$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153559.roa File: AS153559.roa (raw, json) Hash identifier: e5fSxteB63p+QZJPqUkDdGIWV3udcwDn7zVR7tUPXfo= Subject key identifier: F5:51:1E:86:A0:57:E9:41:94:7D:81:3E:37:80:92:3A:BE:9B:9A:D6 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 261669EB2F12E512A137ECA2695A20616B253945 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153559.roa Signing time: Fri 07 Mar 2025 01:47:25 +0000 ROA not before: Fri 07 Mar 2025 01:42:25 +0000 ROA not after: Fri 06 Mar 2026 01:47:25 +0000 asID: 153559 IP address blocks: 163.47.46.0/24 maxlen: 24 2001:df4:fec0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:16:69:eb:2f:12:e5:12:a1:37:ec:a2:69:5a:20:61:6b:25:39:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 7 01:42:25 2025 GMT Not After : Mar 6 01:47:25 2026 GMT Subject: CN=F5511E86A057E941947D813E3780923ABE9B9AD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1c:0d:75:a2:ba:b3:de:5e:c9:87:45:f4:d5: 38:f4:45:f1:39:15:3f:d0:2d:c2:04:32:55:d4:35: 1c:20:f1:25:4c:52:d6:e2:61:30:92:26:56:ce:db: 60:27:06:d9:03:51:52:d1:d8:b9:5a:df:df:a7:15: 56:c7:dd:ee:00:fe:21:66:62:d1:63:3b:16:06:a9: 80:2c:13:98:0d:34:aa:83:5f:9c:d1:70:ec:cb:4a: bd:0d:62:6b:59:39:73:01:13:93:c3:60:7b:e3:7f: 02:c8:1c:9f:96:f7:a4:cd:48:7b:4b:29:e0:70:c6: c7:7c:da:7f:e2:98:8a:79:c1:b6:4e:f8:5d:59:c0: b0:65:6f:30:5d:81:8a:98:ec:7c:80:16:7f:80:cb: 2b:e1:25:e6:08:87:18:ce:55:3f:33:90:cd:de:f2: ba:4a:73:23:44:55:e9:b6:24:dd:df:b9:71:93:d6: 3f:dc:ae:aa:d1:fa:26:be:f6:1e:b6:ea:ed:55:38: b5:be:7b:f7:de:89:3a:6e:17:a9:6b:e6:f9:bb:2a: ae:d4:33:5d:5c:11:9f:d9:a8:ec:51:0c:85:3c:b2: 4c:ee:7a:1a:a4:9b:35:48:e1:f4:2a:5c:b6:14:8b: 66:71:de:e8:94:bd:1a:2d:0c:2e:0d:26:50:ff:e9: b9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:51:1E:86:A0:57:E9:41:94:7D:81:3E:37:80:92:3A:BE:9B:9A:D6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153559.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.47.46.0/24 IPv6: 2001:df4:fec0::/48 Signature Algorithm: sha256WithRSAEncryption 28:68:10:ba:c4:34:7a:4d:df:80:46:8c:be:80:30:07:45:3b: c0:80:2d:e5:e5:06:fc:01:72:3b:8f:a7:0e:bd:5d:e8:05:2f: 67:4e:97:73:b3:80:62:29:e6:f5:bf:43:81:d6:9b:e4:8a:0b: 4f:b8:32:a4:dc:f0:8a:9b:5c:de:9a:a7:5d:65:df:16:98:a6: 2f:66:77:66:f0:c2:8c:b3:a8:02:d9:2e:e8:25:42:8a:46:b5: e3:ae:91:a2:b4:d6:65:f1:95:d5:6c:a2:65:77:c0:e2:ab:e1: e4:ec:c5:a2:12:01:da:cc:d0:db:12:63:42:cc:ae:54:1e:45: aa:ae:d1:06:6d:90:e0:37:bb:15:05:ac:0e:9e:5f:96:9a:26: d8:f3:4d:bc:a1:87:e1:2e:65:70:41:55:e2:20:19:b7:61:df: 75:c3:57:68:04:52:0e:b3:41:90:e9:e4:01:f8:c7:92:56:03: e3:24:c4:b9:16:17:e3:45:f9:a9:ae:a9:92:c9:b9:d7:7c:15: 59:ec:b0:0e:0e:48:b7:2a:48:54:2b:71:10:cb:fd:03:f1:0b: 3f:79:ce:02:a6:a8:49:38:ca:b9:0a:b5:a1:bf:d3:b3:01:34: c4:2f:c6:89:0e:04:ef:3c:d5:48:43:f0:c2:e9:87:8a:ad:4d: 29:1d:32:47 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUJhZp6y8S5RKhN+yiaVogYWslOUUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMwNzAxNDIyNVoX DTI2MDMwNjAxNDcyNVowMzExMC8GA1UEAxMoRjU1MTFFODZBMDU3RTk0MTk0N0Q4 MTNFMzc4MDkyM0FCRTlCOUFENjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALAcDXWiurPeXsmHRfTVOPRF8TkVP9AtwgQyVdQ1HCDxJUxS1uJhMJImVs7b YCcG2QNRUtHYuVrf36cVVsfd7gD+IWZi0WM7FgapgCwTmA00qoNfnNFw7MtKvQ1i a1k5cwETk8Nge+N/Asgcn5b3pM1Ie0sp4HDGx3zaf+KYinnBtk74XVnAsGVvMF2B ipjsfIAWf4DLK+El5giHGM5VPzOQzd7yukpzI0RV6bYk3d+5cZPWP9yuqtH6Jr72 Hrbq7VU4tb57996JOm4XqWvm+bsqrtQzXVwRn9mo7FEMhTyyTO56GqSbNUjh9Cpc thSLZnHe6JS9Gi0MLg0mUP/pubkCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBT1UR6G oFfpQZR9gT43gJI6vpua1jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzU1OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAKMvLjAPBAIAAjAJAwcAIAEN9P7AMA0GCSqGSIb3DQEBCwUAA4IB AQAoaBC6xDR6Td+ARoy+gDAHRTvAgC3l5Qb8AXI7j6cOvV3oBS9nTpdzs4BiKeb1 v0OB1pvkigtPuDKk3PCKm1zemqddZd8WmKYvZndm8MKMs6gC2S7oJUKKRrXjrpGi tNZl8ZXVbKJld8Diq+Hk7MWiEgHazNDbEmNCzK5UHkWqrtEGbZDgN7sVBawOnl+W mibY8028oYfhLmVwQVXiIBm3Yd91w1doBFIOs0GQ6eQB+MeSVgPjJMS5FhfjRfmp rqmSybnXfBVZ7LAODki3KkhUK3EQy/0D8Qs/ec4CpqhJOMq5CrWhv9OzATTEL8aJ DgTvPNVIQ/DC6YeKrU0pHTJH -----END CERTIFICATE-----Generated at Tue Jun 3 23:11:27 2025 by rpki-client