$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154146.roa File: AS154146.roa (raw, json) Hash identifier: RmKvaW7CXFy6AiOu4VeZtieu2wbimszoNGwodrYO+Rk= Subject key identifier: 9F:4D:DD:AA:25:86:64:E6:8A:38:FD:9B:EB:2B:3F:D1:EE:4D:48:03 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 0EA428103727BDE2D32617DAB30F1058C557C8BF Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154146.roa Signing time: Mon 22 Sep 2025 01:56:39 +0000 ROA not before: Mon 22 Sep 2025 01:51:39 +0000 ROA not after: Mon 21 Sep 2026 01:56:39 +0000 asID: 154146 IP address blocks: 192.147.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 10:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a4:28:10:37:27:bd:e2:d3:26:17:da:b3:0f:10:58:c5:57:c8:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Sep 22 01:51:39 2025 GMT Not After : Sep 21 01:56:39 2026 GMT Subject: CN=9F4DDDAA258664E68A38FD9BEB2B3FD1EE4D4803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2b:83:26:ed:de:4f:4b:61:a9:aa:16:46:53: d8:02:a6:71:1f:0e:a6:a2:7c:c0:9a:de:0e:31:94: 5f:a0:d3:12:37:b9:aa:00:47:46:70:26:05:74:e3: 54:3d:fa:18:95:f9:09:9a:c8:f3:27:54:df:ac:8d: 9f:52:c1:5c:e8:e5:ae:39:6c:67:57:26:4d:54:f6: 0f:af:81:38:4c:b0:e0:88:8e:8f:97:1c:69:40:8f: ce:b1:1a:51:34:c3:83:5d:ef:11:6a:ea:5d:84:0f: 3d:7b:88:20:0d:2b:1e:bc:78:68:73:d7:d6:c4:ab: 88:1f:21:24:68:80:54:80:38:0d:ff:d5:26:81:93: 53:5d:ef:53:e6:51:a8:ed:db:a6:9e:5e:a5:fe:b5: b5:d7:8a:23:11:db:a9:5a:ef:f9:e0:78:07:53:51: 7c:ec:72:21:1c:17:75:64:a1:a7:f2:b6:b6:a5:b1: d3:58:92:0d:12:af:61:c9:13:14:c6:71:a3:4a:65: 20:d3:1b:84:5b:b1:89:fc:ea:d8:7a:67:cb:99:38: 95:07:9a:a9:db:ce:03:da:6f:d2:0f:b0:c5:20:ac: ef:1f:01:15:c9:e4:a7:21:2f:28:a5:6a:c9:ff:41: 09:23:7d:36:cc:77:33:4d:33:2a:6d:5c:9f:4c:0e: 7d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4D:DD:AA:25:86:64:E6:8A:38:FD:9B:EB:2B:3F:D1:EE:4D:48:03 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154146.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.147.114.0/24 Signature Algorithm: sha256WithRSAEncryption 40:95:28:01:d5:b8:66:f9:46:04:31:32:13:bf:be:85:6a:24: 8d:9e:6d:1a:08:d0:18:03:7b:21:fc:0a:ef:7d:30:d3:77:00: 1e:63:7d:a5:b8:ab:cd:e9:79:bb:15:9c:73:d3:a4:3b:4c:4d: a2:d8:93:6f:e9:ac:bd:08:b7:a8:9d:b5:4e:b2:50:a4:f1:af: 64:e3:8c:35:43:71:48:a6:0c:f4:ee:b8:a8:13:97:e6:60:ba: 32:9a:aa:84:21:5c:d3:2f:1b:b3:0b:14:b2:77:e4:46:21:e9: 1f:f2:bf:42:7c:c4:81:cb:ed:61:9c:e7:78:fa:78:57:5c:fd: 93:d8:66:b8:45:8f:7d:2d:11:a3:97:47:c2:3a:a2:60:c6:a5: 96:6d:da:2e:ef:23:c2:ef:83:d3:7a:0d:c6:30:97:d9:a1:97: 27:c1:16:95:bb:65:a9:6c:c7:b1:7d:39:70:37:9a:8e:1c:6a: b1:40:e1:bc:f6:2a:94:dd:76:48:70:a5:4f:bc:bc:5a:a8:d3: 4a:53:47:c9:bd:21:23:7c:46:cd:71:17:7e:a4:9f:0f:36:d3: b9:ea:8a:5f:de:5c:91:d6:4d:6c:cf:e1:4d:f8:be:82:25:22: e1:fc:97:84:1f:cd:46:57:78:4b:83:f9:8c:ff:32:d1:e9:f2: 81:e5:54:c3 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUDqQoEDcnveLTJhfasw8QWMVXyL8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDkyMjAxNTEzOVoX DTI2MDkyMTAxNTYzOVowMzExMC8GA1UEAxMoOUY0REREQUEyNTg2NjRFNjhBMzhG RDlCRUIyQjNGRDFFRTRENDgwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANErgybt3k9LYamqFkZT2AKmcR8OpqJ8wJreDjGUX6DTEje5qgBHRnAmBXTj VD36GJX5CZrI8ydU36yNn1LBXOjlrjlsZ1cmTVT2D6+BOEyw4IiOj5ccaUCPzrEa UTTDg13vEWrqXYQPPXuIIA0rHrx4aHPX1sSriB8hJGiAVIA4Df/VJoGTU13vU+ZR qO3bpp5epf61tdeKIxHbqVrv+eB4B1NRfOxyIRwXdWShp/K2tqWx01iSDRKvYckT FMZxo0plINMbhFuxifzq2Hpny5k4lQeaqdvOA9pv0g+wxSCs7x8BFcnkpyEvKKVq yf9BCSN9Nsx3M00zKm1cn0wOfbcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSfTd2q JYZk5oo4/ZvrKz/R7k1IAzAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1NDE0Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMCTcjANBgkqhkiG9w0BAQsFAAOCAQEAQJUoAdW4ZvlGBDEyE7++ hWokjZ5tGgjQGAN7IfwK730w03cAHmN9pbirzel5uxWcc9OkO0xNotiTb+msvQi3 qJ21TrJQpPGvZOOMNUNxSKYM9O64qBOX5mC6MpqqhCFc0y8bswsUsnfkRiHpH/K/ QnzEgcvtYZznePp4V1z9k9hmuEWPfS0Ro5dHwjqiYMallm3aLu8jwu+D03oNxjCX 2aGXJ8EWlbtlqWzHsX05cDeajhxqsUDhvPYqlN12SHClT7y8WqjTSlNHyb0hI3xG zXEXfqSfDzbTueqKX95ckdZNbM/hTfi+giUi4fyXhB/NRld4S4P5jP8y0enygeVU ww== -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:37 2025 by rpki-client