$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153880.roa File: AS153880.roa (raw, json) Hash identifier: VzZc5s+NOe1IUTpVTwJkrrXXDkeOKGkCe3AuyVW3bzw= Subject key identifier: 97:FC:ED:C0:3C:8F:D3:92:0C:53:7A:53:84:78:78:E0:28:41:85:2B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 30279F45ACFDEBBBB9B14E469B7E52100C2E9221 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153880.roa Signing time: Fri 20 Jun 2025 04:12:54 +0000 ROA not before: Fri 20 Jun 2025 04:07:54 +0000 ROA not after: Fri 19 Jun 2026 04:12:54 +0000 asID: 153880 IP address blocks: 163.227.148.0/24 maxlen: 24 2001:df5:6fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:27:9f:45:ac:fd:eb:bb:b9:b1:4e:46:9b:7e:52:10:0c:2e:92:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 20 04:07:54 2025 GMT Not After : Jun 19 04:12:54 2026 GMT Subject: CN=97FCEDC03C8FD3920C537A53847878E02841852B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ad:33:15:26:ff:1b:ec:a3:c0:e7:27:ea:81: a0:d4:10:de:a6:7a:9e:cf:2f:a4:d3:ff:80:1a:7b: 73:8d:e1:14:b7:c7:d7:ff:09:47:bb:c3:71:5b:a2: 8c:81:5c:97:1d:d8:84:92:57:6e:40:42:6c:15:5e: 4e:56:a2:da:c3:97:ac:20:93:ab:20:b2:98:25:44: 65:34:2c:2c:cc:2f:15:37:26:b7:03:7c:10:46:0d: c0:48:45:86:4a:a7:83:ee:ea:f0:70:66:34:fc:26: 11:50:5f:d6:4e:cd:2f:c0:19:df:bf:47:b2:a5:77: ac:10:e0:31:98:95:ed:fb:7d:0f:1f:8d:5d:10:3f: b9:63:af:a2:fb:37:f8:3a:f9:d3:7c:15:7a:53:be: 7e:36:32:48:5d:08:7f:01:3c:c5:77:db:45:a7:0e: 58:43:e3:de:00:12:c7:8f:34:46:db:c3:fc:45:f1: c7:ee:d7:a8:ba:db:cc:78:f7:c2:2f:e9:eb:a5:7f: cb:87:56:c3:3b:69:db:33:7b:7f:b2:6a:33:42:0a: 62:7c:26:2a:66:79:f2:c8:79:66:13:26:8f:50:d5: f6:68:a8:79:d9:38:19:d2:62:c5:d9:fa:df:f0:d3: bf:94:78:37:39:58:8b:52:eb:6c:49:35:1c:81:d0: e5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FC:ED:C0:3C:8F:D3:92:0C:53:7A:53:84:78:78:E0:28:41:85:2B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153880.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.148.0/24 IPv6: 2001:df5:6fc0::/48 Signature Algorithm: sha256WithRSAEncryption 1e:e3:db:d9:e3:bc:96:3c:99:7b:5b:9e:0d:58:f2:84:57:5b: 78:34:35:74:21:77:9b:21:17:17:46:ac:36:d5:42:fc:b3:91: ac:6a:63:2c:5f:c6:de:b2:a6:23:7d:cf:77:e4:74:42:a5:c8: c4:36:e7:7f:c4:b4:a1:c1:e9:1f:e0:c7:3f:82:f9:4e:fc:b9: 0b:0a:b5:b8:8d:bf:68:c0:04:38:93:86:e5:6d:f1:6a:1a:53: bd:ed:6e:2a:07:33:3f:aa:db:4f:bd:6e:e6:31:3e:57:d6:a2: a1:09:c4:93:a7:db:48:d5:8a:99:11:31:fc:0f:4f:d4:f6:fa: 40:39:07:b5:74:57:c4:8c:5f:bc:e6:7d:92:be:da:18:6d:3d: d0:5f:bc:09:00:55:88:6f:1e:8c:3d:e3:fe:c4:92:6c:7f:05: f0:9c:ae:f4:2c:28:4e:7f:35:9c:ec:20:c8:e6:65:45:af:77: 26:2d:35:00:ab:78:4b:26:2f:d4:d4:ea:0e:a5:05:3f:2f:f9: a0:6a:4f:49:fd:cf:d9:c4:2c:de:65:1c:d9:96:92:56:93:ec: f7:2c:44:fa:e6:2a:b1:06:90:2b:b1:90:cb:1b:e2:c0:97:5c: 62:bc:9d:08:f7:a7:8b:1c:f8:76:b2:46:b3:ba:7a:a4:9e:c9: f2:66:df:1e -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUMCefRaz967u5sU5Gm35SEAwukiEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYyMDA0MDc1NFoX DTI2MDYxOTA0MTI1NFowMzExMC8GA1UEAxMoOTdGQ0VEQzAzQzhGRDM5MjBDNTM3 QTUzODQ3ODc4RTAyODQxODUyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKitMxUm/xvso8DnJ+qBoNQQ3qZ6ns8vpNP/gBp7c43hFLfH1/8JR7vDcVui jIFclx3YhJJXbkBCbBVeTlai2sOXrCCTqyCymCVEZTQsLMwvFTcmtwN8EEYNwEhF hkqng+7q8HBmNPwmEVBf1k7NL8AZ379HsqV3rBDgMZiV7ft9Dx+NXRA/uWOvovs3 +Dr503wVelO+fjYySF0IfwE8xXfbRacOWEPj3gASx480RtvD/EXxx+7XqLrbzHj3 wi/p66V/y4dWwztp2zN7f7JqM0IKYnwmKmZ58sh5ZhMmj1DV9mioedk4GdJixdn6 3/DTv5R4NzlYi1LrbEk1HIHQ5QUCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBSX/O3A PI/TkgxTelOEeHjgKEGFKzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1Mzg4MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAKPjlDAPBAIAAjAJAwcAIAEN9W/AMA0GCSqGSIb3DQEBCwUAA4IB AQAe49vZ47yWPJl7W54NWPKEV1t4NDV0IXebIRcXRqw21UL8s5GsamMsX8besqYj fc935HRCpcjENud/xLShwekf4Mc/gvlO/LkLCrW4jb9owAQ4k4blbfFqGlO97W4q BzM/qttPvW7mMT5X1qKhCcSTp9tI1YqZETH8D0/U9vpAOQe1dFfEjF+85n2SvtoY bT3QX7wJAFWIbx6MPeP+xJJsfwXwnK70LChOfzWc7CDI5mVFr3cmLTUAq3hLJi/U 1OoOpQU/L/mgak9J/c/ZxCzeZRzZlpJWk+z3LET65iqxBpArsZDLG+LAl1xivJ0I 96eLHPh2skazunqknsnyZt8e -----END CERTIFICATE-----Generated at Sun Jun 29 12:19:14 2025 by rpki-client