$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153824.roa File: AS153824.roa (raw, json) Hash identifier: gP/ALfRKFa1yExzk6wd+II9frO/XbWnNuolgpL7TX20= Subject key identifier: C2:80:3F:B6:EE:E9:7C:EF:1C:58:D9:C0:65:A4:D5:8B:95:AF:FE:03 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 02FBB2269FA369726F95C6BF5D7C0D53EC00C6DC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153824.roa Signing time: Sat 02 May 2026 08:35:45 +0000 ROA not before: Sat 02 May 2026 08:30:45 +0000 ROA not after: Sat 01 May 2027 08:35:45 +0000 asID: 153824 IP address blocks: 163.227.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:fb:b2:26:9f:a3:69:72:6f:95:c6:bf:5d:7c:0d:53:ec:00:c6:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:30:45 2026 GMT Not After : May 1 08:35:45 2027 GMT Subject: CN=C2803FB6EEE97CEF1C58D9C065A4D58B95AFFE03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1e:d7:ce:9b:2e:f5:9c:2f:7d:53:4f:60:f8: 14:b9:5f:d8:3b:ff:6b:bf:dc:ac:a1:85:66:bb:f8: 6d:af:78:18:e7:fd:0b:a1:cf:2a:70:20:ba:91:fc: 78:8c:17:d5:3d:fa:10:fa:99:66:1c:83:2f:92:2d: 21:16:db:76:ea:ea:f6:8a:c2:e5:7d:3a:51:1b:2c: 0d:ef:f7:34:e4:cc:af:9a:5a:75:ed:64:a0:94:79: bb:3a:19:89:28:c8:a9:75:b3:78:7b:60:88:58:d1: c3:fe:84:00:20:3c:58:3d:06:25:75:af:87:85:f5: e1:b1:5b:95:43:4e:4d:49:5d:98:7b:2b:24:4a:ba: d0:40:e2:61:75:16:af:30:91:e1:05:8d:89:dc:3e: 0f:4c:f6:06:ce:74:da:f4:93:24:76:3e:ca:e6:8b: d3:02:93:01:3c:c8:46:ee:80:54:ed:df:9b:77:8e: a7:e7:c9:46:68:ad:89:76:d3:b2:4b:df:5d:70:b5: 5f:41:b8:e4:22:11:b5:74:9f:6f:fb:80:44:03:44: c6:18:d5:22:ed:bd:bd:76:0e:74:b6:a0:72:1b:3b: af:4c:eb:3d:1d:2b:f6:79:4d:61:23:b2:80:f9:f2: d5:60:83:c0:9b:1e:76:29:51:15:4a:38:69:cc:04: 62:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:80:3F:B6:EE:E9:7C:EF:1C:58:D9:C0:65:A4:D5:8B:95:AF:FE:03 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153824.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.112.0/24 Signature Algorithm: sha256WithRSAEncryption 22:a0:2b:01:b3:f3:92:56:13:ba:22:28:31:f7:97:f0:3c:49: 4c:1e:41:79:ab:a2:41:aa:d9:c1:2c:11:c0:40:b6:31:70:7a: 10:74:ee:37:06:62:6c:3e:51:55:b0:12:b8:94:b6:e9:cd:82: de:d7:23:d5:9c:09:49:3f:7f:e5:4f:ab:23:0d:a9:45:d7:3d: c1:89:43:ca:a7:e7:97:d0:58:5a:1d:aa:b1:6d:0c:93:73:8f: 1f:46:17:9a:eb:0f:3a:80:f5:09:c5:f9:71:15:3f:b1:3b:3d: 35:31:d3:eb:9f:63:71:b9:84:c9:00:aa:dc:f1:18:8e:f4:87: c2:e1:02:b0:5b:13:8d:ac:14:7a:4e:d8:20:ba:23:16:99:cb: 36:01:35:52:83:de:00:ec:53:41:d9:e0:35:0b:25:84:0c:b6: 5a:d4:e4:2b:ee:dc:89:c6:bd:e8:b2:e4:5b:97:d4:e1:75:a7: 5b:56:68:8c:0d:1e:10:07:ba:e4:51:56:10:94:18:7a:a5:8f: ea:24:f1:32:e3:62:19:4f:7c:f2:c1:9e:dc:95:80:e0:b2:23: cf:c0:30:bf:b1:3d:21:6d:61:5e:07:b1:b0:d4:b5:2d:4e:96: e4:7c:24:1e:da:04:87:f5:5e:bf:3c:a7:39:f4:d7:22:31:1f: d9:f6:33:8d -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUAvuyJp+jaXJvlca/XXwNU+wAxtwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzA0NVoX DTI3MDUwMTA4MzU0NVowMzExMC8GA1UEAxMoQzI4MDNGQjZFRUU5N0NFRjFDNThE OUMwNjVBNEQ1OEI5NUFGRkUwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJMe186bLvWcL31TT2D4FLlf2Dv/a7/crKGFZrv4ba94GOf9C6HPKnAgupH8 eIwX1T36EPqZZhyDL5ItIRbbdurq9orC5X06URssDe/3NOTMr5pade1koJR5uzoZ iSjIqXWzeHtgiFjRw/6EACA8WD0GJXWvh4X14bFblUNOTUldmHsrJEq60EDiYXUW rzCR4QWNidw+D0z2Bs502vSTJHY+yuaL0wKTATzIRu6AVO3fm3eOp+fJRmitiXbT skvfXXC1X0G45CIRtXSfb/uARANExhjVIu29vXYOdLagchs7r0zrPR0r9nlNYSOy gPny1WCDwJsedilRFUo4acwEYnECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTCgD+2 7ul87xxY2cBlpNWLla/+AzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzODI0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAo+NwMA0GCSqGSIb3DQEBCwUAA4IBAQAioCsBs/OSVhO6Iigx95fwPElM HkF5q6JBqtnBLBHAQLYxcHoQdO43BmJsPlFVsBK4lLbpzYLe1yPVnAlJP3/lT6sj DalF1z3BiUPKp+eX0FhaHaqxbQyTc48fRhea6w86gPUJxflxFT+xOz01MdPrn2Nx uYTJAKrc8RiO9IfC4QKwWxONrBR6TtgguiMWmcs2ATVSg94A7FNB2eA1CyWEDLZa 1OQr7tyJxr3osuRbl9ThdadbVmiMDR4QB7rkUVYQlBh6pY/qJPEy42IZT3zywZ7c lYDgsiPPwDC/sT0hbWFeB7Gw1LUtTpbkfCQe2gSH9V6/PKc59NciMR/Z9jON -----END CERTIFICATE-----Generated at Sun May 3 00:40:24 2026 by rpki-client