$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153895.roa File: AS153895.roa (raw, json) Hash identifier: bQ7c4tYZQj4GpmgIC4iYNscj/lVTUbwjx5DMwoUB+7Y= Subject key identifier: DA:66:FD:1D:E4:5B:2A:FA:EB:1B:B1:EA:01:5D:2F:64:BD:BB:36:1C Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2CF91D245CA904F947F88F83DF6EFBF31D20F8CB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153895.roa Signing time: Wed 11 Jun 2025 02:38:11 +0000 ROA not before: Wed 11 Jun 2025 02:33:11 +0000 ROA not after: Wed 10 Jun 2026 02:38:11 +0000 asID: 153895 IP address blocks: 163.227.248.0/23 maxlen: 24 2001:df5:7f40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:f9:1d:24:5c:a9:04:f9:47:f8:8f:83:df:6e:fb:f3:1d:20:f8:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 11 02:33:11 2025 GMT Not After : Jun 10 02:38:11 2026 GMT Subject: CN=DA66FD1DE45B2AFAEB1BB1EA015D2F64BDBB361C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:db:a0:73:0e:61:c2:a3:0d:a6:63:a1:26:e3: 8f:bd:9a:f1:28:a9:cd:c3:8b:ca:ad:1d:5e:76:41: 6e:75:a7:b8:9e:f4:cd:70:40:47:64:6f:66:2d:58: 13:e7:dd:8a:31:df:49:83:67:73:95:4b:c5:45:1c: 01:4f:f6:b5:0c:fb:bc:38:ab:8f:29:45:ca:19:c5: b6:64:bf:b0:47:2c:22:47:c5:2a:44:93:a8:17:a4: bc:20:77:32:68:b2:35:15:82:19:23:09:9d:a2:ed: 79:f3:d1:41:af:03:f8:f6:32:f4:51:af:b2:42:cb: 9e:84:94:8e:b0:3b:d1:0f:94:fd:ec:a4:41:a3:21: eb:67:dc:07:b3:c4:3e:b3:c4:4b:e4:ba:d9:66:8e: e4:4a:14:99:bc:72:c4:72:8a:c2:42:bd:9b:fe:29: ab:a4:91:b0:ab:57:63:1b:d0:8c:5d:e6:3e:41:7b: 32:35:7f:27:6b:a1:e3:32:85:5b:35:dc:1e:46:fc: f2:44:cd:d0:7e:e8:43:0a:f1:a3:47:d5:84:18:f1: 1d:b7:97:77:cb:70:9a:92:bd:75:13:f7:87:dd:74: 92:24:ec:8f:e5:70:27:40:eb:39:3b:a2:54:16:30: 0f:e1:8b:2b:df:a3:d2:86:54:71:54:72:a4:50:5f: 52:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:66:FD:1D:E4:5B:2A:FA:EB:1B:B1:EA:01:5D:2F:64:BD:BB:36:1C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153895.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.248.0/23 IPv6: 2001:df5:7f40::/48 Signature Algorithm: sha256WithRSAEncryption 71:16:15:ac:23:13:d3:a4:68:88:8d:52:ee:b4:96:79:3f:45: a9:9e:3d:5b:7d:af:4e:90:5a:c6:18:49:f5:7e:63:16:29:d8: 56:64:20:62:b9:ed:b1:e4:52:85:01:0b:b5:56:aa:a1:63:cb: 23:2f:4d:5f:00:f3:1f:fa:42:aa:37:e3:bb:86:cd:ef:c7:f0: e1:67:ba:2e:dd:b1:50:1e:85:ef:fd:6c:8a:18:93:53:27:7d: e7:46:f6:68:95:11:8c:4e:59:9a:ca:5f:c4:f5:f3:27:e6:eb: 59:96:14:89:78:9d:4b:66:c1:4e:63:c6:00:02:df:c3:17:40: 03:0c:f8:b3:0e:08:ff:7c:33:4c:a6:fc:0c:be:a9:57:26:b1: 43:91:fc:3c:0f:fa:11:4b:ad:e9:64:7d:a4:e0:6a:ac:ff:4b: cc:b0:04:e0:fd:8d:40:98:22:c9:f1:1a:6e:33:78:10:53:ab: be:66:78:f3:5d:32:a4:53:43:cd:4b:89:0b:18:5c:8a:1e:6e: 11:10:71:39:c8:31:ce:05:27:50:6f:43:8e:87:de:4e:80:cf: 08:7d:62:57:d8:e1:57:be:e2:69:a4:27:33:3f:ca:46:c8:86: cc:c1:95:7e:09:c5:86:26:80:ca:80:48:78:6c:3b:9a:ed:3c: b3:47:0e:f2 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIULPkdJFypBPlH+I+D32778x0g+MswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYxMTAyMzMxMVoX DTI2MDYxMDAyMzgxMVowMzExMC8GA1UEAxMoREE2NkZEMURFNDVCMkFGQUVCMUJC MUVBMDE1RDJGNjRCREJCMzYxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANjboHMOYcKjDaZjoSbjj72a8SipzcOLyq0dXnZBbnWnuJ70zXBAR2RvZi1Y E+fdijHfSYNnc5VLxUUcAU/2tQz7vDirjylFyhnFtmS/sEcsIkfFKkSTqBekvCB3 MmiyNRWCGSMJnaLtefPRQa8D+PYy9FGvskLLnoSUjrA70Q+U/eykQaMh62fcB7PE PrPES+S62WaO5EoUmbxyxHKKwkK9m/4pq6SRsKtXYxvQjF3mPkF7MjV/J2uh4zKF WzXcHkb88kTN0H7oQwrxo0fVhBjxHbeXd8twmpK9dRP3h910kiTsj+VwJ0DrOTui VBYwD+GLK9+j0oZUcVRypFBfUjsCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBTaZv0d 5Fsq+usbseoBXS9kvbs2HDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1Mzg5NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAaPj+DAPBAIAAjAJAwcAIAEN9X9AMA0GCSqGSIb3DQEBCwUAA4IB AQBxFhWsIxPTpGiIjVLutJZ5P0Wpnj1bfa9OkFrGGEn1fmMWKdhWZCBiue2x5FKF AQu1VqqhY8sjL01fAPMf+kKqN+O7hs3vx/DhZ7ou3bFQHoXv/WyKGJNTJ33nRvZo lRGMTlmayl/E9fMn5utZlhSJeJ1LZsFOY8YAAt/DF0ADDPizDgj/fDNMpvwMvqlX JrFDkfw8D/oRS63pZH2k4Gqs/0vMsATg/Y1AmCLJ8RpuM3gQU6u+ZnjzXTKkU0PN S4kLGFyKHm4REHE5yDHOBSdQb0OOh95OgM8IfWJX2OFXvuJppCczP8pGyIbMwZV+ CcWGJoDKgEh4bDua7TyzRw7y -----END CERTIFICATE-----Generated at Mon Nov 3 19:33:20 2025 by rpki-client