$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153152.roa File: AS153152.roa (raw, json) Hash identifier: z3Su0qdMrvB7C2uBtLXCC/xOvjlwRxj0EplHJOy9NwE= Subject key identifier: 1E:7F:60:1C:C0:0B:FE:F7:12:28:F3:54:81:E5:35:F2:8D:2F:A6:4B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3BAAFCE434E37E157480C63BBC3491D285089BC8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153152.roa Signing time: Thu 16 Oct 2025 01:09:52 +0000 ROA not before: Thu 16 Oct 2025 01:04:52 +0000 ROA not after: Thu 15 Oct 2026 01:09:52 +0000 asID: 153152 IP address blocks: 2001:df4:8ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:aa:fc:e4:34:e3:7e:15:74:80:c6:3b:bc:34:91:d2:85:08:9b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 16 01:04:52 2025 GMT Not After : Oct 15 01:09:52 2026 GMT Subject: CN=1E7F601CC00BFEF71228F35481E535F28D2FA64B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ef:50:e4:02:51:4f:a3:b0:90:7b:e1:11:1e: 8b:22:bc:eb:23:6d:eb:9f:df:a9:2d:6d:6e:13:fe: de:9e:57:08:fb:1f:f5:f2:46:c5:1c:ea:46:ab:ec: 97:6a:bc:0c:ef:26:ea:94:65:31:a7:dc:bf:68:5e: af:ab:fa:b5:05:dc:81:25:79:f4:7d:e7:84:01:63: c2:1e:f2:f3:ec:f2:c2:ab:4a:ea:ef:75:74:84:86: 61:54:fa:37:ad:64:7b:88:00:1c:20:28:c4:73:78: ce:fa:44:86:c6:1b:e6:5f:c9:72:40:0c:62:44:4d: 27:e7:57:7e:e6:aa:87:b5:0a:9a:f6:a8:21:bf:5d: 44:85:46:00:7e:67:e9:f5:d9:85:7a:72:b7:b3:ff: 23:3e:33:c3:35:9a:5e:60:e0:c7:b2:e0:94:10:11: 93:70:c6:16:ae:e6:55:fc:11:a7:ff:e3:c7:0b:36: 3e:81:4c:a3:40:cd:f6:70:2b:29:b2:9a:a7:8a:e9: 87:9f:07:9f:6d:c1:cd:30:9f:dd:7a:29:93:d0:ac: 1e:ae:b1:34:1f:4e:de:16:3e:15:8a:1a:f6:99:e4: e3:e0:3f:9d:d6:44:29:24:3c:e3:ef:b1:32:8b:2f: 3e:70:49:36:56:06:39:8e:9d:20:c7:43:72:0d:6b: e9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7F:60:1C:C0:0B:FE:F7:12:28:F3:54:81:E5:35:F2:8D:2F:A6:4B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153152.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:8ec0::/48 Signature Algorithm: sha256WithRSAEncryption 13:da:1a:5a:69:81:f8:1e:24:3b:a5:d3:67:74:ef:fc:54:d1: 56:02:e7:6d:31:df:db:de:43:e0:4c:49:54:dc:fb:94:c4:44: cb:36:c9:03:de:8c:92:45:0c:37:2a:67:34:c3:40:97:f9:6a: 36:69:98:32:20:ca:13:a5:c4:9b:7a:94:9a:31:8b:11:d2:b7: ff:b8:d2:1c:11:49:93:95:16:4c:af:75:07:cc:17:cc:68:0f: 35:85:f9:83:ba:14:ee:3a:47:c6:cd:62:d9:9c:aa:14:68:ca: 7e:7f:8c:cf:23:5e:ea:d7:2b:b2:28:6d:09:db:22:f1:c0:9f: 02:b1:4c:8e:6f:59:ad:0b:f8:04:8e:57:df:cd:74:49:72:bf: 89:2a:07:bc:f6:e0:e3:b8:a2:6d:0d:ba:c0:d1:57:6a:a6:0b: 69:ab:27:6d:55:d9:35:0e:d0:4a:b1:b1:3e:4e:b1:19:98:ce: bc:9a:bc:4d:1f:2f:bb:22:3a:df:91:0e:63:af:11:4d:b9:cf: a5:6f:ba:6a:6b:63:12:ee:df:de:fd:a4:e2:aa:22:78:0e:bd: 3c:10:0e:30:1a:5a:31:4d:13:24:81:f0:c2:50:a3:c7:b2:ca: 8a:dd:3c:33:64:3f:d6:f7:ee:f3:7a:dd:db:fc:1a:e2:18:dc: 36:b1:04:4b -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUO6r85DTjfhV0gMY7vDSR0oUIm8gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAxNjAxMDQ1MloX DTI2MTAxNTAxMDk1MlowMzExMC8GA1UEAxMoMUU3RjYwMUNDMDBCRkVGNzEyMjhG MzU0ODFFNTM1RjI4RDJGQTY0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKrvUOQCUU+jsJB74REeiyK86yNt65/fqS1tbhP+3p5XCPsf9fJGxRzqRqvs l2q8DO8m6pRlMafcv2her6v6tQXcgSV59H3nhAFjwh7y8+zywqtK6u91dISGYVT6 N61ke4gAHCAoxHN4zvpEhsYb5l/JckAMYkRNJ+dXfuaqh7UKmvaoIb9dRIVGAH5n 6fXZhXpyt7P/Iz4zwzWaXmDgx7LglBARk3DGFq7mVfwRp//jxws2PoFMo0DN9nAr KbKap4rph58Hn23BzTCf3Xopk9CsHq6xNB9O3hY+FYoa9pnk4+A/ndZEKSQ84++x MosvPnBJNlYGOY6dIMdDcg1r6X0CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQef2Ac wAv+9xIo81SB5TXyjS+mSzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzE1Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfSOwDANBgkqhkiG9w0BAQsFAAOCAQEAE9oaWmmB+B4kO6XT Z3Tv/FTRVgLnbTHf295D4ExJVNz7lMREyzbJA96MkkUMNypnNMNAl/lqNmmYMiDK E6XEm3qUmjGLEdK3/7jSHBFJk5UWTK91B8wXzGgPNYX5g7oU7jpHxs1i2ZyqFGjK fn+MzyNe6tcrsihtCdsi8cCfArFMjm9ZrQv4BI5X3810SXK/iSoHvPbg47iibQ26 wNFXaqYLaasnbVXZNQ7QSrGxPk6xGZjOvJq8TR8vuyI635EOY68RTbnPpW+6amtj Eu7f3v2k4qoieA69PBAOMBpaMU0TJIHwwlCjx7LKit08M2Q/1vfu83rd2/wa4hjc NrEESw== -----END CERTIFICATE-----Generated at Sun Oct 19 12:51:20 2025 by rpki-client