$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153118.roa File: AS153118.roa (raw, json) Hash identifier: jXtYBYSzKx1NikYgHFbZrHm4ZkcrGzqSjKPMgMPFFeg= Subject key identifier: C8:23:68:C1:02:03:32:B5:F2:3B:92:F4:0B:3F:FE:F2:62:E7:4C:1D Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 6BFA1DC64A8F2001D5C7E8DCBB70B3390D94E64A Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153118.roa Signing time: Thu 08 Jan 2026 11:00:08 +0000 ROA not before: Thu 08 Jan 2026 10:55:08 +0000 ROA not after: Thu 07 Jan 2027 11:00:08 +0000 asID: 153118 IP address blocks: 160.187.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:fa:1d:c6:4a:8f:20:01:d5:c7:e8:dc:bb:70:b3:39:0d:94:e6:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 8 10:55:08 2026 GMT Not After : Jan 7 11:00:08 2027 GMT Subject: CN=C82368C1020332B5F23B92F40B3FFEF262E74C1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4e:2c:d3:aa:83:be:be:5a:9c:df:f7:58:76: e9:8f:fe:a1:1e:b9:7f:92:8e:ac:b0:0d:7b:13:16: a6:9d:3c:9a:16:03:23:b3:33:61:fc:3e:40:bc:eb: a9:8c:be:89:6c:b8:b1:9c:76:d4:fa:4b:8c:13:d5: 93:33:39:87:10:11:54:b4:f8:34:fd:b9:8c:38:4b: 83:ce:f5:4b:44:d8:c2:4d:45:81:db:96:d5:8c:8f: d9:de:01:5f:75:74:01:1a:15:85:43:1b:ac:86:7b: c6:26:cc:1a:45:70:07:c7:f9:7a:68:29:64:43:7e: 94:88:30:13:1d:33:9e:38:6e:98:b3:24:39:05:b1: 7b:dd:9c:1e:47:c3:ac:38:7b:17:f3:f0:13:a0:02: 06:35:40:39:85:4d:6b:a1:24:45:59:5c:18:33:9d: ff:76:85:b3:44:c8:39:b3:a0:ba:16:2a:23:51:8d: 61:2d:a8:bc:26:0a:3c:5f:44:1a:ff:a8:a0:cf:df: 7a:7c:33:8f:a6:4c:fc:b5:86:dc:80:68:c2:26:91: cd:30:65:e4:7b:c0:b0:16:ef:1f:66:43:cd:ac:48: fd:2e:69:77:f5:10:98:b3:3d:51:36:d9:9a:94:18: 80:7f:5f:d4:ea:42:d2:de:41:0f:74:e6:35:84:f5: fa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:23:68:C1:02:03:32:B5:F2:3B:92:F4:0B:3F:FE:F2:62:E7:4C:1D X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153118.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.99.0/24 Signature Algorithm: sha256WithRSAEncryption 74:77:7b:7e:06:f3:d4:6c:91:89:69:e2:45:42:66:cd:60:be: 3d:da:93:8b:1f:07:a8:29:8f:01:63:09:e5:dd:67:91:ab:62: e9:a1:db:fb:ae:a0:14:1f:53:1f:70:8f:0e:67:9f:b7:7c:5e: 98:03:c2:a4:4a:3e:bb:30:12:28:0a:13:66:a2:d2:41:b3:80: 0c:18:a6:a3:80:76:4e:6a:d1:88:b3:fa:6d:df:e7:54:7a:fe: c7:88:09:ba:86:92:b3:23:fb:f9:3e:5d:c3:25:e1:1f:69:03: c0:1c:6f:ca:0b:66:6f:9d:ce:2e:4d:ca:67:20:e8:1e:a9:54: 04:b5:5b:5b:e3:8e:9b:6f:f2:af:84:25:ef:b6:cc:f5:0e:d8: a5:84:f6:88:1a:ab:e6:14:be:6b:14:51:30:af:62:df:65:2c: 2e:b7:3d:dc:fc:e5:2d:c2:c5:af:25:65:cc:8c:bb:9b:53:29: 3b:8b:be:82:c4:0a:73:41:d9:15:be:48:fd:68:c5:9a:fa:92: 85:9b:ee:12:af:d4:2f:dc:3e:c1:64:d3:2f:25:f1:8a:0a:00: c5:c9:dc:ff:2a:f4:3f:0e:b9:d8:86:02:13:55:77:d3:c7:9a: ea:4a:64:5e:39:9b:58:01:fd:80:b7:1b:da:79:f9:c8:4f:77: b9:ab:ef:86 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUa/odxkqPIAHVx+jcu3CzOQ2U5kowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDEwODEwNTUwOFoX DTI3MDEwNzExMDAwOFowMzExMC8GA1UEAxMoQzgyMzY4QzEwMjAzMzJCNUYyM0I5 MkY0MEIzRkZFRjI2MkU3NEMxRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOxOLNOqg76+Wpzf91h26Y/+oR65f5KOrLANexMWpp08mhYDI7MzYfw+QLzr qYy+iWy4sZx21PpLjBPVkzM5hxARVLT4NP25jDhLg871S0TYwk1FgduW1YyP2d4B X3V0ARoVhUMbrIZ7xibMGkVwB8f5emgpZEN+lIgwEx0znjhumLMkOQWxe92cHkfD rDh7F/PwE6ACBjVAOYVNa6EkRVlcGDOd/3aFs0TIObOguhYqI1GNYS2ovCYKPF9E Gv+ooM/fenwzj6ZM/LWG3IBowiaRzTBl5HvAsBbvH2ZDzaxI/S5pd/UQmLM9UTbZ mpQYgH9f1OpC0t5BD3TmNYT1+o8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTII2jB AgMytfI7kvQLP/7yYudMHTAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MzExOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKC7YzANBgkqhkiG9w0BAQsFAAOCAQEAdHd7fgbz1GyRiWniRUJm zWC+PdqTix8HqCmPAWMJ5d1nkati6aHb+66gFB9TH3CPDmeft3xemAPCpEo+uzAS KAoTZqLSQbOADBimo4B2TmrRiLP6bd/nVHr+x4gJuoaSsyP7+T5dwyXhH2kDwBxv ygtmb53OLk3KZyDoHqlUBLVbW+OOm2/yr4Ql77bM9Q7YpYT2iBqr5hS+axRRMK9i 32UsLrc93PzlLcLFryVlzIy7m1MpO4u+gsQKc0HZFb5I/WjFmvqShZvuEq/UL9w+ wWTTLyXxigoAxcnc/yr0Pw652IYCE1V308ea6kpkXjmbWAH9gLcb2nn5yE93uavv hg== -----END CERTIFICATE-----Generated at Mon Mar 2 12:59:41 2026 by rpki-client