$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153718.roa File: AS153718.roa (raw, json) Hash identifier: NC9i1yp9xSyHPDcAtK2H7bFUwaSYRaMAExbEH/2Wq/E= Subject key identifier: 56:BE:32:08:39:38:68:63:3A:6C:4A:F8:C7:B0:E9:88:35:AE:5C:E3 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 23B3F470B31C545A4D9D961727AEDB33C3845DD8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153718.roa Signing time: Sun 18 May 2025 08:34:50 +0000 ROA not before: Sun 18 May 2025 08:29:50 +0000 ROA not after: Sun 17 May 2026 08:34:50 +0000 asID: 153718 IP address blocks: 163.223.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b3:f4:70:b3:1c:54:5a:4d:9d:96:17:27:ae:db:33:c3:84:5d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 18 08:29:50 2025 GMT Not After : May 17 08:34:50 2026 GMT Subject: CN=56BE3208393868633A6C4AF8C7B0E98835AE5CE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:07:be:a8:d6:dd:2e:35:1f:82:c4:2e:2e:66: 78:ae:54:a1:ed:b8:83:3e:f6:bf:25:92:a4:18:ab: 33:b8:3f:78:f7:a5:25:39:bb:8a:3d:ed:09:92:7d: 3f:a9:9f:5c:dd:2e:c8:d8:69:34:07:00:be:7a:72: 14:a3:7e:df:4b:b4:91:d7:cd:9c:79:eb:82:fd:ac: 3a:0f:52:0c:84:d2:ea:24:94:ed:75:ad:25:77:55: 85:a2:f7:6e:62:84:c1:fb:45:94:d4:4e:f0:38:6a: 5a:5f:17:25:76:39:af:a0:6e:89:09:40:3c:3c:a4: 01:68:c4:79:13:b1:ad:7d:0e:8a:9f:ce:29:41:66: 0d:bd:49:44:cf:6a:86:92:7a:bd:1e:4f:81:f0:06: fa:69:62:f7:97:95:16:2a:f6:86:93:cf:3e:ed:2e: 57:28:40:d0:a8:06:8e:9c:e6:23:a1:a0:67:4d:3a: e6:70:1e:8f:f9:bf:4a:de:b5:6a:21:9b:ba:37:d1: 12:22:7a:a4:9c:a3:05:fd:b3:80:f5:71:a2:3c:d2: ea:65:59:60:ad:c7:42:a5:c3:54:e2:0c:ce:d1:3a: 17:47:3d:c6:0d:0f:ad:32:6e:e7:4d:91:60:8a:08: ff:bf:a2:ea:03:d2:c7:b6:c2:fd:c0:cf:dd:38:dc: ec:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:BE:32:08:39:38:68:63:3A:6C:4A:F8:C7:B0:E9:88:35:AE:5C:E3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153718.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.223.55.0/24 Signature Algorithm: sha256WithRSAEncryption 68:5b:11:34:c1:55:70:a1:dc:75:d2:6f:75:21:39:72:2d:53: 3a:df:fb:76:46:db:9a:dd:2f:7c:5c:9a:be:a2:c7:3b:c1:71: fa:76:76:7a:39:b0:10:e6:25:b6:3b:48:0a:46:8f:42:d8:f8: 2e:38:0d:ec:66:95:70:9b:4a:ce:69:ae:0f:ce:4d:ca:8e:02: 77:6e:96:2d:6f:53:41:67:ce:71:d9:38:59:3f:3b:02:da:5f: 0e:f1:81:65:c3:a5:97:c4:c0:bd:54:44:1d:8c:af:3a:f4:a9: 2f:45:ee:ea:87:73:18:ba:a3:4c:50:12:bb:3a:38:7e:5d:65: bd:7f:f7:8f:45:e2:24:a7:08:35:67:90:a1:b4:61:be:c4:db: ba:20:d0:2a:8c:6e:7b:69:0d:88:52:84:55:a1:5b:d2:7e:89: d4:ac:a8:16:14:aa:17:0e:3e:57:38:e0:81:81:8a:12:40:73: 1d:e6:09:70:fc:57:e9:06:5c:db:ca:4c:4c:9b:24:53:97:85: 81:5f:4a:5f:78:4b:b6:32:e0:a8:08:7c:1b:e6:e7:da:24:18: 02:5b:be:7d:e9:f7:08:e4:7d:48:05:74:58:1a:42:2c:91:42: e9:cd:d9:fc:c3:4f:26:a5:ae:b0:52:14:d6:f3:f6:8e:8b:06: cd:15:bf:4b -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUI7P0cLMcVFpNnZYXJ67bM8OEXdgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUxODA4Mjk1MFoX DTI2MDUxNzA4MzQ1MFowMzExMC8GA1UEAxMoNTZCRTMyMDgzOTM4Njg2MzNBNkM0 QUY4QzdCMEU5ODgzNUFFNUNFMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM8HvqjW3S41H4LELi5meK5Uoe24gz72vyWSpBirM7g/ePelJTm7ij3tCZJ9 P6mfXN0uyNhpNAcAvnpyFKN+30u0kdfNnHnrgv2sOg9SDITS6iSU7XWtJXdVhaL3 bmKEwftFlNRO8DhqWl8XJXY5r6BuiQlAPDykAWjEeROxrX0Oip/OKUFmDb1JRM9q hpJ6vR5PgfAG+mli95eVFir2hpPPPu0uVyhA0KgGjpzmI6GgZ0065nAej/m/St61 aiGbujfREiJ6pJyjBf2zgPVxojzS6mVZYK3HQqXDVOIMztE6F0c9xg0PrTJu502R YIoI/7+i6gPSx7bC/cDP3Tjc7LUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRWvjII OThoYzpsSvjHsOmINa5c4zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzcxOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKPfNzANBgkqhkiG9w0BAQsFAAOCAQEAaFsRNMFVcKHcddJvdSE5 ci1TOt/7dkbbmt0vfFyavqLHO8Fx+nZ2ejmwEOYltjtICkaPQtj4LjgN7GaVcJtK zmmuD85Nyo4Cd26WLW9TQWfOcdk4WT87AtpfDvGBZcOll8TAvVREHYyvOvSpL0Xu 6odzGLqjTFASuzo4fl1lvX/3j0XiJKcINWeQobRhvsTbuiDQKoxue2kNiFKEVaFb 0n6J1KyoFhSqFw4+VzjggYGKEkBzHeYJcPxX6QZc28pMTJskU5eFgV9KX3hLtjLg qAh8G+bn2iQYAlu+fen3COR9SAV0WBpCLJFC6c3Z/MNPJqWusFIU1vP2josGzRW/ Sw== -----END CERTIFICATE-----Generated at Tue Jun 3 23:19:28 2025 by rpki-client