$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153858.roa File: AS153858.roa (raw, json) Hash identifier: 2JsjdBTr1oBYvVbejyhiikc9m/RTrhRtd/jGPYVkFcA= Subject key identifier: E6:18:D5:88:91:B0:1E:FF:23:99:BF:32:A3:02:24:08:CB:E8:C2:A3 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 237BDF79B0CD6664F01555DA2A45DD3DAB20CD1F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153858.roa Signing time: Tue 27 May 2025 06:03:06 +0000 ROA not before: Tue 27 May 2025 05:58:06 +0000 ROA not after: Tue 26 May 2026 06:03:06 +0000 asID: 153858 IP address blocks: 163.227.176.0/24 maxlen: 24 2001:df5:7640::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:7b:df:79:b0:cd:66:64:f0:15:55:da:2a:45:dd:3d:ab:20:cd:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 27 05:58:06 2025 GMT Not After : May 26 06:03:06 2026 GMT Subject: CN=E618D58891B01EFF2399BF32A3022408CBE8C2A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:39:bb:08:cf:0f:9a:20:d9:57:4a:5c:67:a1: e2:b6:0b:af:bc:f6:c1:fa:59:6b:4c:42:ce:b4:e1: da:77:46:c7:f8:49:a9:62:9c:a8:7f:16:e4:04:34: 82:41:00:74:e0:c3:0a:57:a8:41:e9:4f:7b:70:06: 87:77:4e:e2:8f:ba:e0:cb:74:c2:62:35:cd:f4:19: 30:4c:56:da:c3:3c:de:93:78:79:73:60:cd:db:48: cc:43:a1:5f:81:9a:cb:f8:63:ae:01:ce:94:d7:5a: f7:f6:ee:a8:ff:d5:5e:9f:48:f7:5c:5d:49:e3:80: a5:51:58:1e:c7:4a:c7:c2:b8:63:e7:cb:01:1d:47: 24:3e:5f:c2:7b:a0:d1:14:c6:ff:e8:17:1a:0e:b2: b6:93:57:47:2e:02:5e:29:59:1e:79:d3:11:73:8a: 28:00:0c:14:18:79:50:47:40:a4:1c:7c:97:20:68: 44:ee:f0:f5:61:30:6c:a8:58:7b:e3:51:35:c4:c2: 08:42:a4:16:22:0e:39:2e:0e:5d:d4:10:10:ad:06: bd:2f:ce:72:a4:04:a6:81:0e:54:59:6d:8c:78:6a: ad:33:c1:aa:77:30:52:f7:ef:7e:2a:57:a4:b2:ec: f8:59:8b:aa:f2:e4:c9:34:d3:61:4c:61:8d:08:2a: 3c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:18:D5:88:91:B0:1E:FF:23:99:BF:32:A3:02:24:08:CB:E8:C2:A3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153858.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.176.0/24 IPv6: 2001:df5:7640::/48 Signature Algorithm: sha256WithRSAEncryption 5a:a0:a9:65:24:b8:66:e3:4b:9b:23:ed:d2:43:dc:2b:ec:be: 6c:22:2d:26:be:05:56:9d:1a:8a:86:39:bd:bb:a5:8c:ac:25: dd:b5:3a:3c:e2:fb:4c:0c:ff:d1:5c:5e:cc:d7:52:64:d2:8f: 31:19:f4:a2:62:55:2e:f1:bb:9d:7d:d7:6e:86:52:56:5f:8d: 66:48:c4:2e:77:99:13:b0:7b:ce:12:16:4a:08:fa:d6:b3:2c: 0a:73:36:e9:a7:f7:c5:3f:3b:86:87:14:a3:33:91:5e:58:33: 1c:81:d8:dd:5a:cf:39:1a:b9:b4:47:e9:d5:1a:3c:b5:9b:ba: 2e:9d:cd:63:b4:03:bb:f9:ca:ef:5b:71:e5:e4:57:a4:5e:bb: cc:7e:5d:6f:b9:cf:8a:f9:95:76:91:4f:10:7d:ca:bc:65:b5: e6:57:99:22:85:1b:fe:0f:ce:ad:ef:43:73:b2:45:3b:bb:56: ec:16:cc:bc:39:c7:2b:b5:7f:72:86:0e:9b:05:20:90:9e:5f: ba:4b:e9:da:91:e5:ae:20:77:64:7a:5e:cb:af:a1:d9:6f:ae: 79:ad:22:8e:c8:d8:d8:b6:c8:bd:dd:36:c9:63:46:8a:c7:d8: d8:85:46:d4:9f:79:11:27:51:c8:54:d4:b0:8f:eb:f9:e2:a1: 86:47:44:50 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUI3vfebDNZmTwFVXaKkXdPasgzR8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUyNzA1NTgwNloX DTI2MDUyNjA2MDMwNlowMzExMC8GA1UEAxMoRTYxOEQ1ODg5MUIwMUVGRjIzOTlC RjMyQTMwMjI0MDhDQkU4QzJBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOY5uwjPD5og2VdKXGeh4rYLr7z2wfpZa0xCzrTh2ndGx/hJqWKcqH8W5AQ0 gkEAdODDCleoQelPe3AGh3dO4o+64Mt0wmI1zfQZMExW2sM83pN4eXNgzdtIzEOh X4Gay/hjrgHOlNda9/buqP/VXp9I91xdSeOApVFYHsdKx8K4Y+fLAR1HJD5fwnug 0RTG/+gXGg6ytpNXRy4CXilZHnnTEXOKKAAMFBh5UEdApBx8lyBoRO7w9WEwbKhY e+NRNcTCCEKkFiIOOS4OXdQQEK0GvS/OcqQEpoEOVFltjHhqrTPBqncwUvfvfipX pLLs+FmLqvLkyTTTYUxhjQgqPB0CAwEAAaOCAeEwggHdMB0GA1UdDgQWBBTmGNWI kbAe/yOZvzKjAiQIy+jCozAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1Mzg1OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAKPjsDAPBAIAAjAJAwcAIAEN9XZAMA0GCSqGSIb3DQEBCwUAA4IB AQBaoKllJLhm40ubI+3SQ9wr7L5sIi0mvgVWnRqKhjm9u6WMrCXdtTo84vtMDP/R XF7M11Jk0o8xGfSiYlUu8budfdduhlJWX41mSMQud5kTsHvOEhZKCPrWsywKczbp p/fFPzuGhxSjM5FeWDMcgdjdWs85Grm0R+nVGjy1m7ounc1jtAO7+crvW3Hl5Fek XrvMfl1vuc+K+ZV2kU8Qfcq8ZbXmV5kihRv+D86t70NzskU7u1bsFsy8OccrtX9y hg6bBSCQnl+6S+nakeWuIHdkel7Lr6HZb655rSKOyNjYtsi93TbJY0aKx9jYhUbU n3kRJ1HIVNSwj+v54qGGR0RQ -----END CERTIFICATE-----Generated at Tue Jun 3 23:14:48 2025 by rpki-client