$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153936.roa File: AS153936.roa (raw, json) Hash identifier: SQB1jNhxsDCk0HzQv8IBP2rN8OeKNCd3fHsUV4u4DSw= Subject key identifier: 60:D0:73:A4:DA:33:1C:3D:63:AE:29:77:20:D7:C6:EB:8B:18:60:FA Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3DE5586CD017E4868B4728DD7FB702A6495C24A5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153936.roa Signing time: Tue 08 Jul 2025 02:35:48 +0000 ROA not before: Tue 08 Jul 2025 02:30:48 +0000 ROA not after: Tue 07 Jul 2026 02:35:48 +0000 asID: 153936 IP address blocks: 2001:df5:a1c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e5:58:6c:d0:17:e4:86:8b:47:28:dd:7f:b7:02:a6:49:5c:24:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 8 02:30:48 2025 GMT Not After : Jul 7 02:35:48 2026 GMT Subject: CN=60D073A4DA331C3D63AE297720D7C6EB8B1860FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8d:a0:28:38:07:f6:7f:9d:3a:01:67:3d:91: 17:f4:bb:0d:a9:9c:3e:e1:ab:d0:09:be:2a:11:08: f0:01:08:97:0c:76:75:68:22:77:e3:6f:e7:6f:f1: 1a:e2:56:b0:43:aa:ea:dd:a7:f7:cf:23:17:fb:5f: c6:ec:4c:a4:85:f9:7f:5c:c6:5e:9d:54:a9:c8:52: 90:39:d1:41:93:48:c0:b1:35:be:78:4b:4f:46:5c: 9a:ba:5c:f2:3d:24:bf:0e:f5:d7:cb:26:aa:07:59: 87:a8:72:a5:3b:63:0e:6e:10:b8:d1:34:a6:c4:90: 51:2e:c4:02:c6:e2:f1:d3:8e:ee:75:3e:04:83:3a: 74:87:28:f6:6b:be:57:de:ea:ff:1c:7d:d3:0b:67: ea:a0:ac:d4:37:ec:0e:b0:46:7a:4c:b2:e9:85:94: 29:04:4a:9e:25:de:72:a7:5a:27:f4:c0:d8:24:43: ef:7f:7b:f5:32:c0:20:ce:c7:41:47:9e:03:f0:1a: a5:10:86:57:8b:3c:2d:b4:c1:9f:09:51:6d:f8:4c: 0d:45:65:17:97:27:8f:71:aa:bb:1c:5e:bb:c8:57: 13:7d:b4:43:fe:fd:68:86:f7:b0:1c:b3:c4:64:d5: aa:f3:6d:8a:bd:14:cc:44:46:67:81:b1:64:f4:dc: 6a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D0:73:A4:DA:33:1C:3D:63:AE:29:77:20:D7:C6:EB:8B:18:60:FA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:a1c0::/48 Signature Algorithm: sha256WithRSAEncryption 09:9a:2c:8b:1b:24:7c:61:c9:15:7c:98:f3:b3:ef:ce:0e:7c: b2:e3:c7:28:13:28:77:78:0f:1d:be:e1:fd:89:fd:78:4e:43: dd:87:b9:62:1e:7b:f8:af:35:1a:49:5d:b7:e8:27:0a:f2:fe: 1e:29:51:2e:7b:6c:54:ad:44:63:3a:3d:3e:95:1f:57:0d:71: 73:df:72:b3:d2:a0:79:a0:24:11:3f:a2:f9:72:a2:ae:40:91: 38:ea:52:21:20:f7:39:c0:fd:ce:dc:d5:b0:a8:f6:f7:91:db: 1d:c2:71:2c:28:a8:26:06:09:ac:b8:d7:39:c8:6f:c5:a9:e9: fc:f6:45:82:4d:57:56:90:62:f0:17:76:60:38:77:73:30:5c: b3:22:8b:a1:77:3c:d7:3b:e2:6b:38:34:6b:59:70:a7:63:aa: ef:c8:71:9e:32:9b:02:66:67:c9:ef:72:b9:3d:69:7f:21:32: 17:c8:c7:ba:26:6f:ed:6b:4a:80:d4:26:b5:18:9a:bf:72:11: 7d:0c:1e:f4:9a:63:9e:56:af:b1:4c:a3:70:b2:c5:2f:a7:89: 76:a2:88:4f:78:bc:e0:02:ea:49:60:bf:2a:d4:1c:c9:1b:3f: 5f:9e:5a:84:16:54:88:04:d5:a3:22:72:72:23:2a:db:a0:81: 93:71:9a:47 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUPeVYbNAX5IaLRyjdf7cCpklcJKUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcwODAyMzA0OFoX DTI2MDcwNzAyMzU0OFowMzExMC8GA1UEAxMoNjBEMDczQTREQTMzMUMzRDYzQUUy OTc3MjBEN0M2RUI4QjE4NjBGQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN+NoCg4B/Z/nToBZz2RF/S7DamcPuGr0Am+KhEI8AEIlwx2dWgid+Nv52/x GuJWsEOq6t2n988jF/tfxuxMpIX5f1zGXp1UqchSkDnRQZNIwLE1vnhLT0Zcmrpc 8j0kvw7118smqgdZh6hypTtjDm4QuNE0psSQUS7EAsbi8dOO7nU+BIM6dIco9mu+ V97q/xx90wtn6qCs1DfsDrBGekyy6YWUKQRKniXecqdaJ/TA2CRD73979TLAIM7H QUeeA/AapRCGV4s8LbTBnwlRbfhMDUVlF5cnj3Gquxxeu8hXE320Q/79aIb3sByz xGTVqvNtir0UzERGZ4GxZPTcaqMCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBRg0HOk 2jMcPWOuKXcg18brixhg+jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzkzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfWhwDANBgkqhkiG9w0BAQsFAAOCAQEACZosixskfGHJFXyY 87Pvzg58suPHKBMod3gPHb7h/Yn9eE5D3Ye5Yh57+K81Gkldt+gnCvL+HilRLnts VK1EYzo9PpUfVw1xc99ys9KgeaAkET+i+XKirkCROOpSISD3OcD9ztzVsKj295Hb HcJxLCioJgYJrLjXOchvxanp/PZFgk1XVpBi8Bd2YDh3czBcsyKLoXc81zviazg0 a1lwp2Oq78hxnjKbAmZnye9yuT1pfyEyF8jHuiZv7WtKgNQmtRiav3IRfQwe9Jpj nlavsUyjcLLFL6eJdqKIT3i84ALqSWC/KtQcyRs/X55ahBZUiATVoyJyciMq26CB k3GaRw== -----END CERTIFICATE-----Generated at Mon Jul 21 00:00:28 2025 by rpki-client