$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153825.roa File: AS153825.roa (raw, json) Hash identifier: zXKGi89R3pjb7UCgAHj6ZoTq5Oi43Tl5eTjsIeaUlzw= Subject key identifier: BB:AA:91:3B:F7:1B:A3:3F:0E:49:57:CE:AD:BC:2E:75:B4:A5:D2:11 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 22BDA8DB3E35880C963604A8D86367D602C597 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153825.roa Signing time: Mon 19 May 2025 02:39:09 +0000 ROA not before: Mon 19 May 2025 02:34:09 +0000 ROA not after: Mon 18 May 2026 02:39:09 +0000 asID: 153825 IP address blocks: 163.223.185.0/24 maxlen: 24 2001:df5:4940::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:bd:a8:db:3e:35:88:0c:96:36:04:a8:d8:63:67:d6:02:c5:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 19 02:34:09 2025 GMT Not After : May 18 02:39:09 2026 GMT Subject: CN=BBAA913BF71BA33F0E4957CEADBC2E75B4A5D211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ea:ac:89:65:c4:5d:70:76:c7:f7:d8:44:11: 3b:12:9f:9d:e3:37:79:0e:c9:41:27:76:df:d8:e6: 75:99:e9:21:34:b8:59:b2:3f:b8:3a:81:c2:ae:6a: 6d:85:f4:93:0d:b0:f6:c5:38:22:5e:d4:e5:7d:2a: ae:38:65:15:34:aa:83:37:56:db:06:f0:8f:76:87: c0:25:ce:5c:3c:9c:cc:28:95:ce:d3:c2:2f:92:0d: c8:ba:bf:70:8d:da:06:be:47:c7:7e:03:33:1f:56: af:d4:2b:64:31:1b:99:22:2d:74:0c:1b:eb:60:22: ba:f9:53:56:12:e5:cc:71:7e:f9:c8:64:44:1b:8a: 76:a9:d1:a4:cf:02:cd:7a:b3:9e:f6:ad:15:e8:65: fc:8d:40:7e:7c:bb:9c:a0:08:3a:bd:94:3d:96:5b: be:b0:aa:35:97:89:fc:9e:8e:0b:f6:9d:23:b1:e4: 28:17:c0:cb:ad:98:4a:99:05:71:bc:3f:1c:51:8e: 32:49:e5:ab:b0:38:8d:e8:fb:97:da:a0:01:90:d7: 9c:57:d4:be:06:70:06:71:1b:e7:6d:5a:ad:51:3e: e4:ef:0f:7e:fd:48:9d:a5:e3:88:98:47:ab:c7:00: 99:67:8b:d9:66:4a:ad:a8:78:6c:32:a1:a6:26:f3: 4c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AA:91:3B:F7:1B:A3:3F:0E:49:57:CE:AD:BC:2E:75:B4:A5:D2:11 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153825.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.223.185.0/24 IPv6: 2001:df5:4940::/48 Signature Algorithm: sha256WithRSAEncryption 40:f9:cb:2a:f6:19:d4:58:00:75:6a:3c:f7:de:d4:a0:e7:ae: c2:ff:0c:d0:7c:64:51:ed:52:a5:cb:bc:62:32:3c:17:5e:df: 05:7d:d0:6d:12:bf:4f:59:61:cc:d4:9f:f3:db:5d:87:e5:6c: 4b:31:98:f9:e7:e6:12:81:a4:1e:76:4b:f6:f6:6f:d9:f8:af: 6b:ad:74:98:6e:85:23:53:f9:1c:cf:56:7e:eb:de:e1:c5:32: 