$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153699.roa File: AS153699.roa (raw, json) Hash identifier: 1Zgjj9uhFKzsTTjRQYYrgbD/agyoIfbvBhOiDZQXTUg= Subject key identifier: 98:D3:85:57:63:75:66:D0:3C:A4:54:1D:48:FC:85:A5:5E:F5:BF:21 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 559BB18B1E0787BC0F0F3D4042EB9545FB411222 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153699.roa Signing time: Sat 02 May 2026 09:24:43 +0000 ROA not before: Sat 02 May 2026 09:19:43 +0000 ROA not after: Sat 01 May 2027 09:24:43 +0000 asID: 153699 IP address blocks: 163.223.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:9b:b1:8b:1e:07:87:bc:0f:0f:3d:40:42:eb:95:45:fb:41:12:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:19:43 2026 GMT Not After : May 1 09:24:43 2027 GMT Subject: CN=98D38557637566D03CA4541D48FC85A55EF5BF21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:18:d6:de:dc:c6:4e:96:49:9e:55:de:c2:e3: c3:8c:72:b2:56:b7:24:84:b3:a0:90:e5:e1:1c:e0: b2:44:99:ff:91:92:de:54:27:3e:f8:c9:34:5f:d7: 53:10:5c:49:a3:d5:15:93:01:79:d1:a7:68:a2:a2: 8b:a0:9f:d0:18:86:16:4a:a4:4f:9a:07:a1:e8:b6: c1:b0:17:b8:d6:cb:0e:07:8c:8c:5f:ca:9f:bd:34: 15:9f:4d:ae:4e:f4:0c:3f:44:20:13:be:54:6b:4f: aa:b6:ce:aa:89:a0:1e:2d:3b:b1:c2:e3:31:73:d8: 28:d8:87:f0:58:e2:bd:24:62:7a:75:a8:6b:50:e5: 3e:0c:6b:d2:ee:8a:6d:10:34:25:2f:57:d2:fa:7a: 9f:e6:ee:ab:45:ec:ad:58:cf:46:82:f6:8e:02:3c: a3:d8:24:87:66:08:74:4e:34:7d:b1:45:73:09:6a: 27:e5:d0:72:d0:72:3d:27:a2:ff:7d:32:2b:66:ed: 44:8a:df:3f:f7:4c:e5:d0:f0:6f:b6:06:6d:e8:54: 41:0f:16:70:ef:41:40:90:f9:38:02:fe:ed:1c:c4: fa:7d:78:30:83:06:c3:8a:f5:5a:8e:e4:88:10:19: 41:fe:9c:e9:39:3a:aa:8f:95:98:4c:bc:8e:a2:e7: b5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D3:85:57:63:75:66:D0:3C:A4:54:1D:48:FC:85:A5:5E:F5:BF:21 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153699.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.223.113.0/24 Signature Algorithm: sha256WithRSAEncryption 94:bd:67:fa:11:fa:5a:f9:0c:e2:b6:8d:c6:a0:05:81:84:15: 0d:0d:a1:ba:2b:1b:f6:80:29:1c:34:10:9b:64:7f:3b:6c:cb: 12:d4:6d:3d:be:4a:93:d8:8f:ae:86:13:2d:b6:62:da:35:22: 2c:1b:20:bb:1d:4e:47:54:62:10:70:b6:9f:d3:df:06:74:78: ab:fe:29:06:54:cb:5c:02:b6:7e:62:f2:4c:50:5a:61:5d:06: 0f:6e:a5:cd:cf:58:cd:7a:56:b0:83:02:29:96:29:cf:ab:18: 4b:c3:d7:46:27:94:b8:b4:9a:27:f4:df:4e:40:91:7b:11:21: 36:e0:65:19:59:7b:1c:a7:11:17:f8:59:af:c9:ca:c4:69:d6: bf:b2:42:1b:1a:ba:05:59:07:58:3b:ca:ef:eb:13:61:1e:36: f3:85:e7:ea:de:08:f6:9b:30:a5:03:3d:53:f7:17:db:1b:20: c9:8f:1b:fd:ac:9a:6a:ed:ec:f8:2c:bb:7f:57:07:f5:34:d6: 4e:9f:54:58:62:05:cc:b3:54:52:67:6c:06:f4:13:82:40:46: 42:23:3e:e5:e6:42:d9:e6:22:db:f2:5f:f5:58:cc:fe:ff:df: 7b:c4:45:31:b1:61:44:77:51:82:44:6a:bd:02:40:53:c1:f0: 52:8b:d5:82 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUVZuxix4Hh7wPDz1AQuuVRftBEiIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTk0M1oX DTI3MDUwMTA5MjQ0M1owMzExMC8GA1UEAxMoOThEMzg1NTc2Mzc1NjZEMDNDQTQ1 NDFENDhGQzg1QTU1RUY1QkYyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM4Y1t7cxk6WSZ5V3sLjw4xysla3JISzoJDl4RzgskSZ/5GS3lQnPvjJNF/X UxBcSaPVFZMBedGnaKKii6Cf0BiGFkqkT5oHoei2wbAXuNbLDgeMjF/Kn700FZ9N rk70DD9EIBO+VGtPqrbOqomgHi07scLjMXPYKNiH8FjivSRienWoa1DlPgxr0u6K bRA0JS9X0vp6n+buq0XsrVjPRoL2jgI8o9gkh2YIdE40fbFFcwlqJ+XQctByPSei /30yK2btRIrfP/dM5dDwb7YGbehUQQ8WcO9BQJD5OAL+7RzE+n14MIMGw4r1Wo7k iBAZQf6c6Tk6qo+VmEy8jqLntTUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSY04VX Y3Vm0DykVB1I/IWlXvW/ITAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzNjk5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAo99xMA0GCSqGSIb3DQEBCwUAA4IBAQCUvWf6Efpa+Qzito3GoAWBhBUN DaG6Kxv2gCkcNBCbZH87bMsS1G09vkqT2I+uhhMttmLaNSIsGyC7HU5HVGIQcLaf 098GdHir/ikGVMtcArZ+YvJMUFphXQYPbqXNz1jNelawgwIplinPqxhLw9dGJ5S4 tJon9N9OQJF7ESE24GUZWXscpxEX+FmvycrEada/skIbGroFWQdYO8rv6xNhHjbz hefq3gj2mzClAz1T9xfbGyDJjxv9rJpq7ez4LLt/Vwf1NNZOn1RYYgXMs1RSZ2wG 9BOCQEZCIz7l5kLZ5iLb8l/1WMz+/997xEUxsWFEd1GCRGq9AkBTwfBSi9WC -----END CERTIFICATE-----Generated at Sun May 3 00:39:35 2026 by rpki-client