$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153803.roa File: AS153803.roa (raw, json) Hash identifier: B0t5x4iHtfAcKlUaPyRCleiQ+UiPB0DK0es1odVg2CU= Subject key identifier: 17:25:BD:10:B3:D3:1A:B6:B3:55:82:CF:29:F3:2E:E2:E2:CE:2D:3E Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5390CBA5F1A40332EA248C654ABFF6B8685DEB9F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153803.roa Signing time: Tue 12 Aug 2025 02:34:32 +0000 ROA not before: Tue 12 Aug 2025 02:29:32 +0000 ROA not after: Tue 11 Aug 2026 02:34:32 +0000 asID: 153803 IP address blocks: 163.227.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 23:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:90:cb:a5:f1:a4:03:32:ea:24:8c:65:4a:bf:f6:b8:68:5d:eb:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 12 02:29:32 2025 GMT Not After : Aug 11 02:34:32 2026 GMT Subject: CN=1725BD10B3D31AB6B35582CF29F32EE2E2CE2D3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ff:e1:5f:1a:00:de:fa:e8:b7:be:2c:33:54: 96:51:e3:40:48:85:70:2c:49:88:d8:27:4b:d1:36: c9:24:ed:e5:8d:ca:ba:ca:b6:39:d7:99:44:ad:8c: de:da:eb:20:9f:16:dc:91:2d:ce:b2:fc:18:bc:7a: c8:b0:61:2b:f4:4e:e8:cc:6c:e2:52:7f:01:00:87: 87:bd:86:cb:38:1a:46:ce:44:23:65:79:96:0c:26: 0f:8d:a3:cb:1b:0d:8e:77:3b:82:cd:47:14:8d:33: 33:c5:eb:5e:8a:99:c7:10:34:45:ee:60:87:8a:c0: 9d:39:9f:85:1d:65:1d:a6:79:d8:d5:ee:8a:71:2e: 7c:3b:12:da:d9:8c:ff:b6:55:51:66:cd:68:4a:a2: c2:47:76:81:e6:2a:98:36:99:78:1d:91:45:ec:02: 3e:fd:05:1c:86:f1:ce:cc:77:7c:cb:5a:91:12:03: 43:97:ef:ab:93:3a:f0:2d:96:54:cd:f6:43:b2:e5: 2b:e9:99:17:66:c5:2c:ce:5c:57:64:a4:ad:08:fb: 5a:11:b5:21:6a:b7:9c:e9:0f:6b:d1:2a:c8:50:be: 77:89:c8:1c:b1:d1:fc:4a:a3:40:73:02:5b:79:f3: 02:4b:6a:1b:dc:d6:74:a8:10:7f:78:d3:5f:bd:80: 38:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:25:BD:10:B3:D3:1A:B6:B3:55:82:CF:29:F3:2E:E2:E2:CE:2D:3E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153803.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.67.0/24 Signature Algorithm: sha256WithRSAEncryption 50:bf:36:0d:81:09:6e:3d:2b:6e:f7:1c:e3:fe:9a:0d:76:38: 70:d2:ea:09:7f:50:3b:26:65:6c:bc:e0:d0:f7:40:1d:d7:12: a2:a1:a1:12:f0:ac:c0:7b:55:fc:ef:a0:3f:e6:dc:3d:85:2b: 2b:f6:92:c7:48:12:a9:80:5c:b9:d4:c7:a7:4d:77:4e:11:43: 8b:c6:3f:38:1e:80:86:d7:c9:63:37:c7:7a:30:86:aa:d2:30: 47:e6:76:e4:70:0c:dc:fb:b3:b4:a5:c5:76:7c:59:84:0e:a9: 37:d3:85:07:cb:9a:9c:8e:ac:62:4e:62:e4:d7:d3:2e:c9:ee: 7a:ba:69:0d:69:23:ff:74:92:f9:31:8a:57:b9:34:ac:61:3c: e6:a2:b6:d5:5c:ee:6d:15:6d:8e:c1:99:a7:fa:14:ac:e3:91: 9f:1b:63:b5:69:0b:80:48:c6:c6:68:b4:1a:2e:7e:7f:72:8a: ac:79:40:47:8e:9d:c9:01:54:b0:be:9f:25:81:20:78:b0:e3: e5:4c:15:4d:f6:fd:73:23:ca:57:4b:73:fb:e9:48:27:a7:62: 9a:2e:8a:7e:ba:6c:ab:e7:a3:bf:a0:12:a5:47:29:5f:60:2e: fb:bd:23:88:5c:a7:30:6d:ae:14:78:70:11:7d:29:9d:c6:ec: 6c:fc:dc:94 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUU5DLpfGkAzLqJIxlSr/2uGhd658wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxMjAyMjkzMloX DTI2MDgxMTAyMzQzMlowMzExMC8GA1UEAxMoMTcyNUJEMTBCM0QzMUFCNkIzNTU4 MkNGMjlGMzJFRTJFMkNFMkQzRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALT/4V8aAN766Le+LDNUllHjQEiFcCxJiNgnS9E2ySTt5Y3Kusq2OdeZRK2M 3trrIJ8W3JEtzrL8GLx6yLBhK/RO6Mxs4lJ/AQCHh72GyzgaRs5EI2V5lgwmD42j yxsNjnc7gs1HFI0zM8XrXoqZxxA0Re5gh4rAnTmfhR1lHaZ52NXuinEufDsS2tmM /7ZVUWbNaEqiwkd2geYqmDaZeB2RRewCPv0FHIbxzsx3fMtakRIDQ5fvq5M68C2W VM32Q7LlK+mZF2bFLM5cV2SkrQj7WhG1IWq3nOkPa9EqyFC+d4nIHLHR/EqjQHMC W3nzAktqG9zWdKgQf3jTX72AOJcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQXJb0Q s9MatrNVgs8p8y7i4s4tPjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzgwMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKPjQzANBgkqhkiG9w0BAQsFAAOCAQEAUL82DYEJbj0rbvcc4/6a DXY4cNLqCX9QOyZlbLzg0PdAHdcSoqGhEvCswHtV/O+gP+bcPYUrK/aSx0gSqYBc udTHp013ThFDi8Y/OB6AhtfJYzfHejCGqtIwR+Z25HAM3PuztKXFdnxZhA6pN9OF B8uanI6sYk5i5NfTLsnuerppDWkj/3SS+TGKV7k0rGE85qK21VzubRVtjsGZp/oU rOORnxtjtWkLgEjGxmi0Gi5+f3KKrHlAR46dyQFUsL6fJYEgeLDj5UwVTfb9cyPK V0tz++lIJ6dimi6Kfrpsq+ejv6ASpUcpX2Au+70jiFynMG2uFHhwEX0pncbsbPzc lA== -----END CERTIFICATE-----Generated at Sat Aug 23 21:44:57 2025 by rpki-client