$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153729.roa File: AS153729.roa (raw, json) Hash identifier: HHZuhUGYUtPcGZHsKQgIGohXmy2UfMA5AEySEOPKRRk= Subject key identifier: CF:49:84:D8:66:CC:B1:28:8D:34:6F:33:22:A1:89:94:90:73:6E:BC Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 53257AA2239ED7C72A709C29C5EFC96FD1232F35 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153729.roa Signing time: Wed 30 Apr 2025 04:43:39 +0000 ROA not before: Wed 30 Apr 2025 04:38:39 +0000 ROA not after: Wed 29 Apr 2026 04:43:39 +0000 asID: 153729 IP address blocks: 163.223.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 14:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:25:7a:a2:23:9e:d7:c7:2a:70:9c:29:c5:ef:c9:6f:d1:23:2f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 30 04:38:39 2025 GMT Not After : Apr 29 04:43:39 2026 GMT Subject: CN=CF4984D866CCB1288D346F3322A1899490736EBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:44:e2:cf:41:f0:45:6b:96:2d:ab:cc:2c:b3: 88:eb:12:a3:8b:9f:88:e8:c9:3a:fb:20:fb:32:cb: db:f0:34:df:95:3c:46:19:41:c2:8e:08:15:87:99: c2:43:a7:e0:d5:a6:33:b9:62:57:47:42:23:b5:ed: 57:00:ad:cb:f8:45:cd:e2:70:a9:ae:41:af:b8:6b: c0:64:ac:4c:d9:bc:77:4d:58:eb:6d:79:6c:42:98: 3d:6d:bf:95:b3:11:4a:42:bf:07:44:a6:dc:fc:ff: 02:b0:17:ab:6b:72:c4:fe:19:c8:52:c6:48:a5:4c: 09:f8:f6:40:c6:e6:4a:ec:a9:d0:03:af:ec:7f:b2: 07:96:ad:cc:6c:b1:9c:a3:29:cd:1e:18:88:15:32: 18:ed:21:14:f3:e1:ce:20:15:83:5b:25:17:c0:1f: aa:96:5a:c8:6d:da:ce:79:9a:47:49:7e:f0:47:df: 37:12:10:51:aa:1e:40:39:86:1f:26:bc:26:41:7f: 02:5a:67:72:8d:af:73:9c:eb:21:0e:c4:74:43:8b: a9:8d:e8:e0:2a:8f:3e:e8:60:18:f8:ec:fa:b9:47: 56:f6:cc:28:81:22:7d:4b:1c:e8:0a:b8:2d:08:3f: e6:1b:95:13:93:fd:3a:72:a3:d6:4f:b9:8a:c7:54: 95:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:49:84:D8:66:CC:B1:28:8D:34:6F:33:22:A1:89:94:90:73:6E:BC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153729.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.223.112.0/24 Signature Algorithm: sha256WithRSAEncryption 38:6d:4d:be:02:bf:14:6a:18:88:63:b2:59:9a:d6:69:97:8f: fc:93:3f:6c:be:88:6f:74:df:c7:be:05:b2:d1:3f:6a:02:3c: b6:75:4a:55:03:84:33:df:91:d3:f1:f0:92:60:0c:fb:fb:bb: e3:49:e5:e2:28:c4:84:c2:d1:a5:77:f5:ec:c2:9b:7c:02:4e: b5:9d:14:d5:b4:9d:74:b4:04:24:7d:18:8c:a8:77:03:a6:a8: d0:67:9f:d0:7f:ce:87:bc:79:db:61:fa:d6:e9:bd:e4:9f:72: 81:25:cf:22:2e:cf:32:11:7a:c5:bf:f1:32:71:14:d5:0f:2c: 77:5f:c1:e0:74:d5:d8:1a:8e:89:65:31:1c:5e:b9:10:a9:a0: c6:a9:9d:7d:6c:9d:6e:6b:a9:cb:94:b8:ee:35:d3:26:32:b6: 72:8f:55:25:29:68:0a:c4:32:42:e1:fb:5a:d2:28:73:b9:15: 5f:6e:28:5b:fa:84:84:2c:99:80:f5:be:50:d0:ae:a6:f1:d2: 52:a5:47:e2:12:d6:60:5c:55:13:bd:73:f0:8b:09:73:5d:03: 63:90:b5:b4:a6:d0:48:04:d5:1b:6e:2c:62:db:36:9b:07:da: c1:fb:b1:5f:c8:ff:ee:8c:28:1e:60:3c:96:0e:a7:a2:40:67: 3c:91:85:8c -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUUyV6oiOe18cqcJwpxe/Jb9EjLzUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQzMDA0MzgzOVoX DTI2MDQyOTA0NDMzOVowMzExMC8GA1UEAxMoQ0Y0OTg0RDg2NkNDQjEyODhEMzQ2 RjMzMjJBMTg5OTQ5MDczNkVCQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM1E4s9B8EVrli2rzCyziOsSo4ufiOjJOvsg+zLL2/A035U8RhlBwo4IFYeZ wkOn4NWmM7liV0dCI7XtVwCty/hFzeJwqa5Br7hrwGSsTNm8d01Y6215bEKYPW2/ lbMRSkK/B0Sm3Pz/ArAXq2tyxP4ZyFLGSKVMCfj2QMbmSuyp0AOv7H+yB5atzGyx nKMpzR4YiBUyGO0hFPPhziAVg1slF8AfqpZayG3aznmaR0l+8EffNxIQUaoeQDmG Hya8JkF/Alpnco2vc5zrIQ7EdEOLqY3o4CqPPuhgGPjs+rlHVvbMKIEifUsc6Aq4 LQg/5huVE5P9OnKj1k+5isdUleMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTPSYTY ZsyxKI00bzMioYmUkHNuvDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzcyOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKPfcDANBgkqhkiG9w0BAQsFAAOCAQEAOG1NvgK/FGoYiGOyWZrW aZeP/JM/bL6Ib3Tfx74FstE/agI8tnVKVQOEM9+R0/HwkmAM+/u740nl4ijEhMLR pXf17MKbfAJOtZ0U1bSddLQEJH0YjKh3A6ao0Gef0H/Oh7x522H61um95J9ygSXP Ii7PMhF6xb/xMnEU1Q8sd1/B4HTV2BqOiWUxHF65EKmgxqmdfWydbmupy5S47jXT JjK2co9VJSloCsQyQuH7WtIoc7kVX24oW/qEhCyZgPW+UNCupvHSUqVH4hLWYFxV E71z8IsJc10DY5C1tKbQSATVG24sYts2mwfawfuxX8j/7owoHmA8lg6nokBnPJGF jA== -----END CERTIFICATE-----Generated at Mon May 5 13:40:12 2025 by rpki-client