$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153925.roa File: AS153925.roa (raw, json) Hash identifier: jJjoX/nuuE/9ctTjoFRJE1ONIq9vpsgXe8KQuXe2yDc= Subject key identifier: D1:D6:FA:FF:A5:34:D7:F3:00:C8:1E:F5:3C:46:12:84:69:9D:FF:12 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 599F6EE7F0BE7ADFA72C16743CB0B9C1B22F3369 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153925.roa Signing time: Thu 17 Jul 2025 02:17:23 +0000 ROA not before: Thu 17 Jul 2025 02:12:23 +0000 ROA not after: Thu 16 Jul 2026 02:17:23 +0000 asID: 153925 IP address blocks: 2001:df5:92c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:9f:6e:e7:f0:be:7a:df:a7:2c:16:74:3c:b0:b9:c1:b2:2f:33:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 17 02:12:23 2025 GMT Not After : Jul 16 02:17:23 2026 GMT Subject: CN=D1D6FAFFA534D7F300C81EF53C461284699DFF12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a3:d5:bf:f8:f1:79:de:8b:3b:85:ed:a2:fa: 93:b2:75:f8:1f:29:6d:43:bf:83:83:4f:0c:21:cb: 18:fd:50:e2:f0:5f:da:4a:f8:26:ab:2b:c1:93:2b: 92:34:d9:14:42:f6:3d:ba:6e:d8:1f:f4:00:5f:eb: b2:e7:db:c4:bf:d0:d0:5d:e1:6e:c1:01:cc:ec:0b: 5a:d0:12:9b:f7:0e:13:2d:86:cf:8e:ac:2a:c3:11: b3:02:d2:2f:0d:67:b3:e8:f7:62:22:70:65:a2:06: 44:96:bc:44:fe:db:2b:97:a8:ac:1a:28:95:8e:0d: 48:38:2c:0c:ba:21:49:08:3f:7e:d4:f6:ab:e5:c0: 5f:a2:6a:60:eb:15:54:c1:cf:6f:1f:cb:96:77:c9: d7:db:9a:12:7b:96:e8:76:ca:9a:85:aa:2d:2e:d1: 39:f0:34:83:73:44:1c:c2:68:c7:2f:b2:2f:6a:54: 8e:cd:2d:67:83:02:ca:25:73:6b:79:1f:3b:da:25: 5f:8a:19:0d:92:05:83:1a:e6:93:d1:88:a1:ed:b7: 34:33:cf:30:dd:39:bb:0a:62:3c:53:16:6e:7d:ab: 83:7b:1c:5d:91:4a:f4:aa:7d:22:9d:c1:96:bc:0c: f0:ea:2b:c1:f3:a1:8a:fc:bc:5f:91:da:21:6c:a3: 6f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D6:FA:FF:A5:34:D7:F3:00:C8:1E:F5:3C:46:12:84:69:9D:FF:12 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153925.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:92c0::/48 Signature Algorithm: sha256WithRSAEncryption 38:7f:7f:66:f5:93:54:59:c9:2c:af:ad:12:82:76:38:0e:9f: e4:8f:fd:76:95:b8:66:04:61:c8:54:17:45:83:43:eb:23:53: d4:81:6f:1e:3a:d2:f4:d5:0c:bd:5b:9a:52:f8:e5:6c:4d:1c: e6:cd:3c:f8:53:c1:e3:e5:bb:07:b6:f2:73:01:5d:13:cb:af: 3f:75:4c:96:e8:43:e4:25:5c:3e:65:9a:15:e1:b4:51:5e:26: c7:28:8e:1a:2c:64:76:8c:1f:2c:57:80:63:74:cc:49:e4:13: 2e:8d:d1:e5:e2:cc:74:93:85:83:aa:20:6e:17:ca:08:23:a4: 66:91:20:d6:fb:11:a3:97:e4:84:75:d1:ee:6c:47:40:9b:57: 3a:e8:46:a4:a3:25:0a:35:0a:95:cc:86:35:d4:c0:d0:07:79: 6c:c3:3e:d7:4b:26:a6:c2:b6:e5:ce:61:d7:77:a0:6d:4f:ca: 9d:3b:30:03:1c:73:e1:aa:cd:d8:68:9d:84:0d:fa:07:7d:bd: 86:1f:fb:fa:9f:ee:5a:48:d8:a5:2b:ad:a4:5a:0a:db:4f:00: 69:ab:30:07:3c:d8:90:c0:bc:96:0d:65:b5:33:a3:79:38:ec: 39:4a:d0:70:2a:69:98:20:16:44:da:93:2b:b5:9d:38:50:57: ad:b6:a0:43 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUWZ9u5/C+et+nLBZ0PLC5wbIvM2kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcxNzAyMTIyM1oX DTI2MDcxNjAyMTcyM1owMzExMC8GA1UEAxMoRDFENkZBRkZBNTM0RDdGMzAwQzgx RUY1M0M0NjEyODQ2OTlERkYxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANCj1b/48XneizuF7aL6k7J1+B8pbUO/g4NPDCHLGP1Q4vBf2kr4JqsrwZMr kjTZFEL2Pbpu2B/0AF/rsufbxL/Q0F3hbsEBzOwLWtASm/cOEy2Gz46sKsMRswLS Lw1ns+j3YiJwZaIGRJa8RP7bK5eorBoolY4NSDgsDLohSQg/ftT2q+XAX6JqYOsV VMHPbx/LlnfJ19uaEnuW6HbKmoWqLS7ROfA0g3NEHMJoxy+yL2pUjs0tZ4MCyiVz a3kfO9olX4oZDZIFgxrmk9GIoe23NDPPMN05uwpiPFMWbn2rg3scXZFK9Kp9Ip3B lrwM8OorwfOhivy8X5HaIWyjb20CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBTR1vr/ pTTX8wDIHvU8RhKEaZ3/EjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzkyNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfWSwDANBgkqhkiG9w0BAQsFAAOCAQEAOH9/ZvWTVFnJLK+t EoJ2OA6f5I/9dpW4ZgRhyFQXRYND6yNT1IFvHjrS9NUMvVuaUvjlbE0c5s08+FPB 4+W7B7bycwFdE8uvP3VMluhD5CVcPmWaFeG0UV4mxyiOGixkdowfLFeAY3TMSeQT Lo3R5eLMdJOFg6ogbhfKCCOkZpEg1vsRo5fkhHXR7mxHQJtXOuhGpKMlCjUKlcyG NdTA0Ad5bMM+10smpsK25c5h13egbU/KnTswAxxz4arN2GidhA36B329hh/7+p/u WkjYpSutpFoK208AaaswBzzYkMC8lg1ltTOjeTjsOUrQcCppmCAWRNqTK7WdOFBX rbagQw== -----END CERTIFICATE-----Generated at Sun Jul 20 23:59:08 2025 by rpki-client