$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152808.roa File: AS152808.roa (raw, json) Hash identifier: IDDi24BvFO+6fJ/c/SPiIgWB9J6smvhGO4LfiTtBcKg= Subject key identifier: 6A:D0:A3:B5:25:BA:FF:40:A4:4B:37:01:92:31:53:22:6C:FD:B5:04 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 57C4E8FB7ECB3483FC52ED2F0ABDE4E7208F1076 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152808.roa Signing time: Thu 08 Jan 2026 11:00:08 +0000 ROA not before: Thu 08 Jan 2026 10:55:08 +0000 ROA not after: Thu 07 Jan 2027 11:00:08 +0000 asID: 152808 IP address blocks: 160.22.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:c4:e8:fb:7e:cb:34:83:fc:52:ed:2f:0a:bd:e4:e7:20:8f:10:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 8 10:55:08 2026 GMT Not After : Jan 7 11:00:08 2027 GMT Subject: CN=6AD0A3B525BAFF40A44B3701923153226CFDB504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9b:bc:7e:fc:8b:e3:0a:07:07:66:d6:36:c8: c2:2c:00:1d:86:a4:93:41:fa:74:ff:00:26:11:72: c8:0b:83:f2:d1:b4:c5:d0:a3:f6:68:31:0b:b1:51: 9f:51:52:35:3f:63:ab:7b:a0:38:1d:0f:ff:86:ee: 48:6e:2c:49:49:c9:3a:85:22:77:53:64:e4:fe:88: e8:12:84:21:f0:a3:43:8c:40:5e:1d:2e:d0:e4:36: d5:c0:30:f1:ee:f0:b7:ff:fd:1c:16:82:e0:d7:ec: 43:05:25:3c:aa:f4:f0:ac:80:50:f1:17:72:ca:23: bb:e2:77:82:2d:e0:ff:64:f1:29:0f:98:8d:64:37: 84:5f:14:c1:d2:af:1d:db:ad:46:91:e7:e5:ad:b2: fc:0a:59:c4:a5:56:24:0b:12:e4:db:e5:d2:a2:45: 79:8a:af:5a:f3:dd:99:c3:41:5f:15:55:3d:c8:4c: 78:e9:22:bb:a5:c0:e6:09:a0:41:fb:72:24:82:70: 98:98:89:f0:08:9d:a7:73:55:3a:f0:f8:b0:28:46: e6:b4:38:5a:7a:5c:56:56:5a:70:cd:6b:14:85:6a: 11:da:78:11:a8:d0:fd:7e:e4:c6:49:bc:7d:81:9a: 84:fa:c9:9a:7c:2c:4f:19:09:e6:40:3e:d7:ac:d9: 24:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D0:A3:B5:25:BA:FF:40:A4:4B:37:01:92:31:53:22:6C:FD:B5:04 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152808.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.100.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:4e:a5:fa:74:f1:fd:8a:e1:82:9d:ce:5a:79:af:06:71:f0: c1:a9:95:dd:51:f4:c4:ab:72:a7:76:21:17:95:46:22:b0:79: 2c:43:a9:67:30:89:34:6c:dc:bf:65:d0:79:14:c4:19:e9:8a: a9:9f:40:2f:d8:54:26:26:ee:f8:07:11:13:33:b3:d3:11:31: c7:76:10:a1:a4:25:71:37:44:9f:5f:47:cf:38:fa:7d:26:58: 11:12:6e:d2:dd:57:41:c2:bf:71:38:9c:72:d6:12:10:9a:bc: 99:df:d9:cc:e9:91:1e:9d:31:65:66:27:a6:1e:50:99:b6:59: b2:1a:20:a3:8a:0b:95:a5:6f:fd:45:09:72:02:80:f1:ee:dd: ca:32:e5:39:e4:43:eb:e6:e7:fa:db:eb:87:1f:af:13:29:39: 42:7e:57:64:2a:20:2b:1e:e4:a6:fc:65:f4:ac:0f:0e:fe:f0: e2:23:bc:6f:22:37:99:09:44:ec:05:95:8a:9f:aa:a7:6f:6f: a7:ae:9a:0a:d6:b8:85:a0:aa:ce:56:54:c8:a5:fd:9d:48:3d: a7:ac:25:3d:25:0b:eb:82:bd:2b:44:68:12:7a:fc:ce:af:ef: 00:95:0c:03:50:b8:05:84:dc:37:f8:d7:98:7d:1d:6b:5a:47: c9:b8:b7:de -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUV8To+37LNIP8Uu0vCr3k5yCPEHYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDEwODEwNTUwOFoX DTI3MDEwNzExMDAwOFowMzExMC8GA1UEAxMoNkFEMEEzQjUyNUJBRkY0MEE0NEIz NzAxOTIzMTUzMjI2Q0ZEQjUwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANWbvH78i+MKBwdm1jbIwiwAHYakk0H6dP8AJhFyyAuD8tG0xdCj9mgxC7FR n1FSNT9jq3ugOB0P/4buSG4sSUnJOoUid1Nk5P6I6BKEIfCjQ4xAXh0u0OQ21cAw 8e7wt//9HBaC4NfsQwUlPKr08KyAUPEXcsoju+J3gi3g/2TxKQ+YjWQ3hF8UwdKv HdutRpHn5a2y/ApZxKVWJAsS5Nvl0qJFeYqvWvPdmcNBXxVVPchMeOkiu6XA5gmg QftyJIJwmJiJ8Aidp3NVOvD4sChG5rQ4WnpcVlZacM1rFIVqEdp4EajQ/X7kxkm8 fYGahPrJmnwsTxkJ5kA+16zZJHsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRq0KO1 Jbr/QKRLNwGSMVMibP21BDAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MjgwOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKAWZDANBgkqhkiG9w0BAQsFAAOCAQEAbk6l+nTx/Yrhgp3OWnmv BnHwwamV3VH0xKtyp3YhF5VGIrB5LEOpZzCJNGzcv2XQeRTEGemKqZ9AL9hUJibu +AcREzOz0xExx3YQoaQlcTdEn19Hzzj6fSZYERJu0t1XQcK/cTicctYSEJq8md/Z zOmRHp0xZWYnph5QmbZZshogo4oLlaVv/UUJcgKA8e7dyjLlOeRD6+bn+tvrhx+v Eyk5Qn5XZCogKx7kpvxl9KwPDv7w4iO8byI3mQlE7AWVip+qp29vp66aCta4haCq zlZUyKX9nUg9p6wlPSUL64K9K0RoEnr8zq/vAJUMA1C4BYTcN/jXmH0da1pHybi3 3g== -----END CERTIFICATE-----Generated at Mon Mar 2 09:37:35 2026 by rpki-client