$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153106.roa File: AS153106.roa (raw, json) Hash identifier: M8sjBK1ohh8Yb2GLGbElV/PITzb7VPWJlKmT3GAE8AU= Subject key identifier: F1:A6:C4:2B:3B:FB:A7:9D:21:07:B4:6D:77:30:82:99:62:D9:F4:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 7AFAEA24152FA57916C61F9965503FA196A7DD0E Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153106.roa Signing time: Thu 06 Feb 2025 10:44:50 +0000 ROA not before: Thu 06 Feb 2025 10:39:50 +0000 ROA not after: Thu 05 Feb 2026 10:44:50 +0000 asID: 153106 IP address blocks: 160.25.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:fa:ea:24:15:2f:a5:79:16:c6:1f:99:65:50:3f:a1:96:a7:dd:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Feb 6 10:39:50 2025 GMT Not After : Feb 5 10:44:50 2026 GMT Subject: CN=F1A6C42B3BFBA79D2107B46D7730829962D9F4D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f9:e7:4f:49:4a:d9:32:af:10:fa:75:6e:5a: 70:e8:0d:d3:1f:79:06:db:30:13:99:d3:0a:61:a1: 01:6a:31:66:fc:35:56:9c:e1:b6:91:1f:2b:33:28: a7:8f:52:1b:98:95:68:00:42:97:18:a4:c4:ec:57: 40:26:65:84:5e:d6:8c:ba:1c:14:86:a8:56:01:25: 3c:7f:bf:e6:93:60:1a:e6:83:bc:1e:97:cc:0f:57: 4e:cd:1b:45:f7:8b:8f:e2:3e:65:e8:61:c2:0e:70: bf:0f:2d:27:6a:dc:05:99:47:0b:fa:82:54:78:17: 3e:9c:8d:49:ac:72:19:8f:f3:be:03:ef:4d:7d:d4: 16:7f:7c:ba:2f:f5:42:32:01:41:81:6e:f8:41:bd: c9:a6:4f:a6:3a:33:40:24:80:b8:89:f3:84:21:46: c8:60:74:be:26:01:9c:69:9d:87:60:12:17:2d:b9: e5:3b:8e:af:e9:2f:6e:c1:22:98:90:30:b4:6d:82: 53:60:09:ee:c8:0e:d2:87:bd:d0:9c:0c:0e:67:99: 39:ed:fc:bd:35:ab:d2:33:7e:c2:2a:92:07:de:fd: 5d:52:e9:0d:1f:6b:1b:fd:36:7a:9e:e3:e6:e4:89: 30:6f:92:52:e4:39:72:87:fe:63:34:18:e3:7b:5f: e9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A6:C4:2B:3B:FB:A7:9D:21:07:B4:6D:77:30:82:99:62:D9:F4:D4 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153106.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.229.0/24 Signature Algorithm: sha256WithRSAEncryption 81:df:b9:42:e6:9d:99:d0:d1:1c:49:37:7a:bb:b6:a4:c4:01: 04:d1:a6:54:56:55:85:a3:9e:15:47:8e:7a:82:92:fd:47:1c: 17:00:d0:27:9d:a6:5e:1f:4a:20:e8:3d:9a:19:b0:8c:c6:1d: f3:0d:67:d2:0c:d6:39:1f:71:bb:85:b0:9b:f5:f8:53:b8:99: 46:95:a9:5c:b6:f7:86:bc:93:a5:78:65:89:64:96:a1:a4:37: 5a:aa:de:34:07:1c:6b:cb:8a:96:6a:ed:c9:44:f7:33:12:7f: 13:f8:d8:b1:5e:59:5a:0d:76:cc:3e:63:5f:06:a6:8f:ba:55: 41:14:05:0c:82:3b:fc:f5:b8:99:eb:72:5d:02:b9:ae:0b:a7: 9f:e0:8c:83:67:10:47:50:f0:40:4f:29:92:e7:a3:57:81:41: b0:64:7c:1d:fe:58:14:12:eb:1b:27:6f:72:c0:34:ea:e5:c2: 22:ad:86:24:60:67:7e:57:c3:0a:23:dd:0f:ce:b4:ed:df:f4: 1c:ab:dd:11:19:a0:92:5e:95:06:3e:98:cd:39:8a:27:7f:4e: 6d:c4:29:08:5f:0f:4c:8b:79:c0:79:e8:3c:5f:60:2b:38:88: d2:3a:7f:13:9b:93:1e:38:8b:73:0f:b5:54:1f:2b:fb:94:61: 77:41:b4:5f -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUevrqJBUvpXkWxh+ZZVA/oZan3Q4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDIwNjEwMzk1MFoX DTI2MDIwNTEwNDQ1MFowMzExMC8GA1UEAxMoRjFBNkM0MkIzQkZCQTc5RDIxMDdC NDZENzczMDgyOTk2MkQ5RjRENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKf5509JStkyrxD6dW5acOgN0x95BtswE5nTCmGhAWoxZvw1VpzhtpEfKzMo p49SG5iVaABClxikxOxXQCZlhF7WjLocFIaoVgElPH+/5pNgGuaDvB6XzA9XTs0b RfeLj+I+Zehhwg5wvw8tJ2rcBZlHC/qCVHgXPpyNSaxyGY/zvgPvTX3UFn98ui/1 QjIBQYFu+EG9yaZPpjozQCSAuInzhCFGyGB0viYBnGmdh2ASFy255TuOr+kvbsEi mJAwtG2CU2AJ7sgO0oe90JwMDmeZOe38vTWr0jN+wiqSB979XVLpDR9rG/02ep7j 5uSJMG+SUuQ5cof+YzQY43tf6QECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTxpsQr O/unnSEHtG13MIKZYtn01DAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MzEwNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKAZ5TANBgkqhkiG9w0BAQsFAAOCAQEAgd+5QuadmdDRHEk3eru2 pMQBBNGmVFZVhaOeFUeOeoKS/UccFwDQJ52mXh9KIOg9mhmwjMYd8w1n0gzWOR9x u4Wwm/X4U7iZRpWpXLb3hryTpXhliWSWoaQ3WqreNAcca8uKlmrtyUT3MxJ/E/jY sV5ZWg12zD5jXwamj7pVQRQFDII7/PW4metyXQK5rgunn+CMg2cQR1DwQE8pkuej V4FBsGR8Hf5YFBLrGydvcsA06uXCIq2GJGBnflfDCiPdD8607d/0HKvdERmgkl6V Bj6YzTmKJ39ObcQpCF8PTIt5wHnoPF9gKziI0jp/E5uTHjiLcw+1VB8r+5Rhd0G0 Xw== -----END CERTIFICATE-----Generated at Mon Apr 7 03:34:18 2025 by rpki-client