$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153882.roa File: AS153882.roa (raw, json) Hash identifier: LZUlRqaptMQV5s5LU6JOPSwn4wyyGLXbypjjuct8ER8= Subject key identifier: 76:C7:10:F5:A3:C1:17:3F:87:1E:17:F5:85:D7:89:6F:51:0F:88:E9 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1AD9FF07586C659FF85FEB1CF3647DF4E593DF33 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153882.roa Signing time: Sat 02 May 2026 09:24:40 +0000 ROA not before: Sat 02 May 2026 09:19:40 +0000 ROA not after: Sat 01 May 2027 09:24:40 +0000 asID: 153882 IP address blocks: 163.227.10.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d9:ff:07:58:6c:65:9f:f8:5f:eb:1c:f3:64:7d:f4:e5:93:df:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:19:40 2026 GMT Not After : May 1 09:24:40 2027 GMT Subject: CN=76C710F5A3C1173F871E17F585D7896F510F88E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0a:fb:55:d7:98:ed:b2:fa:db:4a:27:99:30: 55:bf:5d:a0:5c:82:41:72:a6:b6:13:01:9d:4c:f7: e3:68:e7:93:36:b9:d2:2c:ce:e9:8c:c7:ac:ec:87: 95:8e:42:f2:92:63:8b:2a:a3:ea:44:98:d1:e9:1d: 6d:c9:91:3e:44:6d:dc:10:f1:27:a3:d8:89:0c:d4: 3f:c7:6c:8b:20:e0:53:e8:b8:3b:f8:a3:ba:ae:59: e4:b9:b6:23:3b:7a:c7:e8:a6:c4:9b:ca:23:9c:dd: c8:da:fe:e7:ea:3a:ff:5b:b7:4c:2c:a6:8f:de:30: 9b:7e:73:ac:05:c2:c3:64:ed:51:ec:73:2a:df:a7: a7:a1:f7:42:36:d0:5b:6e:a7:46:6c:da:b1:28:90: bb:3f:9e:76:76:36:08:65:ec:0f:41:0c:f2:05:36: 6f:c6:be:9b:2f:00:d0:e2:e2:b0:1d:37:a3:b9:25: 91:1d:f6:ae:35:4f:ae:65:9e:96:28:69:8e:33:78: a9:f9:0b:9e:d0:cd:77:62:58:ff:7f:63:c2:64:51: b9:0d:b4:5d:7c:3a:06:e5:c4:da:24:ee:86:97:37: 7f:6f:31:4c:e4:f3:69:19:06:95:d0:69:33:81:7d: c1:e4:58:54:8c:f6:e0:14:c5:f2:50:05:2f:55:27: 00:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C7:10:F5:A3:C1:17:3F:87:1E:17:F5:85:D7:89:6F:51:0F:88:E9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153882.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.10.0/23 Signature Algorithm: sha256WithRSAEncryption 58:75:f1:ba:a9:e9:a7:7b:44:38:f8:e8:b8:ff:cd:f8:03:df: 7e:a6:f4:2f:68:92:4b:39:23:dc:ff:40:f9:9f:42:0b:00:e4: 04:08:b4:06:fc:37:1c:1d:bb:25:e0:17:86:76:2d:3b:88:99: 4c:75:41:ea:b2:d1:e0:0c:91:f2:96:29:2d:38:ce:21:a1:95: 2f:3b:4d:0e:76:a4:f7:86:4f:3d:b2:e5:7d:1e:eb:36:ac:a7: fe:3b:52:f4:6d:d3:bd:e3:de:83:e7:c6:18:d0:1d:ef:f5:65: b4:c7:dd:f8:30:95:c1:77:bc:2a:54:c0:10:91:23:34:6c:6e: d8:ca:72:02:14:4e:c5:5d:4b:b1:0b:43:0d:76:61:24:fe:1b: e7:83:9e:95:72:bd:3a:0f:4e:14:10:91:37:16:1d:e0:57:36: 8d:8f:fb:51:50:0b:3e:46:86:1d:ef:4c:e1:ce:a4:0f:8b:5b: 68:f1:51:4e:9f:bd:ca:80:04:5c:ec:ea:63:8e:a8:e6:02:e4: ca:12:4c:60:96:f6:30:1c:52:29:24:03:cb:a0:f7:4e:4c:d2: 41:ab:32:81:52:62:d8:72:45:d3:d7:b0:63:7b:cb:df:9a:2a: be:7c:bb:f4:26:57:4c:93:ea:2d:31:b1:16:a8:4b:36:08:d1: 07:b9:84:25 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUGtn/B1hsZZ/4X+sc82R99OWT3zMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTk0MFoX DTI3MDUwMTA5MjQ0MFowMzExMC8GA1UEAxMoNzZDNzEwRjVBM0MxMTczRjg3MUUx N0Y1ODVENzg5NkY1MTBGODhFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK0K+1XXmO2y+ttKJ5kwVb9doFyCQXKmthMBnUz342jnkza50izO6YzHrOyH lY5C8pJjiyqj6kSY0ekdbcmRPkRt3BDxJ6PYiQzUP8dsiyDgU+i4O/ijuq5Z5Lm2 Izt6x+imxJvKI5zdyNr+5+o6/1u3TCymj94wm35zrAXCw2TtUexzKt+np6H3QjbQ W26nRmzasSiQuz+ednY2CGXsD0EM8gU2b8a+my8A0OLisB03o7klkR32rjVPrmWe lihpjjN4qfkLntDNd2JY/39jwmRRuQ20XXw6BuXE2iTuhpc3f28xTOTzaRkGldBp M4F9weRYVIz24BTF8lAFL1UnAFMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBR2xxD1 o8EXP4ceF/WF14lvUQ+I6TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzODgyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBo+MKMA0GCSqGSIb3DQEBCwUAA4IBAQBYdfG6qemne0Q4+Oi4/834A99+ pvQvaJJLOSPc/0D5n0ILAOQECLQG/DccHbsl4BeGdi07iJlMdUHqstHgDJHylikt OM4hoZUvO00OdqT3hk89suV9Hus2rKf+O1L0bdO9496D58YY0B3v9WW0x934MJXB d7wqVMAQkSM0bG7YynICFE7FXUuxC0MNdmEk/hvng56Vcr06D04UEJE3Fh3gVzaN j/tRUAs+RoYd70zhzqQPi1to8VFOn73KgARc7OpjjqjmAuTKEkxglvYwHFIpJAPL oPdOTNJBqzKBUmLYckXT17Bje8vfmiq+fLv0JldMk+otMbEWqEs2CNEHuYQl -----END CERTIFICATE-----Generated at Sun May 3 01:40:54 2026 by rpki-client