$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153962.roa File: AS153962.roa (raw, json) Hash identifier: qz+5giiLQWPRG8m2ML9yn6+VsqHl0oK0Rqdx6rb4KK0= Subject key identifier: 7A:C0:F5:E3:5B:E1:9F:4C:2F:E2:8B:8A:E6:69:B1:8B:6A:84:94:19 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 63AD7C3F25C946423713CC64D6CEF2B7E85776C6 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153962.roa Signing time: Thu 03 Jul 2025 02:59:18 +0000 ROA not before: Thu 03 Jul 2025 02:54:18 +0000 ROA not after: Thu 02 Jul 2026 02:59:18 +0000 asID: 153962 IP address blocks: 165.99.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ad:7c:3f:25:c9:46:42:37:13:cc:64:d6:ce:f2:b7:e8:57:76:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jul 3 02:54:18 2025 GMT Not After : Jul 2 02:59:18 2026 GMT Subject: CN=7AC0F5E35BE19F4C2FE28B8AE669B18B6A849419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bc:01:a4:57:13:cf:1b:ae:52:81:52:0e:11: 63:7b:43:a9:ab:e1:17:05:01:dc:aa:88:81:f7:69: d1:66:b4:ec:3a:4e:be:7a:3b:f3:f2:71:22:6a:a7: bd:3f:05:17:4b:bd:3d:a6:88:d1:b8:1b:43:0f:3b: 99:a1:70:24:be:63:43:72:1e:5d:3f:c1:75:bf:4c: 6a:1e:03:3a:ce:d5:e1:47:63:c8:83:fb:0a:32:e8: 38:04:6a:9a:7d:39:a8:ab:30:2a:8e:6f:39:e0:32: bb:3f:ef:e4:d0:66:16:07:09:e4:1a:13:69:5c:9c: 47:eb:62:7f:00:01:74:96:3f:06:2a:9f:6a:99:8f: f9:c5:f7:06:0f:dd:58:27:0e:d4:06:1d:a0:0c:9e: 0d:a4:5d:1a:54:56:11:ce:22:4a:5c:ab:86:a6:9d: 14:fd:00:b0:a0:5e:76:e5:1a:fa:14:89:60:b8:44: e3:c0:e4:c7:ea:5b:b4:56:f4:95:46:41:aa:8a:ed: fd:1f:0d:ae:45:8d:81:98:00:c4:9d:38:d2:8e:7d: 56:47:18:c6:5f:30:09:86:f2:bb:c8:6b:3e:c3:96: 93:17:49:ad:c4:56:a6:bd:79:17:b4:41:d2:97:92: 3c:1e:d7:ac:fa:9d:e0:dc:d2:3e:81:53:57:a8:3a: e2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C0:F5:E3:5B:E1:9F:4C:2F:E2:8B:8A:E6:69:B1:8B:6A:84:94:19 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153962.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.99.186.0/24 Signature Algorithm: sha256WithRSAEncryption 37:50:63:24:c0:c2:a1:5a:13:88:9f:93:8e:59:af:85:67:7b: 97:b1:11:4e:44:35:62:00:1e:00:07:8f:bf:04:91:71:dd:b1: a7:a9:e5:f6:5e:c3:c7:08:47:df:a9:3e:82:3f:56:76:23:2d: f3:40:05:75:8e:32:68:11:8f:a2:02:38:6a:06:78:be:e5:1a: e3:8f:1f:9f:96:1c:0c:aa:e0:38:4d:a9:86:9b:8b:ff:60:59: 72:48:b7:9b:35:58:40:81:9c:25:f0:e4:05:18:4c:d8:b5:95: f9:ee:6e:a1:ea:d4:03:5b:9f:40:13:67:cc:94:fc:94:ff:5b: 54:3c:d7:04:b3:9a:93:0a:a1:4f:3d:8e:b0:68:a0:a5:4d:80: 6e:dd:21:00:49:f2:44:ee:cc:90:7f:07:02:8c:73:e5:14:b0: 03:1a:77:79:1b:42:ad:cd:6d:f4:80:6d:fa:2d:ad:da:71:f1: ca:9d:7d:d4:9d:af:fb:7d:5e:d7:5f:08:3c:9f:2e:f5:2c:a7: 68:af:bd:8c:83:26:64:b9:e0:34:f0:71:19:24:5b:44:51:46: e8:3e:9d:b1:b7:d4:14:81:19:fd:70:9d:bc:0b:c8:cc:e9:98: cd:63:a9:f3:1d:40:50:05:79:d2:18:a4:83:e4:0f:af:01:df: a2:6d:56:85 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUY618PyXJRkI3E8xk1s7yt+hXdsYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDcwMzAyNTQxOFoX DTI2MDcwMjAyNTkxOFowMzExMC8GA1UEAxMoN0FDMEY1RTM1QkUxOUY0QzJGRTI4 QjhBRTY2OUIxOEI2QTg0OTQxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANS8AaRXE88brlKBUg4RY3tDqavhFwUB3KqIgfdp0Wa07DpOvno78/JxImqn vT8FF0u9PaaI0bgbQw87maFwJL5jQ3IeXT/Bdb9Mah4DOs7V4UdjyIP7CjLoOARq mn05qKswKo5vOeAyuz/v5NBmFgcJ5BoTaVycR+tifwABdJY/BiqfapmP+cX3Bg/d WCcO1AYdoAyeDaRdGlRWEc4iSlyrhqadFP0AsKBeduUa+hSJYLhE48Dkx+pbtFb0 lUZBqort/R8NrkWNgZgAxJ040o59VkcYxl8wCYbyu8hrPsOWkxdJrcRWpr15F7RB 0peSPB7XrPqd4NzSPoFTV6g64u8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBR6wPXj W+GfTC/ii4rmabGLaoSUGTAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1Mzk2Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKVjujANBgkqhkiG9w0BAQsFAAOCAQEAN1BjJMDCoVoTiJ+Tjlmv hWd7l7ERTkQ1YgAeAAePvwSRcd2xp6nl9l7DxwhH36k+gj9WdiMt80AFdY4yaBGP ogI4agZ4vuUa448fn5YcDKrgOE2phpuL/2BZcki3mzVYQIGcJfDkBRhM2LWV+e5u oerUA1ufQBNnzJT8lP9bVDzXBLOakwqhTz2OsGigpU2Abt0hAEnyRO7MkH8HAoxz 5RSwAxp3eRtCrc1t9IBt+i2t2nHxyp191J2v+31e118IPJ8u9SynaK+9jIMmZLng NPBxGSRbRFFG6D6dsbfUFIEZ/XCdvAvIzOmYzWOp8x1AUAV50hikg+QPrwHfom1W hQ== -----END CERTIFICATE-----Generated at Tue Nov 4 22:37:48 2025 by rpki-client