$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153091.roa File: AS153091.roa (raw, json) Hash identifier: CsY9l9iPxZaIhqTPHx1gJ3pCB3NkxG9JUQ6iesxYzVg= Subject key identifier: C8:09:05:11:1C:BF:48:6E:B5:F6:DC:9C:94:C4:45:AF:5B:9B:AB:91 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 25FF63FED307C6FB70415C16818120DBCDB238F5 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153091.roa Signing time: Thu 08 Jan 2026 11:00:05 +0000 ROA not before: Thu 08 Jan 2026 10:55:05 +0000 ROA not after: Thu 07 Jan 2027 11:00:05 +0000 asID: 153091 IP address blocks: 160.25.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ff:63:fe:d3:07:c6:fb:70:41:5c:16:81:81:20:db:cd:b2:38:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 8 10:55:05 2026 GMT Not After : Jan 7 11:00:05 2027 GMT Subject: CN=C80905111CBF486EB5F6DC9C94C445AF5B9BAB91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:72:88:33:ce:1c:3d:97:7a:ec:2d:3a:82:ca: 85:78:46:6f:bf:f2:89:9a:6e:56:36:e9:95:87:e1: 5a:c7:c0:8e:56:b9:a8:97:9a:63:33:04:35:37:1b: 10:26:6a:27:61:dd:61:dc:85:6e:56:54:be:f6:b3: 17:50:3b:5c:dc:22:c1:58:8a:4c:3a:69:19:be:b1: 9f:10:e5:1f:57:1f:25:de:d4:47:f4:50:e8:be:70: 92:eb:67:5d:56:9b:fe:e4:f1:2f:52:29:76:a8:a4: 86:22:2a:10:1c:a4:34:f0:38:92:6a:6b:fb:73:5a: 89:50:23:3b:8d:30:6d:22:48:ae:f8:76:7e:39:da: 58:c7:fc:b0:c8:22:b8:74:5f:8a:37:2a:1d:f4:b3: 38:cd:e6:6b:8a:d3:8b:4e:5b:9b:e3:3a:3b:eb:80: be:af:98:07:17:4f:8a:96:ae:f8:23:aa:9e:21:67: 36:0e:14:29:01:76:c0:34:73:63:32:b2:ad:50:eb: a9:91:35:75:b1:c1:93:a6:b6:b7:19:34:c0:13:52: d9:92:d9:83:5e:b1:2e:ae:ea:8d:2d:20:df:7b:8c: 41:fd:67:f7:be:d6:ba:3d:c3:cb:e9:44:7c:9a:24: e9:53:5a:fd:55:e0:34:49:ff:c5:2c:9c:f6:25:ec: 06:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:09:05:11:1C:BF:48:6E:B5:F6:DC:9C:94:C4:45:AF:5B:9B:AB:91 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153091.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.248.0/24 Signature Algorithm: sha256WithRSAEncryption 41:0b:7d:c0:09:61:8f:6d:cb:83:fb:b2:21:9f:38:4e:62:f3: a4:ca:f6:fe:b5:d1:12:2a:65:b7:6e:2b:27:c7:f9:17:c6:9e: 4a:19:5c:4d:05:33:e8:7b:ee:da:28:f2:ee:07:bf:98:63:22: 6e:f7:15:35:c0:30:df:04:08:84:03:7e:63:fb:22:b3:9b:ae: e6:b1:8a:f0:d6:fa:98:de:20:e6:3b:5b:12:82:a7:99:81:c4: 91:68:e8:b2:7d:a5:c4:11:38:7e:33:e1:9b:35:6e:e6:c6:7e: 20:d4:0f:f1:78:49:da:b5:91:af:03:b5:9f:a9:b5:c9:46:05: 2d:5b:12:ac:1f:ac:14:ec:54:cb:43:e7:73:4f:74:c6:f7:76: 0a:0a:d3:8d:5b:1b:ac:24:2b:6c:94:ad:e9:c8:7f:30:8a:92: 6f:1f:aa:ad:73:f9:b7:05:5d:55:9d:37:e7:e6:96:73:59:13: 28:48:5f:9c:44:7f:37:0a:8b:bf:57:6b:69:38:d5:8e:23:51: d5:71:5f:0b:ea:fe:64:57:c4:ef:26:5d:01:62:60:e1:ee:76: 4b:59:36:7a:c5:b6:e8:bd:b0:f9:4c:5d:54:0b:93:bb:ef:5f: 0e:d8:17:66:69:cc:30:5b:79:04:46:30:3d:e5:18:a1:ac:0a: 49:67:8e:fb -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUJf9j/tMHxvtwQVwWgYEg282yOPUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDEwODEwNTUwNVoX DTI3MDEwNzExMDAwNVowMzExMC8GA1UEAxMoQzgwOTA1MTExQ0JGNDg2RUI1RjZE QzlDOTRDNDQ1QUY1QjlCQUI5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9yiDPOHD2XeuwtOoLKhXhGb7/yiZpuVjbplYfhWsfAjla5qJeaYzMENTcb ECZqJ2HdYdyFblZUvvazF1A7XNwiwViKTDppGb6xnxDlH1cfJd7UR/RQ6L5wkutn XVab/uTxL1IpdqikhiIqEBykNPA4kmpr+3NaiVAjO40wbSJIrvh2fjnaWMf8sMgi uHRfijcqHfSzOM3ma4rTi05bm+M6O+uAvq+YBxdPipau+COqniFnNg4UKQF2wDRz YzKyrVDrqZE1dbHBk6a2txk0wBNS2ZLZg16xLq7qjS0g33uMQf1n977Wuj3Dy+lE fJok6VNa/VXgNEn/xSyc9iXsBtECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTICQUR HL9IbrX23JyUxEWvW5urkTAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MzA5MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKAZ+DANBgkqhkiG9w0BAQsFAAOCAQEAQQt9wAlhj23Lg/uyIZ84 TmLzpMr2/rXREiplt24rJ8f5F8aeShlcTQUz6Hvu2ijy7ge/mGMibvcVNcAw3wQI hAN+Y/sis5uu5rGK8Nb6mN4g5jtbEoKnmYHEkWjosn2lxBE4fjPhmzVu5sZ+INQP 8XhJ2rWRrwO1n6m1yUYFLVsSrB+sFOxUy0Pnc090xvd2CgrTjVsbrCQrbJSt6ch/ MIqSbx+qrXP5twVdVZ035+aWc1kTKEhfnER/NwqLv1draTjVjiNR1XFfC+r+ZFfE 7yZdAWJg4e52S1k2esW26L2w+UxdVAuTu+9fDtgXZmnMMFt5BEYwPeUYoawKSWeO +w== -----END CERTIFICATE-----Generated at Mon Mar 2 07:56:02 2026 by rpki-client