$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153697.roa File: AS153697.roa (raw, json) Hash identifier: ZOLVQBGI1d3rpbB5/M3tCzwdt3Rpjqzsg+TA+yyWIcI= Subject key identifier: 29:58:37:9A:E5:83:19:2D:B0:EE:33:43:45:1D:41:9B:A0:9D:30:3C Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 534A8027DA4E564C26AABB3C54972A157467DC8E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153697.roa Signing time: Tue 17 Mar 2026 03:00:00 +0000 ROA not before: Tue 17 Mar 2026 02:55:00 +0000 ROA not after: Tue 16 Mar 2027 03:00:00 +0000 asID: 153697 IP address blocks: 163.223.78.0/23 maxlen: 24 2001:df5:37c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:4a:80:27:da:4e:56:4c:26:aa:bb:3c:54:97:2a:15:74:67:dc:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 17 02:55:00 2026 GMT Not After : Mar 16 03:00:00 2027 GMT Subject: CN=2958379AE583192DB0EE3343451D419BA09D303C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5c:10:d9:0a:36:27:c6:bc:be:0d:12:fa:ad: 0b:67:95:e2:b7:6e:db:5e:44:a4:92:50:5d:ae:f2: 6c:d5:0e:b6:d7:9e:0d:49:a7:d9:71:c8:4d:a4:da: 35:2e:7b:22:b9:f4:5f:4d:57:a2:c1:ab:31:34:49: 80:59:7f:0c:78:2f:4f:db:c5:af:a5:5b:c0:71:c5: 3c:c3:6a:e7:fc:3c:cf:85:a8:79:80:b8:a2:35:d9: ba:21:b5:43:1c:c2:b6:9f:c8:48:5c:2e:78:1e:2d: b7:7f:24:6c:05:b0:87:8a:74:79:6e:9e:d6:38:96: f1:a9:9d:d0:ee:40:c9:b4:72:04:2f:1a:cf:89:4f: 44:bd:81:ff:ce:36:3f:f2:ce:fe:94:11:c3:95:57: ed:c7:a9:8e:f9:1a:f8:38:22:e1:64:e1:5e:db:79: da:ef:6c:94:e5:b5:b9:08:80:1a:19:57:fb:95:ec: 29:14:2b:51:cb:75:bc:fa:13:5c:f6:77:6b:65:e3: ae:f1:cf:c8:62:55:2a:4a:34:78:1f:65:bb:1c:a6: 75:3a:84:69:ed:9b:87:34:ee:62:3d:55:d8:cb:66: 70:e6:5c:fe:87:b5:e5:b3:19:3f:30:66:3f:8c:e3: a5:ed:10:2d:96:d1:e9:df:ef:ff:29:f3:a0:dc:44: 4c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:58:37:9A:E5:83:19:2D:B0:EE:33:43:45:1D:41:9B:A0:9D:30:3C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153697.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.223.78.0/23 IPv6: 2001:df5:37c0::/48 Signature Algorithm: sha256WithRSAEncryption 96:b4:54:10:92:15:2d:60:0f:c9:45:76:77:bb:96:b6:7f:ce: d5:64:4d:95:5c:ea:aa:8f:df:a6:f0:75:ed:40:67:a1:a5:87: 02:b1:6e:50:f3:b4:5b:aa:d8:ea:bf:97:9d:a5:63:e6:07:ed: 5f:1f:20:ea:40:0d:12:cf:25:db:5b:16:3f:57:16:b9:f5:48: a6:d9:5b:be:f0:ac:20:a0:0a:b0:c1:10:44:b3:5e:a6:e4:bc: 72:5d:d3:24:8b:31:b6:e4:28:75:90:b4:aa:e8:fd:47:a4:b0: 5b:b9:bf:c4:cd:7d:95:3e:1e:cc:a7:a0:93:31:30:2f:27:48: b0:0d:7c:5b:8d:a3:ad:6f:7a:65:c1:f0:7c:d7:7d:f1:77:4b: c6:c7:cb:46:c7:be:50:4d:fe:ec:32:28:6f:f1:a7:c8:d7:10: f1:97:37:ed:80:e0:ef:5d:da:63:c7:4b:f3:88:72:9f:6b:74: 84:59:6e:16:20:fd:e6:35:e9:2e:13:4e:89:3b:ce:5e:cc:e8: 67:96:cb:d9:e8:42:62:ce:04:dd:af:0e:cb:7d:26:08:dd:a3: 89:f4:76:3c:26:85:5d:db:ec:5a:9c:e8:70:b5:31:20:cc:5e: 7f:b7:e2:9c:a3:82:62:6a:00:7e:82:85:8c:ed:00:b3:78:4f: 5a:d8:47:c8 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUU0qAJ9pOVkwmqrs8VJcqFXRn3I4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxNzAyNTUwMFoX DTI3MDMxNjAzMDAwMFowMzExMC8GA1UEAxMoMjk1ODM3OUFFNTgzMTkyREIwRUUz MzQzNDUxRDQxOUJBMDlEMzAzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANBcENkKNifGvL4NEvqtC2eV4rdu215EpJJQXa7ybNUOtteeDUmn2XHITaTa NS57Irn0X01XosGrMTRJgFl/DHgvT9vFr6VbwHHFPMNq5/w8z4WoeYC4ojXZuiG1 QxzCtp/ISFwueB4tt38kbAWwh4p0eW6e1jiW8amd0O5AybRyBC8az4lPRL2B/842 P/LO/pQRw5VX7cepjvka+Dgi4WThXtt52u9slOW1uQiAGhlX+5XsKRQrUct1vPoT XPZ3a2XjrvHPyGJVKko0eB9luxymdTqEae2bhzTuYj1V2MtmcOZc/oe15bMZPzBm P4zjpe0QLZbR6d/v/ynzoNxETCsCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBQpWDea 5YMZLbDuM0NFHUGboJ0wPDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzY5Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAaPfTjAPBAIAAjAJAwcAIAEN9TfAMA0GCSqGSIb3DQEBCwUAA4IB AQCWtFQQkhUtYA/JRXZ3u5a2f87VZE2VXOqqj9+m8HXtQGehpYcCsW5Q87Rbqtjq v5edpWPmB+1fHyDqQA0SzyXbWxY/Vxa59Uim2Vu+8KwgoAqwwRBEs16m5LxyXdMk izG25Ch1kLSq6P1HpLBbub/EzX2VPh7Mp6CTMTAvJ0iwDXxbjaOtb3plwfB8133x d0vGx8tGx75QTf7sMihv8afI1xDxlzftgODvXdpjx0vziHKfa3SEWW4WIP3mNeku E06JO85ezOhnlsvZ6EJizgTdrw7LfSYI3aOJ9HY8JoVd2+xanOhwtTEgzF5/t+Kc o4JiagB+goWM7QCzeE9a2EfI -----END CERTIFICATE-----Generated at Thu Mar 26 04:00:58 2026 by rpki-client