$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153116.roa File: AS153116.roa (raw, json) Hash identifier: G2Dcc5sTHCL1ob1eEDECz3vaGcRn8SaHF5RwnnfbKG0= Subject key identifier: 3A:55:E8:72:7E:12:2D:AD:0B:16:8C:A7:4A:7F:24:83:56:76:AC:18 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 134B24581FF45CCD5D129F08E3030129235206B2 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153116.roa Signing time: Thu 06 Feb 2025 10:44:47 +0000 ROA not before: Thu 06 Feb 2025 10:39:47 +0000 ROA not after: Thu 05 Feb 2026 10:44:47 +0000 asID: 153116 IP address blocks: 160.25.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:4b:24:58:1f:f4:5c:cd:5d:12:9f:08:e3:03:01:29:23:52:06:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Feb 6 10:39:47 2025 GMT Not After : Feb 5 10:44:47 2026 GMT Subject: CN=3A55E8727E122DAD0B168CA74A7F24835676AC18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6b:e5:e9:d2:6c:2d:fa:a9:bc:f6:49:3e:1e: 91:98:a2:60:86:bd:a2:e4:e8:2c:7a:40:f0:87:0d: d2:a1:2e:6e:78:cb:8f:5e:d0:39:4d:b6:a4:06:8d: ee:da:46:72:dc:1a:96:67:f5:5f:04:0c:7c:e5:b5: c2:6c:03:68:b7:55:e6:e3:ed:b0:a8:b8:38:62:cd: cf:32:fd:fc:75:6e:b8:39:01:76:b4:35:25:79:4f: 22:98:6d:ac:4a:c0:8b:2e:b4:87:1e:61:49:b7:e8: 02:46:82:5b:31:ce:94:4a:75:06:40:83:57:79:09: bb:a2:72:69:68:65:84:6e:da:ba:82:b5:c4:7f:86: e7:02:88:75:63:3d:b0:09:30:50:26:66:3c:71:64: 8d:fb:bc:40:ec:3a:32:bf:7a:23:e8:99:aa:35:07: ca:f7:7b:97:7e:9e:7b:e3:e9:2f:b1:0d:e1:4b:c5: 78:7f:ad:bd:91:89:47:82:b9:0f:3c:a4:10:18:68: 54:a8:6b:11:dd:cc:52:e7:6a:5e:69:55:56:07:12: 1c:c5:d7:81:7f:65:0e:15:cb:23:36:2b:19:ee:e4: 93:78:21:44:5a:33:36:36:78:63:f0:c6:a8:3a:10: 65:e8:a1:1a:1b:2a:60:95:2c:97:12:8e:54:ca:6c: c7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:55:E8:72:7E:12:2D:AD:0B:16:8C:A7:4A:7F:24:83:56:76:AC:18 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153116.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.200.0/24 Signature Algorithm: sha256WithRSAEncryption 09:c8:a5:25:81:78:10:00:e0:68:62:53:b2:d3:3c:01:a0:b3: 4d:11:d8:c9:66:f6:75:e8:83:a7:48:c0:66:5b:77:83:d8:3f: 68:20:77:55:c8:16:ca:35:8d:61:05:0b:a3:89:ee:b6:1b:31: fc:c0:37:03:fb:4d:c2:3c:72:ed:6b:71:20:0c:b8:f9:13:36: 6f:30:57:2d:2c:31:74:3c:97:ba:bc:07:10:ef:de:02:e1:1e: 56:af:83:60:6a:76:c0:e3:8f:ef:82:b0:0c:67:57:dd:fa:09: 4c:0a:b4:33:67:3f:95:7f:19:b5:e0:28:c4:fe:3a:d7:a6:10: 5b:af:53:34:48:9c:b1:c7:8b:48:4d:64:12:da:cc:f5:23:0d: c3:9b:57:68:dc:01:11:26:05:55:52:54:61:ea:e4:11:91:23: dd:c8:48:b9:99:15:59:08:7b:e4:66:ee:07:86:89:f7:d6:50: 34:f2:0d:94:aa:50:78:bc:8e:64:06:88:75:22:0f:35:ff:26: f1:54:1e:f6:de:df:7f:11:16:d6:48:35:f8:3f:50:49:ac:b4: 7d:19:cf:ff:98:0d:28:7c:d1:c4:20:a9:9e:4f:d2:cf:e0:22: 79:be:d8:23:7f:4e:e5:c0:af:35:d5:9d:79:6c:72:d4:52:32: d3:3b:11:08 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUE0skWB/0XM1dEp8I4wMBKSNSBrIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDIwNjEwMzk0N1oX DTI2MDIwNTEwNDQ0N1owMzExMC8GA1UEAxMoM0E1NUU4NzI3RTEyMkRBRDBCMTY4 Q0E3NEE3RjI0ODM1Njc2QUMxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALBr5enSbC36qbz2ST4ekZiiYIa9ouToLHpA8IcN0qEubnjLj17QOU22pAaN 7tpGctwalmf1XwQMfOW1wmwDaLdV5uPtsKi4OGLNzzL9/HVuuDkBdrQ1JXlPIpht rErAiy60hx5hSbfoAkaCWzHOlEp1BkCDV3kJu6JyaWhlhG7auoK1xH+G5wKIdWM9 sAkwUCZmPHFkjfu8QOw6Mr96I+iZqjUHyvd7l36ee+PpL7EN4UvFeH+tvZGJR4K5 DzykEBhoVKhrEd3MUudqXmlVVgcSHMXXgX9lDhXLIzYrGe7kk3ghRFozNjZ4Y/DG qDoQZeihGhsqYJUslxKOVMpsx90CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQ6Vehy fhItrQsWjKdKfySDVnasGDAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MzExNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKAZyDANBgkqhkiG9w0BAQsFAAOCAQEACcilJYF4EADgaGJTstM8 AaCzTRHYyWb2deiDp0jAZlt3g9g/aCB3VcgWyjWNYQULo4nuthsx/MA3A/tNwjxy 7WtxIAy4+RM2bzBXLSwxdDyXurwHEO/eAuEeVq+DYGp2wOOP74KwDGdX3foJTAq0 M2c/lX8ZteAoxP4616YQW69TNEicsceLSE1kEtrM9SMNw5tXaNwBESYFVVJUYerk EZEj3chIuZkVWQh75GbuB4aJ99ZQNPINlKpQeLyOZAaIdSIPNf8m8VQe9t7ffxEW 1kg1+D9QSay0fRnP/5gNKHzRxCCpnk/Sz+Aieb7YI39O5cCvNdWdeWxy1FIy0zsR CA== -----END CERTIFICATE-----Generated at Mon Apr 7 03:31:42 2025 by rpki-client