$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153774.roa File: AS153774.roa (raw, json) Hash identifier: LL9RuoKcokOjc0pZCaELaRbWC38ktA+yJ7v8cakywS4= Subject key identifier: 07:8D:6F:9E:1B:F9:45:D8:9E:4B:7A:4D:2C:34:57:9A:B4:DD:95:6B Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3471174BDFBC338FD760E0AD4C8F3EAFBDE9157D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153774.roa Signing time: Sat 02 May 2026 09:26:28 +0000 ROA not before: Sat 02 May 2026 09:21:28 +0000 ROA not after: Sat 01 May 2027 09:26:28 +0000 asID: 153774 IP address blocks: 163.223.150.0/24 maxlen: 24 2001:df5:4340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:71:17:4b:df:bc:33:8f:d7:60:e0:ad:4c:8f:3e:af:bd:e9:15:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:28 2026 GMT Not After : May 1 09:26:28 2027 GMT Subject: CN=078D6F9E1BF945D89E4B7A4D2C34579AB4DD956B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d4:7c:5e:08:ff:76:23:ad:81:c5:2b:85:0d: 32:3c:3f:a3:cf:cf:a8:28:7d:34:b0:65:42:34:41: 01:ba:bd:e1:a9:43:b0:a4:3d:8a:5d:c1:49:95:c1: 88:75:4d:d4:2f:ca:e9:6f:ff:0a:e0:df:7c:0d:6a: e7:06:a9:a0:27:01:ad:a6:28:5a:8c:5e:b4:da:23: 1a:84:ec:99:28:0a:49:ff:81:70:d2:2d:3c:48:fc: 6c:bd:5d:63:8f:5e:c7:a1:d9:45:a8:a5:f7:64:e0: ad:00:f7:11:91:c1:e7:10:9f:e0:c1:38:9c:96:ee: 9d:34:ff:38:5f:69:41:da:d4:bb:c7:b6:c4:6d:17: 41:66:14:87:9e:4d:cb:e7:b1:54:4f:40:16:e2:ca: cd:bc:d4:e9:85:7b:6a:9c:de:71:56:31:4d:f4:41: 27:df:1e:1f:68:74:d9:8d:fd:a0:59:1a:be:d2:17: 5f:8c:70:eb:69:ce:65:d1:3d:c0:39:53:04:e2:a3: 2f:33:f7:6f:47:c0:48:d5:90:8f:02:eb:ed:73:02: 2d:39:8b:b0:87:e1:71:30:2d:9a:dc:6e:33:05:fd: 12:e4:40:80:10:fa:32:09:58:2b:10:c4:fe:a7:e7: ef:aa:46:ad:3c:f2:52:a7:23:3b:28:00:4e:89:b2: ec:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8D:6F:9E:1B:F9:45:D8:9E:4B:7A:4D:2C:34:57:9A:B4:DD:95:6B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153774.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.223.150.0/24 IPv6: 2001:df5:4340::/48 Signature Algorithm: sha256WithRSAEncryption 25:47:b3:16:c2:a5:75:1e:c9:38:9f:90:b1:a3:1e:2d:9b:b0: 82:da:e4:d0:00:78:e6:cf:1e:bf:5a:10:d8:40:33:6d:ee:3b: 40:7a:44:1e:84:57:0a:f8:df:ce:3e:c5:ca:d0:af:b8:20:a0: 39:6b:cf:52:c5:74:cb:8c:d7:b5:7d:62:e5:31:14:97:ee:27: 3c:f1:9f:04:45:7d:08:a8:7b:8c:ca:9f:91:f4:06:44:4c:ee: 6a:a1:4a:42:4e:97:b5:aa:cf:ba:a7:65:14:78:ce:78:91:5f: d9:7d:e1:94:de:9a:c4:fb:5a:68:56:c3:9f:e4:0d:d1:db:05: 49:7a:df:7a:29:7f:0d:4e:6c:62:74:91:ce:0b:03:77:58:5a: dc:58:26:01:a5:a0:8c:a0:8f:fa:e6:ae:93:44:da:35:6d:a1: 28:e4:d9:74:8e:6b:ef:a6:98:a7:e5:fc:98:71:eb:d1:ec:0a: ec:9d:0b:41:8e:3e:f8:8d:9d:c7:14:73:18:49:f1:2e:12:3e: 3d:7d:23:2c:df:35:e2:36:78:ee:f7:74:15:56:db:06:63:53: 5d:c1:66:d3:bd:f3:68:89:8d:08:f2:51:66:cd:37:11:de:a9: 4b:a1:d1:7c:d9:84:7e:d9:81:f9:7b:62:63:8a:dc:8a:b1:58: 21:37:9d:fc -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUNHEXS9+8M4/XYOCtTI8+r73pFX0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjEyOFoX DTI3MDUwMTA5MjYyOFowMzExMC8GA1UEAxMoMDc4RDZGOUUxQkY5NDVEODlFNEI3 QTREMkMzNDU3OUFCNEREOTU2QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOLUfF4I/3YjrYHFK4UNMjw/o8/PqCh9NLBlQjRBAbq94alDsKQ9il3BSZXB iHVN1C/K6W//CuDffA1q5wapoCcBraYoWoxetNojGoTsmSgKSf+BcNItPEj8bL1d Y49ex6HZRail92TgrQD3EZHB5xCf4ME4nJbunTT/OF9pQdrUu8e2xG0XQWYUh55N y+exVE9AFuLKzbzU6YV7apzecVYxTfRBJ98eH2h02Y39oFkavtIXX4xw62nOZdE9 wDlTBOKjLzP3b0fASNWQjwLr7XMCLTmLsIfhcTAtmtxuMwX9EuRAgBD6MglYKxDE /qfn76pGrTzyUqcjOygATomy7K8CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQHjW+e G/lF2J5Lek0sNFeatN2VazAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzNzc0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAo9+WMA8EAgACMAkDBwAgAQ31Q0AwDQYJKoZIhvcNAQELBQADggEBACVH sxbCpXUeyTifkLGjHi2bsILa5NAAeObPHr9aENhAM23uO0B6RB6EVwr4384+xcrQ r7ggoDlrz1LFdMuM17V9YuUxFJfuJzzxnwRFfQioe4zKn5H0BkRM7mqhSkJOl7Wq z7qnZRR4zniRX9l94ZTemsT7WmhWw5/kDdHbBUl633opfw1ObGJ0kc4LA3dYWtxY JgGloIygj/rmrpNE2jVtoSjk2XSOa++mmKfl/Jhx69HsCuydC0GOPviNnccUcxhJ 8S4SPj19IyzfNeI2eO73dBVW2wZjU13BZtO982iJjQjyUWbNNxHeqUuh0XzZhH7Z gfl7YmOK3IqxWCE3nfw= -----END CERTIFICATE-----Generated at Sun May 3 01:40:06 2026 by rpki-client