6iEi1l47MttbRmR2ByecKfISPXtn4dmkB P1cW1CXfBJYiQ/M/KeSNLfKOCQDc6EypVk4d6kOiwtaBMS6jZmEHSqRGWSRmxcqR xhmWOR7Yo1r4iRyEluk0cxb0+U4KuonrVKLXphJ9VjleumhHBsWVVR+1KFAjiPem 4BYQg5H5ne1Wi+FyKAnBw8KFylSMpAPqHMEqF9jn9UcpvGQ2HRPJ/DwWbSHvEkbH uKIrFbeY5zHu1bHtaYkWDCYB+CH+1Z5Wc0tGGVxYO2U+QYoqI4e+04kBoYnah6Pn ig== -----END CERTIFICATE-----Generated at Mon Jun 16 01:36:44 2025 by rpki-client