$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153922.roa File: AS153922.roa (raw, json) Hash identifier: 4WV2FnmTMoyAXYt4NbkyzJHFBNl10Gj4+EnXcjemZ24= Subject key identifier: 98:6B:78:0A:87:6D:34:DF:27:80:99:4B:57:2A:A6:74:8E:D0:E9:C8 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 70C341F52EE86D5CFFF742D5E56F8E70E8F8CBD8 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153922.roa Signing time: Tue 10 Jun 2025 06:39:20 +0000 ROA not before: Tue 10 Jun 2025 06:34:20 +0000 ROA not after: Tue 09 Jun 2026 06:39:20 +0000 asID: 153922 IP address blocks: 165.99.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 16:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:c3:41:f5:2e:e8:6d:5c:ff:f7:42:d5:e5:6f:8e:70:e8:f8:cb:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jun 10 06:34:20 2025 GMT Not After : Jun 9 06:39:20 2026 GMT Subject: CN=986B780A876D34DF2780994B572AA6748ED0E9C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:30:f5:35:57:2e:ea:fa:b9:32:5f:22:c1:4c: 49:46:bb:4a:b4:97:be:48:4a:20:cb:29:0a:6e:de: 4f:9c:f7:91:6b:2d:d6:f2:6f:37:34:ed:2c:8d:0e: 94:ab:16:85:01:4c:a5:74:26:6d:43:0c:6f:30:e0: 7b:9f:3c:3f:58:75:b8:6d:10:7d:1f:02:95:36:09: b8:7a:31:2a:f6:ec:07:50:33:3e:d4:8b:52:0b:e6: 81:01:c4:dc:25:c6:85:42:95:19:0c:45:c9:cd:a6: fc:25:e7:e9:0a:95:be:1a:4c:18:64:44:f8:66:fb: 3f:7e:62:37:3a:8a:de:ca:85:65:ee:ec:33:a5:b3: 77:4e:5d:12:c7:12:92:a4:22:4f:3e:75:f7:3a:6d: 6d:d8:be:cb:13:5e:69:4a:51:af:22:55:6e:a5:93: a0:6a:43:e6:5a:4f:ea:48:82:ce:80:a0:f0:69:45: ef:83:09:62:42:12:b4:35:0f:a6:b8:ed:b9:58:98: 91:24:97:57:9b:13:8c:8f:a7:52:3f:06:64:3c:8f: ce:f9:cf:5a:1d:38:fe:7e:e9:a1:65:5e:9e:c7:ea: 1c:c0:4d:c3:33:2c:c3:4e:5f:3e:9d:7d:53:7a:d4: 52:e9:02:ba:31:81:53:cb:36:0d:ed:fc:8f:16:37: 26:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6B:78:0A:87:6D:34:DF:27:80:99:4B:57:2A:A6:74:8E:D0:E9:C8 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153922.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.99.87.0/24 Signature Algorithm: sha256WithRSAEncryption 60:9d:f3:71:c2:dc:36:a4:0c:d9:02:e7:4f:2b:d6:f5:d2:3c: e1:5e:ea:84:22:0b:e5:90:ba:08:c4:c1:81:18:8f:d5:53:eb: af:8e:9a:f9:e3:b1:2e:e2:81:66:15:e0:ce:e9:73:40:3a:64: 11:cd:ff:59:6b:11:01:e9:d6:32:ed:fc:22:46:65:70:9f:62: d3:b4:90:4a:1b:24:6f:45:11:fe:b8:24:e5:7c:68:73:54:f4: 7b:36:db:fd:1d:95:30:b6:18:05:b7:61:04:8c:a8:77:c1:b0: f5:bc:3b:25:95:85:3f:3c:d4:45:3c:41:46:45:82:02:91:a3: be:4a:0e:df:87:aa:45:1e:b6:6e:be:e2:c9:08:9c:0c:c0:eb: d0:d9:c6:18:d4:a8:6c:a6:bd:73:d8:07:b7:73:f6:e7:fa:71: b0:59:53:bf:8f:7f:41:88:a9:d2:dd:db:ec:87:e4:80:89:78: 08:f1:40:f1:fb:93:e9:10:66:d6:db:22:22:1f:b5:04:46:af: ab:8d:79:47:4a:f0:8c:9f:81:79:bf:64:8e:7b:a4:ac:ed:1f: d4:04:fc:f7:a8:63:aa:af:ee:4b:93:b7:fe:d1:9e:d6:73:4d: a5:f3:4c:53:02:9d:97:7c:1f:b6:ef:71:18:9b:9a:c7:0c:3e: 03:b6:33:6d -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUcMNB9S7obVz/90LV5W+OcOj4y9gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDYxMDA2MzQyMFoX DTI2MDYwOTA2MzkyMFowMzExMC8GA1UEAxMoOTg2Qjc4MEE4NzZEMzRERjI3ODA5 OTRCNTcyQUE2NzQ4RUQwRTlDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANgw9TVXLur6uTJfIsFMSUa7SrSXvkhKIMspCm7eT5z3kWst1vJvNzTtLI0O lKsWhQFMpXQmbUMMbzDge588P1h1uG0QfR8ClTYJuHoxKvbsB1AzPtSLUgvmgQHE 3CXGhUKVGQxFyc2m/CXn6QqVvhpMGGRE+Gb7P35iNzqK3sqFZe7sM6Wzd05dEscS kqQiTz519zptbdi+yxNeaUpRryJVbqWToGpD5lpP6kiCzoCg8GlF74MJYkIStDUP prjtuViYkSSXV5sTjI+nUj8GZDyPzvnPWh04/n7poWVensfqHMBNwzMsw05fPp19 U3rUUukCujGBU8s2De38jxY3JisCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSYa3gK h2003yeAmUtXKqZ0jtDpyDAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MzkyMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKVjVzANBgkqhkiG9w0BAQsFAAOCAQEAYJ3zccLcNqQM2QLnTyvW 9dI84V7qhCIL5ZC6CMTBgRiP1VPrr46a+eOxLuKBZhXgzulzQDpkEc3/WWsRAenW Mu38IkZlcJ9i07SQShskb0UR/rgk5Xxoc1T0ezbb/R2VMLYYBbdhBIyod8Gw9bw7 JZWFPzzURTxBRkWCApGjvkoO34eqRR62br7iyQicDMDr0NnGGNSobKa9c9gHt3P2 5/pxsFlTv49/QYip0t3b7IfkgIl4CPFA8fuT6RBm1tsiIh+1BEavq415R0rwjJ+B eb9kjnukrO0f1AT896hjqq/uS5O3/tGe1nNNpfNMUwKdl3wftu9xGJuaxww+A7Yz bQ== -----END CERTIFICATE-----Generated at Sun Jun 15 13:33:01 2025 by rpki-client