$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153877.roa File: AS153877.roa (raw, json) Hash identifier: 2CUL510R2nKlFjbuU3DOUc+AJ2ICd2H23ffZZJCWUyw= Subject key identifier: E3:C5:C6:F7:24:7F:4E:4D:6A:24:EC:48:77:19:48:D7:E0:70:75:3F Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 6FAFAEFFA75BBBD276D90D53052982037E96ABE3 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153877.roa Signing time: Mon 16 Jun 2025 04:45:02 +0000 ROA not before: Mon 16 Jun 2025 04:40:02 +0000 ROA not after: Mon 15 Jun 2026 04:45:02 +0000 asID: 153877 IP address blocks: 165.99.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:af:ae:ff:a7:5b:bb:d2:76:d9:0d:53:05:29:82:03:7e:96:ab:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jun 16 04:40:02 2025 GMT Not After : Jun 15 04:45:02 2026 GMT Subject: CN=E3C5C6F7247F4E4D6A24EC48771948D7E070753F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:df:57:e9:0b:bc:2f:45:76:53:69:d1:ea:cd: 2b:b8:ff:bd:d7:b6:11:ec:c7:af:4b:ee:29:77:4b: 9e:4c:c4:39:13:b1:5a:5d:f9:27:b6:96:14:f3:a2: e8:41:55:26:a6:2d:a8:ec:a7:45:99:d8:3b:8a:38: b3:95:f8:c7:22:65:79:ee:83:29:90:44:d4:dd:59: 98:0a:4f:ad:c9:20:d9:e3:7e:67:8a:56:9c:28:9c: e0:d4:c2:29:e5:4d:0d:95:c3:35:f3:2a:64:22:55: 65:78:f6:76:0a:6a:47:0f:52:6b:0f:ab:aa:f7:ff: ad:21:56:4e:3a:ac:c0:cf:5d:4f:ce:57:b1:3a:e8: f5:29:51:3f:19:f7:aa:87:fb:b0:37:fa:d9:f2:9f: 18:23:a2:ba:17:45:f1:bb:2d:9e:2a:dd:12:be:7c: 21:0c:05:4b:04:1e:91:fa:a1:45:a3:55:fa:3a:34: dc:b3:a8:6a:a3:de:cc:82:4f:6c:a8:1f:18:96:55: 42:36:ca:73:09:ff:c1:a4:20:86:57:2b:e5:4f:59: 16:17:9b:3b:22:2a:b6:42:a4:7e:6b:f4:57:35:a9: fa:83:15:23:1f:84:bb:a7:87:fe:13:cc:59:33:10: 45:da:c0:24:a2:ca:6f:0e:c7:e4:9f:cc:42:0c:91: bc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C5:C6:F7:24:7F:4E:4D:6A:24:EC:48:77:19:48:D7:E0:70:75:3F X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153877.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.99.19.0/24 Signature Algorithm: sha256WithRSAEncryption 49:22:f1:ff:2a:f3:af:ed:3c:45:dc:72:57:cf:a5:da:0f:ec: 00:0f:11:b6:a3:ab:90:25:85:68:7b:06:46:24:71:e1:a6:80: 36:6f:8b:ca:5b:a0:20:ae:a3:0e:30:6e:49:0f:5e:2f:34:fc: 4d:1c:dd:dc:7c:b0:db:7c:59:97:05:b8:b5:58:75:8a:9a:54: 6f:fd:c4:b1:78:b9:99:5a:12:05:e7:db:1b:65:90:ec:43:dc: df:ed:8c:f8:70:6e:d6:2f:d6:88:88:f9:91:76:2a:1f:ee:fa: a2:09:92:6b:69:21:a2:ef:7b:63:a7:2d:82:f8:a5:a3:1c:13: fb:10:6e:b3:76:d5:2d:70:7c:3c:54:47:40:14:76:c2:b9:8b: 07:40:41:d8:28:d4:8d:69:1d:a1:34:7a:14:3e:6b:80:05:6d: 68:21:d6:27:75:05:44:0e:c6:af:a4:ee:15:86:b7:4b:bb:71: 85:0b:ba:26:40:77:f0:77:3d:25:b7:8e:dd:0e:39:81:bc:8d: 9f:b7:a9:28:68:1c:3f:d4:8e:50:2f:5e:f3:65:30:b2:3f:c4: 6f:85:3e:64:37:98:41:ee:05:c9:27:00:fe:39:a5:06:77:a5: 46:15:7d:6b:fd:d9:d9:93:54:c1:95:a7:89:38:e9:2d:aa:2a: 96:00:64:45 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUb6+u/6dbu9J22Q1TBSmCA36Wq+MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDYxNjA0NDAwMloX DTI2MDYxNTA0NDUwMlowMzExMC8GA1UEAxMoRTNDNUM2RjcyNDdGNEU0RDZBMjRF QzQ4NzcxOTQ4RDdFMDcwNzUzRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANrfV+kLvC9FdlNp0erNK7j/vde2EezHr0vuKXdLnkzEOROxWl35J7aWFPOi 6EFVJqYtqOynRZnYO4o4s5X4xyJlee6DKZBE1N1ZmApPrckg2eN+Z4pWnCic4NTC KeVNDZXDNfMqZCJVZXj2dgpqRw9Saw+rqvf/rSFWTjqswM9dT85XsTro9SlRPxn3 qof7sDf62fKfGCOiuhdF8bstnirdEr58IQwFSwQekfqhRaNV+jo03LOoaqPezIJP bKgfGJZVQjbKcwn/waQghlcr5U9ZFhebOyIqtkKkfmv0VzWp+oMVIx+Eu6eH/hPM WTMQRdrAJKLKbw7H5J/MQgyRvN8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTjxcb3 JH9OTWok7Eh3GUjX4HB1PzAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1Mzg3Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKVjEzANBgkqhkiG9w0BAQsFAAOCAQEASSLx/yrzr+08RdxyV8+l 2g/sAA8RtqOrkCWFaHsGRiRx4aaANm+LylugIK6jDjBuSQ9eLzT8TRzd3Hyw23xZ lwW4tVh1ippUb/3EsXi5mVoSBefbG2WQ7EPc3+2M+HBu1i/WiIj5kXYqH+76ogmS a2khou97Y6ctgviloxwT+xBus3bVLXB8PFRHQBR2wrmLB0BB2CjUjWkdoTR6FD5r gAVtaCHWJ3UFRA7Gr6TuFYa3S7txhQu6JkB38Hc9JbeO3Q45gbyNn7epKGgcP9SO UC9e82Uwsj/Eb4U+ZDeYQe4FyScA/jmlBnelRhV9a/3Z2ZNUwZWniTjpLaoqlgBk RQ== -----END CERTIFICATE-----Generated at Wed Nov 5 02:06:11 2025 by rpki-client