$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153917.roa File: AS153917.roa (raw, json) Hash identifier: qbF2PUT1qqAU3H1EoM5U1M2zPT8F1jpMztTQisvJwYY= Subject key identifier: 75:2D:DF:2A:6A:C6:E6:6A:CC:D0:8C:BA:0C:E8:33:17:35:6C:6C:01 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 1985D5C4D342538B69474B9E7E8C87D196ECF359 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153917.roa Signing time: Thu 26 Jun 2025 07:40:31 +0000 ROA not before: Thu 26 Jun 2025 07:35:31 +0000 ROA not after: Thu 25 Jun 2026 07:40:31 +0000 asID: 153917 IP address blocks: 165.99.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:85:d5:c4:d3:42:53:8b:69:47:4b:9e:7e:8c:87:d1:96:ec:f3:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jun 26 07:35:31 2025 GMT Not After : Jun 25 07:40:31 2026 GMT Subject: CN=752DDF2A6AC6E66ACCD08CBA0CE83317356C6C01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:78:c1:16:6c:09:f6:90:57:68:1f:0c:7b:9a: a9:4b:16:81:05:03:79:e2:86:47:51:8e:e4:33:ff: 3b:3d:63:60:2d:85:98:80:8b:05:22:1a:aa:bf:53: 0e:f6:c7:42:b5:a8:a7:a5:7a:64:88:0c:45:5b:1a: aa:c3:f2:06:8c:8f:a5:b0:dc:58:66:e6:8b:44:42: 3b:67:83:62:8d:bc:0b:89:eb:b2:4e:e2:25:aa:38: ef:97:da:0f:35:ef:14:e8:2d:ce:5c:ea:2e:bd:2b: 81:4e:ed:de:3a:6a:98:f4:c7:c9:9b:9f:3c:1b:50: c4:11:9e:46:9b:08:09:52:f3:5c:9f:93:71:4e:9f: 11:f5:0e:70:e9:cb:fc:98:9c:6e:06:fb:5d:65:98: 77:57:af:3c:6b:a5:40:d4:3e:00:12:f5:27:b0:50: 19:0a:6b:d5:d4:89:80:38:93:b3:ab:76:54:08:c9: b9:a3:70:79:56:47:ac:db:2f:3e:74:b6:87:86:6a: 66:e1:42:e5:a2:f9:58:e9:59:1e:0b:56:cf:ee:99: 83:6c:f6:c8:d6:eb:0f:61:55:6c:32:f2:f4:aa:04: 6a:c0:09:00:57:70:4a:3f:2a:79:0f:ae:0a:37:8b: 03:74:60:40:4a:fc:ef:38:5c:19:28:6c:97:d5:d1: f8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2D:DF:2A:6A:C6:E6:6A:CC:D0:8C:BA:0C:E8:33:17:35:6C:6C:01 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153917.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.99.20.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:29:bb:77:20:4d:55:15:26:66:e0:4b:35:b5:51:1c:56:d6: 8e:d7:03:8d:c5:c8:ed:92:16:3c:07:87:e2:43:19:86:15:26: 27:f5:ce:5b:d9:e8:71:ef:3b:83:5e:90:d2:0b:04:90:38:bb: 18:0d:2d:e2:0d:5a:1a:7f:1d:30:42:d7:7f:b8:59:7c:51:71: 84:df:03:dc:12:d2:d5:f7:44:72:ba:e8:5a:6f:0e:af:12:6e: 95:1d:e9:dd:52:7b:80:58:01:21:db:43:5a:9c:91:59:fd:57: 6c:a7:2b:08:5a:f2:cb:b2:c6:8b:9f:4d:94:3d:04:4f:13:ab: b1:90:9d:f2:80:4e:a4:18:e0:43:db:96:c4:48:d7:34:83:98: 7d:fb:b5:83:5a:e9:96:1b:4f:6e:2a:a8:9e:e8:4e:4b:5d:50: e8:32:8c:86:9c:c5:b3:19:04:3d:f2:1e:ec:8f:0c:f0:81:83: 13:6e:c4:ca:65:60:95:1c:87:3f:0e:3a:b0:b9:ef:c2:d3:15: 25:bf:e5:ef:ad:6f:12:87:fd:77:42:4a:bf:9e:26:69:73:74: 90:37:13:f4:05:93:31:4e:0f:37:88:e3:5f:58:59:e7:c5:d3: 3a:be:02:29:c4:e0:1a:64:70:97:f3:3e:78:ff:b3:3a:d0:7b: 7b:af:79:3b -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUGYXVxNNCU4tpR0uefoyH0Zbs81kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDYyNjA3MzUzMVoX DTI2MDYyNTA3NDAzMVowMzExMC8GA1UEAxMoNzUyRERGMkE2QUM2RTY2QUNDRDA4 Q0JBMENFODMzMTczNTZDNkMwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOV4wRZsCfaQV2gfDHuaqUsWgQUDeeKGR1GO5DP/Oz1jYC2FmICLBSIaqr9T DvbHQrWop6V6ZIgMRVsaqsPyBoyPpbDcWGbmi0RCO2eDYo28C4nrsk7iJao475fa DzXvFOgtzlzqLr0rgU7t3jpqmPTHyZufPBtQxBGeRpsICVLzXJ+TcU6fEfUOcOnL /Jicbgb7XWWYd1evPGulQNQ+ABL1J7BQGQpr1dSJgDiTs6t2VAjJuaNweVZHrNsv PnS2h4ZqZuFC5aL5WOlZHgtWz+6Zg2z2yNbrD2FVbDLy9KoEasAJAFdwSj8qeQ+u CjeLA3RgQEr87zhcGShsl9XR+IkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBR1Ld8q asbmaszQjLoM6DMXNWxsATAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MzkxNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKVjFDANBgkqhkiG9w0BAQsFAAOCAQEAeym7dyBNVRUmZuBLNbVR HFbWjtcDjcXI7ZIWPAeH4kMZhhUmJ/XOW9noce87g16Q0gsEkDi7GA0t4g1aGn8d MELXf7hZfFFxhN8D3BLS1fdEcrroWm8OrxJulR3p3VJ7gFgBIdtDWpyRWf1XbKcr CFryy7LGi59NlD0ETxOrsZCd8oBOpBjgQ9uWxEjXNIOYffu1g1rplhtPbiqonuhO S11Q6DKMhpzFsxkEPfIe7I8M8IGDE27EymVglRyHPw46sLnvwtMVJb/l761vEof9 d0JKv54maXN0kDcT9AWTMU4PN4jjX1hZ58XTOr4CKcTgGmRwl/M+eP+zOtB7e695 Ow== -----END CERTIFICATE-----Generated at Tue Nov 4 22:37:46 2025 by rpki-client