$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153986.roa File: AS153986.roa (raw, json) Hash identifier: nSuSf4EqLiSTvs3HD6dVUsEb6pxaFz9QNk041bbqWFE= Subject key identifier: AF:D1:B1:15:86:3B:74:B4:8E:68:7B:6F:B5:11:03:10:86:8C:57:B6 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0B59766972A15821D49AD4C22B0DBEDBE03D696F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153986.roa Signing time: Mon 30 Jun 2025 02:43:38 +0000 ROA not before: Mon 30 Jun 2025 02:38:38 +0000 ROA not after: Mon 29 Jun 2026 02:43:38 +0000 asID: 153986 IP address blocks: 2001:df5:a8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:59:76:69:72:a1:58:21:d4:9a:d4:c2:2b:0d:be:db:e0:3d:69:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 30 02:38:38 2025 GMT Not After : Jun 29 02:43:38 2026 GMT Subject: CN=AFD1B115863B74B48E687B6FB5110310868C57B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1c:52:26:10:b8:81:8b:ba:e5:34:d2:71:c2: 4e:13:7a:76:df:55:6b:a4:94:c3:66:59:53:f8:93: 4a:ac:9d:db:19:95:b2:66:60:0f:bb:62:6e:8a:27: 09:1f:ef:d4:b0:c4:5d:c7:2b:e6:6b:d6:72:77:03: d4:92:38:81:dc:3d:fa:ca:28:86:c1:7d:1c:55:00: 79:80:eb:20:bd:ad:1c:54:42:27:79:37:64:f7:55: c4:48:6e:88:e9:da:90:57:5b:f0:1e:d9:0b:cd:8e: fc:64:6f:38:4b:9b:8a:a0:d4:4d:b8:90:e8:3c:2c: 52:69:52:0a:a8:1d:a5:fd:42:7f:96:3d:4a:e2:e4: 5a:f6:24:93:35:d7:10:cb:20:0c:53:8e:56:3c:7e: 40:cb:d7:3d:0d:86:75:05:7e:11:3f:81:8a:af:46: de:f7:3d:41:ff:d6:3e:34:82:b8:03:74:e4:c7:63: 5d:af:55:f1:61:6f:7c:a6:84:57:0b:40:ee:69:6d: 10:3d:ea:49:27:b4:7a:58:72:0a:c5:24:aa:65:29: bd:a1:6e:b7:ee:e6:22:55:3b:f5:02:c1:86:8b:07: e4:3f:fb:53:f2:40:27:a9:73:fb:17:40:2e:9f:09: eb:49:92:cb:c5:e1:53:3f:66:a1:5b:23:a1:8b:db: 96:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D1:B1:15:86:3B:74:B4:8E:68:7B:6F:B5:11:03:10:86:8C:57:B6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153986.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:a8c0::/48 Signature Algorithm: sha256WithRSAEncryption 45:02:d1:c6:b3:11:9d:d1:37:f6:36:4c:2d:b1:68:14:5c:30: fb:59:ec:08:5c:87:82:7a:be:b1:f0:dc:fd:2b:bd:11:2d:e5: cc:6f:14:86:e6:df:15:bc:0a:6f:b8:ff:c8:17:2d:66:c7:0b: 92:8c:b7:51:50:f1:d2:ba:22:be:f8:98:32:5d:72:0c:61:7c: 05:21:d3:32:b8:1a:04:88:b8:b0:b8:37:53:07:45:05:08:79: cf:68:1e:40:92:cf:70:c4:67:e3:bb:ae:2b:eb:ea:dd:d9:8c: 9d:a4:fe:c1:8a:f9:ce:b3:45:0e:dd:70:18:fb:ec:2f:98:ad: 04:14:46:39:bf:ec:21:1b:0e:2e:ca:1e:5e:04:9f:0f:59:98: c5:60:45:e2:e3:db:ef:8b:3f:25:6f:1e:14:e2:96:eb:08:0a: 2f:25:17:12:e3:ce:6a:bf:0b:c2:f7:dc:03:77:63:c5:30:e1: 6c:75:0c:dd:d3:d5:1b:84:c8:90:4d:28:ff:ee:aa:52:ed:bb: b6:bf:90:57:26:72:8c:91:fc:62:b8:1d:55:e8:c5:19:bc:c0: d1:e0:48:25:2b:a9:5b:a8:de:87:82:34:88:19:98:49:bf:f2: 93:32:93:a1:3c:97:8f:f7:64:d3:90:46:23:70:0f:78:76:85: 7e:20:27:62 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUC1l2aXKhWCHUmtTCKw2+2+A9aW8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYzMDAyMzgzOFoX DTI2MDYyOTAyNDMzOFowMzExMC8GA1UEAxMoQUZEMUIxMTU4NjNCNzRCNDhFNjg3 QjZGQjUxMTAzMTA4NjhDNTdCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANMcUiYQuIGLuuU00nHCThN6dt9Va6SUw2ZZU/iTSqyd2xmVsmZgD7tiboon CR/v1LDEXccr5mvWcncD1JI4gdw9+soohsF9HFUAeYDrIL2tHFRCJ3k3ZPdVxEhu iOnakFdb8B7ZC82O/GRvOEubiqDUTbiQ6DwsUmlSCqgdpf1Cf5Y9SuLkWvYkkzXX EMsgDFOOVjx+QMvXPQ2GdQV+ET+Biq9G3vc9Qf/WPjSCuAN05MdjXa9V8WFvfKaE VwtA7mltED3qSSe0elhyCsUkqmUpvaFut+7mIlU79QLBhosH5D/7U/JAJ6lz+xdA Lp8J60mSy8XhUz9moVsjoYvblhUCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBSv0bEV hjt0tI5oe2+1EQMQhoxXtjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1Mzk4Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfWowDANBgkqhkiG9w0BAQsFAAOCAQEARQLRxrMRndE39jZM LbFoFFww+1nsCFyHgnq+sfDc/Su9ES3lzG8UhubfFbwKb7j/yBctZscLkoy3UVDx 0roivviYMl1yDGF8BSHTMrgaBIi4sLg3UwdFBQh5z2geQJLPcMRn47uuK+vq3dmM naT+wYr5zrNFDt1wGPvsL5itBBRGOb/sIRsOLsoeXgSfD1mYxWBF4uPb74s/JW8e FOKW6wgKLyUXEuPOar8LwvfcA3djxTDhbHUM3dPVG4TIkE0o/+6qUu27tr+QVyZy jJH8YrgdVejFGbzA0eBIJSupW6jeh4I0iBmYSb/ykzKToTyXj/dk05BGI3APeHaF fiAnYg== -----END CERTIFICATE-----Generated at Sun Jul 20 23:57:23 2025 by rpki-client