$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153893.roa File: AS153893.roa (raw, json) Hash identifier: P9d8DPZR0MraVW2fvl3D7Er6kuobWV8G/an/uXHahiE= Subject key identifier: 44:66:34:0C:42:05:9B:BC:1F:10:27:C9:C9:8D:1C:7A:35:E7:B6:C0 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7CED897E1A9F8C9E1D612472B63068EB3CF78804 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153893.roa Signing time: Mon 02 Jun 2025 02:30:29 +0000 ROA not before: Mon 02 Jun 2025 02:25:29 +0000 ROA not after: Mon 01 Jun 2026 02:30:29 +0000 asID: 153893 IP address blocks: 2001:df5:8940::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ed:89:7e:1a:9f:8c:9e:1d:61:24:72:b6:30:68:eb:3c:f7:88:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 2 02:25:29 2025 GMT Not After : Jun 1 02:30:29 2026 GMT Subject: CN=4466340C42059BBC1F1027C9C98D1C7A35E7B6C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f7:e2:11:53:b3:77:82:e1:c9:e0:6e:d5:f7: 44:2b:79:93:68:cc:3a:75:27:5b:70:65:ae:a2:75: e2:b5:e9:d3:cf:ee:58:a5:24:3c:85:48:dd:65:e1: 8f:aa:11:93:c9:c0:8e:a6:37:89:97:be:fb:a5:ba: fe:c7:57:d7:b1:3e:fc:ee:2c:34:bc:48:9c:1c:50: b1:58:22:15:0c:24:1b:29:18:fb:76:dc:27:87:df: 65:c0:65:6f:91:5e:89:cf:4a:0d:b5:7f:74:f8:77: 33:9a:a7:49:ee:3e:a9:9c:d1:90:2e:54:b4:80:69: 33:0b:87:54:c0:6e:27:89:5c:84:3c:6f:ec:0e:b2: ad:8c:9c:2e:c5:74:cc:7a:94:0f:9b:1d:c8:22:2f: df:f4:79:51:64:fe:a0:0c:09:8e:18:41:43:f0:0a: dc:52:dd:7a:f3:3f:97:60:93:5d:83:4c:04:cd:e6: 9e:0e:13:3d:ce:11:4a:88:ef:f0:ba:93:54:6f:60: b3:ab:f5:fa:b0:32:fd:2c:73:24:8e:45:46:75:f7: 38:17:45:a1:71:8c:0e:3d:a4:ed:03:26:04:dd:a2: 04:df:d2:d3:ca:5b:b4:50:21:0e:e3:b6:5f:f1:2d: 2b:9e:51:62:94:bd:d6:f1:00:c9:64:5b:41:37:99: 05:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:66:34:0C:42:05:9B:BC:1F:10:27:C9:C9:8D:1C:7A:35:E7:B6:C0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153893.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:8940::/48 Signature Algorithm: sha256WithRSAEncryption 23:4a:ee:22:71:5e:b4:07:ef:af:f6:0d:f7:86:1b:83:d3:e9: 0b:52:71:81:8e:ad:51:e4:fa:de:13:b8:2a:ce:7c:2c:1e:12: d1:3d:ef:e8:74:3f:51:46:7d:a1:75:28:60:6d:e8:7a:47:64: 63:c3:c7:ed:6e:46:1b:e6:35:bf:ef:43:7a:4d:39:9d:b5:e5: 8d:74:dd:4b:29:c6:c8:a2:b5:c9:01:84:55:c2:0d:16:b3:ba: aa:3a:18:0c:12:44:d3:66:54:e0:51:b4:b2:7f:27:1c:5a:ea: 36:97:2b:60:ea:36:b9:94:f3:45:86:2a:4a:04:57:a8:a8:c0: 46:15:98:e5:14:80:23:e0:85:76:ef:ac:46:04:05:d3:81:b4: b5:41:a5:2b:ab:73:53:db:3f:da:cf:0c:c5:77:d4:6e:4e:5a: 55:e1:de:00:5c:80:60:97:fc:68:3f:2f:5f:4b:e6:e4:90:dd: 32:d7:2e:db:d7:81:d7:0d:7e:fb:34:34:b1:9f:a3:1f:d5:65: 7d:ed:32:b1:6f:cc:0a:62:41:0d:03:70:2e:42:a0:b1:f4:79: 09:7a:e8:48:62:a2:09:91:c5:08:d3:c4:02:ed:cb:a1:37:41: 92:49:28:35:5c:33:61:5d:19:53:25:c4:ee:82:11:c7:b8:e0: ff:7e:6d:5c -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUfO2JfhqfjJ4dYSRytjBo6zz3iAQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMjAyMjUyOVoX DTI2MDYwMTAyMzAyOVowMzExMC8GA1UEAxMoNDQ2NjM0MEM0MjA1OUJCQzFGMTAy N0M5Qzk4RDFDN0EzNUU3QjZDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMD34hFTs3eC4cngbtX3RCt5k2jMOnUnW3BlrqJ14rXp08/uWKUkPIVI3WXh j6oRk8nAjqY3iZe++6W6/sdX17E+/O4sNLxInBxQsVgiFQwkGykY+3bcJ4ffZcBl b5Feic9KDbV/dPh3M5qnSe4+qZzRkC5UtIBpMwuHVMBuJ4lchDxv7A6yrYycLsV0 zHqUD5sdyCIv3/R5UWT+oAwJjhhBQ/AK3FLdevM/l2CTXYNMBM3mng4TPc4RSojv 8LqTVG9gs6v1+rAy/SxzJI5FRnX3OBdFoXGMDj2k7QMmBN2iBN/S08pbtFAhDuO2 X/EtK55RYpS91vEAyWRbQTeZBY0CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBREZjQM QgWbvB8QJ8nJjRx6Nee2wDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1Mzg5My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfWJQDANBgkqhkiG9w0BAQsFAAOCAQEAI0ruInFetAfvr/YN 94Ybg9PpC1JxgY6tUeT63hO4Ks58LB4S0T3v6HQ/UUZ9oXUoYG3oekdkY8PH7W5G G+Y1v+9Dek05nbXljXTdSynGyKK1yQGEVcINFrO6qjoYDBJE02ZU4FG0sn8nHFrq NpcrYOo2uZTzRYYqSgRXqKjARhWY5RSAI+CFdu+sRgQF04G0tUGlK6tzU9s/2s8M xXfUbk5aVeHeAFyAYJf8aD8vX0vm5JDdMtcu29eB1w1++zQ0sZ+jH9Vlfe0ysW/M CmJBDQNwLkKgsfR5CXroSGKiCZHFCNPEAu3LoTdBkkkoNVwzYV0ZUyXE7oIRx7jg /35tXA== -----END CERTIFICATE-----Generated at Sat Jun 7 18:45:30 2025 by rpki-client