$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153118.roa File: AS153118.roa (raw, json) Hash identifier: d+pz6tIIZqvvuMz7Wnm7fbOUjmlUv/isrXcmAhaoBhA= Subject key identifier: 50:49:07:45:06:64:AC:4B:A7:30:6B:3B:9C:42:C4:B7:F3:32:DD:00 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 2333A3B79E3BF3B7FA4C4D8D318B774847F3C430 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153118.roa Signing time: Thu 06 Feb 2025 10:44:49 +0000 ROA not before: Thu 06 Feb 2025 10:39:49 +0000 ROA not after: Thu 05 Feb 2026 10:44:49 +0000 asID: 153118 IP address blocks: 160.187.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:33:a3:b7:9e:3b:f3:b7:fa:4c:4d:8d:31:8b:77:48:47:f3:c4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Feb 6 10:39:49 2025 GMT Not After : Feb 5 10:44:49 2026 GMT Subject: CN=504907450664AC4BA7306B3B9C42C4B7F332DD00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:af:cb:71:84:82:51:68:a0:aa:22:f6:3a:b9: e1:c1:3f:55:b9:dd:6e:5c:13:8c:d5:a5:b5:28:dc: 31:a7:11:06:02:e0:57:8a:06:dd:64:24:9a:c0:90: 8f:99:85:fa:31:5e:12:b9:58:d1:84:b8:00:b7:eb: 0e:4b:33:be:42:27:05:e9:72:ae:89:b2:d9:09:67: e6:57:2f:cb:9c:8a:67:ae:01:d6:19:d3:be:60:20: 38:14:61:64:48:c0:fa:79:76:49:c0:13:ec:b2:0e: 35:9a:eb:8e:29:44:8c:27:c0:4d:32:ce:0b:05:26: 3e:fd:ee:13:77:e6:b3:72:1d:3b:aa:50:72:29:a8: a1:4a:e6:64:b9:da:a1:4c:b2:39:2b:f8:ce:09:68: 9f:b1:ee:7a:73:af:d0:54:ea:ed:09:ab:b9:7a:2e: f5:e6:30:94:63:ca:bc:71:eb:ae:e0:d3:6d:fb:df: 80:a0:83:1a:71:86:87:b5:6a:b2:73:3c:ad:57:f5: 4a:46:7a:83:03:5d:b5:df:5a:04:e8:0a:c8:50:66: 75:8e:93:53:5f:69:8f:df:b7:8c:1b:ff:98:cc:55: 2d:21:25:c1:56:f7:8b:9e:2b:32:f7:b6:e2:54:b3: 9f:00:0e:4a:e0:85:7c:2a:7f:81:8a:cf:df:8e:45: 6e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:49:07:45:06:64:AC:4B:A7:30:6B:3B:9C:42:C4:B7:F3:32:DD:00 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153118.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.99.0/24 Signature Algorithm: sha256WithRSAEncryption 40:cf:f4:64:d4:bf:96:53:a0:a5:13:8e:57:d4:24:e6:bb:89: 00:7c:b3:24:69:e7:97:0c:02:c1:9e:a2:f1:2c:a6:ed:c9:95: 4e:92:90:0e:33:82:ef:80:0f:97:62:d8:19:af:ed:3d:a4:d0: 5c:c2:29:c4:3e:47:aa:be:f8:c6:a4:7f:86:7c:0d:15:8d:bb: fd:54:21:c4:1f:3b:25:64:41:20:27:8f:a3:93:2f:c4:65:65: 91:4d:bc:80:0b:3d:e1:55:c1:39:c8:d8:10:4e:65:38:1e:9b: 52:99:a4:97:34:5d:d6:33:0f:f5:7d:f4:b3:f2:08:6b:d3:03: 67:2e:77:2c:53:cd:46:6f:12:f3:77:b3:71:b9:94:21:b3:1c: 6c:b1:49:1e:a1:7b:d9:14:ac:79:d8:31:06:9a:87:7e:fd:13: 14:72:33:33:53:4e:e2:8e:56:2c:bc:1c:c4:55:36:fc:cf:bd: 24:d4:b2:d4:4c:28:0a:c6:cb:5f:4c:87:59:b6:80:f7:df:e8: 27:85:2c:70:83:7f:c7:2d:55:5b:e7:b1:59:e3:b1:c8:34:76: 1d:41:12:20:ba:aa:0f:43:98:7f:0c:d9:36:b8:01:f5:d0:07: 31:dc:73:7a:b2:f9:47:f6:7f:a9:53:73:70:8f:37:00:7e:a9: 6a:69:c7:82 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUIzOjt54787f6TE2NMYt3SEfzxDAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDIwNjEwMzk0OVoX DTI2MDIwNTEwNDQ0OVowMzExMC8GA1UEAxMoNTA0OTA3NDUwNjY0QUM0QkE3MzA2 QjNCOUM0MkM0QjdGMzMyREQwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALmvy3GEglFooKoi9jq54cE/VbndblwTjNWltSjcMacRBgLgV4oG3WQkmsCQ j5mF+jFeErlY0YS4ALfrDkszvkInBelyromy2Qln5lcvy5yKZ64B1hnTvmAgOBRh ZEjA+nl2ScAT7LIONZrrjilEjCfATTLOCwUmPv3uE3fms3IdO6pQcimooUrmZLna oUyyOSv4zglon7HuenOv0FTq7QmruXou9eYwlGPKvHHrruDTbfvfgKCDGnGGh7Vq snM8rVf1SkZ6gwNdtd9aBOgKyFBmdY6TU19pj9+3jBv/mMxVLSElwVb3i54rMve2 4lSznwAOSuCFfCp/gYrP345FbicCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRQSQdF BmSsS6cwazucQsS38zLdADAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MzExOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKC7YzANBgkqhkiG9w0BAQsFAAOCAQEAQM/0ZNS/llOgpROOV9Qk 5ruJAHyzJGnnlwwCwZ6i8Sym7cmVTpKQDjOC74APl2LYGa/tPaTQXMIpxD5Hqr74 xqR/hnwNFY27/VQhxB87JWRBICePo5MvxGVlkU28gAs94VXBOcjYEE5lOB6bUpmk lzRd1jMP9X30s/IIa9MDZy53LFPNRm8S83ezcbmUIbMcbLFJHqF72RSsedgxBpqH fv0TFHIzM1NO4o5WLLwcxFU2/M+9JNSy1EwoCsbLX0yHWbaA99/oJ4UscIN/xy1V W+exWeOxyDR2HUESILqqD0OYfwzZNrgB9dAHMdxzerL5R/Z/qVNzcI83AH6pamnH gg== -----END CERTIFICATE-----Generated at Tue Nov 4 20:57:26 2025 by rpki-client