$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154303.roa File: AS154303.roa (raw, json) Hash identifier: RzPU4PJoFdKG1oOxnSJvzK2xs7GpPNMI96Sy9gzNtOM= Subject key identifier: 10:6E:3A:CA:F8:87:E8:06:A8:5A:3D:E2:EE:13:3C:76:15:54:A4:1F Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 60546287A7E48B427058B59D6B14A3485E2FC58B Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154303.roa Signing time: Thu 23 Oct 2025 01:17:28 +0000 ROA not before: Thu 23 Oct 2025 01:12:28 +0000 ROA not after: Thu 22 Oct 2026 01:17:28 +0000 asID: 154303 IP address blocks: 160.25.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:54:62:87:a7:e4:8b:42:70:58:b5:9d:6b:14:a3:48:5e:2f:c5:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Oct 23 01:12:28 2025 GMT Not After : Oct 22 01:17:28 2026 GMT Subject: CN=106E3ACAF887E806A85A3DE2EE133C761554A41F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:60:71:25:25:21:17:df:b7:73:02:bd:44:c0: 9b:30:62:b8:a3:b0:f8:01:ec:f0:75:2b:12:24:98: b5:32:dd:db:6d:b7:40:25:79:8d:66:18:c6:16:41: dd:ec:c1:dd:58:ad:fc:a2:81:80:f1:69:a3:60:44: 14:56:5a:64:b8:f8:01:81:7e:a3:53:4e:a3:8b:63: f3:36:ac:fc:d5:43:1b:9a:5d:02:17:00:fa:56:6d: a5:0e:73:3c:c1:af:b0:1b:86:72:30:2a:fa:44:ca: 5f:01:c9:7d:ef:93:cc:bd:9c:c4:f9:22:35:2c:c6: ef:fd:09:90:4e:d3:b0:70:11:d9:57:ed:13:2d:a8: 4a:65:f1:17:15:04:9d:e7:ea:7f:fb:55:68:e4:5c: ac:b4:cc:13:6f:d1:f6:9a:49:ee:52:81:a7:be:18: c3:29:5a:aa:e7:d9:bc:8b:69:3e:32:65:b2:18:f1: 2b:a5:72:b4:0d:26:07:20:93:af:bb:cf:f9:01:b3: 72:19:c8:85:5d:42:d8:dd:f9:03:ce:0a:61:c0:ad: 6c:8c:39:3c:2c:8f:71:6f:32:65:f5:53:2e:30:03: b4:3e:ce:cc:ba:12:a3:fe:54:43:28:2b:d6:9f:16: ca:e8:50:b3:d2:5e:d1:75:9c:99:fa:da:f6:1d:25: 3b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6E:3A:CA:F8:87:E8:06:A8:5A:3D:E2:EE:13:3C:76:15:54:A4:1F X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154303.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.202.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:4f:54:ad:4f:72:13:e0:9f:8b:b5:1f:aa:71:3c:2a:c2:41: 8f:d4:15:d4:0f:07:13:80:62:0a:45:77:dd:50:c6:f5:d1:9e: e8:c9:f7:cc:2c:ad:9b:c8:10:82:0d:d0:e5:1e:0d:90:1c:b2: 8b:5e:56:86:25:83:d1:85:72:b9:2a:98:b0:ac:ac:6e:64:2f: 2a:72:56:a7:0b:e6:44:b6:d9:28:87:95:f9:77:f8:1c:e8:c2: a0:9b:87:d1:a6:d7:54:25:5f:74:5c:2b:cc:c8:c7:c2:3d:4e: cd:0e:fc:da:96:1c:48:b2:a1:10:91:64:92:f3:50:ce:10:c5: 27:a4:f8:5c:7b:d9:dc:05:c4:fc:22:51:92:34:a7:da:db:44: 6f:94:5a:45:4d:50:e3:d8:bf:43:58:bf:c5:91:a6:63:24:4a: 97:4a:66:64:d4:ce:92:f4:04:d3:f4:1f:43:3a:11:d2:cb:e3: 3c:f6:c1:99:10:60:e9:df:58:64:03:ee:a3:f6:5d:03:ee:1e: 0c:72:09:b9:d2:87:c8:43:eb:88:9b:05:77:98:6a:4b:d3:0e: db:3f:cc:19:64:40:81:d4:31:2d:6b:c8:13:df:75:d9:49:a4: fe:c6:bb:63:40:df:6a:ee:85:12:f9:7b:b6:d3:24:00:e6:b0: 8c:22:18:23 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUYFRih6fki0JwWLWdaxSjSF4vxYswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTAyMzAxMTIyOFoX DTI2MTAyMjAxMTcyOFowMzExMC8GA1UEAxMoMTA2RTNBQ0FGODg3RTgwNkE4NUEz REUyRUUxMzNDNzYxNTU0QTQxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMBgcSUlIRfft3MCvUTAmzBiuKOw+AHs8HUrEiSYtTLd2223QCV5jWYYxhZB 3ezB3Vit/KKBgPFpo2BEFFZaZLj4AYF+o1NOo4tj8zas/NVDG5pdAhcA+lZtpQ5z PMGvsBuGcjAq+kTKXwHJfe+TzL2cxPkiNSzG7/0JkE7TsHAR2VftEy2oSmXxFxUE nefqf/tVaORcrLTME2/R9ppJ7lKBp74YwylaqufZvItpPjJlshjxK6VytA0mByCT r7vP+QGzchnIhV1C2N35A84KYcCtbIw5PCyPcW8yZfVTLjADtD7OzLoSo/5UQygr 1p8WyuhQs9Je0XWcmfra9h0lO10CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQQbjrK +IfoBqhaPeLuEzx2FVSkHzAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1NDMwMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKAZyjANBgkqhkiG9w0BAQsFAAOCAQEALk9UrU9yE+Cfi7UfqnE8 KsJBj9QV1A8HE4BiCkV33VDG9dGe6Mn3zCytm8gQgg3Q5R4NkByyi15WhiWD0YVy uSqYsKysbmQvKnJWpwvmRLbZKIeV+Xf4HOjCoJuH0abXVCVfdFwrzMjHwj1OzQ78 2pYcSLKhEJFkkvNQzhDFJ6T4XHvZ3AXE/CJRkjSn2ttEb5RaRU1Q49i/Q1i/xZGm YyRKl0pmZNTOkvQE0/QfQzoR0svjPPbBmRBg6d9YZAPuo/ZdA+4eDHIJudKHyEPr iJsFd5hqS9MO2z/MGWRAgdQxLWvIE9912Umk/sa7Y0Dfau6FEvl7ttMkAOawjCIY Iw== -----END CERTIFICATE-----Generated at Wed Nov 5 00:35:45 2025 by rpki-client