$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153880.roa File: AS153880.roa (raw, json) Hash identifier: 5kr/YPxZu10oaZYyQRIN31WvGX8lorCySvdSYus8Jlc= Subject key identifier: 5B:A4:26:C7:1A:B8:86:E8:DC:4F:3E:B4:50:AF:00:E8:FE:0D:67:F3 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6DA1A9BA5F809319892A48DC14D0DC6C0C1C71FD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153880.roa Signing time: Sat 02 May 2026 09:26:30 +0000 ROA not before: Sat 02 May 2026 09:21:30 +0000 ROA not after: Sat 01 May 2027 09:26:30 +0000 asID: 153880 IP address blocks: 163.227.148.0/24 maxlen: 24 2001:df5:6fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:a1:a9:ba:5f:80:93:19:89:2a:48:dc:14:d0:dc:6c:0c:1c:71:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:30 2026 GMT Not After : May 1 09:26:30 2027 GMT Subject: CN=5BA426C71AB886E8DC4F3EB450AF00E8FE0D67F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:94:9c:e8:3c:b2:39:96:99:a0:d7:56:17:99: 7f:03:e0:60:e2:22:9f:d9:01:df:3e:73:37:f6:0c: 7d:ff:eb:ac:75:9a:46:68:1a:5a:42:2c:ac:8f:ff: 6e:a8:e6:83:95:bc:fa:31:0d:bf:6c:88:f3:e1:52: 5e:56:93:0f:66:83:d0:24:8a:01:69:9c:35:2a:b8: 40:c0:24:88:cc:32:30:4b:3b:03:86:f7:a3:44:56: 81:36:fe:40:46:54:d5:bb:26:e9:dd:42:44:74:56: 27:b3:d4:03:34:e4:a5:71:1c:00:cd:ec:d1:97:10: c1:32:71:5d:ac:4b:63:68:be:74:f4:b6:b3:65:90: d4:52:fb:d2:5b:1f:25:c1:3c:fa:23:2f:c2:3b:65: d5:b3:4f:d7:6e:60:e5:ab:d7:a5:95:b9:59:e8:cc: fa:f7:b7:6b:1b:46:a5:0e:3f:ca:33:d2:13:ea:40: f5:fe:ce:ac:04:ef:21:9f:d1:a9:79:f6:c9:63:7c: 6e:91:c5:a7:ac:45:f4:e1:53:ba:c4:f5:96:bc:8d: ef:6f:4a:43:78:d2:df:3a:a9:ca:1e:f3:af:c0:fe: 57:5b:6b:8a:46:dc:81:8d:36:ed:b6:54:21:e4:69: a2:b5:b9:b8:ba:48:a3:39:79:10:25:e5:ea:fd:e2: 07:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A4:26:C7:1A:B8:86:E8:DC:4F:3E:B4:50:AF:00:E8:FE:0D:67:F3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153880.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.148.0/24 IPv6: 2001:df5:6fc0::/48 Signature Algorithm: sha256WithRSAEncryption 5f:9a:a4:ce:54:1a:72:fc:6e:a0:d8:fb:b2:6c:17:0c:10:a0: 2a:23:47:00:32:11:ac:2a:57:aa:40:32:64:74:9b:38:74:07: df:97:f9:e5:09:36:de:07:89:de:4d:ec:01:6c:81:68:7c:78: 8a:48:e7:f0:bc:05:e6:61:43:69:0d:e5:1f:c6:d4:a4:4e:76: 69:d7:0e:04:f3:72:b3:fb:0c:9a:06:fb:28:bf:10:a0:40:0e: 6b:62:93:ab:82:d9:08:4d:90:8c:d4:bb:61:31:76:40:8d:eb: 4d:c0:d3:d1:51:28:87:1e:8d:3b:23:67:e9:de:fb:44:6b:bc: ba:8e:bc:ab:9d:1c:e7:16:9b:b8:3e:25:03:50:ce:eb:ab:74: dd:69:be:12:f4:fe:ca:90:b3:fa:d7:af:ed:d9:36:c7:ac:51: 13:09:86:e3:f5:44:65:b9:63:15:df:5e:7d:17:b3:ba:4b:7e: d0:4f:8d:62:b8:e5:8a:9a:0e:f8:b1:18:f0:f6:30:db:16:14: 26:f8:5e:c4:7f:5c:d4:9a:c9:ba:3f:ef:10:ef:67:de:cc:26: 4b:9d:33:65:fa:12:8f:0e:f9:f1:9d:d4:91:9b:3f:3d:53:7f: 5e:16:37:ff:9b:2c:d5:3a:c1:c1:24:fc:d2:27:d1:32:a3:12: 4f:09:88:30 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUbaGpul+AkxmJKkjcFNDcbAwccf0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjEzMFoX DTI3MDUwMTA5MjYzMFowMzExMC8GA1UEAxMoNUJBNDI2QzcxQUI4ODZFOERDNEYz RUI0NTBBRjAwRThGRTBENjdGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMeUnOg8sjmWmaDXVheZfwPgYOIin9kB3z5zN/YMff/rrHWaRmgaWkIsrI// bqjmg5W8+jENv2yI8+FSXlaTD2aD0CSKAWmcNSq4QMAkiMwyMEs7A4b3o0RWgTb+ QEZU1bsm6d1CRHRWJ7PUAzTkpXEcAM3s0ZcQwTJxXaxLY2i+dPS2s2WQ1FL70lsf JcE8+iMvwjtl1bNP125g5avXpZW5WejM+ve3axtGpQ4/yjPSE+pA9f7OrATvIZ/R qXn2yWN8bpHFp6xF9OFTusT1lryN729KQ3jS3zqpyh7zr8D+V1trikbcgY027bZU IeRporW5uLpIozl5ECXl6v3iB8kCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBRbpCbH GriG6NxPPrRQrwDo/g1n8zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzODgwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAo+OUMA8EAgACMAkDBwAgAQ31b8AwDQYJKoZIhvcNAQELBQADggEBAF+a pM5UGnL8bqDY+7JsFwwQoCojRwAyEawqV6pAMmR0mzh0B9+X+eUJNt4Hid5N7AFs gWh8eIpI5/C8BeZhQ2kN5R/G1KROdmnXDgTzcrP7DJoG+yi/EKBADmtik6uC2QhN kIzUu2ExdkCN603A09FRKIcejTsjZ+ne+0RrvLqOvKudHOcWm7g+JQNQzuurdN1p vhL0/sqQs/rXr+3ZNsesURMJhuP1RGW5YxXfXn0Xs7pLftBPjWK45YqaDvixGPD2 MNsWFCb4XsR/XNSaybo/7xDvZ97MJkudM2X6Eo8O+fGd1JGbPz1Tf14WN/+bLNU6 wcEk/NIn0TKjEk8JiDA= -----END CERTIFICATE-----Generated at Sun May 3 01:40:39 2026 by rpki-client