$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153806.roa File: AS153806.roa (raw, json) Hash identifier: cgkos1ohQSDohuWClad5uq/K8ferFOACmoegowfZhTc= Subject key identifier: 92:25:25:92:6A:26:DA:A3:3B:E7:18:2F:BE:A6:58:C3:06:9C:A2:C9 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1218F0462D1CCDBF77DD7A7C7A061C35B0BFF33E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153806.roa Signing time: Sat 02 May 2026 09:24:49 +0000 ROA not before: Sat 02 May 2026 09:19:49 +0000 ROA not after: Sat 01 May 2027 09:24:49 +0000 asID: 153806 IP address blocks: 163.223.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:18:f0:46:2d:1c:cd:bf:77:dd:7a:7c:7a:06:1c:35:b0:bf:f3:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:19:49 2026 GMT Not After : May 1 09:24:49 2027 GMT Subject: CN=922525926A26DAA33BE7182FBEA658C3069CA2C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5e:08:68:18:09:b9:3c:67:a1:5c:aa:b3:5a: 23:7e:47:d9:c0:50:c7:2d:22:48:0d:b3:ee:bf:5f: ca:89:1d:e1:bf:8f:18:e0:79:38:09:2f:f4:3a:19: 8e:1d:ee:3d:fb:fe:c7:94:f3:00:22:20:82:5c:69: 7a:66:08:17:7b:fb:8d:47:42:cf:45:9b:13:67:d0: 52:b0:89:7a:84:5d:02:72:5f:5d:3b:a6:11:42:ee: 69:16:d0:d8:12:76:9d:30:7b:77:f8:9f:86:ff:39: 36:68:12:31:8c:ab:5b:33:d5:57:c5:53:f9:50:43: 09:b8:d1:04:b7:7d:e8:e0:65:c4:db:22:c6:67:74: de:1d:ea:e8:2e:46:1a:9c:71:f2:99:95:75:17:24: 5b:02:d3:1d:17:3b:50:e9:c7:b9:d4:6a:00:68:98: 21:8a:20:02:c8:ac:a2:a7:13:f5:4a:f8:3c:2f:54: 4b:9d:8a:4f:4e:60:4e:64:66:b3:2c:2b:3c:a0:5c: 2b:34:92:7f:43:22:fe:dc:c0:a1:54:e3:5f:f4:10: 94:19:16:8a:66:b1:ad:1a:3e:86:df:1e:9a:8d:9a: 99:83:e8:60:55:b2:ff:03:34:a0:51:e8:d5:34:da: fb:87:35:c0:1e:6f:8e:80:ca:e3:0a:fe:e2:b2:d4: 70:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:25:25:92:6A:26:DA:A3:3B:E7:18:2F:BE:A6:58:C3:06:9C:A2:C9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153806.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.223.118.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:49:9f:81:d8:a0:9e:32:19:9b:00:79:d8:2a:3a:a4:46:0c: 72:88:8f:96:a2:0e:e7:bb:bd:eb:65:04:3c:c2:25:14:21:e4: 64:62:6e:5c:95:51:9b:b3:24:79:c6:88:38:2b:2b:c0:23:65: 7c:36:c6:b0:13:c3:14:52:86:2d:7c:90:c4:fc:cb:7d:a3:26: 7f:c7:e5:50:a0:94:19:0c:a4:5d:39:f9:8b:f4:1a:59:eb:94: 5b:91:14:db:8f:d6:98:fc:af:82:42:5c:72:d7:37:59:b6:b1: c3:0c:63:a4:24:b4:44:83:db:9a:20:f9:17:60:18:2d:85:f3: c9:80:db:72:8f:07:45:2c:30:0d:84:91:66:b5:2b:7f:01:d7: 76:9d:14:42:c6:69:1c:7c:9b:35:02:69:12:c9:10:69:42:b6: 33:16:45:82:45:9f:ce:ce:06:d5:d5:b3:58:3a:86:1a:b2:8c: 06:61:e4:bc:1b:da:72:e0:9b:4f:dd:34:a2:0c:76:70:7d:5f: 51:7c:32:6e:a6:d9:bf:65:1a:34:ac:9b:a0:82:45:51:8b:46: ba:af:f7:86:64:2a:8b:f1:cb:05:a3:a8:9c:b1:38:a2:52:1d: 72:b7:b9:58:28:9e:4b:7c:59:3c:c8:f5:fa:74:5c:98:8e:49: d3:21:d0:64 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUEhjwRi0czb933Xp8egYcNbC/8z4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTk0OVoX DTI3MDUwMTA5MjQ0OVowMzExMC8GA1UEAxMoOTIyNTI1OTI2QTI2REFBMzNCRTcx ODJGQkVBNjU4QzMwNjlDQTJDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOpeCGgYCbk8Z6FcqrNaI35H2cBQxy0iSA2z7r9fyokd4b+PGOB5OAkv9DoZ jh3uPfv+x5TzACIgglxpemYIF3v7jUdCz0WbE2fQUrCJeoRdAnJfXTumEULuaRbQ 2BJ2nTB7d/ifhv85NmgSMYyrWzPVV8VT+VBDCbjRBLd96OBlxNsixmd03h3q6C5G Gpxx8pmVdRckWwLTHRc7UOnHudRqAGiYIYogAsisoqcT9Ur4PC9US52KT05gTmRm sywrPKBcKzSSf0Mi/tzAoVTjX/QQlBkWimaxrRo+ht8emo2amYPoYFWy/wM0oFHo 1TTa+4c1wB5vjoDK4wr+4rLUcLcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSSJSWS aibaozvnGC++pljDBpyiyTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzODA2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBo992MA0GCSqGSIb3DQEBCwUAA4IBAQBrSZ+B2KCeMhmbAHnYKjqkRgxy iI+Wog7nu73rZQQ8wiUUIeRkYm5clVGbsyR5xog4KyvAI2V8NsawE8MUUoYtfJDE /Mt9oyZ/x+VQoJQZDKRdOfmL9BpZ65RbkRTbj9aY/K+CQlxy1zdZtrHDDGOkJLRE g9uaIPkXYBgthfPJgNtyjwdFLDANhJFmtSt/Add2nRRCxmkcfJs1AmkSyRBpQrYz FkWCRZ/OzgbV1bNYOoYasowGYeS8G9py4JtP3TSiDHZwfV9RfDJuptm/ZRo0rJug gkVRi0a6r/eGZCqL8csFo6icsTiiUh1yt7lYKJ5LfFk8yPX6dFyYjknTIdBk -----END CERTIFICATE-----Generated at Sun May 3 01:44:55 2026 by rpki-client