$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153835.roa File: AS153835.roa (raw, json) Hash identifier: 00Ge/emVwe5AJRxdWlffp0XQj331U2rEIuBIVccom78= Subject key identifier: 24:65:10:50:7A:61:C5:E3:C7:C9:5A:BF:BD:01:92:71:04:77:CD:55 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0ECE2A38E7C47F2CEBA1EDEDA18D963FE89E9C34 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153835.roa Signing time: Tue 27 May 2025 03:18:34 +0000 ROA not before: Tue 27 May 2025 03:13:34 +0000 ROA not after: Tue 26 May 2026 03:18:34 +0000 asID: 153835 IP address blocks: 163.227.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ce:2a:38:e7:c4:7f:2c:eb:a1:ed:ed:a1:8d:96:3f:e8:9e:9c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 27 03:13:34 2025 GMT Not After : May 26 03:18:34 2026 GMT Subject: CN=246510507A61C5E3C7C95ABFBD0192710477CD55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5d:bb:14:26:81:8d:7b:52:62:ad:e4:c0:3d: 99:92:bc:e3:ae:7b:67:c8:bd:61:ea:0b:02:c4:0e: ce:78:c1:c3:13:28:12:cc:cc:bc:69:75:72:fb:90: c7:ce:de:f5:f6:ad:9d:1b:81:1a:ef:a7:57:e1:69: bf:c3:6c:d2:32:f9:b8:72:a1:ca:bd:32:a4:75:43: fe:c0:be:9f:1b:41:b7:3f:1f:ce:0f:8f:fd:84:40: f8:e1:a5:8d:c7:19:3c:c8:e9:96:6b:aa:be:97:a3: 55:a3:ca:8e:ef:68:a5:ad:8a:8c:29:e8:f0:b5:96: 80:d2:01:d1:3b:59:da:36:5f:6c:dd:d8:7a:db:3e: b6:f1:aa:bc:74:da:9a:0a:ca:39:33:2f:89:d3:58: 6f:4d:93:aa:e1:0a:f0:4e:6a:9e:0f:53:ae:7b:ef: cc:a6:50:c1:84:f1:e0:d9:49:a9:74:10:de:0d:d4: 60:2b:0f:80:f5:2e:ea:44:e3:a6:8a:de:07:f0:7b: fc:ef:64:a3:1c:e9:30:c5:1c:e4:03:2b:2b:da:eb: 43:78:73:ca:da:57:0f:b6:d1:e8:a7:c3:2c:fd:40: b1:f4:9d:00:5a:73:86:fb:ab:5e:a1:ed:ca:4d:1d: ed:41:f1:dd:93:32:10:81:4f:91:2a:73:ba:3a:18: 7d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:65:10:50:7A:61:C5:E3:C7:C9:5A:BF:BD:01:92:71:04:77:CD:55 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.113.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:0c:14:5f:17:e9:13:87:2a:f6:32:d3:94:0c:90:d7:71:19: bb:7e:33:54:fb:ae:6f:61:c2:08:a3:c9:ef:0a:84:91:42:fb: 76:14:a2:c4:31:8a:2b:3b:0e:7c:41:54:62:18:11:1a:d7:0e: ce:02:7a:21:24:24:b9:5b:6f:52:2d:69:a9:13:db:d8:83:e7: 04:a8:8c:08:ae:f4:04:2a:40:38:bb:13:f8:0b:a7:6e:9c:c0: 8c:ca:57:a4:7b:f7:fd:12:b3:05:ad:a0:95:56:40:ae:b2:92: 5b:94:16:41:80:8c:3f:8e:0b:49:2a:f7:83:bb:3b:ce:94:4e: 24:8d:94:5a:65:8a:ea:07:df:47:6b:c4:b2:1c:a9:96:c8:96: bc:07:2c:2a:dc:a0:13:86:19:c0:16:42:71:8c:7e:25:13:13: c4:81:97:9a:48:a9:36:f7:0c:b6:97:de:a5:95:7b:15:23:6a: 0b:da:82:c3:fb:2f:9b:97:02:0b:97:a3:5e:a1:80:9d:05:47: 16:29:47:a3:0e:28:40:1e:b2:0f:42:5d:6a:b0:5a:cd:eb:b5: 0c:29:f6:4a:8b:8d:9a:c4:59:c6:d8:8d:98:44:c2:c3:db:75: 6d:e0:a5:b2:c2:ab:1d:8f:d5:d2:63:fa:d1:70:f5:13:7b:e5: a4:5c:98:56 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUDs4qOOfEfyzroe3toY2WP+ienDQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUyNzAzMTMzNFoX DTI2MDUyNjAzMTgzNFowMzExMC8GA1UEAxMoMjQ2NTEwNTA3QTYxQzVFM0M3Qzk1 QUJGQkQwMTkyNzEwNDc3Q0Q1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOBduxQmgY17UmKt5MA9mZK84657Z8i9YeoLAsQOznjBwxMoEszMvGl1cvuQ x87e9fatnRuBGu+nV+Fpv8Ns0jL5uHKhyr0ypHVD/sC+nxtBtz8fzg+P/YRA+OGl jccZPMjplmuqvpejVaPKju9opa2KjCno8LWWgNIB0TtZ2jZfbN3Yets+tvGqvHTa mgrKOTMvidNYb02TquEK8E5qng9TrnvvzKZQwYTx4NlJqXQQ3g3UYCsPgPUu6kTj poreB/B7/O9koxzpMMUc5AMrK9rrQ3hzytpXD7bR6KfDLP1AsfSdAFpzhvurXqHt yk0d7UHx3ZMyEIFPkSpzujoYfR0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQkZRBQ emHF48fJWr+9AZJxBHfNVTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzgzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKPjcTANBgkqhkiG9w0BAQsFAAOCAQEADgwUXxfpE4cq9jLTlAyQ 13EZu34zVPuub2HCCKPJ7wqEkUL7dhSixDGKKzsOfEFUYhgRGtcOzgJ6ISQkuVtv Ui1pqRPb2IPnBKiMCK70BCpAOLsT+AunbpzAjMpXpHv3/RKzBa2glVZArrKSW5QW QYCMP44LSSr3g7s7zpROJI2UWmWK6gffR2vEshyplsiWvAcsKtygE4YZwBZCcYx+ JRMTxIGXmkipNvcMtpfepZV7FSNqC9qCw/svm5cCC5ejXqGAnQVHFilHow4oQB6y D0JdarBazeu1DCn2SouNmsRZxtiNmETCw9t1beClssKrHY/V0mP60XD1E3vlpFyY Vg== -----END CERTIFICATE-----Generated at Tue Jun 3 23:14:04 2025 by rpki-client