$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153871.roa File: AS153871.roa (raw, json) Hash identifier: Mqp0hqsy+sLS8McVV9P7ZsiHuIsE0Rw7TaOxQY8n8q4= Subject key identifier: 7B:72:A7:EA:54:6A:40:5E:DA:08:53:18:0E:1F:40:CC:BF:F8:D9:9A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3BA7E1674D6D46F5215D5D2312F0DDD7F6D6586B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153871.roa Signing time: Sat 02 May 2026 09:26:23 +0000 ROA not before: Sat 02 May 2026 09:21:23 +0000 ROA not after: Sat 01 May 2027 09:26:23 +0000 asID: 153871 IP address blocks: 163.227.232.0/24 maxlen: 24 2001:df5:7e40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a7:e1:67:4d:6d:46:f5:21:5d:5d:23:12:f0:dd:d7:f6:d6:58:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:23 2026 GMT Not After : May 1 09:26:23 2027 GMT Subject: CN=7B72A7EA546A405EDA0853180E1F40CCBFF8D99A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a8:7a:96:6f:af:55:d8:b7:8c:b6:f1:68:16: 68:be:1a:e2:4f:4e:67:e0:cf:14:1c:5a:af:1b:16: 4e:78:55:eb:b2:1c:e8:5e:01:95:5a:88:1f:c7:b7: a1:df:1b:66:d9:b4:81:f4:56:9f:ff:d2:60:eb:9e: b8:8a:2f:93:1d:4a:18:41:53:a1:1c:2e:ba:46:ee: 5a:c6:4f:fd:2b:69:f9:fc:97:8e:76:07:79:52:fc: 45:e5:c2:ed:29:b1:36:88:7c:00:6e:0b:55:bf:2e: 13:70:05:80:c9:ff:6f:0a:85:9e:6e:8f:49:41:e3: 19:64:93:df:42:22:d0:56:ed:da:0d:4f:6c:e7:61: e1:7d:05:69:48:aa:24:43:28:80:65:cf:e3:d5:30: ea:da:92:6b:eb:35:66:35:1f:0d:9d:be:3f:fa:e8: ff:5b:c5:49:34:5a:2e:6c:8e:81:18:d9:d1:d5:f3: 22:63:09:f1:2e:ff:4b:72:19:c0:c5:f5:83:ed:bc: 23:c8:23:be:4c:fb:2e:3c:1c:95:75:d1:3d:aa:48: d1:57:a7:b3:ce:d3:c9:a4:de:cf:2d:c0:b5:e1:63: c6:05:78:a5:ad:de:88:5f:29:a8:b9:89:d0:b3:81: 04:c1:89:53:8e:65:8c:75:c2:1b:b1:eb:ab:d9:e2: 71:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:72:A7:EA:54:6A:40:5E:DA:08:53:18:0E:1F:40:CC:BF:F8:D9:9A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153871.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.232.0/24 IPv6: 2001:df5:7e40::/48 Signature Algorithm: sha256WithRSAEncryption 45:ae:6d:53:4f:93:8a:20:f9:06:9f:d1:04:be:84:da:be:de: af:b5:66:fd:a4:d6:38:d8:c4:c5:e8:a4:59:50:8f:86:5e:62: 2c:b9:e2:2b:df:26:48:0e:0e:d3:26:99:04:90:b5:24:2a:5d: 25:eb:1a:f2:21:4c:21:9e:42:6b:fa:a5:44:9d:b6:fb:83:6a: 8d:01:c3:fe:42:3a:6e:96:de:4e:b3:d3:9f:6d:0f:0f:37:74: ab:b6:57:b8:2a:41:70:52:6b:d4:1b:ef:31:d0:6d:85:48:5f: 02:a0:18:19:7d:8f:46:96:a1:b2:ed:de:b0:d8:b2:6f:f0:e2: 04:b1:76:18:80:17:1f:11:8d:3b:6d:0e:7c:3e:b1:e9:5b:ef: 46:19:7a:86:dc:e3:c7:5f:ad:e6:7e:32:ed:e6:a1:ff:7e:de: 62:73:16:f1:3a:ca:3f:a4:79:e3:ed:7c:85:57:61:ff:de:ab: e9:5c:72:9b:75:2c:da:03:11:e6:f2:4c:fb:48:f0:bf:77:4e: e4:c5:c4:c5:3c:54:77:b2:12:b4:b3:9d:82:6d:f8:bb:c8:b3: 05:86:fa:2a:59:ea:73:3b:71:a0:34:7b:36:61:49:40:03:2f: 17:d6:5f:0f:93:0f:71:1d:48:7f:9d:f5:cb:b5:4c:ea:fd:c1: aa:85:8d:29 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUO6fhZ01tRvUhXV0jEvDd1/bWWGswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjEyM1oX DTI3MDUwMTA5MjYyM1owMzExMC8GA1UEAxMoN0I3MkE3RUE1NDZBNDA1RURBMDg1 MzE4MEUxRjQwQ0NCRkY4RDk5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJuoepZvr1XYt4y28WgWaL4a4k9OZ+DPFBxarxsWTnhV67Ic6F4BlVqIH8e3 od8bZtm0gfRWn//SYOueuIovkx1KGEFToRwuukbuWsZP/Stp+fyXjnYHeVL8ReXC 7SmxNoh8AG4LVb8uE3AFgMn/bwqFnm6PSUHjGWST30Ii0Fbt2g1PbOdh4X0FaUiq JEMogGXP49Uw6tqSa+s1ZjUfDZ2+P/ro/1vFSTRaLmyOgRjZ0dXzImMJ8S7/S3IZ wMX1g+28I8gjvkz7LjwclXXRPapI0Vens87TyaTezy3AteFjxgV4pa3eiF8pqLmJ 0LOBBMGJU45ljHXCG7Hrq9nicYcCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBR7cqfq VGpAXtoIUxgOH0DMv/jZmjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzODcxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAo+PoMA8EAgACMAkDBwAgAQ31fkAwDQYJKoZIhvcNAQELBQADggEBAEWu bVNPk4og+Qaf0QS+hNq+3q+1Zv2k1jjYxMXopFlQj4ZeYiy54ivfJkgODtMmmQSQ tSQqXSXrGvIhTCGeQmv6pUSdtvuDao0Bw/5COm6W3k6z059tDw83dKu2V7gqQXBS a9Qb7zHQbYVIXwKgGBl9j0aWobLt3rDYsm/w4gSxdhiAFx8RjTttDnw+selb70YZ eobc48dfreZ+Mu3mof9+3mJzFvE6yj+keePtfIVXYf/eq+lccpt1LNoDEebyTPtI 8L93TuTFxMU8VHeyErSznYJt+LvIswWG+ipZ6nM7caA0ezZhSUADLxfWXw+TD3Ed SH+d9cu1TOr9waqFjSk= -----END CERTIFICATE-----Generated at Sun May 3 00:39:41 2026 by rpki-client