$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153888.roa File: AS153888.roa (raw, json) Hash identifier: u4VEqJlxkxZOb0G/2oVI13AA8BkdmB7FP3UHB4aUGq4= Subject key identifier: 78:E0:2E:6E:34:23:D3:A2:F1:AA:FB:14:39:5E:9B:A4:FF:67:D5:E6 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6A3B2CC085A735A5545562B875E8C81DE28D254D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153888.roa Signing time: Sat 02 May 2026 09:24:41 +0000 ROA not before: Sat 02 May 2026 09:19:41 +0000 ROA not after: Sat 01 May 2027 09:24:41 +0000 asID: 153888 IP address blocks: 163.227.168.0/23 maxlen: 24 2001:df5:7540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:3b:2c:c0:85:a7:35:a5:54:55:62:b8:75:e8:c8:1d:e2:8d:25:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:19:41 2026 GMT Not After : May 1 09:24:41 2027 GMT Subject: CN=78E02E6E3423D3A2F1AAFB14395E9BA4FF67D5E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b4:84:ce:f3:4e:2f:52:6f:aa:fe:4f:48:f6: 6e:03:00:d3:70:c3:e4:af:5b:1d:80:df:ee:9c:65: eb:e4:34:73:65:af:60:05:1b:c5:dd:8b:1e:40:53: fb:e5:2b:2f:f6:e6:83:69:88:0e:50:9b:61:34:0c: ed:fe:3e:fb:38:21:ab:d3:ae:5f:f9:13:3c:d5:eb: d0:30:b6:03:5f:c3:08:f1:99:96:e5:d2:fe:b2:f1: 45:03:b9:cd:5f:c6:76:8b:80:4b:33:d7:98:f4:89: 57:3c:52:9b:ba:6d:46:6f:d1:81:83:85:01:e1:9a: 64:84:3e:35:e1:4b:cf:e7:a8:20:5c:6f:97:1e:4b: 38:df:03:35:7b:aa:7d:99:8b:b4:f8:cb:59:5d:d2: 96:ea:58:6f:26:3f:c2:98:a1:1c:dd:f5:53:8a:15: 7a:4d:9c:dd:57:34:63:68:0b:10:17:b9:43:4b:c0: 48:43:49:66:59:94:9c:f0:c0:40:80:cd:c6:40:1b: c2:a1:70:c3:d8:31:3e:c8:85:53:20:26:68:85:e7: f0:de:95:ce:a4:74:3f:73:95:a6:ef:94:b6:98:90: e3:45:63:02:d5:1e:3d:22:3d:50:ba:11:83:35:c9: 41:0c:3f:f9:d2:77:6c:ca:23:ab:8d:ab:aa:e8:65: 53:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E0:2E:6E:34:23:D3:A2:F1:AA:FB:14:39:5E:9B:A4:FF:67:D5:E6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153888.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.168.0/23 IPv6: 2001:df5:7540::/48 Signature Algorithm: sha256WithRSAEncryption 88:29:62:71:d3:8c:98:84:60:a6:f2:ee:c4:d3:15:9f:5e:7b: 6b:59:80:e4:a1:97:89:85:6c:64:cc:4b:e4:a3:5b:8b:46:ff: 2d:39:89:23:2e:69:d1:72:5d:3c:be:2b:ee:ef:74:49:15:b8: 0a:22:e9:0b:79:b5:ee:34:9b:db:ad:13:1c:3d:03:fc:3b:1a: 3a:3f:21:3d:ae:c1:28:62:c1:d2:92:fa:06:d0:cb:ff:0d:cc: 8a:08:ca:06:05:26:73:d9:0a:0f:1a:fc:d6:8b:6d:0f:bf:73: d4:c4:b5:f3:17:fe:3e:e9:a0:aa:3e:57:c5:2d:f6:8f:45:2a: 81:62:fb:02:a1:97:2f:80:68:21:70:76:f3:22:f2:31:2c:54: 8d:8d:4e:ed:de:4c:5e:c2:eb:37:9e:7a:91:44:d7:d4:72:55: 3e:4b:e3:0d:15:a7:ee:62:95:f7:29:7d:f6:bd:a3:1c:aa:52: 4b:63:f2:86:e8:1e:fe:ea:a8:d6:67:ee:a0:dc:36:69:45:cd: 8c:21:19:64:86:e3:65:60:8b:ef:d4:06:c9:4b:7f:b2:3d:59: 21:b3:0c:1a:4a:ff:21:b6:05:d2:72:c2:56:4e:7b:9a:d1:33: ef:46:51:35:67:50:ff:be:81:f3:a1:81:29:26:6e:29:b5:a3: 23:76:fd:c7 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUajsswIWnNaVUVWK4dejIHeKNJU0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTk0MVoX DTI3MDUwMTA5MjQ0MVowMzExMC8GA1UEAxMoNzhFMDJFNkUzNDIzRDNBMkYxQUFG QjE0Mzk1RTlCQTRGRjY3RDVFNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK20hM7zTi9Sb6r+T0j2bgMA03DD5K9bHYDf7pxl6+Q0c2WvYAUbxd2LHkBT ++UrL/bmg2mIDlCbYTQM7f4++zghq9OuX/kTPNXr0DC2A1/DCPGZluXS/rLxRQO5 zV/GdouASzPXmPSJVzxSm7ptRm/RgYOFAeGaZIQ+NeFLz+eoIFxvlx5LON8DNXuq fZmLtPjLWV3SlupYbyY/wpihHN31U4oVek2c3Vc0Y2gLEBe5Q0vASENJZlmUnPDA QIDNxkAbwqFww9gxPsiFUyAmaIXn8N6VzqR0P3OVpu+UtpiQ40VjAtUePSI9ULoR gzXJQQw/+dJ3bMojq42rquhlU8UCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBR44C5u NCPTovGq+xQ5Xpuk/2fV5jAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzODg4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBo+OoMA8EAgACMAkDBwAgAQ31dUAwDQYJKoZIhvcNAQELBQADggEBAIgp YnHTjJiEYKby7sTTFZ9ee2tZgOShl4mFbGTMS+SjW4tG/y05iSMuadFyXTy+K+7v dEkVuAoi6Qt5te40m9utExw9A/w7Gjo/IT2uwShiwdKS+gbQy/8NzIoIygYFJnPZ Cg8a/NaLbQ+/c9TEtfMX/j7poKo+V8Ut9o9FKoFi+wKhly+AaCFwdvMi8jEsVI2N Tu3eTF7C6zeeepFE19RyVT5L4w0Vp+5ilfcpffa9oxyqUktj8oboHv7qqNZn7qDc NmlFzYwhGWSG42Vgi+/UBslLf7I9WSGzDBpK/yG2BdJywlZOe5rRM+9GUTVnUP++ gfOhgSkmbim1oyN2/cc= -----END CERTIFICATE-----Generated at Sun May 3 01:44:01 2026 by rpki-client