$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153095.roa File: AS153095.roa (raw, json) Hash identifier: KeSIrXEL8FnX3cg9oL0M8yLrvqcVgyI4zYvtZ54iUa8= Subject key identifier: 0C:5D:15:43:39:DB:85:40:52:53:3A:97:CF:06:3D:5F:AA:BB:63:75 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 4F1B6125746A50FBB3F7B2229DD908CAFB6161DF Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153095.roa Signing time: Sun 11 Jan 2026 08:00:00 +0000 ROA not before: Sun 11 Jan 2026 07:55:00 +0000 ROA not after: Sun 10 Jan 2027 08:00:00 +0000 asID: 153095 IP address blocks: 160.25.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:1b:61:25:74:6a:50:fb:b3:f7:b2:22:9d:d9:08:ca:fb:61:61:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 11 07:55:00 2026 GMT Not After : Jan 10 08:00:00 2027 GMT Subject: CN=0C5D154339DB854052533A97CF063D5FAABB6375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8b:70:77:d5:f2:93:24:a3:73:9a:f7:a3:32: 29:62:23:d7:a8:3a:c4:5b:0b:ec:aa:a8:33:b7:84: 7c:bd:57:7e:05:30:f0:93:a3:d7:a8:ae:1b:07:45: 0f:bc:29:21:17:41:62:ee:69:98:4d:bf:a7:e9:51: 91:20:01:49:d0:6a:64:e4:7e:40:54:7b:b2:eb:ef: c8:60:d9:62:5d:aa:6e:10:52:52:05:f8:a9:5a:68: 06:de:58:ea:e6:72:33:15:95:11:85:ed:5e:7a:5f: 33:a1:eb:af:60:91:46:01:1f:17:f6:50:aa:d0:f2: 5b:b4:6a:29:f0:d3:f8:bd:cf:70:69:6a:3f:c5:ce: 4b:a6:b7:5a:02:51:9b:78:30:53:d1:3d:7d:c1:b3: 37:21:18:2d:eb:b6:95:2b:e5:d9:2b:8a:ec:49:ad: 5c:29:0d:e7:9c:8b:16:d2:1f:2b:59:f9:9d:af:08: 67:39:61:23:0f:f7:79:1d:b8:81:8a:22:b8:6a:f6: 58:2e:d7:61:7f:fe:82:8c:d3:b2:fa:c4:ba:cf:a7: 60:2f:79:dc:06:9c:b8:ee:71:94:30:0a:fe:d5:e8: 95:89:0c:f2:7f:07:d6:ec:1f:bd:58:e5:d2:84:11: f2:56:3f:a2:d4:89:2a:5c:a9:eb:84:6d:60:78:fe: 17:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5D:15:43:39:DB:85:40:52:53:3A:97:CF:06:3D:5F:AA:BB:63:75 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153095.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.204.0/23 Signature Algorithm: sha256WithRSAEncryption 38:ad:ea:0c:71:76:45:24:a3:dc:58:52:d7:a6:e6:90:f2:48: 47:6f:b4:c2:cf:10:f3:7e:96:25:99:62:f3:40:c2:db:43:55: 78:bf:74:cf:de:26:34:82:10:3a:16:3a:64:62:ac:f8:5c:57: c4:b9:d3:f0:70:15:c7:31:0f:bc:0f:36:04:dc:9a:02:b7:e2: 25:fa:f7:4f:cb:9c:f0:c9:73:1e:39:1e:a2:f1:20:cd:0c:d6: 2d:10:20:19:86:43:0d:d6:f4:ee:53:14:e3:1a:84:b2:d4:4f: d9:bb:17:9c:8c:f7:b3:4d:b5:47:f8:11:86:73:e2:3f:ef:00: 87:04:46:ab:86:eb:63:08:cd:f7:e1:04:db:ad:fa:9b:46:e3: 45:3d:c1:86:75:b5:03:60:0f:a3:27:28:42:cc:a1:d6:95:74: 55:e8:a8:7a:8a:6c:63:81:4d:55:fd:dc:a2:5d:85:18:11:7a: ae:78:f6:72:5d:cf:ca:65:d3:ba:e7:7f:a3:f9:03:b6:76:6d: 1f:67:fc:82:62:33:0e:29:45:11:4b:35:bc:01:79:a9:92:08: a0:d0:38:14:ef:59:16:db:36:bc:44:c9:ed:71:10:67:c4:50: 3e:f4:0d:9c:9e:fb:44:c4:da:6c:d6:bd:eb:b1:77:90:4f:96: ce:9a:37:24 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUTxthJXRqUPuz97IindkIyvthYd8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDExMTA3NTUwMFoX DTI3MDExMDA4MDAwMFowMzExMC8GA1UEAxMoMEM1RDE1NDMzOURCODU0MDUyNTMz QTk3Q0YwNjNENUZBQUJCNjM3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANaLcHfV8pMko3Oa96MyKWIj16g6xFsL7KqoM7eEfL1XfgUw8JOj16iuGwdF D7wpIRdBYu5pmE2/p+lRkSABSdBqZOR+QFR7suvvyGDZYl2qbhBSUgX4qVpoBt5Y 6uZyMxWVEYXtXnpfM6Hrr2CRRgEfF/ZQqtDyW7RqKfDT+L3PcGlqP8XOS6a3WgJR m3gwU9E9fcGzNyEYLeu2lSvl2SuK7EmtXCkN55yLFtIfK1n5na8IZzlhIw/3eR24 gYoiuGr2WC7XYX/+gozTsvrEus+nYC953AacuO5xlDAK/tXolYkM8n8H1uwfvVjl 0oQR8lY/otSJKlyp64RtYHj+FxECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQMXRVD OduFQFJTOpfPBj1fqrtjdTAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MzA5NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaAZzDANBgkqhkiG9w0BAQsFAAOCAQEAOK3qDHF2RSSj3FhS16bm kPJIR2+0ws8Q836WJZli80DC20NVeL90z94mNIIQOhY6ZGKs+FxXxLnT8HAVxzEP vA82BNyaArfiJfr3T8uc8MlzHjkeovEgzQzWLRAgGYZDDdb07lMU4xqEstRP2bsX nIz3s021R/gRhnPiP+8AhwRGq4brYwjN9+EE2636m0bjRT3BhnW1A2APoycoQsyh 1pV0VeioeopsY4FNVf3col2FGBF6rnj2cl3PymXTuud/o/kDtnZtH2f8gmIzDilF EUs1vAF5qZIIoNA4FO9ZFts2vETJ7XEQZ8RQPvQNnJ77RMTabNa967F3kE+Wzpo3 JA== -----END CERTIFICATE-----Generated at Mon Mar 2 07:56:23 2026 by rpki-client