$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153858.roa File: AS153858.roa (raw, json) Hash identifier: OykAAQyTRFJQT5vtjeD7W5yh9ro+FfWP5MyPGtCZ8ls= Subject key identifier: FC:0D:23:CE:41:A0:71:63:2C:CA:47:D7:D4:E6:D7:D7:C1:8A:3C:5D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1978D56B0AC0D58AC77EE28D75CA99C1DDE94459 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153858.roa Signing time: Sat 02 May 2026 09:26:19 +0000 ROA not before: Sat 02 May 2026 09:21:19 +0000 ROA not after: Sat 01 May 2027 09:26:19 +0000 asID: 153858 IP address blocks: 163.227.176.0/24 maxlen: 24 2001:df5:7640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:78:d5:6b:0a:c0:d5:8a:c7:7e:e2:8d:75:ca:99:c1:dd:e9:44:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:19 2026 GMT Not After : May 1 09:26:19 2027 GMT Subject: CN=FC0D23CE41A071632CCA47D7D4E6D7D7C18A3C5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c5:d7:ce:57:a4:59:d2:ba:a5:95:d8:5d:c3: 70:e8:93:f4:b7:43:bd:59:56:71:3f:92:c0:b4:e7: 4c:d4:ee:67:9b:ba:49:7b:d7:e3:63:72:31:74:88: 3d:70:f6:11:d3:86:68:e9:70:18:db:de:18:5d:72: 72:66:af:b3:e0:d9:cf:0e:48:45:c1:ac:ee:4b:4a: 91:3a:74:ba:0e:06:6c:c6:08:fe:68:c2:48:b4:7d: 87:d3:da:e1:09:1b:0b:eb:3b:70:23:b3:20:f8:92: 61:54:57:8f:29:c0:23:8a:f8:67:29:b5:c1:47:6d: 8f:9c:6d:2d:b2:3e:3a:52:d4:6e:2d:aa:a7:20:b6: 74:72:b2:0f:88:33:59:e7:fc:3a:3e:b3:4f:52:40: d5:65:a3:94:d4:ec:fa:5d:dd:fb:d0:79:ae:e0:92: 88:fb:57:ca:8c:56:85:bd:62:fd:7f:83:9f:be:41: 64:f5:ba:32:ff:30:4d:d3:4d:1b:ab:02:f9:56:f2: bc:88:9e:df:9d:f2:11:ae:cd:9d:12:ed:b6:c6:c7: fe:72:e5:4e:fc:35:bd:05:34:9c:14:a9:5c:ed:be: 53:5a:99:cc:66:f6:69:37:3c:92:9b:6f:b0:e7:e0: 20:20:1b:36:60:6c:61:94:21:1c:3e:ab:6c:3a:2f: 25:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0D:23:CE:41:A0:71:63:2C:CA:47:D7:D4:E6:D7:D7:C1:8A:3C:5D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153858.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.176.0/24 IPv6: 2001:df5:7640::/48 Signature Algorithm: sha256WithRSAEncryption 06:e1:cb:29:2a:96:fa:ee:14:6b:ce:7b:13:a6:3c:56:dc:74: 1a:71:77:e2:5f:3c:3a:ac:ce:01:1f:6c:52:16:e3:fd:e0:c7: 8e:d1:82:ba:0f:59:b2:3c:ec:4e:d7:81:9f:7d:57:f8:d0:e7: 8e:04:e7:ff:42:71:22:0e:c8:1a:9a:76:26:22:14:f4:79:73: 8a:8f:54:09:92:c6:1b:31:87:5e:a3:b2:cd:dd:0c:69:8b:4e: a4:eb:a6:7a:c4:d2:35:2c:9d:c3:b8:fd:98:2c:73:7c:96:f6: 62:26:34:cd:2e:72:3a:b0:59:47:80:2b:8c:bf:05:97:f7:9a: a9:db:27:b9:9a:de:cc:8f:87:d8:9b:9b:9e:d3:a3:3c:6d:01: 0b:e9:2e:dc:63:07:53:03:c5:e7:cf:77:2e:22:d2:2d:cc:fe: 7c:23:75:7a:38:68:af:c0:b7:aa:d0:81:25:7d:63:8c:1d:97: 33:98:91:61:c5:bd:0a:c5:82:5e:b6:22:4c:a3:8c:a5:4f:73: e6:cd:2c:76:54:d1:8b:11:cd:e5:82:e6:a5:47:ee:8f:cd:e3: 97:ca:ab:7b:86:bb:58:38:45:bb:13:88:a5:d0:2e:90:14:a5: 75:93:88:c0:ba:af:49:0d:d3:24:3d:23:4a:c3:be:66:1b:31: 00:cc:07:53 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUGXjVawrA1YrHfuKNdcqZwd3pRFkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjExOVoX DTI3MDUwMTA5MjYxOVowMzExMC8GA1UEAxMoRkMwRDIzQ0U0MUEwNzE2MzJDQ0E0 N0Q3RDRFNkQ3RDdDMThBM0M1RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJzF185XpFnSuqWV2F3DcOiT9LdDvVlWcT+SwLTnTNTuZ5u6SXvX42NyMXSI PXD2EdOGaOlwGNveGF1ycmavs+DZzw5IRcGs7ktKkTp0ug4GbMYI/mjCSLR9h9Pa 4QkbC+s7cCOzIPiSYVRXjynAI4r4Zym1wUdtj5xtLbI+OlLUbi2qpyC2dHKyD4gz Wef8Oj6zT1JA1WWjlNTs+l3d+9B5ruCSiPtXyoxWhb1i/X+Dn75BZPW6Mv8wTdNN G6sC+VbyvIie353yEa7NnRLttsbH/nLlTvw1vQU0nBSpXO2+U1qZzGb2aTc8kptv sOfgICAbNmBsYZQhHD6rbDovJdcCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBT8DSPO QaBxYyzKR9fU5tfXwYo8XTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzODU4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAo+OwMA8EAgACMAkDBwAgAQ31dkAwDQYJKoZIhvcNAQELBQADggEBAAbh yykqlvruFGvOexOmPFbcdBpxd+JfPDqszgEfbFIW4/3gx47RgroPWbI87E7XgZ99 V/jQ544E5/9CcSIOyBqadiYiFPR5c4qPVAmSxhsxh16jss3dDGmLTqTrpnrE0jUs ncO4/Zgsc3yW9mImNM0ucjqwWUeAK4y/BZf3mqnbJ7ma3syPh9ibm57TozxtAQvp LtxjB1MDxefPdy4i0i3M/nwjdXo4aK/At6rQgSV9Y4wdlzOYkWHFvQrFgl62Ikyj jKVPc+bNLHZU0YsRzeWC5qVH7o/N45fKq3uGu1g4RbsTiKXQLpAUpXWTiMC6r0kN 0yQ9I0rDvmYbMQDMB1M= -----END CERTIFICATE-----Generated at Sun May 3 00:39:52 2026 by rpki-client