$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153849.roa File: AS153849.roa (raw, json) Hash identifier: AVIuFlx4PQR+UOyq45JE7IRIZf0qXfeE/ZQnC5URiGY= Subject key identifier: 4D:41:D0:C2:76:0C:13:4E:9B:69:2C:5E:BD:BC:60:30:A2:AA:D6:B7 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 73A0910A3FCB836D3A8658F879BCCD2700C4BBA8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153849.roa Signing time: Wed 18 Jun 2025 01:43:11 +0000 ROA not before: Wed 18 Jun 2025 01:38:11 +0000 ROA not after: Wed 17 Jun 2026 01:43:11 +0000 asID: 153849 IP address blocks: 163.227.166.0/24 maxlen: 24 2001:df5:74c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:a0:91:0a:3f:cb:83:6d:3a:86:58:f8:79:bc:cd:27:00:c4:bb:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 18 01:38:11 2025 GMT Not After : Jun 17 01:43:11 2026 GMT Subject: CN=4D41D0C2760C134E9B692C5EBDBC6030A2AAD6B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5c:c9:da:4b:7a:1e:73:be:b4:b4:89:76:84: 56:06:2b:ef:ec:82:c5:17:4c:46:75:08:25:ee:7a: e5:7e:68:c5:8e:03:78:32:03:39:5a:b6:e5:c0:dc: 72:ed:fd:5c:de:16:73:ce:9a:27:6d:60:74:31:1c: ae:fe:12:5c:c7:6f:5b:42:d1:de:d5:06:47:aa:9b: bc:7d:6a:6a:14:63:96:21:bb:f4:d3:02:6a:45:70: 1e:4f:5b:f8:63:3c:b1:b8:36:20:4c:d6:49:63:33: 57:b1:5e:2a:89:06:4c:7b:9d:f3:15:72:32:15:8e: e0:b7:b3:1e:2c:21:5b:fb:a2:d3:d9:28:a2:11:72: b4:8e:79:82:2a:ee:b1:51:86:08:61:e5:1c:47:d8: 03:49:4c:31:c0:5c:fd:78:7e:25:6f:cc:47:e9:7f: 7f:1a:1e:22:a7:51:28:4a:7d:33:e1:e0:d0:62:cf: 2e:c7:f6:1e:a0:11:72:70:c3:2d:53:d0:f9:2c:40: ec:8c:9a:ef:32:73:56:79:a4:6b:70:a6:2f:e8:c3: 85:c6:25:b5:ba:1f:c6:f7:04:41:c7:7d:29:67:23: 55:f2:5c:60:a1:45:f0:52:72:07:79:dd:2b:34:5f: bf:9a:a6:3b:34:ac:85:ff:60:6e:70:f9:88:56:18: ab:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:41:D0:C2:76:0C:13:4E:9B:69:2C:5E:BD:BC:60:30:A2:AA:D6:B7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153849.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.166.0/24 IPv6: 2001:df5:74c0::/48 Signature Algorithm: sha256WithRSAEncryption 0d:d0:8d:f2:5f:72:98:99:90:37:78:44:7e:83:93:61:a3:78: 4e:dd:a0:d0:0b:fa:1c:e1:20:8e:0c:3f:bb:7a:11:fe:47:76: 57:21:04:5d:5c:bb:0a:e4:1b:d6:12:5d:dc:50:2a:3b:3d:9d: 2d:f2:7d:4d:af:87:d9:72:04:be:11:13:54:ac:47:38:a4:48: d0:00:e3:22:ad:27:4b:94:97:b1:04:b4:8a:e4:c7:36:24:a3: 8c:83:31:e7:12:d0:95:73:e4:06:18:08:38:7c:a4:b2:86:68: ff:c0:bc:47:c9:6d:97:70:14:f0:90:d7:ac:80:eb:1a:d8:7d: a2:9d:7f:cc:42:e2:52:87:b5:17:54:b6:c8:53:1e:2a:70:29: dd:ca:3c:f0:5e:ea:13:2e:41:cb:4b:11:15:41:04:10:47:1c: 32:f6:09:1f:fe:72:86:8a:38:06:d5:19:5b:bb:85:19:fa:14: 88:df:0b:fd:3f:9d:21:9d:79:80:32:a5:1b:dd:1b:fc:fb:76: a2:5c:cc:e5:39:a9:f1:13:b9:34:8e:fc:0b:16:9f:63:66:2f: 5b:df:bf:bc:d5:5a:f8:53:2e:e6:e7:9d:61:54:27:8e:bd:d0: 29:f9:9e:31:f4:0c:57:7c:95:46:ab:d8:b9:eb:61:db:63:19: 05:a3:94:4b -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUc6CRCj/Lg206hlj4ebzNJwDEu6gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYxODAxMzgxMVoX DTI2MDYxNzAxNDMxMVowMzExMC8GA1UEAxMoNEQ0MUQwQzI3NjBDMTM0RTlCNjky QzVFQkRCQzYwMzBBMkFBRDZCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM9cydpLeh5zvrS0iXaEVgYr7+yCxRdMRnUIJe565X5oxY4DeDIDOVq25cDc cu39XN4Wc86aJ21gdDEcrv4SXMdvW0LR3tUGR6qbvH1qahRjliG79NMCakVwHk9b +GM8sbg2IEzWSWMzV7FeKokGTHud8xVyMhWO4LezHiwhW/ui09koohFytI55giru sVGGCGHlHEfYA0lMMcBc/Xh+JW/MR+l/fxoeIqdRKEp9M+Hg0GLPLsf2HqARcnDD LVPQ+SxA7Iya7zJzVnmka3CmL+jDhcYltbofxvcEQcd9KWcjVfJcYKFF8FJyB3nd KzRfv5qmOzSshf9gbnD5iFYYq3cCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBRNQdDC dgwTTptpLF69vGAwoqrWtzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1Mzg0OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAKPjpjAPBAIAAjAJAwcAIAEN9XTAMA0GCSqGSIb3DQEBCwUAA4IB AQAN0I3yX3KYmZA3eER+g5Nho3hO3aDQC/oc4SCODD+7ehH+R3ZXIQRdXLsK5BvW El3cUCo7PZ0t8n1Nr4fZcgS+ERNUrEc4pEjQAOMirSdLlJexBLSK5Mc2JKOMgzHn EtCVc+QGGAg4fKSyhmj/wLxHyW2XcBTwkNesgOsa2H2inX/MQuJSh7UXVLbIUx4q cCndyjzwXuoTLkHLSxEVQQQQRxwy9gkf/nKGijgG1Rlbu4UZ+hSI3wv9P50hnXmA MqUb3Rv8+3aiXMzlOanxE7k0jvwLFp9jZi9b37+81Vr4Uy7m551hVCeOvdAp+Z4x 9AxXfJVGq9i562HbYxkFo5RL -----END CERTIFICATE-----Generated at Sun Jun 29 12:24:38 2025 by rpki-client