$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153938.roa File: AS153938.roa (raw, json) Hash identifier: 0IZaCIMK5ziSv2kvfiJSfyC/dnMPop3KdMK3eLk/c0Y= Subject key identifier: E8:BC:9A:CA:8F:7B:45:C0:A6:37:53:EC:D8:83:E1:60:CF:BE:45:77 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 19C8B0F83F225190A9090BA8EDE75802A2082758 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153938.roa Signing time: Thu 05 Jun 2025 02:54:12 +0000 ROA not before: Thu 05 Jun 2025 02:49:12 +0000 ROA not after: Thu 04 Jun 2026 02:54:12 +0000 asID: 153938 IP address blocks: 165.99.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 00:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:c8:b0:f8:3f:22:51:90:a9:09:0b:a8:ed:e7:58:02:a2:08:27:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jun 5 02:49:12 2025 GMT Not After : Jun 4 02:54:12 2026 GMT Subject: CN=E8BC9ACA8F7B45C0A63753ECD883E160CFBE4577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c3:d8:23:fc:14:56:da:77:b5:9c:e5:c3:74: f2:f4:45:5a:ac:d7:87:6c:a9:c6:ae:f5:44:64:e4: 0b:94:00:68:f3:22:79:ab:25:51:4c:67:c4:7c:ce: 5d:4e:44:12:b1:af:99:32:36:44:c6:36:4d:f9:c5: ee:44:bb:0e:6c:c1:6f:02:94:7e:63:da:d4:f5:a6: 3a:1c:e4:85:16:e8:6c:56:3a:37:df:02:d9:70:f4: 91:44:8c:16:8c:39:63:d9:a8:f1:91:4e:ff:d8:99: 31:c9:9d:a9:e6:de:fd:ee:2c:c3:7f:99:f4:ca:2a: e1:a0:e8:a0:a1:59:0a:46:bb:4c:45:c8:27:82:d3: 01:b8:25:db:0b:9d:55:a2:6f:94:91:96:fa:0f:2f: 92:a6:05:ae:ea:c0:7a:3e:a4:6e:99:eb:f3:0f:ab: d3:4a:7c:ee:0c:cb:8a:94:89:62:37:7a:87:f5:6f: 7f:10:df:93:13:9d:2f:6b:f3:80:44:ef:08:98:c4: 64:d0:1b:9d:bc:a6:0c:35:3b:01:52:b2:ee:ec:9b: a6:56:af:82:28:2d:b6:21:b0:2d:1f:77:b5:66:31: e1:04:cb:79:cc:27:25:cf:1c:c3:ec:54:83:71:5e: bd:b9:fc:9e:02:38:87:5a:65:9d:9c:fe:f8:9b:8a: 8a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BC:9A:CA:8F:7B:45:C0:A6:37:53:EC:D8:83:E1:60:CF:BE:45:77 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.99.102.0/24 Signature Algorithm: sha256WithRSAEncryption 27:15:4f:a9:3b:8e:9b:0d:df:c2:4c:2a:fe:d9:a0:27:38:4a: 4a:72:cc:41:47:38:66:17:47:9d:cc:e0:8b:ee:fa:57:44:12: ec:25:66:89:b1:d5:42:3b:f1:41:a9:c8:76:dd:14:85:45:48: 30:20:20:cb:39:f7:70:3e:33:86:6d:31:b0:d6:25:6d:5e:5e: 83:4e:5e:f8:91:6e:88:0c:7c:60:57:37:d5:b2:4f:d3:04:9e: 6f:58:ff:01:69:f5:49:b2:4a:c6:49:d0:63:33:c4:f5:be:6b: 3c:c0:27:1c:bd:4c:c6:5b:73:4e:af:b7:44:47:32:45:91:cf: 65:ac:ca:da:13:af:54:04:d4:8e:93:9c:3b:9b:53:11:ca:84: 0d:36:ff:fb:fe:9d:e0:e1:e0:97:10:30:6d:49:81:bf:25:d2: 30:6a:c8:a9:65:b5:8b:fa:af:d5:ee:ce:69:79:f7:84:27:b3: 3d:24:04:49:76:40:3c:51:a6:09:da:91:49:70:b1:90:83:d5: 8d:ef:1d:df:c3:64:6b:5d:07:81:66:2a:78:68:b9:3d:b3:b1: c0:90:62:27:97:59:93:2f:c9:42:e1:b3:69:23:c4:a0:73:fb: 49:9f:d1:05:29:ec:f5:27:01:e6:7c:ad:69:4c:7f:bc:3d:46: 07:ca:21:d9 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUGciw+D8iUZCpCQuo7edYAqIIJ1gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDYwNTAyNDkxMloX DTI2MDYwNDAyNTQxMlowMzExMC8GA1UEAxMoRThCQzlBQ0E4RjdCNDVDMEE2Mzc1 M0VDRDg4M0UxNjBDRkJFNDU3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAObD2CP8FFbad7Wc5cN08vRFWqzXh2ypxq71RGTkC5QAaPMieaslUUxnxHzO XU5EErGvmTI2RMY2TfnF7kS7DmzBbwKUfmPa1PWmOhzkhRbobFY6N98C2XD0kUSM Fow5Y9mo8ZFO/9iZMcmdqebe/e4sw3+Z9Moq4aDooKFZCka7TEXIJ4LTAbgl2wud VaJvlJGW+g8vkqYFrurAej6kbpnr8w+r00p87gzLipSJYjd6h/VvfxDfkxOdL2vz gETvCJjEZNAbnbymDDU7AVKy7uybplavgigttiGwLR93tWYx4QTLecwnJc8cw+xU g3Fevbn8ngI4h1plnZz++JuKijcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTovJrK j3tFwKY3U+zYg+Fgz75FdzAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MzkzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKVjZjANBgkqhkiG9w0BAQsFAAOCAQEAJxVPqTuOmw3fwkwq/tmg JzhKSnLMQUc4ZhdHnczgi+76V0QS7CVmibHVQjvxQanIdt0UhUVIMCAgyzn3cD4z hm0xsNYlbV5eg05e+JFuiAx8YFc31bJP0wSeb1j/AWn1SbJKxknQYzPE9b5rPMAn HL1MxltzTq+3REcyRZHPZazK2hOvVATUjpOcO5tTEcqEDTb/+/6d4OHglxAwbUmB vyXSMGrIqWW1i/qv1e7OaXn3hCezPSQESXZAPFGmCdqRSXCxkIPVje8d38Nka10H gWYqeGi5PbOxwJBiJ5dZky/JQuGzaSPEoHP7SZ/RBSns9ScB5nytaUx/vD1GB8oh 2Q== -----END CERTIFICATE-----Generated at Sat Jun 7 03:57:46 2025 by rpki-client