$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153887.roa File: AS153887.roa (raw, json) Hash identifier: wpFhvFurIVAYFyhmd2+SZ6rjU7odayq5oQQ9BWk85DQ= Subject key identifier: C7:7B:24:F0:F3:E9:8D:9A:65:FA:D0:1F:90:15:8E:21:C6:35:F8:DB Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 417CCB7B61C88A8FF34EE0B8AFC2E61F3931E7DE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153887.roa Signing time: Sat 02 May 2026 09:24:42 +0000 ROA not before: Sat 02 May 2026 09:19:42 +0000 ROA not after: Sat 01 May 2027 09:24:42 +0000 asID: 153887 IP address blocks: 163.227.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:7c:cb:7b:61:c8:8a:8f:f3:4e:e0:b8:af:c2:e6:1f:39:31:e7:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:19:42 2026 GMT Not After : May 1 09:24:42 2027 GMT Subject: CN=C77B24F0F3E98D9A65FAD01F90158E21C635F8DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:71:89:ff:04:03:f3:6b:c7:87:a3:91:bf:a2: ed:c2:4d:1c:3d:77:3e:90:ed:0f:25:e4:24:ab:c3: 11:e7:ca:8b:8a:b8:92:6f:c1:40:27:24:04:98:2b: 8c:5d:cb:ad:49:cf:b6:7a:0a:87:c3:0b:4c:5f:c2: 51:c2:7b:f8:01:a8:e0:1f:f0:96:a4:02:cd:a6:94: 35:a1:25:39:58:1e:85:0c:fe:57:12:92:06:ed:22: 6c:d4:66:b8:dd:41:53:66:3e:4d:ae:ca:b0:ef:d1: 63:83:03:a4:e7:62:e5:a0:bd:cc:6e:90:53:ac:b9: 87:0f:ab:33:49:70:fa:c5:ab:01:56:65:c0:70:79: 21:63:22:ea:4e:b2:87:39:63:f0:a7:44:bb:a3:a1: 13:34:33:45:e7:5b:44:54:f5:31:b0:9c:70:f7:70: 4d:00:d1:ab:bb:f5:53:5f:b0:e8:c0:d6:1a:f0:0f: ee:f8:f5:57:8a:3a:1f:3e:df:54:30:33:4d:cc:fd: 16:1d:15:a4:64:00:ff:b2:80:68:da:4c:8e:2e:88: c2:8c:eb:37:8d:5c:0a:75:f6:dd:bc:61:2b:6d:f0: 60:35:45:d4:09:40:5f:02:b7:a5:3d:ba:4a:44:0d: c2:cf:a6:f8:c7:f8:2d:bf:05:1c:3a:ba:e4:cb:dd: 04:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7B:24:F0:F3:E9:8D:9A:65:FA:D0:1F:90:15:8E:21:C6:35:F8:DB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153887.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.252.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:1f:5d:16:0a:a8:35:94:98:ca:7c:da:9d:4a:83:c0:93:32: 31:e1:15:f3:85:c5:e7:35:b7:12:33:b4:89:53:02:1b:1d:fb: f8:f8:5e:8a:17:12:8c:b2:37:f5:c3:27:6e:6e:04:00:0a:3e: 56:d0:5f:90:11:ec:22:96:89:ea:f4:2a:5d:65:50:ee:42:d7: 25:2f:15:8c:11:d7:34:bf:20:5c:3e:0a:0d:e0:d8:4f:d6:b3: 54:77:0e:b6:37:e4:a0:6b:1e:9c:47:ea:49:a2:d2:b3:9b:b1: c9:d8:94:d2:c9:32:ce:bb:10:9f:6a:d7:49:f7:49:17:ea:76: 42:77:18:c3:65:e4:96:4e:38:80:e2:7f:6e:94:06:69:5e:a5: 88:a3:2a:cb:ec:a4:c4:ab:03:15:00:28:1d:15:e0:58:1b:60: ab:b7:94:ee:42:83:65:9b:9e:9a:49:4d:08:39:5b:a9:f9:2b: 61:05:1d:54:76:6d:59:73:fc:45:37:a8:1e:61:e5:f4:e3:08: d0:0c:97:22:7f:2f:51:43:31:05:e1:6d:18:04:79:f2:cb:12: ec:7d:4b:77:03:01:92:d2:1f:8d:3e:9e:b4:d0:0f:b1:da:af: 47:44:1d:99:0e:cb:6f:d9:74:df:d2:fd:83:6c:bb:0a:31:a6: 4d:f3:4e:30 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUQXzLe2HIio/zTuC4r8LmHzkx594wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTk0MloX DTI3MDUwMTA5MjQ0MlowMzExMC8GA1UEAxMoQzc3QjI0RjBGM0U5OEQ5QTY1RkFE MDFGOTAxNThFMjFDNjM1RjhEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMlxif8EA/Nrx4ejkb+i7cJNHD13PpDtDyXkJKvDEefKi4q4km/BQCckBJgr jF3LrUnPtnoKh8MLTF/CUcJ7+AGo4B/wlqQCzaaUNaElOVgehQz+VxKSBu0ibNRm uN1BU2Y+Ta7KsO/RY4MDpOdi5aC9zG6QU6y5hw+rM0lw+sWrAVZlwHB5IWMi6k6y hzlj8KdEu6OhEzQzRedbRFT1MbCccPdwTQDRq7v1U1+w6MDWGvAP7vj1V4o6Hz7f VDAzTcz9Fh0VpGQA/7KAaNpMji6IwozrN41cCnX23bxhK23wYDVF1AlAXwK3pT26 SkQNws+m+Mf4Lb8FHDq65MvdBHECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTHeyTw 8+mNmmX60B+QFY4hxjX42zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzODg3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAo+P8MA0GCSqGSIb3DQEBCwUAA4IBAQCNH10WCqg1lJjKfNqdSoPAkzIx 4RXzhcXnNbcSM7SJUwIbHfv4+F6KFxKMsjf1wydubgQACj5W0F+QEewilonq9Cpd ZVDuQtclLxWMEdc0vyBcPgoN4NhP1rNUdw62N+Sgax6cR+pJotKzm7HJ2JTSyTLO uxCfatdJ90kX6nZCdxjDZeSWTjiA4n9ulAZpXqWIoyrL7KTEqwMVACgdFeBYG2Cr t5TuQoNlm56aSU0IOVup+SthBR1Udm1Zc/xFN6geYeX04wjQDJcify9RQzEF4W0Y BHnyyxLsfUt3AwGS0h+NPp600A+x2q9HRB2ZDstv2XTf0v2DbLsKMaZN804w -----END CERTIFICATE-----Generated at Sun May 3 01:40:39 2026 by rpki-client