$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153153.roa File: AS153153.roa (raw, json) Hash identifier: livu07RsrX9s4ufcRg5yR5Lip9VxrKWPugdwTOzbbeI= Subject key identifier: FC:A9:E3:F9:DB:FD:9E:08:10:22:DA:E4:1C:A6:7E:21:D6:62:C7:B1 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 19F33600A142398727AA6FD258B2C55C0313EF54 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153153.roa Signing time: Thu 10 Jul 2025 08:18:08 +0000 ROA not before: Thu 10 Jul 2025 08:13:08 +0000 ROA not after: Thu 09 Jul 2026 08:18:08 +0000 asID: 153153 IP address blocks: 160.191.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 10:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:f3:36:00:a1:42:39:87:27:aa:6f:d2:58:b2:c5:5c:03:13:ef:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 10 08:13:08 2025 GMT Not After : Jul 9 08:18:08 2026 GMT Subject: CN=FCA9E3F9DBFD9E081022DAE41CA67E21D662C7B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ca:77:28:8a:4b:3d:44:32:69:ec:b0:32:12: b9:30:fe:ad:60:34:4f:fa:b4:3d:43:e0:61:5e:55: d1:db:70:f3:ab:78:36:4e:8a:62:1b:aa:49:d5:bf: 8a:dd:29:27:0b:4a:22:b1:8c:9a:d2:0b:2a:5f:12: d7:23:a7:05:1c:11:10:a6:09:57:db:57:3c:cf:d8: 72:cf:28:cc:6f:3d:d8:24:f1:60:a7:20:3a:c1:67: 00:35:07:31:bc:7e:1c:3f:14:1c:69:5d:e7:a9:42: 93:16:d0:c7:21:fe:6c:24:56:23:73:d4:d1:80:6c: 15:6f:01:a9:36:8a:c5:32:86:65:ce:23:4f:72:7e: 1b:4b:35:f6:09:b5:5a:4e:f6:b2:b2:76:45:7f:07: 14:ea:09:26:72:03:55:34:a0:26:50:f0:13:3f:1b: a0:c5:84:aa:28:5a:66:3e:70:e9:7a:7e:f6:be:88: 0a:ec:c7:b1:f7:de:bd:89:c5:ac:6e:7f:51:6a:a5: 8c:24:71:e9:40:ac:54:13:e0:11:2b:e8:12:06:a6: 45:cf:41:eb:91:e9:54:36:47:3d:c6:69:4f:bd:76: 38:f9:f3:5d:6a:95:1b:67:bb:c5:84:74:fe:25:da: f9:e3:71:eb:cf:5c:b1:9a:ea:2f:9c:54:b1:db:46: b5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A9:E3:F9:DB:FD:9E:08:10:22:DA:E4:1C:A6:7E:21:D6:62:C7:B1 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153153.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.172.0/24 Signature Algorithm: sha256WithRSAEncryption 81:74:fe:5d:2c:1f:8b:a1:5e:34:f8:07:6c:ce:ef:5a:b8:64: d0:ab:1f:4b:ff:ad:ff:96:e9:d6:0b:00:37:2c:a9:c6:46:d5: c1:21:7c:45:67:ea:e8:a6:6f:8a:35:03:7d:a5:cd:c3:68:27: 10:ba:6a:d7:2d:13:1d:89:50:ed:c4:23:6d:d1:c9:21:74:00: e8:7c:52:28:3d:3e:a5:82:ea:0d:ae:92:d9:cb:ae:94:9e:05: fd:b6:ff:a0:f6:72:4b:60:db:b5:77:16:2a:cb:d5:c8:5c:31: 84:52:7e:fc:2b:4c:71:dc:a2:bc:96:17:35:e5:b8:14:f1:c1: c3:76:5e:f0:85:dd:57:e3:fb:58:c6:62:f8:08:9a:39:6b:3d: 88:a8:cf:6c:39:28:9a:8d:a7:af:7c:16:2c:21:42:95:63:fc: 87:fb:61:17:0b:7a:05:e2:c0:2d:8b:5f:dc:c7:42:f3:33:e4: 30:cd:e7:d6:e4:91:19:8f:7e:9e:86:33:83:d0:8b:25:a0:9f: e1:5b:c2:c1:42:fe:59:f8:a5:81:92:ef:7f:2f:f4:b7:14:30: 9f:1b:b2:59:a7:4a:d6:e0:b9:16:c9:36:fc:fd:cd:18:1c:b3: 36:e1:ed:c9:1a:78:4e:f4:e5:7f:0b:70:17:83:d4:aa:61:93: d3:db:ac:41 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUGfM2AKFCOYcnqm/SWLLFXAMT71QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDcxMDA4MTMwOFoX DTI2MDcwOTA4MTgwOFowMzExMC8GA1UEAxMoRkNBOUUzRjlEQkZEOUUwODEwMjJE QUU0MUNBNjdFMjFENjYyQzdCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANLKdyiKSz1EMmnssDISuTD+rWA0T/q0PUPgYV5V0dtw86t4Nk6KYhuqSdW/ it0pJwtKIrGMmtILKl8S1yOnBRwREKYJV9tXPM/Ycs8ozG892CTxYKcgOsFnADUH Mbx+HD8UHGld56lCkxbQxyH+bCRWI3PU0YBsFW8BqTaKxTKGZc4jT3J+G0s19gm1 Wk72srJ2RX8HFOoJJnIDVTSgJlDwEz8boMWEqihaZj5w6Xp+9r6ICuzHsffevYnF rG5/UWqljCRx6UCsVBPgESvoEgamRc9B65HpVDZHPcZpT712OPnzXWqVG2e7xYR0 /iXa+eNx689csZrqL5xUsdtGtdUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBT8qeP5 2/2eCBAi2uQcpn4h1mLHsTAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MzE1My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKC/rDANBgkqhkiG9w0BAQsFAAOCAQEAgXT+XSwfi6FeNPgHbM7v Wrhk0KsfS/+t/5bp1gsANyypxkbVwSF8RWfq6KZvijUDfaXNw2gnELpq1y0THYlQ 7cQjbdHJIXQA6HxSKD0+pYLqDa6S2cuulJ4F/bb/oPZyS2DbtXcWKsvVyFwxhFJ+ /CtMcdyivJYXNeW4FPHBw3Ze8IXdV+P7WMZi+AiaOWs9iKjPbDkomo2nr3wWLCFC lWP8h/thFwt6BeLALYtf3MdC8zPkMM3n1uSRGY9+noYzg9CLJaCf4VvCwUL+Wfil gZLvfy/0txQwnxuyWadK1uC5Fsk2/P3NGByzNuHtyRp4TvTlfwtwF4PUqmGT09us QQ== -----END CERTIFICATE-----Generated at Wed Nov 5 11:32:31 2025 by rpki-client