$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153888.roa File: AS153888.roa (raw, json) Hash identifier: JRqh7xJJwQiahXLWVNPyPashTrQQBGQzNpvkUbm3wdA= Subject key identifier: A2:55:D8:EC:BB:4A:8A:00:08:75:E5:45:59:AA:A2:BE:94:17:3A:36 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6FF7DC7ECB134F196B048C0E469898897D87EA2B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153888.roa Signing time: Fri 16 May 2025 07:14:59 +0000 ROA not before: Fri 16 May 2025 07:09:59 +0000 ROA not after: Fri 15 May 2026 07:14:59 +0000 asID: 153888 IP address blocks: 163.227.168.0/23 maxlen: 24 2001:df5:7540::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:f7:dc:7e:cb:13:4f:19:6b:04:8c:0e:46:98:98:89:7d:87:ea:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 16 07:09:59 2025 GMT Not After : May 15 07:14:59 2026 GMT Subject: CN=A255D8ECBB4A8A000875E54559AAA2BE94173A36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:52:76:9b:0c:19:9f:17:d7:e6:a4:2d:be:f2: 7c:ad:23:ca:00:ff:7a:e8:7f:57:0d:14:3a:70:db: 27:2c:4d:4a:ab:39:41:b3:1b:21:dd:54:2a:9f:b1: 2e:d5:e8:3c:30:96:54:1d:bf:e6:e8:3a:f2:af:32: c7:c6:7c:ca:d8:e2:b3:4c:00:b9:7b:f0:da:f9:6e: e3:ab:bd:31:43:f4:69:8e:7e:b7:ef:f3:3c:f8:a2: 83:c4:4c:8a:14:da:bb:85:02:73:be:06:9b:da:5b: 02:87:b0:b9:ba:55:34:dc:2c:46:97:d9:90:a0:b5: ba:6e:e2:d4:7b:e5:27:38:d2:28:f5:cc:c6:62:9e: a7:53:f8:9c:61:36:f3:fc:6b:2c:2c:69:3a:99:d4: 4a:c1:b2:1c:02:a8:bc:cb:bd:e8:57:4a:ba:b3:24: 45:a7:c9:2b:ee:cf:7a:df:3d:2c:1a:9e:d8:6a:25: f0:9c:e9:e9:07:6c:9b:f4:4c:75:f0:6a:96:49:7a: 64:6e:ad:33:0b:a4:88:c9:81:a8:d8:43:70:3e:0d: 91:54:42:76:91:17:02:f5:0b:49:83:e9:f7:a2:2b: 79:ad:e4:28:b3:3c:4f:f6:29:99:c5:ff:dd:45:f0: 75:78:bc:8e:dd:c5:94:48:27:09:d5:6c:8a:40:ff: de:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:55:D8:EC:BB:4A:8A:00:08:75:E5:45:59:AA:A2:BE:94:17:3A:36 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153888.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.168.0/23 IPv6: 2001:df5:7540::/48 Signature Algorithm: sha256WithRSAEncryption 48:46:5c:e1:28:9f:d0:8f:17:81:08:04:a3:01:9a:ef:2c:51: db:0b:e2:49:ee:62:69:3f:bf:be:ff:76:08:a3:bb:aa:eb:97: 96:5f:8f:31:7f:c4:f6:24:0a:45:b7:af:7d:e4:14:92:6b:1c: 17:ae:42:bf:c2:0c:97:e9:fb:b9:bd:75:19:ab:74:11:7e:51: 46:29:12:93:46:1e:4c:1f:13:11:d9:32:bc:79:df:58:4b:e7: 27:30:78:fe:6d:30:a3:b9:df:f4:d1:55:b3:2f:73:38:7e:91: 17:2b:4e:a9:09:ae:bb:73:73:bb:e3:3a:93:1f:1f:f8:77:59: 1c:ba:ad:e7:82:7e:02:cf:a4:f7:6a:92:97:d2:94:f8:e3:47: f4:12:c7:bb:6a:2e:e2:f9:a9:8b:61:47:55:e6:81:ef:33:d0: 55:f2:ff:fe:8d:fa:02:74:b4:4e:82:15:bf:13:f3:b0:61:0f: 7c:bc:b5:c8:0b:d0:e1:a3:ea:38:82:f5:86:84:c6:41:91:b2: 9a:ed:f4:b2:1b:e6:b3:d0:69:06:48:b7:a7:2b:3f:f7:d2:d6: 16:f6:20:53:d9:33:2a:0e:cb:20:91:f0:fa:82:fa:31:8d:0d: 75:4d:b2:38:6e:98:9a:49:b3:32:d6:84:79:a0:08:7f:4b:2b: 08:30:98:da -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUb/fcfssTTxlrBIwORpiYiX2H6iswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUxNjA3MDk1OVoX DTI2MDUxNTA3MTQ1OVowMzExMC8GA1UEAxMoQTI1NUQ4RUNCQjRBOEEwMDA4NzVF NTQ1NTlBQUEyQkU5NDE3M0EzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKRSdpsMGZ8X1+akLb7yfK0jygD/euh/Vw0UOnDbJyxNSqs5QbMbId1UKp+x LtXoPDCWVB2/5ug68q8yx8Z8ytjis0wAuXvw2vlu46u9MUP0aY5+t+/zPPiig8RM ihTau4UCc74Gm9pbAoewubpVNNwsRpfZkKC1um7i1HvlJzjSKPXMxmKep1P4nGE2 8/xrLCxpOpnUSsGyHAKovMu96FdKurMkRafJK+7Pet89LBqe2Gol8Jzp6Qdsm/RM dfBqlkl6ZG6tMwukiMmBqNhDcD4NkVRCdpEXAvULSYPp96Irea3kKLM8T/YpmcX/ 3UXwdXi8jt3FlEgnCdVsikD/3tkCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBSiVdjs u0qKAAh15UVZqqK+lBc6NjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1Mzg4OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAaPjqDAPBAIAAjAJAwcAIAEN9XVAMA0GCSqGSIb3DQEBCwUAA4IB AQBIRlzhKJ/QjxeBCASjAZrvLFHbC+JJ7mJpP7++/3YIo7uq65eWX48xf8T2JApF t6995BSSaxwXrkK/wgyX6fu5vXUZq3QRflFGKRKTRh5MHxMR2TK8ed9YS+cnMHj+ bTCjud/00VWzL3M4fpEXK06pCa67c3O74zqTHx/4d1kcuq3ngn4Cz6T3apKX0pT4 40f0Ese7ai7i+amLYUdV5oHvM9BV8v/+jfoCdLROghW/E/OwYQ98vLXIC9Dho+o4 gvWGhMZBkbKa7fSyG+az0GkGSLenKz/30tYW9iBT2TMqDssgkfD6gvoxjQ11TbI4 bpiaSbMy1oR5oAh/SysIMJja -----END CERTIFICATE-----Generated at Tue Jun 3 23:19:22 2025 by rpki-client