$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153728.roa File: AS153728.roa (raw, json) Hash identifier: 3QgpXKElqcimB1dwzlQpmPUuWnvggQem/U3tiTXsGoQ= Subject key identifier: 13:38:6C:6F:CB:2E:47:AC:C7:04:4D:25:AD:89:D0:46:AA:7A:DF:8A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2A0BE7DBE345E0FC53B24E64EFD5AD1B5F4BE7D5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153728.roa Signing time: Sat 02 May 2026 09:26:47 +0000 ROA not before: Sat 02 May 2026 09:21:47 +0000 ROA not after: Sat 01 May 2027 09:26:47 +0000 asID: 153728 IP address blocks: 163.223.172.0/24 maxlen: 24 2001:df5:46c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:0b:e7:db:e3:45:e0:fc:53:b2:4e:64:ef:d5:ad:1b:5f:4b:e7:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:47 2026 GMT Not After : May 1 09:26:47 2027 GMT Subject: CN=13386C6FCB2E47ACC7044D25AD89D046AA7ADF8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:23:0c:9e:99:e9:ce:60:2a:0c:ff:a3:5c:63: 59:b1:ff:3b:70:b6:81:03:8a:01:66:ca:fd:04:49: 78:9b:cb:bf:b3:85:36:6b:db:08:a1:ca:9a:d8:92: 9c:fd:0f:18:19:45:25:2e:8d:5a:4e:ba:c9:8f:f8: 0f:ca:34:9c:8b:7b:c4:4f:6a:83:e6:ad:e0:77:8f: f7:e9:e7:8f:f0:c9:91:a3:e4:7b:6d:f4:2c:a1:4d: 01:a1:2a:d8:2b:7c:55:cf:bd:81:53:92:7b:1d:6f: 3e:25:6f:6f:0e:c0:e8:47:86:7b:91:d5:93:fc:51: cc:df:78:f7:19:c5:dd:34:f1:a7:31:e5:c3:45:45: 91:8f:ad:43:48:d1:11:21:43:e3:88:18:4e:2a:5d: 6f:42:d8:24:41:57:85:85:bb:7b:f4:bc:69:03:b1: e7:ce:7b:5c:a7:32:5f:9c:a6:bc:19:e9:0d:a6:1d: 2a:7b:62:69:36:82:0f:1d:f1:97:a2:6a:37:2f:55: ed:51:ae:71:da:78:6c:4e:89:8a:f6:97:50:3b:9f: 24:e2:53:a3:68:31:29:67:70:51:35:28:43:65:50: 76:11:c2:1a:0f:c2:28:ef:fd:9d:c4:bb:2a:91:bb: 62:7d:90:9b:0a:a5:75:d6:f2:7a:88:88:89:33:9b: f9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:38:6C:6F:CB:2E:47:AC:C7:04:4D:25:AD:89:D0:46:AA:7A:DF:8A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153728.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.223.172.0/24 IPv6: 2001:df5:46c0::/48 Signature Algorithm: sha256WithRSAEncryption 6f:c4:74:67:e5:13:fc:47:3b:a6:25:6a:c4:03:ae:71:94:07: 48:75:68:53:04:35:9c:f4:02:c6:f2:d0:f2:95:1b:88:69:35: ba:b0:fa:9f:cd:1b:21:bd:95:0a:e1:3d:60:f0:b0:40:18:6c: cc:96:1e:40:86:5a:84:2f:3d:00:37:1f:9c:f8:c5:9d:aa:74: 10:ab:9b:e1:fe:8f:dd:52:d1:b9:66:75:19:e1:0c:72:23:44: 91:39:be:77:f2:c8:23:59:20:df:87:ec:97:0a:f9:6d:7f:2c: 76:98:dc:66:50:6c:e2:bc:30:55:62:ae:a3:01:7c:0f:56:b7: 52:fd:a1:dd:87:d2:39:4c:63:27:6b:91:18:ff:3f:93:85:8b: ca:3b:5d:02:e3:ed:08:38:6c:19:b2:f9:3d:23:1e:fb:47:ca: da:5a:3c:ea:fb:1c:7d:2e:83:3b:65:52:c2:0e:2f:fc:25:45: a7:e9:84:13:86:0a:94:7b:ab:20:5a:e8:aa:21:a6:86:49:11: ee:21:78:c3:de:8b:39:a0:79:70:a1:6c:97:f1:ba:10:df:d0: e1:b9:5c:42:c1:62:20:66:d0:3a:7c:b3:08:54:e8:79:77:9c: d4:e0:34:ae:b3:21:aa:07:c0:51:b2:1e:49:80:56:25:f1:d9: bd:05:54:e2 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUKgvn2+NF4PxTsk5k79WtG19L59UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjE0N1oX DTI3MDUwMTA5MjY0N1owMzExMC8GA1UEAxMoMTMzODZDNkZDQjJFNDdBQ0M3MDQ0 RDI1QUQ4OUQwNDZBQTdBREY4QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI0jDJ6Z6c5gKgz/o1xjWbH/O3C2gQOKAWbK/QRJeJvLv7OFNmvbCKHKmtiS nP0PGBlFJS6NWk66yY/4D8o0nIt7xE9qg+at4HeP9+nnj/DJkaPke230LKFNAaEq 2Ct8Vc+9gVOSex1vPiVvbw7A6EeGe5HVk/xRzN949xnF3TTxpzHlw0VFkY+tQ0jR ESFD44gYTipdb0LYJEFXhYW7e/S8aQOx5857XKcyX5ymvBnpDaYdKntiaTaCDx3x l6JqNy9V7VGucdp4bE6JivaXUDufJOJTo2gxKWdwUTUoQ2VQdhHCGg/CKO/9ncS7 KpG7Yn2QmwqlddbyeoiIiTOb+VcCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQTOGxv yy5HrMcETSWtidBGqnrfijAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzNzI4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAo9+sMA8EAgACMAkDBwAgAQ31RsAwDQYJKoZIhvcNAQELBQADggEBAG/E dGflE/xHO6YlasQDrnGUB0h1aFMENZz0Asby0PKVG4hpNbqw+p/NGyG9lQrhPWDw sEAYbMyWHkCGWoQvPQA3H5z4xZ2qdBCrm+H+j91S0blmdRnhDHIjRJE5vnfyyCNZ IN+H7JcK+W1/LHaY3GZQbOK8MFVirqMBfA9Wt1L9od2H0jlMYydrkRj/P5OFi8o7 XQLj7Qg4bBmy+T0jHvtHytpaPOr7HH0ugztlUsIOL/wlRafphBOGCpR7qyBa6Koh poZJEe4heMPeizmgeXChbJfxuhDf0OG5XELBYiBm0Dp8swhU6Hl3nNTgNK6zIaoH wFGyHkmAViXx2b0FVOI= -----END CERTIFICATE-----Generated at Sun May 3 01:40:03 2026 by rpki-client