$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153769.roa File: AS153769.roa (raw, json) Hash identifier: JGSzx++yL/d1/W1XAbEdyOssOZQJ2UjyNMAcMsi4Cpg= Subject key identifier: 06:20:DE:7D:43:95:DF:DC:FE:0F:2B:F0:14:F4:87:6A:C5:8A:CD:8E Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 32123787F567E9E7BCAD7FCD07ABD6747EE4D17A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153769.roa Signing time: Fri 13 Mar 2026 05:00:00 +0000 ROA not before: Fri 13 Mar 2026 04:55:00 +0000 ROA not after: Fri 12 Mar 2027 05:00:00 +0000 asID: 153769 IP address blocks: 163.61.247.0/24 maxlen: 24 2001:df5:2840::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:12:37:87:f5:67:e9:e7:bc:ad:7f:cd:07:ab:d6:74:7e:e4:d1:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 13 04:55:00 2026 GMT Not After : Mar 12 05:00:00 2027 GMT Subject: CN=0620DE7D4395DFDCFE0F2BF014F4876AC58ACD8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4c:68:77:9b:9d:36:7a:d0:88:f2:c3:10:c3: 22:5c:45:c0:56:54:35:2b:8b:5b:37:1b:6a:8c:e8: 56:3f:4b:f7:0f:04:7a:7b:80:71:a1:27:a6:95:d5: e2:fc:6f:d6:be:17:c6:39:cb:c8:67:5c:10:3c:42: 8e:b8:a2:0e:a0:54:a7:45:1b:30:9c:c5:8b:ef:8f: fa:a7:6f:ae:24:d4:4b:84:70:9d:b2:47:cd:5e:e2: 1f:02:d9:9a:6d:78:12:28:f2:f6:98:0e:9f:10:12: 14:81:ff:53:76:15:4d:15:12:34:1d:6e:7c:bf:63: b5:b4:ef:f3:a1:21:ea:5a:ef:92:53:50:8e:a9:bd: 6c:2f:64:a3:48:14:ae:fc:c0:ad:45:de:39:fd:d1: fb:9b:06:db:2a:e2:0b:45:60:a7:37:80:69:0d:68: 60:fa:98:5d:10:da:88:42:99:da:f3:d7:fd:b8:dd: ad:07:49:a3:86:3b:d7:e3:6c:dc:b4:d8:8c:40:8d: 56:1f:76:c0:db:64:19:60:7a:97:16:81:6e:3e:50: 94:5d:74:1e:8b:06:52:3b:0f:37:0c:b2:f3:d0:0c: c9:5b:bb:f4:71:ff:bb:33:56:69:b2:98:82:83:8d: 50:3d:1d:36:27:3e:bc:8a:ef:36:17:05:e1:1b:18: ee:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:20:DE:7D:43:95:DF:DC:FE:0F:2B:F0:14:F4:87:6A:C5:8A:CD:8E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153769.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.247.0/24 IPv6: 2001:df5:2840::/48 Signature Algorithm: sha256WithRSAEncryption 83:97:87:ce:5e:84:89:c0:b5:4d:f2:5a:78:74:03:a5:af:0c: 7a:b5:ff:4e:87:3d:a7:83:6b:8c:f2:09:cf:2f:a6:52:98:02: 01:d1:61:1a:5e:2b:37:ba:59:71:27:36:6c:65:db:a0:de:94: e2:64:14:94:49:20:70:d8:f2:35:50:e5:91:9f:fb:58:fd:0e: 1c:ae:59:ef:8f:99:9d:4b:68:06:5d:06:65:c5:46:33:7e:0b: 71:06:97:a9:a1:3e:70:40:a9:91:f8:63:71:41:45:51:89:51: ab:0a:2b:b8:8c:34:8c:e8:05:2d:86:fa:c3:be:11:85:dc:99: ba:6e:df:9f:b9:0c:2c:57:18:29:d7:68:8b:fe:24:de:8a:ba: 5f:51:6f:7f:9b:62:57:d1:5c:a2:a0:30:2a:5f:c1:2d:11:7a: 39:f7:96:44:40:86:f1:68:74:ca:c2:18:cd:ed:df:9c:59:5a: cb:85:55:b9:7f:b4:38:60:2c:d1:00:b1:d1:28:cc:da:9b:62: ba:be:6a:5b:33:b4:96:ce:b1:dd:03:70:a0:c8:f0:c7:48:5a: ff:f3:f9:6a:12:81:0d:3f:ef:75:ba:d5:a5:7e:83:46:8a:c2: 0c:9d:6d:73:6c:55:d8:63:43:91:d0:90:c2:23:52:b7:74:db: cb:70:29:d5 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUMhI3h/Vn6ee8rX/NB6vWdH7k0XowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxMzA0NTUwMFoX DTI3MDMxMjA1MDAwMFowMzExMC8GA1UEAxMoMDYyMERFN0Q0Mzk1REZEQ0ZFMEYy QkYwMTRGNDg3NkFDNThBQ0Q4RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1MaHebnTZ60IjywxDDIlxFwFZUNSuLWzcbaozoVj9L9w8EenuAcaEnppXV 4vxv1r4XxjnLyGdcEDxCjriiDqBUp0UbMJzFi++P+qdvriTUS4RwnbJHzV7iHwLZ mm14Eijy9pgOnxASFIH/U3YVTRUSNB1ufL9jtbTv86Eh6lrvklNQjqm9bC9ko0gU rvzArUXeOf3R+5sG2yriC0VgpzeAaQ1oYPqYXRDaiEKZ2vPX/bjdrQdJo4Y71+Ns 3LTYjECNVh92wNtkGWB6lxaBbj5QlF10HosGUjsPNwyy89AMyVu79HH/uzNWabKY goONUD0dNic+vIrvNhcF4RsY7msCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBQGIN59 Q5Xf3P4PK/AU9IdqxYrNjjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1Mzc2OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAKM99zAPBAIAAjAJAwcAIAEN9ShAMA0GCSqGSIb3DQEBCwUAA4IB AQCDl4fOXoSJwLVN8lp4dAOlrwx6tf9Ohz2ng2uM8gnPL6ZSmAIB0WEaXis3ullx JzZsZdug3pTiZBSUSSBw2PI1UOWRn/tY/Q4crlnvj5mdS2gGXQZlxUYzfgtxBpep oT5wQKmR+GNxQUVRiVGrCiu4jDSM6AUthvrDvhGF3Jm6bt+fuQwsVxgp12iL/iTe irpfUW9/m2JX0VyioDAqX8EtEXo595ZEQIbxaHTKwhjN7d+cWVrLhVW5f7Q4YCzR ALHRKMzam2K6vmpbM7SWzrHdA3CgyPDHSFr/8/lqEoENP+91utWlfoNGisIMnW1z bFXYY0OR0JDCI1K3dNvLcCnV -----END CERTIFICATE-----Generated at Thu Mar 26 04:00:54 2026 by rpki-client