$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153697.roa File: AS153697.roa (raw, json) Hash identifier: ShwAWzGi4abf3p1EfCxT/tWuVrr4KVmZ6k3NfXOTV0E= Subject key identifier: 0C:E0:3B:FB:3C:3D:F5:FD:D2:AC:25:46:D6:B4:4B:D8:A4:7A:90:D3 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3E7AC8A5A86B38D63B9AF1E04786BCB6B4CD663E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153697.roa Signing time: Sat 02 May 2026 09:24:34 +0000 ROA not before: Sat 02 May 2026 09:19:34 +0000 ROA not after: Sat 01 May 2027 09:24:34 +0000 asID: 153697 IP address blocks: 163.223.78.0/23 maxlen: 24 2001:df5:37c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:7a:c8:a5:a8:6b:38:d6:3b:9a:f1:e0:47:86:bc:b6:b4:cd:66:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:19:34 2026 GMT Not After : May 1 09:24:34 2027 GMT Subject: CN=0CE03BFB3C3DF5FDD2AC2546D6B44BD8A47A90D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d0:83:3c:53:01:f8:52:3a:19:78:73:15:bb: 88:b8:ff:e6:f3:d8:68:3b:f6:df:e7:c9:9d:21:b9: 05:44:a4:ed:10:59:0f:89:dd:b1:a1:c4:a0:43:58: a5:dd:d0:c4:85:17:11:9c:59:47:4b:d1:cf:ee:ad: 0f:7e:78:9b:c8:d8:2b:c2:87:34:9d:79:46:da:73: 8b:e1:29:a9:bb:26:40:a2:68:27:bd:f5:81:b4:d1: 30:ea:28:92:fb:05:47:1a:8a:47:32:94:4c:f2:8b: 6a:48:67:d6:fd:11:83:d3:ea:a9:3f:ac:45:5f:3f: 75:2b:bb:c8:8c:d2:9b:12:df:fb:4d:a6:3c:6c:3a: ed:c8:06:e3:fe:30:a5:42:7e:64:e8:d9:c9:58:11: 8d:82:cd:cc:dc:c0:04:c2:c6:88:42:f8:ef:ca:b4: 84:b8:3c:fa:1d:24:8a:c4:02:60:da:83:d9:12:85: 64:b4:78:65:d8:2a:81:9f:18:d1:5f:30:f1:68:62: 0a:16:f0:ab:81:7c:2c:48:79:e9:5d:63:85:5f:25: 7c:a1:dc:5b:85:31:af:18:39:8c:16:21:d7:d9:59: 87:6b:5e:61:31:4d:2a:9c:20:ec:3b:62:f6:9d:cb: 36:22:71:db:92:c2:2d:76:0d:86:99:98:d9:7d:3e: 50:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E0:3B:FB:3C:3D:F5:FD:D2:AC:25:46:D6:B4:4B:D8:A4:7A:90:D3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153697.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.223.78.0/23 IPv6: 2001:df5:37c0::/48 Signature Algorithm: sha256WithRSAEncryption 48:d9:04:43:73:15:93:72:75:0e:15:e3:ac:6e:48:73:90:47: d2:69:f4:0f:53:d1:14:12:5c:4c:4f:fb:a3:0d:fd:99:4d:3d: 8f:1f:30:42:f6:80:80:51:d3:3a:62:06:7c:79:ad:b2:2e:5c: ed:75:43:9e:00:c0:d5:5b:0e:dd:4d:08:59:71:45:8d:ab:cc: 94:f6:17:a1:0a:15:bc:8b:d6:93:dd:af:84:e2:b4:7b:0f:42: 6a:ac:d5:7f:70:02:d4:9e:8f:6d:92:b9:39:48:79:48:6f:49: e9:33:c6:e8:58:0d:9e:31:25:3f:3e:a1:c2:d1:34:a1:e6:87: ec:6f:a0:14:d3:29:b9:8d:03:24:38:ba:12:b5:b4:58:d4:1f: be:2b:14:7a:0b:e3:73:7e:2a:a1:e8:0c:5d:a1:e3:a6:c9:7c: 84:70:4f:7e:12:fb:b7:84:4d:c0:69:09:9a:d1:69:72:5e:a4: 73:24:ac:6d:9b:1a:13:bd:70:e1:be:34:6c:65:56:64:2e:91: 76:75:86:78:28:76:b4:a8:5b:ef:f5:96:dc:ce:75:1e:21:92: a9:44:27:7e:ce:cb:4e:60:9b:b8:55:fd:27:c4:19:b5:a8:33: af:bc:02:34:e8:2f:ee:95:1b:ff:5c:78:30:af:ea:28:55:31: 25:30:cd:18 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUPnrIpahrONY7mvHgR4a8trTNZj4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTkzNFoX DTI3MDUwMTA5MjQzNFowMzExMC8GA1UEAxMoMENFMDNCRkIzQzNERjVGREQyQUMy NTQ2RDZCNDRCRDhBNDdBOTBEMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKnQgzxTAfhSOhl4cxW7iLj/5vPYaDv23+fJnSG5BUSk7RBZD4ndsaHEoENY pd3QxIUXEZxZR0vRz+6tD354m8jYK8KHNJ15Rtpzi+EpqbsmQKJoJ731gbTRMOoo kvsFRxqKRzKUTPKLakhn1v0Rg9PqqT+sRV8/dSu7yIzSmxLf+02mPGw67cgG4/4w pUJ+ZOjZyVgRjYLNzNzABMLGiEL478q0hLg8+h0kisQCYNqD2RKFZLR4ZdgqgZ8Y 0V8w8WhiChbwq4F8LEh56V1jhV8lfKHcW4Uxrxg5jBYh19lZh2teYTFNKpwg7Dti 9p3LNiJx25LCLXYNhpmY2X0+UE0CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQM4Dv7 PD31/dKsJUbWtEvYpHqQ0zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzNjk3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBo99OMA8EAgACMAkDBwAgAQ31N8AwDQYJKoZIhvcNAQELBQADggEBAEjZ BENzFZNydQ4V46xuSHOQR9Jp9A9T0RQSXExP+6MN/ZlNPY8fMEL2gIBR0zpiBnx5 rbIuXO11Q54AwNVbDt1NCFlxRY2rzJT2F6EKFbyL1pPdr4TitHsPQmqs1X9wAtSe j22SuTlIeUhvSekzxuhYDZ4xJT8+ocLRNKHmh+xvoBTTKbmNAyQ4uhK1tFjUH74r FHoL43N+KqHoDF2h46bJfIRwT34S+7eETcBpCZrRaXJepHMkrG2bGhO9cOG+NGxl VmQukXZ1hngodrSoW+/1ltzOdR4hkqlEJ37Oy05gm7hV/SfEGbWoM6+8AjToL+6V G/9ceDCv6ihVMSUwzRg= -----END CERTIFICATE-----Generated at Sun May 3 00:39:40 2026 by rpki-client