$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153904.roa File: AS153904.roa (raw, json) Hash identifier: 1+ZwqPnhZ+g+TfqRgaQtMCPBBV31PKBc+EG+vbPRIqE= Subject key identifier: A2:04:89:61:C5:F4:7A:CD:57:84:1F:6D:7D:3E:D8:CF:57:E2:D1:5F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 797054229E2372FBF398D758E7F285C06BA96896 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153904.roa Signing time: Wed 25 Feb 2026 07:26:14 +0000 ROA not before: Wed 25 Feb 2026 07:21:14 +0000 ROA not after: Wed 24 Feb 2027 07:26:14 +0000 asID: 153904 IP address blocks: 163.227.253.0/24 maxlen: 24 2001:df5:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:70:54:22:9e:23:72:fb:f3:98:d7:58:e7:f2:85:c0:6b:a9:68:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 25 07:21:14 2026 GMT Not After : Feb 24 07:26:14 2027 GMT Subject: CN=A2048961C5F47ACD57841F6D7D3ED8CF57E2D15F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0b:b2:bd:ca:27:c5:d0:54:fa:02:e7:b2:97: d6:91:9f:52:d9:5c:ed:ff:c0:62:de:b7:75:8f:75: 3f:29:7b:ef:ed:f5:0f:f3:03:8a:9c:87:3d:56:04: 79:b5:80:86:af:26:b8:7c:b3:7b:a5:60:11:ca:df: 43:ac:26:4e:e5:4e:7b:72:93:4a:2b:98:cf:4c:e9: bc:8f:75:5d:1d:e5:69:8a:72:2b:64:3d:ed:fd:6c: 74:f7:b8:d4:4a:a2:06:93:6c:81:31:1d:69:60:12: 93:5e:76:0b:d2:d6:b6:6b:6f:6f:55:ee:40:e6:09: 0c:d7:1a:d0:e6:36:ec:68:10:d3:85:17:8b:1b:cf: c6:d1:96:46:f6:49:87:33:74:47:30:18:93:94:d0: 2b:94:ce:86:80:8b:e3:53:de:ec:b7:a2:ff:cf:66: ba:15:84:bd:f3:0a:d9:a7:e0:de:a2:25:ec:2f:74: 1c:60:fb:be:10:3a:25:de:e1:8f:74:32:9d:b1:c2: 1f:40:fb:05:1e:db:ea:65:53:9a:eb:d7:fa:eb:3d: 03:fc:28:a7:c8:d9:30:64:d9:82:c0:6f:7a:1f:30: 7c:9d:7f:d7:c2:b5:89:c9:32:d9:32:68:bd:85:2c: e9:e9:8d:3f:98:4c:5d:0a:04:78:5b:e1:0c:32:94: 32:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:04:89:61:C5:F4:7A:CD:57:84:1F:6D:7D:3E:D8:CF:57:E2:D1:5F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153904.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.253.0/24 IPv6: 2001:df5:80c0::/48 Signature Algorithm: sha256WithRSAEncryption 7b:51:85:32:f4:fc:64:f5:2b:15:f3:d8:dd:e7:93:00:da:e1: f6:59:5f:76:d8:88:fe:23:94:ca:6d:b0:bd:24:eb:ec:dd:e1: 31:e3:59:85:42:27:c1:1d:c8:c8:ee:7a:72:ea:79:d0:6b:72: 83:fc:4c:e2:7d:b1:30:07:4c:a5:c8:3c:4d:a8:c0:4a:87:f7: 0c:8a:fa:18:f8:7b:e5:af:5f:5d:a9:26:60:f2:3b:ab:31:c7: a2:1b:d5:a4:27:fb:83:a4:8b:57:d7:45:a4:e4:e9:3e:54:30: 6c:a2:4a:58:d4:8a:e0:9b:10:d2:fa:1e:3d:42:06:f3:97:01: a3:2b:91:ca:c5:c7:e6:43:d6:3b:24:35:ae:66:bc:5f:8e:18: 47:59:91:f8:13:b6:c6:f9:98:41:9e:77:44:1b:b7:89:09:bb: cc:a1:8a:58:8d:57:c4:64:13:a1:f9:34:00:67:4a:17:9b:ff: bb:d6:10:29:a7:99:54:40:3b:c4:54:22:ab:0d:77:8a:33:30: 21:3d:b3:dc:0e:06:ee:d4:cd:2b:69:4a:b1:84:cb:9c:bf:76: 8e:0b:e6:01:71:d1:d4:6e:12:69:ac:69:77:2f:f0:66:e2:44: 9e:2b:11:27:0b:99:bb:12:96:cb:7a:42:ff:95:57:2d:21:99: 01:1f:95:72 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUeXBUIp4jcvvzmNdY5/KFwGupaJYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyNTA3MjExNFoX DTI3MDIyNDA3MjYxNFowMzExMC8GA1UEAxMoQTIwNDg5NjFDNUY0N0FDRDU3ODQx RjZEN0QzRUQ4Q0Y1N0UyRDE1RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0Lsr3KJ8XQVPoC57KX1pGfUtlc7f/AYt63dY91Pyl77+31D/MDipyHPVYE ebWAhq8muHyze6VgEcrfQ6wmTuVOe3KTSiuYz0zpvI91XR3laYpyK2Q97f1sdPe4 1EqiBpNsgTEdaWASk152C9LWtmtvb1XuQOYJDNca0OY27GgQ04UXixvPxtGWRvZJ hzN0RzAYk5TQK5TOhoCL41Pe7Lei/89muhWEvfMK2afg3qIl7C90HGD7vhA6Jd7h j3QynbHCH0D7BR7b6mVTmuvX+us9A/wop8jZMGTZgsBveh8wfJ1/18K1icky2TJo vYUs6emNP5hMXQoEeFvhDDKUMtcCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBSiBIlh xfR6zVeEH219PtjPV+LRXzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzkwNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAKPj/TAPBAIAAjAJAwcAIAEN9YDAMA0GCSqGSIb3DQEBCwUAA4IB AQB7UYUy9Pxk9SsV89jd55MA2uH2WV922Ij+I5TKbbC9JOvs3eEx41mFQifBHcjI 7npy6nnQa3KD/EzifbEwB0ylyDxNqMBKh/cMivoY+Hvlr19dqSZg8jurMceiG9Wk J/uDpItX10Wk5Ok+VDBsokpY1IrgmxDS+h49QgbzlwGjK5HKxcfmQ9Y7JDWuZrxf jhhHWZH4E7bG+ZhBnndEG7eJCbvMoYpYjVfEZBOh+TQAZ0oXm/+71hApp5lUQDvE VCKrDXeKMzAhPbPcDgbu1M0raUqxhMucv3aOC+YBcdHUbhJprGl3L/Bm4kSeKxEn C5m7EpbLekL/lVctIZkBH5Vy -----END CERTIFICATE-----Generated at Mon Mar 2 14:56:36 2026 by rpki-client