$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153145.roa File: AS153145.roa (raw, json) Hash identifier: JoKfyEFs6atGvmcZWiEnVFjSLztVYHKyZexInOvwunY= Subject key identifier: E9:D0:4F:B2:E1:F7:45:10:7F:B7:FD:54:A5:B4:68:D6:CF:C7:C8:96 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 2D8880CCB1D087C2F28ED4A228F231D9D438DBFE Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153145.roa Signing time: Wed 02 Jul 2025 08:11:09 +0000 ROA not before: Wed 02 Jul 2025 08:06:09 +0000 ROA not after: Wed 01 Jul 2026 08:11:09 +0000 asID: 153145 IP address blocks: 160.22.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:88:80:cc:b1:d0:87:c2:f2:8e:d4:a2:28:f2:31:d9:d4:38:db:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 2 08:06:09 2025 GMT Not After : Jul 1 08:11:09 2026 GMT Subject: CN=E9D04FB2E1F745107FB7FD54A5B468D6CFC7C896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:58:c1:e0:ec:2b:67:18:6e:74:9d:03:b7:e9: 26:b5:1d:c1:8d:8b:cd:7a:3a:15:cd:6c:5d:0e:1d: 0a:c3:5b:70:c8:85:f2:4f:ab:f8:d1:93:ee:5c:1f: f6:88:a8:09:32:3e:5a:ed:52:71:87:9f:f0:92:47: fb:97:bc:5c:cd:e0:b2:0d:32:93:ce:da:43:27:a9: 84:3d:7c:d5:5b:cd:c7:34:05:aa:1c:ef:0f:8d:05: 09:a7:b5:58:b3:13:d6:35:14:cd:21:4d:1d:58:dc: 48:b5:06:a9:d5:3f:e7:14:47:2e:8d:81:ad:17:be: 70:f0:62:ac:81:48:be:82:55:c2:b3:0c:d9:99:1d: 2e:30:20:3e:63:2d:8c:29:e5:84:ce:e7:a3:7d:c6: a8:c2:2d:20:ca:16:f8:2c:86:0f:35:a0:b6:84:22: d5:ad:f4:b1:6b:f1:18:fd:03:10:5d:83:cd:84:31: 48:cd:48:88:a5:9f:e4:cb:55:69:73:9d:3e:e0:be: 64:7b:14:10:d9:7b:37:3b:96:6e:d5:22:f8:ef:11: 16:1c:1e:70:7a:53:8a:8a:2d:7e:36:94:40:4e:af: 70:1b:42:6f:c4:60:2e:e1:95:98:d9:97:4f:ae:70: ba:99:b6:2b:83:1d:6f:fd:1e:58:30:36:81:00:28: c5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D0:4F:B2:E1:F7:45:10:7F:B7:FD:54:A5:B4:68:D6:CF:C7:C8:96 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153145.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.220.0/23 Signature Algorithm: sha256WithRSAEncryption 01:bd:ef:b2:a6:fb:a8:bc:84:55:68:f5:9d:d0:06:ca:21:cc: 94:b2:81:f0:ac:f7:bf:d4:f6:c1:7b:d8:78:fc:a4:9e:72:24: 50:00:51:dc:6b:cb:ba:78:3e:3b:1d:c7:9a:65:f8:03:0f:ae: f6:27:e1:cc:ed:cd:ce:ae:bf:25:34:98:ac:b1:76:82:9a:bc: b7:fa:7f:97:92:59:cc:54:62:ef:6f:5c:49:9b:d5:75:49:c0: 50:da:7e:03:82:05:3a:c3:b2:16:94:3e:12:cd:06:2a:8f:4e: cc:d1:41:86:6a:eb:b5:6d:2c:92:74:b7:03:44:92:10:47:c4: f7:00:3b:1c:d6:9c:46:56:aa:b2:6b:cf:7f:90:10:e0:91:81: b3:fa:e5:95:fc:12:85:ed:fa:dc:09:50:a6:ff:34:41:78:6d: 05:d8:f3:0f:89:b8:5d:0b:19:51:c7:1a:b1:4b:09:8a:32:5e: ce:82:6b:c7:40:d4:64:b8:28:d4:34:fa:78:23:81:09:4c:bc: 28:60:67:66:d8:02:f9:32:99:92:05:bd:02:d5:12:6a:42:ef: 4b:55:2c:49:6d:63:a9:d3:7d:1d:cc:62:09:13:fb:a9:05:a6: aa:11:8f:26:47:40:8b:dd:da:86:94:70:b3:e6:99:72:c6:fd: 65:ed:ac:7d -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIULYiAzLHQh8LyjtSiKPIx2dQ42/4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDcwMjA4MDYwOVoX DTI2MDcwMTA4MTEwOVowMzExMC8GA1UEAxMoRTlEMDRGQjJFMUY3NDUxMDdGQjdG RDU0QTVCNDY4RDZDRkM3Qzg5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZYweDsK2cYbnSdA7fpJrUdwY2LzXo6Fc1sXQ4dCsNbcMiF8k+r+NGT7lwf 9oioCTI+Wu1ScYef8JJH+5e8XM3gsg0yk87aQyephD181VvNxzQFqhzvD40FCae1 WLMT1jUUzSFNHVjcSLUGqdU/5xRHLo2BrRe+cPBirIFIvoJVwrMM2ZkdLjAgPmMt jCnlhM7no33GqMItIMoW+CyGDzWgtoQi1a30sWvxGP0DEF2DzYQxSM1IiKWf5MtV aXOdPuC+ZHsUENl7NzuWbtUi+O8RFhwecHpTiootfjaUQE6vcBtCb8RgLuGVmNmX T65wupm2K4Mdb/0eWDA2gQAoxeUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTp0E+y 4fdFEH+3/VSltGjWz8fIljAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MzE0NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaAW3DANBgkqhkiG9w0BAQsFAAOCAQEAAb3vsqb7qLyEVWj1ndAG yiHMlLKB8Kz3v9T2wXvYePyknnIkUABR3GvLung+Ox3HmmX4Aw+u9ifhzO3Nzq6/ JTSYrLF2gpq8t/p/l5JZzFRi729cSZvVdUnAUNp+A4IFOsOyFpQ+Es0GKo9OzNFB hmrrtW0sknS3A0SSEEfE9wA7HNacRlaqsmvPf5AQ4JGBs/rllfwShe363AlQpv80 QXhtBdjzD4m4XQsZUccasUsJijJezoJrx0DUZLgo1DT6eCOBCUy8KGBnZtgC+TKZ kgW9AtUSakLvS1UsSW1jqdN9HcxiCRP7qQWmqhGPJkdAi93ahpRws+aZcsb9Ze2s fQ== -----END CERTIFICATE-----Generated at Wed Nov 5 00:01:05 2025 by rpki-client