$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153083.roa File: AS153083.roa (raw, json) Hash identifier: lVHS/1MVxiQKdF/LFDxSxIgVJijTmvIKl8T3OdXGr6Y= Subject key identifier: EF:DC:E7:28:8B:D7:90:84:DF:B1:7E:C0:83:C1:82:A9:C4:02:0E:A0 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 4C28F05529792C81175D521355C513B73C2EFD48 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153083.roa Signing time: Tue 19 Aug 2025 02:55:33 +0000 ROA not before: Tue 19 Aug 2025 02:50:33 +0000 ROA not after: Tue 18 Aug 2026 02:55:33 +0000 asID: 153083 IP address blocks: 160.19.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:28:f0:55:29:79:2c:81:17:5d:52:13:55:c5:13:b7:3c:2e:fd:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Aug 19 02:50:33 2025 GMT Not After : Aug 18 02:55:33 2026 GMT Subject: CN=EFDCE7288BD79084DFB17EC083C182A9C4020EA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ba:1a:2a:64:22:11:b0:51:15:40:9d:3c:76: 6c:85:0c:d5:a4:14:89:d5:3a:f3:a9:fb:49:b6:d4: 82:0f:d8:b6:1c:19:c7:a3:e7:d2:ec:17:21:39:fa: 86:81:e9:6f:cd:29:b1:0e:cf:d1:c8:de:0f:fd:dd: bb:37:78:70:39:59:41:a1:eb:50:2b:e0:c6:8c:f1: 50:d2:74:6f:64:66:05:82:91:e9:2f:84:fa:55:83: 1c:19:32:01:c1:ef:c0:bf:23:bf:cf:1a:7a:69:a7: 01:71:35:02:dd:5d:05:8e:d1:45:20:30:56:df:fb: d7:82:40:1e:21:8f:5d:14:bb:19:2c:9e:61:0b:f6: 8c:62:de:f8:ef:f1:b1:f6:c6:54:00:e6:da:8c:7e: 7a:7b:98:b4:d8:b2:12:12:a3:c5:97:22:a6:c9:f9: 2c:e3:ae:76:6e:c3:7c:19:a7:eb:05:6c:45:ef:de: 2e:d0:47:f3:47:3a:95:a6:95:3b:3d:87:78:94:58: 1c:04:8f:68:6e:b1:57:da:41:96:f3:3c:2b:2f:cd: a3:b0:e3:0e:34:90:a1:f2:01:68:9e:b7:1f:91:2b: f1:12:cb:60:ba:e9:67:a8:db:64:d6:c8:98:b2:3f: c9:b1:1a:49:80:ac:d4:07:68:13:a3:ba:62:6b:6a: fe:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DC:E7:28:8B:D7:90:84:DF:B1:7E:C0:83:C1:82:A9:C4:02:0E:A0 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153083.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.176.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:93:44:ea:4d:d4:34:97:8d:2d:15:9c:d0:96:d5:23:f0:3a: 26:b8:1b:87:30:ec:86:42:11:67:af:cf:81:a0:95:4e:a0:38: f4:88:19:db:d6:c4:df:88:c7:81:8d:ef:2c:19:75:0c:71:7d: 90:66:58:2b:98:61:32:99:0a:cb:0c:a0:46:c1:8a:1c:80:d8: e4:0e:4a:e4:ff:ef:98:1c:ac:96:7a:61:b4:ea:eb:fa:ef:07: d9:9f:01:17:12:33:e1:1e:d1:6c:65:7b:7d:d1:37:db:3f:46: a1:e4:bf:ca:28:f9:02:00:a1:54:f1:00:e6:3a:e6:d1:d5:2f: 35:c4:da:81:6b:8b:36:50:6c:8f:15:1f:01:fc:4a:3a:65:98: 44:e2:b3:09:e3:d4:cb:72:f0:ca:49:7d:fd:c0:81:42:26:47: e9:56:de:e8:b4:6a:b2:4b:e0:2b:6f:13:04:ce:31:ef:5b:61: 45:32:9c:a5:3a:a1:59:b7:1a:c6:fa:56:fc:06:e9:23:7b:34: 91:f1:84:81:0d:b4:e1:74:85:31:bc:09:37:25:26:8e:4d:7d: 5f:cc:df:f7:10:26:5d:26:3e:f6:95:7d:53:22:3f:94:d0:c9: a9:60:f3:f4:74:42:05:97:07:bb:46:79:f6:c3:57:3c:8d:bf: 8b:86:fe:1c -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUTCjwVSl5LIEXXVITVcUTtzwu/UgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDgxOTAyNTAzM1oX DTI2MDgxODAyNTUzM1owMzExMC8GA1UEAxMoRUZEQ0U3Mjg4QkQ3OTA4NERGQjE3 RUMwODNDMTgyQTlDNDAyMEVBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOm6GipkIhGwURVAnTx2bIUM1aQUidU686n7SbbUgg/YthwZx6Pn0uwXITn6 hoHpb80psQ7P0cjeD/3duzd4cDlZQaHrUCvgxozxUNJ0b2RmBYKR6S+E+lWDHBky AcHvwL8jv88aemmnAXE1At1dBY7RRSAwVt/714JAHiGPXRS7GSyeYQv2jGLe+O/x sfbGVADm2ox+enuYtNiyEhKjxZcipsn5LOOudm7DfBmn6wVsRe/eLtBH80c6laaV Oz2HeJRYHASPaG6xV9pBlvM8Ky/No7DjDjSQofIBaJ63H5Er8RLLYLrpZ6jbZNbI mLI/ybEaSYCs1AdoE6O6Ymtq/gsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTv3Oco i9eQhN+xfsCDwYKpxAIOoDAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MzA4My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaATsDANBgkqhkiG9w0BAQsFAAOCAQEAPZNE6k3UNJeNLRWc0JbV I/A6JrgbhzDshkIRZ6/PgaCVTqA49IgZ29bE34jHgY3vLBl1DHF9kGZYK5hhMpkK ywygRsGKHIDY5A5K5P/vmByslnphtOrr+u8H2Z8BFxIz4R7RbGV7fdE32z9GoeS/ yij5AgChVPEA5jrm0dUvNcTagWuLNlBsjxUfAfxKOmWYROKzCePUy3Lwykl9/cCB QiZH6Vbe6LRqskvgK28TBM4x71thRTKcpTqhWbcaxvpW/AbpI3s0kfGEgQ204XSF MbwJNyUmjk19X8zf9xAmXSY+9pV9UyI/lNDJqWDz9HRCBZcHu0Z59sNXPI2/i4b+ HA== -----END CERTIFICATE-----Generated at Tue Nov 4 22:54:46 2025 by rpki-client