6e:7f:8a:5a:01:4c:92:48:0a:f1:ba:56:d8:60:de:a6:29:80: dc:80:31:3a:aa:c7:fb:f6:87:fe:0d:e7:3a:f6:dd:8b:fa:77: 75:b7:dd:ce:6b:1b:3b:e8:ee:26:a5:d3:eb:16:a6:3d:a9:de: 0e:0e:8b:9f:42:d2:2e:b7:cf:35:46:54:5b:14:a2:ec:cd:05: 2e:8c:29:a5:03:43:46:95:17:a5:c6:05:72:b9:d4:1c:26:ee: bb:eb:75:f9:0a:57:0f:fc:5a:8f:b6:30:81:65:1d:3b:33:1f: 41:ef:d1:f0:bc:0c:fc:17:9f:79:47:c5:7e:5f:d0:27:70:01: b9:62:e2:42:b5:b7:6f:68:8f:2c:90:6b:b1:09:ef:4f:75:aa: 4f:0e:e0:33:81:19:05:a1:4e:d5:7f:18:b7:36:5e:d7:93:d0: 5e:f9:6e:4c -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgITIr2o2z41iAyWNgSo2GNn1gLFlzANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKEJBOEY3N0QyMUU1 OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIwHhcNMjUwNTE5MDIzNDA5WhcN MjYwNTE4MDIzOTA5WjAzMTEwLwYDVQQDEyhCQkFBOTEzQkY3MUJBMzNGMEU0OTU3 Q0VBREJDMkU3NUI0QTVEMjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+qsiWXEXXB2x/fYRBE7Ep+d4zd5DslBJ3bf2OZ1mekhNLhZsj+4OoHCrmpt hfSTDbD2xTgiXtTlfSquOGUVNKqDN1bbBvCPdofAJc5cPJzMKJXO08Ivkg3Iur9w jdoGvkfHfgMzH1av1CtkMRuZIi10DBvrYCK6+VNWEuXMcX75yGREG4p2qdGkzwLN erOe9q0V6GX8jUB+fLucoAg6vZQ9llu+sKo1l4n8no4L9p0jseQoF8DLrZhKmQVx vD8cUY4ySeWrsDiN6PuX2qABkNecV9S+BnAGcRvnbVqtUT7k7w9+/UidpeOImEer xwCZZ4vZZkqtqHhsMqGmJvNMdQIDAQABo4IB4TCCAd0wHQYDVR0OBBYEFLuqkTv3 G6M/DklXzq28LnW0pdIRMB8GA1UdIwQYMBaAFLqPd9IeWP6ck5prcOJYVhfhgzdr MA4GA1UdDwEB/wQEAwIHgDBpBgNVHR8EYjBgMF6gXKBahlhyc3luYzovL3JlcG8t cnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0JBOEY3N0QyMUU1OEZFOUM5 MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggr BgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdF RjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3VvOTMwaDVZX3B5VG1tdHc0bGhX Ri1HRE4ycy5jZXIwVAYIKwYBBQUHAQsESDBGMEQGCCsGAQUFBzALhjhyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FTMTUzODI1LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAo9+5MA8EAgACMAkDBwAgAQ31SUAwDQYJKoZIhvcNAQELBQADggEB AED5yyr2GdRYAHVqPPfe1KDnrsL/DNB8ZFHtUqXLvGIyPBde3wV90G0Sv09ZYczU n/PbXYflbEsxmPnn5hKBpB52S/b2b9n4r2utdJhuhSNT+RzPVn7r3uHFMm5/iloB TJJICvG6Vthg3qYpgNyAMTqqx/v2h/4N5zr23Yv6d3W33c5rGzvo7ial0+sWpj2p 3g4Oi59C0i63zzVGVFsUouzNBS6MKaUDQ0aVF6XGBXK51Bwm7rvrdfkKVw/8Wo+2 MIFlHTszH0Hv0fC8DPwXn3lHxX5f0CdwAbli4kK1t29ojyyQa7EJ7091qk8O4DOB GQWhTtV/GLc2XteT0F75bkw= -----END CERTIFICATE-----Generated at Tue Jun 3 23:15:00 2025 by rpki-client