$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154291.roa File: AS154291.roa (raw, json) Hash identifier: DvVDD8mU3czt/hg4GZXMa2cMs4Z+51vUDZSVMdCA8IM= Subject key identifier: 09:5F:17:54:32:A8:93:0F:4B:F3:B7:2C:3E:0B:AC:BA:A7:B2:F5:96 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 72CAABD8675BAEECBBE64A1A34DD78F1C3EFC53A Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154291.roa Signing time: Fri 31 Oct 2025 02:35:58 +0000 ROA not before: Fri 31 Oct 2025 02:30:58 +0000 ROA not after: Fri 30 Oct 2026 02:35:58 +0000 asID: 154291 IP address blocks: 138.252.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 08:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:ca:ab:d8:67:5b:ae:ec:bb:e6:4a:1a:34:dd:78:f1:c3:ef:c5:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Oct 31 02:30:58 2025 GMT Not After : Oct 30 02:35:58 2026 GMT Subject: CN=095F175432A8930F4BF3B72C3E0BACBAA7B2F596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:19:9d:9f:17:b9:2d:b2:e5:f0:a6:49:cd:f7: 49:2e:0c:67:fd:af:f9:fe:8d:f1:7d:86:2e:a6:61: 19:91:8a:99:69:83:01:ef:f8:31:76:21:5c:3f:03: e6:49:4e:cc:d1:8b:28:1a:2d:09:cc:3b:de:76:78: 04:c0:d9:e2:56:44:f0:05:53:ba:43:5a:63:73:cd: 6d:cf:02:42:51:74:83:6e:a8:8c:da:70:ed:e8:6e: 9e:0f:ea:92:4b:1f:58:aa:d7:b5:7e:ae:9f:12:e4: 52:d8:1a:06:4d:da:49:d9:61:58:fd:0d:7c:49:6d: fb:d8:ff:00:d7:dd:7c:9e:12:6f:0b:a9:84:cf:9a: 12:3c:e9:84:82:f9:f0:e4:64:a3:d3:60:3e:fe:06: 1a:8c:85:2f:36:ea:20:b0:3d:45:29:a3:46:0b:51: e9:ac:c1:29:b7:c0:ac:64:26:e3:fb:d0:3a:cf:a5: 8d:4d:70:34:23:9a:60:9b:2e:c5:7f:cc:cd:42:6e: ff:0d:aa:68:28:cd:f3:8a:43:db:70:b4:00:ff:40: 54:45:a5:40:86:8b:16:7f:16:13:c5:1d:c4:ff:e4: b9:e6:e6:b4:78:ef:de:d7:d3:73:e9:fb:4c:82:da: 07:5f:13:c8:61:15:42:41:a2:ea:0b:98:ef:31:9f: b2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5F:17:54:32:A8:93:0F:4B:F3:B7:2C:3E:0B:AC:BA:A7:B2:F5:96 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154291.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.252.16.0/24 Signature Algorithm: sha256WithRSAEncryption 84:4d:d9:7c:dc:75:50:9f:92:51:76:8d:c2:d8:72:47:3f:4a: 6b:2a:de:b8:39:6b:07:9b:9a:7f:5f:f9:27:84:43:58:bc:e1: fd:86:fc:56:73:23:73:bd:87:48:1d:33:3a:bf:02:24:3a:e6: 34:e0:cd:b7:fc:13:3d:f0:d3:24:88:f3:f5:5d:0b:95:01:46: fd:07:be:9e:3a:6c:d2:f9:71:73:e2:41:82:57:c6:b3:46:97: 42:f2:fb:6c:88:92:85:9f:b2:c5:6d:35:27:5b:74:e6:fa:40: 99:e8:2e:52:31:56:69:5c:ce:d5:c6:29:f3:8e:c9:de:ba:f8: 4f:de:c4:19:c7:6b:3f:a5:2c:1e:a0:f4:cd:41:f2:4c:45:08: 22:62:03:7a:2c:7e:19:c1:b4:6d:a5:5e:f1:70:25:53:d2:24: c2:89:b7:96:25:2c:58:00:ce:b3:88:c9:30:37:56:15:f0:54: e0:48:33:ab:8f:c3:aa:c9:52:6e:15:6f:14:d1:3f:47:d4:83: 2e:4f:9b:38:4b:45:2b:d4:64:6a:2c:5c:ec:0f:79:1c:fe:87: e5:65:78:99:3b:4d:09:92:01:63:c7:aa:57:72:13:cf:ea:8c: 0a:b0:7a:08:c4:6f:88:21:df:11:56:b7:05:27:be:e3:e5:cc: 46:95:b7:e9 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUcsqr2Gdbruy75koaNN148cPvxTowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTAzMTAyMzA1OFoX DTI2MTAzMDAyMzU1OFowMzExMC8GA1UEAxMoMDk1RjE3NTQzMkE4OTMwRjRCRjNC NzJDM0UwQkFDQkFBN0IyRjU5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL8ZnZ8XuS2y5fCmSc33SS4MZ/2v+f6N8X2GLqZhGZGKmWmDAe/4MXYhXD8D 5klOzNGLKBotCcw73nZ4BMDZ4lZE8AVTukNaY3PNbc8CQlF0g26ojNpw7ehung/q kksfWKrXtX6unxLkUtgaBk3aSdlhWP0NfElt+9j/ANfdfJ4SbwuphM+aEjzphIL5 8ORko9NgPv4GGoyFLzbqILA9RSmjRgtR6azBKbfArGQm4/vQOs+ljU1wNCOaYJsu xX/MzUJu/w2qaCjN84pD23C0AP9AVEWlQIaLFn8WE8UdxP/kuebmtHjv3tfTc+n7 TILaB18TyGEVQkGi6guY7zGfsikCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQJXxdU MqiTD0vztyw+C6y6p7L1ljAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1NDI5MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIr8EDANBgkqhkiG9w0BAQsFAAOCAQEAhE3ZfNx1UJ+SUXaNwthy Rz9KayreuDlrB5uaf1/5J4RDWLzh/Yb8VnMjc72HSB0zOr8CJDrmNODNt/wTPfDT JIjz9V0LlQFG/Qe+njps0vlxc+JBglfGs0aXQvL7bIiShZ+yxW01J1t05vpAmegu UjFWaVzO1cYp847J3rr4T97EGcdrP6UsHqD0zUHyTEUIImIDeix+GcG0baVe8XAl U9Ikwom3liUsWADOs4jJMDdWFfBU4Egzq4/DqslSbhVvFNE/R9SDLk+bOEtFK9Rk aixc7A95HP6H5WV4mTtNCZIBY8eqV3ITz+qMCrB6CMRviCHfEVa3BSe+4+XMRpW3 6Q== -----END CERTIFICATE-----Generated at Wed Nov 5 07:46:26 2025 by rpki-client