$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS135659.roa File: AS135659.roa (raw, json) Hash identifier: e8gBe/IE8uoak2HRdfLlxXZvp21ERXLvENQ/LWbgKAw= Subject key identifier: 5F:18:34:0F:9C:9E:45:5D:EC:E4:97:90:13:2D:25:2E:A7:70:6B:1A Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 12F60DABC4AFD8A53509C5C57FD4501D5C84A7F3 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS135659.roa Signing time: Fri 29 Aug 2025 02:39:49 +0000 ROA not before: Fri 29 Aug 2025 02:34:49 +0000 ROA not after: Fri 28 Aug 2026 02:39:49 +0000 asID: 135659 IP address blocks: 160.250.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 14:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f6:0d:ab:c4:af:d8:a5:35:09:c5:c5:7f:d4:50:1d:5c:84:a7:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Aug 29 02:34:49 2025 GMT Not After : Aug 28 02:39:49 2026 GMT Subject: CN=5F18340F9C9E455DECE49790132D252EA7706B1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:4e:0f:ea:02:94:21:d5:3d:ee:64:a1:36:fe: 21:1e:79:23:64:d3:3d:e2:58:01:32:c8:77:db:82: 45:ab:26:5b:76:32:99:fd:84:b3:3c:c9:c4:6b:55: c6:1d:fa:75:42:6f:1f:1c:57:84:21:63:21:61:91: 0e:cd:7f:86:5c:22:1e:bb:bd:de:bc:73:b4:75:12: 65:c8:20:5f:5d:d9:40:60:f2:7d:d7:52:aa:97:72: 57:ee:90:7a:9a:81:32:23:5d:0a:07:ca:30:2e:cd: f9:26:a2:58:2b:77:17:a5:11:3b:8c:9f:c5:53:3b: 97:3d:0d:5e:8f:86:7f:c8:15:47:c3:6b:b9:c4:ed: f2:52:b9:3b:e7:d7:17:fe:f4:95:69:36:8d:e9:85: d4:df:35:0b:fd:5f:50:51:08:64:d8:35:a7:1e:e7: 64:f2:ac:65:7d:9f:6a:39:f5:29:0e:59:cc:23:a4: be:7a:0b:65:30:51:0e:b8:4e:2c:20:ee:3c:c6:77: ac:42:89:10:c6:5a:88:5f:b3:f2:0c:1f:48:7b:0b: 47:bb:5c:e0:da:74:2e:35:33:a0:be:98:2d:ec:d4: 3b:e9:23:a1:94:80:5d:83:b1:eb:1e:75:ad:da:8c: cc:f1:cc:66:ed:d7:cc:70:17:61:21:20:5b:c7:ac: 5f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:18:34:0F:9C:9E:45:5D:EC:E4:97:90:13:2D:25:2E:A7:70:6B:1A X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS135659.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.250.227.0/24 Signature Algorithm: sha256WithRSAEncryption 18:82:7e:08:47:96:a3:fc:71:1c:c3:a4:60:06:91:05:8c:5a: 49:8d:d4:62:6f:09:d6:5d:84:98:ce:d9:b6:5b:56:93:60:5b: 27:fb:12:b7:f0:4c:af:f1:21:95:48:70:4a:08:aa:c7:e5:a3: f8:2c:b4:ed:08:a3:01:5c:78:ee:93:29:4c:0b:90:c6:39:c8: 7c:8e:b7:5d:b2:86:9f:21:92:fa:54:ac:fd:00:57:56:5c:5e: 22:5f:92:b5:a6:e8:61:67:d3:ae:18:37:6d:3e:07:f2:a7:b3: 2c:7b:ef:3b:3d:cc:b1:67:76:64:cd:65:03:5a:db:fa:b2:0b: 0b:28:e3:8e:dc:8f:a3:1c:55:8f:5a:fb:4a:0e:3d:a4:8f:cd: 54:ba:c5:91:0e:47:d8:42:9a:35:4f:6b:ac:0b:6a:db:77:b3: b2:f7:a1:45:aa:98:3c:db:1c:59:c4:2b:18:d7:8e:9e:d0:0b: da:06:66:96:15:03:11:46:8a:af:bc:73:cb:c7:5c:d1:2c:2d: 71:97:03:fb:d4:31:e1:49:93:40:a4:bc:51:5c:bb:48:88:54: 27:3c:ce:b9:be:4d:9e:ac:fe:d9:e1:1b:1e:76:48:c6:44:43: 17:d2:d8:a1:8c:af:01:29:8d:03:4f:73:e8:71:c3:e3:37:b6: f8:0c:27:18 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUEvYNq8Sv2KU1CcXFf9RQHVyEp/MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDgyOTAyMzQ0OVoX DTI2MDgyODAyMzk0OVowMzExMC8GA1UEAxMoNUYxODM0MEY5QzlFNDU1REVDRTQ5 NzkwMTMyRDI1MkVBNzcwNkIxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPFOD+oClCHVPe5koTb+IR55I2TTPeJYATLId9uCRasmW3Yymf2EszzJxGtV xh36dUJvHxxXhCFjIWGRDs1/hlwiHru93rxztHUSZcggX13ZQGDyfddSqpdyV+6Q epqBMiNdCgfKMC7N+SaiWCt3F6URO4yfxVM7lz0NXo+Gf8gVR8NrucTt8lK5O+fX F/70lWk2jemF1N81C/1fUFEIZNg1px7nZPKsZX2fajn1KQ5ZzCOkvnoLZTBRDrhO LCDuPMZ3rEKJEMZaiF+z8gwfSHsLR7tc4Np0LjUzoL6YLezUO+kjoZSAXYOx6x51 rdqMzPHMZu3XzHAXYSEgW8esXwkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRfGDQP nJ5FXezkl5ATLSUup3BrGjAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzEzNTY1OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKD64zANBgkqhkiG9w0BAQsFAAOCAQEAGIJ+CEeWo/xxHMOkYAaR BYxaSY3UYm8J1l2EmM7ZtltWk2BbJ/sSt/BMr/EhlUhwSgiqx+Wj+Cy07QijAVx4 7pMpTAuQxjnIfI63XbKGnyGS+lSs/QBXVlxeIl+StaboYWfTrhg3bT4H8qezLHvv Oz3MsWd2ZM1lA1rb+rILCyjjjtyPoxxVj1r7Sg49pI/NVLrFkQ5H2EKaNU9rrAtq 23ezsvehRaqYPNscWcQrGNeOntAL2gZmlhUDEUaKr7xzy8dc0SwtcZcD+9Qx4UmT QKS8UVy7SIhUJzzOub5Nnqz+2eEbHnZIxkRDF9LYoYyvASmNA09z6HHD4ze2+Awn GA== -----END CERTIFICATE-----Generated at Sun Sep 7 10:11:25 2025 by rpki-client