$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153106.roa File: AS153106.roa (raw, json) Hash identifier: 3UjLXqf8qsC8rJu6Kg1jhFxmLKYEHluvgY1NGRLiIAo= Subject key identifier: 8D:FC:25:8B:30:B8:5C:60:BD:1B:24:8C:40:C5:DD:05:28:4B:81:CD Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 01B2625122C9394A59E78A1B087FAD50D240C2B5 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153106.roa Signing time: Thu 08 Jan 2026 11:00:04 +0000 ROA not before: Thu 08 Jan 2026 10:55:04 +0000 ROA not after: Thu 07 Jan 2027 11:00:04 +0000 asID: 153106 IP address blocks: 160.25.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:b2:62:51:22:c9:39:4a:59:e7:8a:1b:08:7f:ad:50:d2:40:c2:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 8 10:55:04 2026 GMT Not After : Jan 7 11:00:04 2027 GMT Subject: CN=8DFC258B30B85C60BD1B248C40C5DD05284B81CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e3:9d:de:5a:62:f9:4b:da:1b:fa:8b:44:bf: 62:16:0c:a0:70:64:da:7a:84:72:3f:50:6f:2d:51: 11:b8:01:ea:79:22:62:e5:f3:82:b4:de:c4:1b:0b: 0d:53:05:70:10:e1:d3:5c:52:ae:43:57:a7:e4:ed: 2f:e2:56:0c:d6:f4:cc:b6:70:e9:1a:cf:df:d6:b8: 5f:47:61:02:44:35:ea:3b:5d:87:2f:ad:45:d8:db: e3:f6:5f:a2:2c:13:1c:5f:15:d3:66:e4:ba:18:86: e2:ab:a5:c4:ba:b5:da:28:e3:b2:92:c8:a2:c3:7a: b3:6e:38:60:14:4f:49:28:ea:5a:fb:da:24:2f:97: a1:2e:b1:f0:1f:13:c3:ec:7a:63:99:94:42:91:27: 50:a9:bb:76:e5:42:d3:1e:35:c3:da:9e:64:df:08: 6c:80:df:b4:e7:79:85:4e:34:55:32:94:8e:5e:33: 50:fd:91:1a:51:84:ad:07:ad:ee:4d:8d:f3:cd:68: 8d:5b:eb:21:f5:4a:2d:82:9e:ed:a8:54:52:55:70: a2:9c:67:47:3b:3f:69:c1:ce:01:17:ac:61:45:5d: 53:9c:a8:79:78:a9:26:38:62:85:52:e3:f1:54:00: 90:5c:49:b7:90:a3:7d:e0:4e:ba:fd:9c:46:be:ec: e0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FC:25:8B:30:B8:5C:60:BD:1B:24:8C:40:C5:DD:05:28:4B:81:CD X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153106.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.229.0/24 Signature Algorithm: sha256WithRSAEncryption 92:51:9d:93:ba:88:b2:bc:a9:7e:37:95:5c:f9:80:35:ac:b8: 3b:3f:ba:c0:a6:0d:4b:13:b6:0b:b1:b9:c3:2f:d0:cd:08:76: 82:11:23:e9:d5:72:9e:d4:70:75:ec:61:fe:fa:5e:53:7f:5f: d6:b3:c4:37:1a:13:99:67:3d:02:ee:00:ac:93:e1:c0:d0:6a: 21:4e:8e:e4:2a:10:b0:f4:16:be:eb:2f:f0:f4:e2:95:65:25: 2e:48:e5:24:07:7a:b2:e6:99:fa:e6:a7:4c:8c:99:44:72:c0: c0:8c:2d:21:ad:e8:c2:1c:b0:13:c0:dd:cd:27:5d:b8:a1:61: ae:d5:6d:42:ab:5d:2c:bb:a0:4e:d7:78:f3:b0:2e:07:b6:4d: c9:e6:56:d4:a2:f5:bf:0e:8e:73:a6:b4:38:f9:9d:2f:5a:7c: 5d:15:bf:df:8a:42:e5:3d:a3:a0:bf:63:1a:8c:02:a0:30:ec: cf:3b:5a:39:ed:40:b5:58:73:7a:db:a1:f7:ab:7a:46:6c:85: ce:82:84:e7:3e:43:93:09:63:13:ac:8c:ce:82:ef:d5:05:d3: 3d:68:77:ca:09:62:d1:65:a6:86:12:0d:d1:3d:38:15:f8:31: 4f:88:bb:27:df:f8:05:54:e9:8e:2c:07:2f:f0:28:e8:d9:38: 53:2c:67:f6 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUAbJiUSLJOUpZ54obCH+tUNJAwrUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDEwODEwNTUwNFoX DTI3MDEwNzExMDAwNFowMzExMC8GA1UEAxMoOERGQzI1OEIzMEI4NUM2MEJEMUIy NDhDNDBDNUREMDUyODRCODFDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM/jnd5aYvlL2hv6i0S/YhYMoHBk2nqEcj9Qby1REbgB6nkiYuXzgrTexBsL DVMFcBDh01xSrkNXp+TtL+JWDNb0zLZw6RrP39a4X0dhAkQ16jtdhy+tRdjb4/Zf oiwTHF8V02bkuhiG4qulxLq12ijjspLIosN6s244YBRPSSjqWvvaJC+XoS6x8B8T w+x6Y5mUQpEnUKm7duVC0x41w9qeZN8IbIDftOd5hU40VTKUjl4zUP2RGlGErQet 7k2N881ojVvrIfVKLYKe7ahUUlVwopxnRzs/acHOAResYUVdU5yoeXipJjhihVLj 8VQAkFxJt5CjfeBOuv2cRr7s4D8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSN/CWL MLhcYL0bJIxAxd0FKEuBzTAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MzEwNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKAZ5TANBgkqhkiG9w0BAQsFAAOCAQEAklGdk7qIsrypfjeVXPmA Nay4Oz+6wKYNSxO2C7G5wy/QzQh2ghEj6dVyntRwdexh/vpeU39f1rPENxoTmWc9 Au4ArJPhwNBqIU6O5CoQsPQWvusv8PTilWUlLkjlJAd6suaZ+uanTIyZRHLAwIwt Ia3owhywE8DdzSdduKFhrtVtQqtdLLugTtd487AuB7ZNyeZW1KL1vw6Oc6a0OPmd L1p8XRW/34pC5T2joL9jGowCoDDszztaOe1AtVhzetuh96t6RmyFzoKE5z5Dkwlj E6yMzoLv1QXTPWh3ygli0WWmhhIN0T04FfgxT4i7J9/4BVTpjiwHL/Ao6Nk4Uyxn 9g== -----END CERTIFICATE-----Generated at Mon Mar 2 12:59:52 2026 by rpki-client