$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153840.roa File: AS153840.roa (raw, json) Hash identifier: UFbSaKaCFDpijTxEh8rt/5I0JPtQDTIWn0bFank6m9s= Subject key identifier: 51:7F:6E:56:D4:3D:11:67:90:16:6D:68:07:0C:62:EB:26:C0:C8:28 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5F1363DEE9D3F5200827D1C0FCAA68EBFB955D36 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153840.roa Signing time: Tue 06 May 2025 03:30:01 +0000 ROA not before: Tue 06 May 2025 03:25:01 +0000 ROA not after: Tue 05 May 2026 03:30:01 +0000 asID: 153840 IP address blocks: 163.227.149.0/24 maxlen: 24 2001:df5:70c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 14:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:13:63:de:e9:d3:f5:20:08:27:d1:c0:fc:aa:68:eb:fb:95:5d:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 6 03:25:01 2025 GMT Not After : May 5 03:30:01 2026 GMT Subject: CN=517F6E56D43D116790166D68070C62EB26C0C828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e1:34:7e:c2:15:61:f0:7c:db:0a:86:d2:51: 40:f1:8a:7f:0f:1d:46:f9:64:54:dd:0b:04:1f:19: df:e6:2f:cf:a1:37:f5:cb:85:6c:3a:50:bb:d2:33: ed:16:88:21:40:98:c2:7b:e3:df:74:51:3d:77:df: 14:25:dc:db:12:d0:68:46:db:c8:b8:7c:82:9b:a3: 5d:87:85:98:d6:18:8f:d1:30:20:a4:a0:5b:93:d3: bb:27:cd:b4:61:67:8f:17:46:9f:54:bb:8c:1e:b7: 2d:84:58:26:7f:89:e2:24:67:de:ec:76:b5:b2:e0: d5:fc:cc:86:8a:82:6e:55:f0:3d:19:bd:dd:16:50: cf:ce:25:95:d8:90:4a:24:c3:0d:fa:71:92:36:49: 50:49:4c:f7:d0:7e:d1:3a:aa:d6:52:ea:02:33:ed: 68:13:72:1a:2e:a0:b8:85:9c:c5:b7:92:58:4b:64: 54:0c:cd:d6:74:08:a0:c9:04:aa:b4:3b:a4:5b:14: ea:cc:6a:b2:93:94:61:cb:e8:db:79:33:c6:e2:be: 8e:52:5c:d1:b1:93:01:64:8f:0b:5c:c3:44:cf:7a: 45:aa:a8:fc:52:8d:6a:8e:8f:7b:97:65:ed:e4:fa: 29:04:94:2e:b1:fc:3b:1f:2f:f8:eb:7f:ba:aa:7f: 51:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:7F:6E:56:D4:3D:11:67:90:16:6D:68:07:0C:62:EB:26:C0:C8:28 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153840.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.149.0/24 IPv6: 2001:df5:70c0::/48 Signature Algorithm: sha256WithRSAEncryption 93:4b:c4:98:96:30:eb:8c:17:39:a5:5d:b7:7f:79:db:a2:ad: b7:8d:5a:54:a9:56:65:7b:bb:ae:1d:83:2e:3c:5e:cc:93:10: 80:c0:16:bc:66:e2:cc:43:1d:1f:bf:05:54:c9:33:a0:07:c8: 01:ee:f8:8f:3c:7a:2e:72:b3:c0:9a:03:6e:30:25:90:34:0f: 85:c6:04:9c:75:ce:d6:a4:99:3a:87:28:36:47:08:50:72:49: 0e:73:81:b3:9e:ca:6e:d7:75:b4:3a:7b:ed:c2:c9:95:8a:79: b2:39:19:78:98:89:0f:d9:9a:24:47:86:fe:ac:8a:63:b0:15: 4d:95:10:b6:d4:81:64:8b:52:b1:2e:4d:03:16:68:f4:d6:bd: 9a:ef:09:b7:aa:dd:88:09:9f:fd:59:16:22:54:e3:bf:a0:09: ea:ca:35:74:1e:fe:ec:45:de:75:24:fe:b9:b9:0f:fe:52:89: 7b:17:55:e4:29:f5:6b:4d:0b:48:c7:a3:ff:38:9a:ee:b4:c2: e5:b1:c9:ac:f1:f3:8a:07:1b:53:35:7b:08:68:eb:b8:87:e2: ff:68:4c:f7:66:58:0c:d9:d1:61:02:49:5d:ab:fb:14:06:34: aa:80:67:2b:26:54:32:28:4d:1f:58:89:77:85:99:77:91:96: 64:75:63:4b -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUXxNj3unT9SAIJ9HA/Kpo6/uVXTYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUwNjAzMjUwMVoX DTI2MDUwNTAzMzAwMVowMzExMC8GA1UEAxMoNTE3RjZFNTZENDNEMTE2NzkwMTY2 RDY4MDcwQzYyRUIyNkMwQzgyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKnhNH7CFWHwfNsKhtJRQPGKfw8dRvlkVN0LBB8Z3+Yvz6E39cuFbDpQu9Iz 7RaIIUCYwnvj33RRPXffFCXc2xLQaEbbyLh8gpujXYeFmNYYj9EwIKSgW5PTuyfN tGFnjxdGn1S7jB63LYRYJn+J4iRn3ux2tbLg1fzMhoqCblXwPRm93RZQz84lldiQ SiTDDfpxkjZJUElM99B+0Tqq1lLqAjPtaBNyGi6guIWcxbeSWEtkVAzN1nQIoMkE qrQ7pFsU6sxqspOUYcvo23kzxuK+jlJc0bGTAWSPC1zDRM96Raqo/FKNao6Pe5dl 7eT6KQSULrH8Ox8v+Ot/uqp/USECAwEAAaOCAeEwggHdMB0GA1UdDgQWBBRRf25W 1D0RZ5AWbWgHDGLrJsDIKDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1Mzg0MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAKPjlTAPBAIAAjAJAwcAIAEN9XDAMA0GCSqGSIb3DQEBCwUAA4IB AQCTS8SYljDrjBc5pV23f3nboq23jVpUqVZle7uuHYMuPF7MkxCAwBa8ZuLMQx0f vwVUyTOgB8gB7viPPHoucrPAmgNuMCWQNA+FxgScdc7WpJk6hyg2RwhQckkOc4Gz nspu13W0OnvtwsmVinmyORl4mIkP2ZokR4b+rIpjsBVNlRC21IFki1KxLk0DFmj0 1r2a7wm3qt2ICZ/9WRYiVOO/oAnqyjV0Hv7sRd51JP65uQ/+Uol7F1XkKfVrTQtI x6P/OJrutMLlscms8fOKBxtTNXsIaOu4h+L/aEz3ZlgM2dFhAkldq/sUBjSqgGcr JlQyKE0fWIl3hZl3kZZkdWNL -----END CERTIFICATE-----Generated at Tue Oct 28 06:26:08 2025 by rpki-client