$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152824.roa File: AS152824.roa (raw, json) Hash identifier: RyNSTgKs0m048KJPFZUePJGlc3XkiopLg8H609bfOv4= Subject key identifier: F8:E4:10:64:F8:DD:DA:8E:12:0E:15:D9:D7:F0:59:C3:4F:BD:A1:F4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 6B77661416F4667B0B29648CDE88B136C2DE25CE Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152824.roa Signing time: Fri 25 Jul 2025 07:29:35 +0000 ROA not before: Fri 25 Jul 2025 07:24:35 +0000 ROA not after: Fri 24 Jul 2026 07:29:35 +0000 asID: 152824 IP address blocks: 160.22.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:77:66:14:16:f4:66:7b:0b:29:64:8c:de:88:b1:36:c2:de:25:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 25 07:24:35 2025 GMT Not After : Jul 24 07:29:35 2026 GMT Subject: CN=F8E41064F8DDDA8E120E15D9D7F059C34FBDA1F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:55:be:0f:ed:3c:20:e5:e7:26:49:4f:b9:de: c9:48:ab:79:7e:90:f1:de:8c:17:3e:a9:5c:8f:48: b0:8b:2f:cc:8e:9c:8f:a7:af:1b:b3:14:22:22:99: 20:97:8d:9c:96:ca:36:2d:1e:69:d1:11:fb:11:0d: 50:82:a1:46:80:eb:b3:08:b2:e0:85:c3:69:7f:3d: 76:54:18:dc:2b:86:c6:13:9e:eb:97:aa:e7:bf:20: 6e:fc:1f:3c:2e:5c:55:7e:23:79:3a:cc:4f:70:5f: 2c:a7:ec:a2:f2:46:d9:34:5b:f0:6b:9e:0f:9b:86: 21:26:11:32:9b:04:f9:ef:38:45:51:15:e4:10:3e: 10:c2:7e:43:d1:dd:c7:75:1f:f9:e3:8e:24:2c:1e: de:60:92:8c:8f:33:00:cf:78:08:97:20:cc:99:38: d0:d1:d4:e5:6d:24:85:4b:fe:7a:27:40:fe:44:ed: b3:5c:4f:3c:b0:d1:41:37:87:8c:7b:29:68:20:dd: 04:23:89:59:ee:48:2c:c5:71:3f:28:f0:3d:ed:69: 8e:cc:09:e8:37:35:eb:4b:f0:63:2b:f1:0b:5d:f5: 33:7f:3f:85:17:dd:81:dc:dd:a6:33:2e:10:ca:83: e1:77:84:c6:d3:f3:bc:13:28:12:29:85:de:03:b3: a1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E4:10:64:F8:DD:DA:8E:12:0E:15:D9:D7:F0:59:C3:4F:BD:A1:F4 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152824.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.190.0/23 Signature Algorithm: sha256WithRSAEncryption 29:dd:78:6f:ab:a2:e3:4f:60:dc:17:0f:98:f2:31:65:33:a1: d5:dc:72:47:7b:32:2c:eb:ca:c6:53:1a:1e:05:a9:3e:09:f8: c2:33:58:3b:43:a8:fd:b9:72:25:d7:34:d2:e3:44:35:42:c2: 47:4f:3d:98:5c:b6:63:a2:f6:4b:fe:6a:3d:89:c5:45:1c:95: 84:3c:6f:c1:1e:4e:d1:58:1a:71:12:dd:4d:6d:fa:94:cb:0b: 1e:d8:ca:6a:42:11:9f:2e:66:e4:77:f1:03:ce:5a:e7:52:38: 02:e4:aa:a3:b2:21:25:ac:1e:d1:e2:3d:31:4f:e7:ff:c4:85: 7c:15:dc:34:aa:88:0a:6e:59:eb:9b:10:53:20:84:66:7e:07: 17:f3:ae:57:be:e4:3c:d6:34:49:a7:7c:bb:c8:d9:d0:5c:f1: 41:c6:bd:8d:88:69:ee:91:c2:af:a7:24:46:e3:93:e2:26:d2: 54:0a:89:76:59:f7:d6:d5:cb:cf:b6:db:0d:3d:fa:41:f2:d5: fa:75:56:82:a8:2b:be:2d:f8:0d:e3:84:2e:aa:b5:f7:5a:e3: 14:1f:24:3b:5a:bb:17:a1:ba:12:b8:db:23:ab:35:25:d2:95: ef:dc:f5:e0:c1:93:b5:a3:1d:e9:f5:49:20:a0:da:a0:0f:8d: 58:fd:c3:55 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUa3dmFBb0ZnsLKWSM3oixNsLeJc4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDcyNTA3MjQzNVoX DTI2MDcyNDA3MjkzNVowMzExMC8GA1UEAxMoRjhFNDEwNjRGOEREREE4RTEyMEUx NUQ5RDdGMDU5QzM0RkJEQTFGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN1Vvg/tPCDl5yZJT7neyUireX6Q8d6MFz6pXI9IsIsvzI6cj6evG7MUIiKZ IJeNnJbKNi0eadER+xENUIKhRoDrswiy4IXDaX89dlQY3CuGxhOe65eq578gbvwf PC5cVX4jeTrMT3BfLKfsovJG2TRb8GueD5uGISYRMpsE+e84RVEV5BA+EMJ+Q9Hd x3Uf+eOOJCwe3mCSjI8zAM94CJcgzJk40NHU5W0khUv+eidA/kTts1xPPLDRQTeH jHspaCDdBCOJWe5ILMVxPyjwPe1pjswJ6Dc160vwYyvxC131M38/hRfdgdzdpjMu EMqD4XeExtPzvBMoEimF3gOzoZUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBT45BBk +N3ajhIOFdnX8FnDT72h9DAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MjgyNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaAWvjANBgkqhkiG9w0BAQsFAAOCAQEAKd14b6ui409g3BcPmPIx ZTOh1dxyR3syLOvKxlMaHgWpPgn4wjNYO0Oo/blyJdc00uNENULCR089mFy2Y6L2 S/5qPYnFRRyVhDxvwR5O0VgacRLdTW36lMsLHtjKakIRny5m5HfxA85a51I4AuSq o7IhJawe0eI9MU/n/8SFfBXcNKqICm5Z65sQUyCEZn4HF/OuV77kPNY0Sad8u8jZ 0FzxQca9jYhp7pHCr6ckRuOT4ibSVAqJdln31tXLz7bbDT36QfLV+nVWgqgrvi34 DeOELqq191rjFB8kO1q7F6G6ErjbI6s1JdKV79z14MGTtaMd6fVJIKDaoA+NWP3D VQ== -----END CERTIFICATE-----Generated at Tue Aug 5 08:09:32 2025 by rpki-client