$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153084.roa File: AS153084.roa (raw, json) Hash identifier: bfOxg0vpxd+A/Cznyi/vKJohcm8rxNyw47o6oltpfdc= Subject key identifier: F6:0C:63:E1:45:62:44:65:38:0E:84:04:11:74:6C:C3:AB:13:21:78 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 365CC096E7915F1361019753737C5FF5A3D825DE Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153084.roa Signing time: Thu 06 Feb 2025 10:44:54 +0000 ROA not before: Thu 06 Feb 2025 10:39:54 +0000 ROA not after: Thu 05 Feb 2026 10:44:54 +0000 asID: 153084 IP address blocks: 160.25.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:5c:c0:96:e7:91:5f:13:61:01:97:53:73:7c:5f:f5:a3:d8:25:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Feb 6 10:39:54 2025 GMT Not After : Feb 5 10:44:54 2026 GMT Subject: CN=F60C63E145624465380E840411746CC3AB132178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0f:cd:14:b2:2a:8d:a5:31:d4:37:71:e4:78: f7:c5:a0:33:f5:7e:d0:ed:76:6b:36:17:0a:86:a6: fd:93:10:05:66:1d:1a:50:87:a8:09:4b:2c:9b:7a: ee:63:2c:c0:83:a6:ac:23:44:e2:e6:63:5e:f6:b9: db:bd:3a:1b:74:5c:cb:a8:22:75:b9:10:b9:1f:93: 3a:45:b5:7d:62:be:e5:73:a2:87:dc:ff:bd:54:d6: e5:97:2c:4f:fd:d3:76:fa:ac:3f:8a:99:fa:a6:d3: 7f:ac:84:65:c0:c8:8b:87:f7:be:03:44:ef:0f:7d: 72:5f:9d:cb:a8:32:36:34:c8:b3:17:ab:87:53:94: 8d:06:91:6a:96:0a:d9:85:c0:9d:2e:80:cd:6c:7f: a8:30:20:75:4a:1e:c8:e3:5e:6b:13:cd:2f:31:e2: c2:c5:8c:b4:37:8b:8f:65:ef:38:ba:cb:90:65:3c: bc:7d:9f:99:f5:dc:23:a6:51:95:be:48:62:71:b5: dd:80:3a:a4:49:90:8e:fb:cc:7f:32:35:82:5d:84: 10:bf:7c:48:7c:b7:9a:1b:42:0d:1a:01:a4:a8:fb: 7e:fd:a5:b5:51:a8:6e:15:c0:1b:e5:08:84:b4:b4: 55:6a:40:04:20:a3:ff:e3:cc:dd:a0:15:d8:2f:40: 97:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:0C:63:E1:45:62:44:65:38:0E:84:04:11:74:6C:C3:AB:13:21:78 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153084.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.56.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:59:22:fc:6f:7c:7a:6e:64:89:2f:76:72:7d:c0:28:cc:38: 9e:75:85:c3:aa:74:9f:b3:ff:95:af:0b:9f:d7:08:a5:ca:0a: cb:f6:7a:64:dc:83:23:86:8f:ea:b3:77:46:41:c4:78:13:19: 90:79:0f:af:32:4d:36:83:20:77:94:76:36:10:84:8e:2e:e6: de:42:33:0a:c9:b1:a5:0f:a5:e8:a3:f3:3e:f1:60:11:91:66: af:1d:0e:cc:d1:61:f1:b0:59:f1:93:4d:93:bc:5f:ac:c4:92: 9a:9e:4d:e0:a3:e1:40:56:de:19:cd:a2:84:dc:19:75:38:84: ca:0c:6c:8e:85:27:ca:56:97:6e:5a:a5:dd:19:13:99:b4:04: 9b:cd:f4:22:b8:8f:36:f7:ab:9a:13:c8:b3:e4:a6:8f:b9:3c: 55:34:a5:21:a8:15:ee:d1:16:ff:03:17:78:8f:56:84:f2:40: 79:99:2a:38:9c:e9:ad:e0:c0:d9:d4:f7:a4:c2:1a:63:6e:11: 36:67:fe:81:4a:a5:a9:fa:7d:9c:98:56:78:87:e7:ed:9c:e1: f1:21:d5:1b:32:98:92:6f:00:a5:ae:95:d7:5c:71:d1:e5:b7: 01:01:64:c1:52:f6:1f:30:e7:5f:3c:4f:27:60:03:eb:6f:88: 2d:5c:08:b9 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUNlzAlueRXxNhAZdTc3xf9aPYJd4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDIwNjEwMzk1NFoX DTI2MDIwNTEwNDQ1NFowMzExMC8GA1UEAxMoRjYwQzYzRTE0NTYyNDQ2NTM4MEU4 NDA0MTE3NDZDQzNBQjEzMjE3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMMPzRSyKo2lMdQ3ceR498WgM/V+0O12azYXCoam/ZMQBWYdGlCHqAlLLJt6 7mMswIOmrCNE4uZjXva52706G3Rcy6gidbkQuR+TOkW1fWK+5XOih9z/vVTW5Zcs T/3TdvqsP4qZ+qbTf6yEZcDIi4f3vgNE7w99cl+dy6gyNjTIsxerh1OUjQaRapYK 2YXAnS6AzWx/qDAgdUoeyONeaxPNLzHiwsWMtDeLj2XvOLrLkGU8vH2fmfXcI6ZR lb5IYnG13YA6pEmQjvvMfzI1gl2EEL98SHy3mhtCDRoBpKj7fv2ltVGobhXAG+UI hLS0VWpABCCj/+PM3aAV2C9Al3kCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBT2DGPh RWJEZTgOhAQRdGzDqxMheDAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MzA4NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaAZODANBgkqhkiG9w0BAQsFAAOCAQEAfVki/G98em5kiS92cn3A KMw4nnWFw6p0n7P/la8Ln9cIpcoKy/Z6ZNyDI4aP6rN3RkHEeBMZkHkPrzJNNoMg d5R2NhCEji7m3kIzCsmxpQ+l6KPzPvFgEZFmrx0OzNFh8bBZ8ZNNk7xfrMSSmp5N 4KPhQFbeGc2ihNwZdTiEygxsjoUnylaXblql3RkTmbQEm830IriPNvermhPIs+Sm j7k8VTSlIagV7tEW/wMXeI9WhPJAeZkqOJzpreDA2dT3pMIaY24RNmf+gUqlqfp9 nJhWeIfn7Zzh8SHVGzKYkm8Apa6V11xx0eW3AQFkwVL2HzDnXzxPJ2AD62+ILVwI uQ== -----END CERTIFICATE-----Generated at Mon Apr 7 03:41:34 2025 by rpki-client