$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154039.roa File: AS154039.roa (raw, json) Hash identifier: xJiV85ZJmDdYCmgUYl8T0c91CCwAYlhotr4XWj3LrQc= Subject key identifier: C2:98:07:75:89:91:AC:B0:77:72:87:63:64:15:D6:1C:33:42:5C:EC Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 75ED0D5EE0D75D06E4DE26F7D0621AE5021ECB99 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154039.roa Signing time: Tue 28 Oct 2025 03:27:15 +0000 ROA not before: Tue 28 Oct 2025 03:22:15 +0000 ROA not after: Tue 27 Oct 2026 03:27:15 +0000 asID: 154039 IP address blocks: 138.252.92.0/24 maxlen: 24 165.99.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 10:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ed:0d:5e:e0:d7:5d:06:e4:de:26:f7:d0:62:1a:e5:02:1e:cb:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Oct 28 03:22:15 2025 GMT Not After : Oct 27 03:27:15 2026 GMT Subject: CN=C29807758991ACB0777287636415D61C33425CEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b7:d2:65:0e:5b:45:d3:c8:4d:94:d5:af:2e: 55:27:8a:97:f7:83:c8:e6:37:48:34:0a:2d:5b:0f: 4b:05:cf:e3:9d:f0:db:b9:8e:d0:38:6a:2b:60:65: f0:68:ee:4f:fd:a6:1d:97:5c:40:43:78:9f:e7:aa: e8:fc:8a:cf:db:e6:e4:55:0f:93:bb:b8:76:4a:81: f9:c9:08:19:dc:b3:76:32:0e:5a:da:94:6c:d2:02: e1:75:1b:02:44:14:68:3a:da:15:6f:41:3e:82:b5: 16:e1:be:ae:a8:d3:12:97:b3:b3:e0:7e:bf:73:05: f3:e9:f8:83:a1:b3:52:2d:55:01:5b:0f:f0:82:07: 2f:d3:40:59:98:8c:2f:27:ea:99:38:98:d7:21:66: 2c:7a:a9:5a:f3:11:4f:cb:62:18:e9:ac:1d:e8:43: 16:1e:b0:da:77:f2:9f:9d:04:78:18:6b:82:8c:80: 03:01:3c:5b:17:f9:aa:10:d2:59:b6:4b:62:ad:e2: 32:ef:94:56:7a:0a:6a:dd:f1:2d:c5:e2:92:6e:a1: fa:c0:97:95:96:41:72:75:dc:7a:00:c3:68:57:ae: f7:ed:df:05:b6:1f:7e:2f:2b:6f:96:1e:f6:fd:6a: f3:0a:35:6e:21:28:37:c5:8d:cb:c1:21:58:1d:4b: 95:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:98:07:75:89:91:AC:B0:77:72:87:63:64:15:D6:1C:33:42:5C:EC X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.252.92.0/24 165.99.57.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:3a:c1:22:55:7e:f1:c1:8f:47:10:95:0b:2b:e4:ac:f4:5e: 6a:33:4c:f1:a1:f8:84:bf:33:3c:9b:c6:fc:f0:ff:8b:4a:0a: 68:e3:ae:28:39:49:61:ca:2c:2d:5f:b0:e3:e0:7b:67:e0:1d: 0e:08:87:d9:eb:79:12:30:f6:0a:cf:20:2d:b8:92:9b:76:fc: 29:86:7c:cf:55:d4:78:e1:76:81:9d:49:b4:44:06:9e:03:4a: 14:75:4d:6e:36:b1:8f:dc:70:09:8f:23:42:13:d2:d0:cb:06: 42:72:29:ee:61:ab:fc:aa:24:40:36:52:48:2f:6a:82:9f:50: 5d:07:15:ee:26:f2:ed:72:25:3a:46:f9:e5:22:d5:71:6e:2a: 0d:3d:fa:ed:51:65:00:3d:a5:28:c7:c9:8f:9f:8a:ba:41:b2: 04:d0:d4:24:21:16:63:19:06:e6:6e:9a:9e:a6:5b:ed:33:6e: df:54:93:1b:8d:03:1a:cd:1d:b9:0d:9a:ae:85:8d:44:78:e7: 1c:67:f2:00:48:ed:db:a2:51:86:35:d9:02:b1:5f:ff:30:6b: e9:db:15:7f:f3:80:cb:9f:1a:dd:b9:eb:ee:c9:4c:4f:1f:1f: 6d:2e:48:f5:b4:85:af:c7:91:9f:90:d9:8d:8a:2a:61:ce:9d: bf:3a:30:88 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUde0NXuDXXQbk3ib30GIa5QIey5kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTAyODAzMjIxNVoX DTI2MTAyNzAzMjcxNVowMzExMC8GA1UEAxMoQzI5ODA3NzU4OTkxQUNCMDc3NzI4 NzYzNjQxNUQ2MUMzMzQyNUNFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKK30mUOW0XTyE2U1a8uVSeKl/eDyOY3SDQKLVsPSwXP453w27mO0DhqK2Bl 8GjuT/2mHZdcQEN4n+eq6PyKz9vm5FUPk7u4dkqB+ckIGdyzdjIOWtqUbNIC4XUb AkQUaDraFW9BPoK1FuG+rqjTEpezs+B+v3MF8+n4g6GzUi1VAVsP8IIHL9NAWZiM LyfqmTiY1yFmLHqpWvMRT8tiGOmsHehDFh6w2nfyn50EeBhrgoyAAwE8Wxf5qhDS WbZLYq3iMu+UVnoKat3xLcXikm6h+sCXlZZBcnXcegDDaFeu9+3fBbYffi8rb5Ye 9v1q8wo1biEoN8WNy8EhWB1LlY8CAwEAAaOCAdYwggHSMB0GA1UdDgQWBBTCmAd1 iZGssHdyh2NkFdYcM0Jc7DAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1NDAzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAIr8XAMEAKVjOTANBgkqhkiG9w0BAQsFAAOCAQEALzrBIlV+8cGP RxCVCyvkrPReajNM8aH4hL8zPJvG/PD/i0oKaOOuKDlJYcosLV+w4+B7Z+AdDgiH 2et5EjD2Cs8gLbiSm3b8KYZ8z1XUeOF2gZ1JtEQGngNKFHVNbjaxj9xwCY8jQhPS 0MsGQnIp7mGr/KokQDZSSC9qgp9QXQcV7iby7XIlOkb55SLVcW4qDT367VFlAD2l KMfJj5+KukGyBNDUJCEWYxkG5m6anqZb7TNu31STG40DGs0duQ2aroWNRHjnHGfy AEjt26JRhjXZArFf/zBr6dsVf/OAy58a3bnr7slMTx8fbS5I9bSFr8eRn5DZjYoq Yc6dvzowiA== -----END CERTIFICATE-----Generated at Wed Nov 5 10:42:34 2025 by rpki-client