$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153797.roa File: AS153797.roa (raw, json) Hash identifier: FXse/G8spwkrcEPr/dSzAAE6Lwfz1XT4yvoiurVMM3k= Subject key identifier: 51:7D:37:DF:45:75:63:CA:D2:96:8B:A6:F9:84:F9:1F:22:EE:DB:E5 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0857E8F03E26F39E1F3B1396EE28AC35331EAA41 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153797.roa Signing time: Sat 02 May 2026 09:25:33 +0000 ROA not before: Sat 02 May 2026 09:20:33 +0000 ROA not after: Sat 01 May 2027 09:25:33 +0000 asID: 153797 IP address blocks: 163.227.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:57:e8:f0:3e:26:f3:9e:1f:3b:13:96:ee:28:ac:35:33:1e:aa:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:20:33 2026 GMT Not After : May 1 09:25:33 2027 GMT Subject: CN=517D37DF457563CAD2968BA6F984F91F22EEDBE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:82:ab:7c:d6:90:83:90:72:f0:de:8f:38:bc: b1:9c:3e:b9:bf:70:d7:42:c0:d3:90:ec:c0:0e:c0: f8:cd:f3:00:2c:0f:9e:50:72:bb:6e:0c:df:ea:50: 04:96:f6:cc:2b:2b:60:bf:94:f3:c8:e8:2d:97:28: 99:ef:b3:17:f3:4c:66:86:32:d3:39:4a:1a:9b:45: 99:ff:69:8d:61:eb:22:7d:75:3f:25:ce:64:44:25: 80:7b:61:12:1a:4e:4c:48:14:9b:9b:9e:45:8d:94: f9:3d:80:a1:c8:b7:43:e3:6c:59:23:f9:df:66:69: b9:e6:3c:30:8f:d2:17:8b:ce:a5:c4:ad:84:f4:c0: 00:58:64:85:f9:32:07:0c:00:bf:ca:90:4f:09:59: 1e:e2:f4:df:ce:28:ad:a7:5a:01:de:8e:e7:b5:ce: e0:3a:38:88:89:24:bc:6e:09:ad:f9:9e:66:e6:ea: 03:45:68:f2:f8:8e:49:9a:11:d0:99:28:04:e9:cb: e2:ab:08:3a:c9:37:a3:b9:21:02:aa:f6:f5:d8:9d: 29:0b:f9:2f:3b:9e:c2:82:d1:e5:ef:51:4d:94:ed: d4:be:5e:11:a6:72:5a:61:12:df:20:38:5a:ae:b5: 5d:a2:6c:b5:10:4a:9e:14:c7:c2:ed:85:19:a5:fc: 0b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:7D:37:DF:45:75:63:CA:D2:96:8B:A6:F9:84:F9:1F:22:EE:DB:E5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153797.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.95.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:01:e0:a8:91:b8:12:27:e3:55:1a:1e:02:18:75:7a:7f:71: cf:63:a7:86:6e:30:19:e7:6a:c6:49:14:ce:9c:91:99:dc:cf: d5:f8:37:51:c8:6f:16:99:c7:9c:63:1f:80:ab:a3:2a:f8:38: f0:40:4b:fb:9f:bc:41:c7:2a:98:78:2d:59:f7:bb:72:bc:3a: 38:3d:50:af:4c:eb:b3:1e:05:7a:56:2e:40:0b:51:5c:f6:69: da:40:bd:58:e3:ba:1a:78:9c:de:93:87:d0:ca:80:11:8c:13: 5a:de:22:78:b4:3c:34:43:ee:87:c4:e0:82:31:c6:fc:ff:05: eb:ad:17:a4:13:26:d0:ae:92:fb:b1:3c:f7:47:d1:9a:54:a1: 26:4a:e6:e5:8f:20:00:e3:4b:9a:b6:d9:9c:aa:ec:b5:1e:f9: 28:c9:6f:26:5d:be:71:b9:25:9d:dc:57:b6:06:7d:79:2e:cb: 9f:76:9e:7b:58:16:6b:8b:5a:3e:cd:e0:dc:4e:e7:19:d5:bc: 27:4e:85:e6:f4:f4:7f:61:0c:cb:64:d2:15:dd:06:49:12:b7: c1:5b:da:33:21:8b:03:6b:45:6a:95:a0:15:99:a4:ae:23:43: df:88:75:97:40:0a:7d:61:38:79:75:55:0f:b3:cd:0f:ad:7a: 8d:c7:eb:90 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUCFfo8D4m854fOxOW7iisNTMeqkEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjAzM1oX DTI3MDUwMTA5MjUzM1owMzExMC8GA1UEAxMoNTE3RDM3REY0NTc1NjNDQUQyOTY4 QkE2Rjk4NEY5MUYyMkVFREJFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOOCq3zWkIOQcvDejzi8sZw+ub9w10LA05DswA7A+M3zACwPnlByu24M3+pQ BJb2zCsrYL+U88joLZcome+zF/NMZoYy0zlKGptFmf9pjWHrIn11PyXOZEQlgHth EhpOTEgUm5ueRY2U+T2Aoci3Q+NsWSP532ZpueY8MI/SF4vOpcSthPTAAFhkhfky BwwAv8qQTwlZHuL0384oradaAd6O57XO4Do4iIkkvG4JrfmeZubqA0Vo8viOSZoR 0JkoBOnL4qsIOsk3o7khAqr29didKQv5LzuewoLR5e9RTZTt1L5eEaZyWmES3yA4 Wq61XaJstRBKnhTHwu2FGaX8C5ECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRRfTff RXVjytKWi6b5hPkfIu7b5TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzNzk3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAo+NfMA0GCSqGSIb3DQEBCwUAA4IBAQArAeCokbgSJ+NVGh4CGHV6f3HP Y6eGbjAZ52rGSRTOnJGZ3M/V+DdRyG8WmcecYx+Aq6Mq+DjwQEv7n7xBxyqYeC1Z 97tyvDo4PVCvTOuzHgV6Vi5AC1Fc9mnaQL1Y47oaeJzek4fQyoARjBNa3iJ4tDw0 Q+6HxOCCMcb8/wXrrRekEybQrpL7sTz3R9GaVKEmSubljyAA40uattmcquy1Hvko yW8mXb5xuSWd3Fe2Bn15Lsufdp57WBZri1o+zeDcTucZ1bwnToXm9PR/YQzLZNIV 3QZJErfBW9ozIYsDa0VqlaAVmaSuI0PfiHWXQAp9YTh5dVUPs80PrXqNx+uQ -----END CERTIFICATE-----Generated at Sun May 3 00:39:40 2026 by rpki-client