$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153820.roa File: AS153820.roa (raw, json) Hash identifier: JtwZgiZKwFAgH77qlOyYdQ/0yutu2bQ8/68xpj7Ielg= Subject key identifier: 31:36:DB:21:94:43:FF:17:4C:FA:80:A4:5E:96:E1:EB:1A:C5:FA:C9 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4CD9D63137A228418C6B8F0028332285CA4E6E48 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153820.roa Signing time: Sat 02 May 2026 09:26:16 +0000 ROA not before: Sat 02 May 2026 09:21:16 +0000 ROA not after: Sat 01 May 2027 09:26:16 +0000 asID: 153820 IP address blocks: 163.227.146.0/23 maxlen: 24 2001:df5:6ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:d9:d6:31:37:a2:28:41:8c:6b:8f:00:28:33:22:85:ca:4e:6e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:16 2026 GMT Not After : May 1 09:26:16 2027 GMT Subject: CN=3136DB219443FF174CFA80A45E96E1EB1AC5FAC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b9:4f:2c:45:1f:3b:16:8f:4a:d0:e4:9b:6d: f3:53:d8:8d:1a:d4:76:b5:8f:13:d5:5b:0c:7d:86: b6:99:b1:16:13:24:65:19:88:28:87:30:6a:8c:c1: 6e:ca:f7:77:e9:8a:ef:84:b4:47:2b:7a:be:21:7a: 80:68:6d:ef:d8:79:b3:2b:1e:8f:29:c1:50:b5:82: 9e:bc:6c:d9:cb:45:18:df:2b:f9:91:46:26:75:e0: 03:6d:81:d8:b0:68:9e:7f:37:60:18:53:e2:c7:c3: f8:69:e2:ed:26:8b:fd:6f:4d:08:d2:08:b0:c6:c9: a1:e7:9b:66:f5:94:a2:92:71:cf:5b:17:41:68:c8: 66:b1:7c:78:d1:49:7e:07:39:d8:92:4e:a1:7e:aa: 4b:2c:29:32:50:15:29:a9:0e:86:a2:91:55:f7:c4: 60:d4:0e:09:97:2c:c9:41:5e:fa:0e:3a:b8:b5:b0: 59:40:8a:3a:68:14:b3:fe:b2:03:a4:3f:f9:03:b5: dd:b1:42:4e:8d:7b:54:70:db:11:9b:18:ce:43:f6: 06:c1:d8:70:39:3c:4f:f8:5e:62:c0:a1:df:a8:2c: 2d:22:4f:c0:e9:94:3c:56:d0:79:99:e3:35:30:9a: 97:08:23:50:ac:61:5b:32:d8:1c:90:a8:7b:7e:e5: d9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:36:DB:21:94:43:FF:17:4C:FA:80:A4:5E:96:E1:EB:1A:C5:FA:C9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153820.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.146.0/23 IPv6: 2001:df5:6ec0::/48 Signature Algorithm: sha256WithRSAEncryption 33:9b:13:48:20:f3:f1:3c:c8:3a:e5:52:cf:84:4f:04:04:05: d8:88:c7:b3:8c:bc:f2:6b:bf:63:7c:2a:f4:d3:e8:16:7b:9b: ed:e6:81:bb:8d:06:26:11:51:7b:5b:c0:df:a6:8b:b9:19:2b: f6:c4:9b:9f:5f:8e:39:25:87:6b:c1:92:53:e0:23:80:92:02: 1c:93:fb:ea:d8:8e:99:0e:9b:27:0e:4c:24:d8:a7:ce:72:82: 83:62:5d:3f:b1:23:a2:de:c1:3c:30:d3:bb:a3:9a:01:8e:db: b1:f2:d3:65:9d:5f:a9:27:d7:05:ba:fc:de:55:9b:b1:fe:4e: 7e:ea:38:cf:74:a3:09:ac:fd:b2:49:e1:5c:69:f3:8f:82:5a: 74:2f:d3:28:8b:82:fc:5a:44:f9:0e:dc:6b:fd:08:2a:f3:85: d5:1f:39:48:53:35:15:a6:17:84:78:92:e2:d3:6d:22:ad:47: f5:07:e4:67:8f:d2:5d:88:e3:a6:51:1d:a8:4a:df:74:b1:6e: d5:74:c8:13:3c:ac:cc:09:06:dc:dc:18:b5:6e:18:91:1f:bc: 95:e1:2f:6c:33:dc:06:51:d1:93:cb:e0:7f:f5:9f:f0:00:77: 67:a7:b2:3c:af:bc:c7:66:9e:37:63:89:8a:54:dc:b2:c9:c2: 99:37:46:48 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUTNnWMTeiKEGMa48AKDMihcpObkgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjExNloX DTI3MDUwMTA5MjYxNlowMzExMC8GA1UEAxMoMzEzNkRCMjE5NDQzRkYxNzRDRkE4 MEE0NUU5NkUxRUIxQUM1RkFDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKy5TyxFHzsWj0rQ5Jtt81PYjRrUdrWPE9VbDH2GtpmxFhMkZRmIKIcwaozB bsr3d+mK74S0Ryt6viF6gGht79h5sysejynBULWCnrxs2ctFGN8r+ZFGJnXgA22B 2LBonn83YBhT4sfD+Gni7SaL/W9NCNIIsMbJoeebZvWUopJxz1sXQWjIZrF8eNFJ fgc52JJOoX6qSywpMlAVKakOhqKRVffEYNQOCZcsyUFe+g46uLWwWUCKOmgUs/6y A6Q/+QO13bFCTo17VHDbEZsYzkP2BsHYcDk8T/heYsCh36gsLSJPwOmUPFbQeZnj NTCalwgjUKxhWzLYHJCoe37l2ZcCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQxNtsh lEP/F0z6gKReluHrGsX6yTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzODIwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBo+OSMA8EAgACMAkDBwAgAQ31bsAwDQYJKoZIhvcNAQELBQADggEBADOb E0gg8/E8yDrlUs+ETwQEBdiIx7OMvPJrv2N8KvTT6BZ7m+3mgbuNBiYRUXtbwN+m i7kZK/bEm59fjjklh2vBklPgI4CSAhyT++rYjpkOmycOTCTYp85ygoNiXT+xI6Le wTww07ujmgGO27Hy02WdX6kn1wW6/N5Vm7H+Tn7qOM90owms/bJJ4Vxp84+CWnQv 0yiLgvxaRPkO3Gv9CCrzhdUfOUhTNRWmF4R4kuLTbSKtR/UH5GeP0l2I46ZRHahK 33SxbtV0yBM8rMwJBtzcGLVuGJEfvJXhL2wz3AZR0ZPL4H/1n/AAd2ensjyvvMdm njdjiYpU3LLJwpk3Rkg= -----END CERTIFICATE-----Generated at Sun May 3 00:39:46 2026 by rpki-client