$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153707.roa File: AS153707.roa (raw, json) Hash identifier: 2tBYBbt0U1c7Hg1lAaUmgILtOcMX65GrdihWpMZkeEs= Subject key identifier: FD:73:23:52:75:76:41:26:86:D7:36:86:30:86:24:8A:61:22:7B:40 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 26FB8A408E752BA972A63F21B1AEF24DCD254C71 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153707.roa Signing time: Sat 02 May 2026 09:24:36 +0000 ROA not before: Sat 02 May 2026 09:19:36 +0000 ROA not after: Sat 01 May 2027 09:24:36 +0000 asID: 153707 IP address blocks: 163.223.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:fb:8a:40:8e:75:2b:a9:72:a6:3f:21:b1:ae:f2:4d:cd:25:4c:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:19:36 2026 GMT Not After : May 1 09:24:36 2027 GMT Subject: CN=FD7323527576412686D736863086248A61227B40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:19:81:7e:f0:3a:a8:ca:4e:8a:1b:f9:72:bf: 09:ac:b2:cc:ae:8a:46:81:06:a9:52:9a:67:b5:a7: e3:f9:48:0a:78:ba:e4:08:8d:e1:ce:a2:7d:45:68: b9:b5:f2:99:b8:fd:18:f7:85:11:e2:ce:02:09:8e: bf:09:91:b1:1d:a8:7c:3f:6d:cb:56:be:b2:43:7e: 2c:16:4a:fd:de:b3:bb:e3:c3:76:2c:e5:c4:37:43: 53:4a:18:ff:6b:2b:3a:88:fa:31:a4:87:20:41:9b: 33:73:b4:de:85:70:98:74:56:cb:66:f2:c6:8f:f0: a8:14:fc:3b:5d:83:88:d3:09:ba:22:b0:1b:bc:92: 9d:02:44:86:3b:25:e6:83:68:31:01:2d:e4:b5:fe: ef:da:9e:76:5d:ac:5d:0e:60:ff:cc:42:97:22:b7: 55:97:5b:a7:27:ca:af:8e:ef:7f:b2:ba:6f:0c:8e: d0:ef:e7:21:fa:7b:c6:58:3b:1c:6a:22:07:73:b9: e7:98:f2:b8:5f:1f:15:05:ea:7b:f1:de:4a:48:08: 42:57:54:bc:80:22:70:a0:82:8b:08:f1:a8:95:ed: 41:0d:f0:f3:31:98:70:df:cc:97:7b:7c:68:ac:f6: 1d:d8:7f:ca:1e:3f:59:cf:60:52:69:ce:90:56:6b: e8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:73:23:52:75:76:41:26:86:D7:36:86:30:86:24:8A:61:22:7B:40 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153707.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.223.19.0/24 Signature Algorithm: sha256WithRSAEncryption 00:38:3f:38:d5:4f:c9:14:b8:3e:53:82:99:cb:55:70:f8:b9: 83:9e:59:8e:6f:ea:c1:af:d7:4e:8c:f6:1f:21:a8:e0:f3:77: 6e:6e:0f:5a:99:8e:c2:7c:a0:53:1b:04:8c:85:d9:c5:a4:86: 97:f7:90:6d:73:91:90:cf:ab:4f:4e:f5:e0:03:71:af:4d:74: 1d:a3:cd:fc:de:c8:94:40:af:ce:c0:46:94:74:25:c0:28:0a: d4:a4:3a:ab:5a:28:d4:37:fb:8f:65:60:ca:6d:ed:9d:f7:72: 86:cb:3d:c5:81:ce:1f:3a:df:14:87:20:ed:62:73:fc:60:37: 12:b4:5a:b5:e4:29:36:48:36:8b:24:e1:5d:94:d7:f3:8f:bb: b1:49:ec:de:c6:48:fc:d6:98:67:cf:98:6a:30:50:83:92:f6: f8:49:2c:9d:ba:ca:5a:12:2d:68:61:d7:1f:2b:b6:17:92:be: 1e:93:83:a8:38:59:8a:ef:87:5b:f4:23:4d:2e:50:81:82:dd: 91:d8:8b:0c:b2:9c:31:78:ea:d3:0c:a2:32:b2:6e:20:0c:f9: 45:32:d0:78:c9:6e:f7:d6:35:f2:c9:12:21:69:e3:15:92:1a: 4a:74:b2:8e:8b:05:0f:53:80:38:6b:35:4d:f7:ee:61:61:49: 74:50:b9:8d -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUJvuKQI51K6lypj8hsa7yTc0lTHEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTkzNloX DTI3MDUwMTA5MjQzNlowMzExMC8GA1UEAxMoRkQ3MzIzNTI3NTc2NDEyNjg2RDcz Njg2MzA4NjI0OEE2MTIyN0I0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8ZgX7wOqjKToob+XK/CayyzK6KRoEGqVKaZ7Wn4/lICni65AiN4c6ifUVo ubXymbj9GPeFEeLOAgmOvwmRsR2ofD9ty1a+skN+LBZK/d6zu+PDdizlxDdDU0oY /2srOoj6MaSHIEGbM3O03oVwmHRWy2byxo/wqBT8O12DiNMJuiKwG7ySnQJEhjsl 5oNoMQEt5LX+79qedl2sXQ5g/8xClyK3VZdbpyfKr47vf7K6bwyO0O/nIfp7xlg7 HGoiB3O555jyuF8fFQXqe/HeSkgIQldUvIAicKCCiwjxqJXtQQ3w8zGYcN/Ml3t8 aKz2Hdh/yh4/Wc9gUmnOkFZr6MECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBT9cyNS dXZBJobXNoYwhiSKYSJ7QDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzNzA3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAo98TMA0GCSqGSIb3DQEBCwUAA4IBAQAAOD841U/JFLg+U4KZy1Vw+LmD nlmOb+rBr9dOjPYfIajg83dubg9amY7CfKBTGwSMhdnFpIaX95Btc5GQz6tPTvXg A3GvTXQdo8383siUQK/OwEaUdCXAKArUpDqrWijUN/uPZWDKbe2d93KGyz3Fgc4f Ot8UhyDtYnP8YDcStFq15Ck2SDaLJOFdlNfzj7uxSezexkj81phnz5hqMFCDkvb4 SSyduspaEi1oYdcfK7YXkr4ek4OoOFmK74db9CNNLlCBgt2R2IsMspwxeOrTDKIy sm4gDPlFMtB4yW731jXyyRIhaeMVkhpKdLKOiwUPU4A4azVN9+5hYUl0ULmN -----END CERTIFICATE-----Generated at Sun May 3 01:44:03 2026 by rpki-client