$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153100.roa File: AS153100.roa (raw, json) Hash identifier: Y6OnG93ANHpAKfwWwAP4mY2X4McP3Ite7uQTFTqHpus= Subject key identifier: 9E:71:1E:59:BF:6D:03:A7:FA:21:65:3A:4D:EA:D7:F6:D8:A7:83:19 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 23C79A4935A72F6C860FC8CD4714E799A1442FBE Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153100.roa Signing time: Mon 06 Apr 2026 04:00:00 +0000 ROA not before: Mon 06 Apr 2026 03:55:00 +0000 ROA not after: Mon 05 Apr 2027 04:00:00 +0000 asID: 153100 IP address blocks: 160.25.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:c7:9a:49:35:a7:2f:6c:86:0f:c8:cd:47:14:e7:99:a1:44:2f:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 6 03:55:00 2026 GMT Not After : Apr 5 04:00:00 2027 GMT Subject: CN=9E711E59BF6D03A7FA21653A4DEAD7F6D8A78319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:69:06:2c:28:57:b7:92:d4:aa:e7:28:d6:07: ac:84:d7:ac:bc:de:ea:5e:33:99:7c:63:b2:90:cd: 8b:e7:30:8e:dd:34:05:ef:2a:97:d4:53:bb:14:65: ce:78:76:83:a4:f5:6b:d7:5f:1a:46:5e:63:00:98: 8f:9e:90:a9:02:e2:31:52:f8:6b:61:2f:33:4c:47: fa:36:04:69:bb:e9:d0:b7:ea:8f:83:c3:d6:9a:de: 5e:57:8b:1a:bc:38:24:5c:49:84:4c:5e:ed:fc:d9: ef:10:ce:8b:f5:33:86:6c:80:ab:40:54:ca:1f:47: 15:71:77:28:67:39:af:75:9b:66:9f:22:6f:b8:c1: 00:a4:61:36:b7:b7:f7:50:58:99:b6:81:07:23:31: ab:3b:96:b3:5d:bb:d4:58:89:eb:78:e6:5a:ba:ac: c6:95:51:05:67:8d:96:12:0b:b2:c0:19:ae:2f:8c: 81:60:b6:74:99:e3:a5:05:f8:93:6a:46:16:89:8a: b8:77:5f:47:76:03:7e:e6:22:59:62:4f:49:62:0d: 3a:e4:f6:ec:de:cb:3a:d9:34:aa:56:04:d8:30:08: 85:f5:51:b4:26:c6:a4:8b:de:3c:fa:c6:59:e5:33: e6:7e:37:45:8f:3c:c9:26:ac:73:d0:37:42:ba:4b: 7b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:71:1E:59:BF:6D:03:A7:FA:21:65:3A:4D:EA:D7:F6:D8:A7:83:19 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153100.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.201.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:66:6e:6e:a7:ba:b7:41:eb:db:1f:fb:ee:f3:47:3a:3b:19: 13:c8:48:6a:ab:31:13:27:25:6f:89:be:e0:48:2f:26:c6:0f: 31:a9:b7:42:99:6f:52:7f:d1:2d:e0:82:2d:00:2c:74:38:dd: 40:03:d1:c0:18:62:35:2a:b8:20:38:85:94:9b:9f:84:eb:19: 64:46:c4:e7:6b:ab:53:a2:a7:63:ae:7b:9e:12:8b:12:6a:04: 9e:95:25:9a:68:13:ca:c9:3f:9d:6d:e4:f8:a8:d4:0e:8e:4c: 82:05:30:09:7e:4c:fd:4a:4f:9c:b0:a2:91:4e:aa:4f:19:92: 3f:48:48:f6:ae:13:ef:d4:b3:a7:49:65:16:df:cb:37:17:df: 1d:1c:20:e1:77:d4:a7:8d:76:b7:f7:47:0c:8e:7f:0d:6f:6f: 3d:51:03:93:a1:fd:bc:02:59:b4:f9:b5:d9:20:86:7d:db:a5: 32:4b:50:49:31:2b:a7:21:64:f5:ec:5a:3b:9c:26:c1:d9:1c: 25:fb:1e:b8:2e:f6:93:0a:57:af:75:72:91:5a:44:21:12:fe: 61:f0:f5:60:5c:8c:36:0e:5e:fe:5b:26:36:00:fb:9a:69:d1: 71:8e:59:70:c8:57:1c:9c:ed:6f:fd:d3:19:bc:13:c9:8d:f2: 14:fd:5f:8c -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUI8eaSTWnL2yGD8jNRxTnmaFEL74wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDQwNjAzNTUwMFoX DTI3MDQwNTA0MDAwMFowMzExMC8GA1UEAxMoOUU3MTFFNTlCRjZEMDNBN0ZBMjE2 NTNBNERFQUQ3RjZEOEE3ODMxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOZpBiwoV7eS1KrnKNYHrITXrLze6l4zmXxjspDNi+cwjt00Be8ql9RTuxRl znh2g6T1a9dfGkZeYwCYj56QqQLiMVL4a2EvM0xH+jYEabvp0Lfqj4PD1preXleL Grw4JFxJhExe7fzZ7xDOi/UzhmyAq0BUyh9HFXF3KGc5r3WbZp8ib7jBAKRhNre3 91BYmbaBByMxqzuWs1271FiJ63jmWrqsxpVRBWeNlhILssAZri+MgWC2dJnjpQX4 k2pGFomKuHdfR3YDfuYiWWJPSWINOuT27N7LOtk0qlYE2DAIhfVRtCbGpIvePPrG WeUz5n43RY88ySasc9A3QrpLezECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSecR5Z v20Dp/ohZTpN6tf22KeDGTAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MzEwMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKAZyTANBgkqhkiG9w0BAQsFAAOCAQEATmZubqe6t0Hr2x/77vNH OjsZE8hIaqsxEyclb4m+4EgvJsYPMam3QplvUn/RLeCCLQAsdDjdQAPRwBhiNSq4 IDiFlJufhOsZZEbE52urU6KnY657nhKLEmoEnpUlmmgTysk/nW3k+KjUDo5MggUw CX5M/UpPnLCikU6qTxmSP0hI9q4T79Szp0llFt/LNxffHRwg4XfUp412t/dHDI5/ DW9vPVEDk6H9vAJZtPm12SCGfdulMktQSTErpyFk9exaO5wmwdkcJfseuC72kwpX r3VykVpEIRL+YfD1YFyMNg5e/lsmNgD7mmnRcY5ZcMhXHJztb/3TGbwTyY3yFP1f jA== -----END CERTIFICATE-----Generated at Fri Apr 17 16:14:05 2026 by rpki-client