$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153848.roa File: AS153848.roa (raw, json) Hash identifier: +v8hucqBEw++bSbhzq8ghuf4aPxbtXbVYDgO674VLZU= Subject key identifier: D9:65:6B:84:76:32:7D:FB:AF:88:09:38:33:D3:4C:AC:2D:E6:53:92 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 18FF1E64841EBAA794E0E5DDBD5B33FFE534F2E8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153848.roa Signing time: Sat 02 May 2026 09:26:33 +0000 ROA not before: Sat 02 May 2026 09:21:33 +0000 ROA not after: Sat 01 May 2027 09:26:33 +0000 asID: 153848 IP address blocks: 163.227.16.0/24 maxlen: 24 2001:df5:56c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ff:1e:64:84:1e:ba:a7:94:e0:e5:dd:bd:5b:33:ff:e5:34:f2:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:33 2026 GMT Not After : May 1 09:26:33 2027 GMT Subject: CN=D9656B8476327DFBAF88093833D34CAC2DE65392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:73:9f:96:37:ed:4e:7f:87:25:b6:dd:4e:23: 04:b2:2d:4e:70:43:64:82:9b:4f:e8:c6:62:8b:f1: ae:a7:54:cc:2d:e8:a6:3f:d9:9f:bd:b8:30:c8:97: 3e:fd:47:b6:16:42:c7:34:47:db:20:b0:dc:94:f3: 5b:3c:d4:de:49:16:1e:d6:9f:51:37:4e:60:78:35: 94:26:70:c4:d5:45:dd:16:4d:85:39:42:bd:19:b6: 90:7d:bd:46:1f:8e:10:fb:66:1a:f0:cc:68:42:65: b5:1a:6e:57:3f:17:ff:96:a6:d3:1f:9e:76:cd:40: 06:5c:52:03:85:5f:ad:fe:df:e1:c1:b9:69:96:33: 06:2d:91:8e:6a:70:34:a3:15:e8:91:b2:36:9a:45: 43:20:b3:60:bf:b4:ca:c0:96:d4:75:30:b6:08:29: bd:7f:2b:fc:8b:2d:bd:36:3f:bb:9d:b6:cb:33:ae: 13:34:9d:08:48:a8:9d:f1:cf:ff:ef:49:93:b4:e5: b0:59:20:a4:76:57:1f:11:43:0e:73:68:ba:f1:5e: c5:38:c9:aa:62:4a:1e:9b:68:64:27:84:72:79:63: 5a:20:e1:96:52:39:8f:45:61:ae:ea:09:13:ff:76: a1:c7:f1:b6:e0:37:37:83:4c:fc:c7:80:f9:68:6a: 0e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:65:6B:84:76:32:7D:FB:AF:88:09:38:33:D3:4C:AC:2D:E6:53:92 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153848.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.16.0/24 IPv6: 2001:df5:56c0::/48 Signature Algorithm: sha256WithRSAEncryption 78:e1:c4:b9:d4:e4:2e:a1:36:fd:a8:1c:87:5f:cf:31:cc:2d: ec:71:72:e8:5e:dd:bf:95:ad:ba:79:35:48:ac:68:34:3e:27: f3:2d:74:08:5d:c5:fe:4f:c0:79:c1:11:30:69:b9:24:db:a6: 39:82:05:16:52:60:ce:7c:08:a7:9f:8d:20:72:15:e4:de:c9: 51:3f:81:cb:12:96:ee:f8:35:38:69:e6:57:01:0d:71:3b:e7: 76:ec:f4:48:a3:ae:00:40:8e:ce:61:5c:a1:11:0c:3f:70:da: 7a:4d:bf:f1:4f:b0:ce:17:52:f3:00:45:4f:f1:15:f9:77:8e: 4c:1c:71:0a:cb:13:02:7f:af:7d:6a:aa:14:82:21:95:1d:e9: 55:2b:f0:6d:08:8b:bf:b7:f9:30:b5:4f:4a:0c:5f:de:5b:9c: ee:6d:a9:5d:42:85:fe:cf:2c:48:33:57:96:bf:d6:2f:65:87: b2:b9:0c:d6:c3:d7:09:4f:d1:81:ed:76:af:35:10:7b:d0:c4: 6c:8f:21:b4:de:76:be:12:3e:34:3b:dd:9a:b9:99:85:66:d7: a9:d6:ab:0e:91:18:17:90:24:27:ad:41:74:93:af:f8:ba:01: cf:bb:97:42:7a:6e:0e:b3:de:e2:33:91:53:4a:15:f0:78:d4: 81:cc:7a:30 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUGP8eZIQeuqeU4OXdvVsz/+U08ugwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjEzM1oX DTI3MDUwMTA5MjYzM1owMzExMC8GA1UEAxMoRDk2NTZCODQ3NjMyN0RGQkFGODgw OTM4MzNEMzRDQUMyREU2NTM5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKRzn5Y37U5/hyW23U4jBLItTnBDZIKbT+jGYovxrqdUzC3opj/Zn724MMiX Pv1HthZCxzRH2yCw3JTzWzzU3kkWHtafUTdOYHg1lCZwxNVF3RZNhTlCvRm2kH29 Rh+OEPtmGvDMaEJltRpuVz8X/5am0x+eds1ABlxSA4Vfrf7f4cG5aZYzBi2Rjmpw NKMV6JGyNppFQyCzYL+0ysCW1HUwtggpvX8r/IstvTY/u522yzOuEzSdCEionfHP /+9Jk7TlsFkgpHZXHxFDDnNouvFexTjJqmJKHptoZCeEcnljWiDhllI5j0VhruoJ E/92ocfxtuA3N4NM/MeA+WhqDvUCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBTZZWuE djJ9+6+ICTgz00ysLeZTkjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzODQ4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAo+MQMA8EAgACMAkDBwAgAQ31VsAwDQYJKoZIhvcNAQELBQADggEBAHjh xLnU5C6hNv2oHIdfzzHMLexxcuhe3b+Vrbp5NUisaDQ+J/MtdAhdxf5PwHnBETBp uSTbpjmCBRZSYM58CKefjSByFeTeyVE/gcsSlu74NThp5lcBDXE753bs9EijrgBA js5hXKERDD9w2npNv/FPsM4XUvMARU/xFfl3jkwccQrLEwJ/r31qqhSCIZUd6VUr 8G0Ii7+3+TC1T0oMX95bnO5tqV1Chf7PLEgzV5a/1i9lh7K5DNbD1wlP0YHtdq81 EHvQxGyPIbTedr4SPjQ73Zq5mYVm16nWqw6RGBeQJCetQXSTr/i6Ac+7l0J6bg6z 3uIzkVNKFfB41IHMejA= -----END CERTIFICATE-----Generated at Sun May 3 01:40:55 2026 by rpki-client