$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154307.roa File: AS154307.roa (raw, json) Hash identifier: zmZoxKnmimQ827gGy3wgW+Wj6PkUGrJd0kyfZK41S9w= Subject key identifier: 58:74:50:2F:36:8D:EC:24:23:DB:0C:A9:D1:7B:81:28:CB:F9:92:81 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 6547B770A93D4C40CBC758347D496B4D8A7F9467 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154307.roa Signing time: Wed 22 Oct 2025 02:33:53 +0000 ROA not before: Wed 22 Oct 2025 02:28:53 +0000 ROA not after: Wed 21 Oct 2026 02:33:53 +0000 asID: 154307 IP address blocks: 138.252.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 08:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:47:b7:70:a9:3d:4c:40:cb:c7:58:34:7d:49:6b:4d:8a:7f:94:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Oct 22 02:28:53 2025 GMT Not After : Oct 21 02:33:53 2026 GMT Subject: CN=5874502F368DEC2423DB0CA9D17B8128CBF99281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:90:5c:c5:ed:d6:0e:90:cd:91:80:c7:fc:7c: 3e:e9:cd:61:7b:ee:05:30:99:52:65:5b:2c:52:c8: 98:e5:c1:d4:c8:a8:e3:e6:85:10:ba:91:43:96:0d: b9:8f:71:b6:20:a7:36:b2:0e:1c:f7:d3:74:ac:2f: 46:52:0e:84:c3:9f:cf:2d:11:4b:20:16:e3:63:ea: e1:83:a3:77:fb:38:f9:84:0d:f5:85:cc:e1:91:2e: 7b:d1:88:af:13:33:77:fe:5e:cd:28:4d:4e:1c:f7: 52:bf:07:22:0e:f3:aa:55:ec:26:57:18:55:18:5a: 49:87:cb:c9:2d:89:1d:48:74:95:bd:64:d0:94:87: 4d:7e:9d:fe:ab:b1:a8:07:53:d1:01:4b:bd:08:d0: dc:a3:a9:89:7c:1b:ab:a8:d5:e6:d1:81:a4:18:ab: 30:ff:dc:18:d1:75:6f:d0:ff:87:bb:41:11:c3:2c: 76:8f:97:62:98:f4:24:39:9f:9b:2c:43:12:1a:14: 87:8d:75:8b:bd:a4:4a:80:c4:f4:b1:be:75:ad:a4: 1e:f6:84:47:78:c1:2e:a5:a6:bf:f6:4a:54:c1:cc: 77:06:a8:bb:c7:54:57:fc:1a:86:c0:3a:bb:c1:84: b9:b1:2b:57:a8:d4:9d:2d:01:e1:93:00:8f:aa:be: c0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:74:50:2F:36:8D:EC:24:23:DB:0C:A9:D1:7B:81:28:CB:F9:92:81 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154307.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.252.70.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:d3:0e:20:2c:a9:7a:88:19:ed:2a:a3:38:c0:78:7d:71:f3: 43:97:d1:59:87:c3:c5:2a:77:88:5f:b5:86:5f:cc:44:01:09: 01:ac:23:c8:31:c4:49:47:06:c8:04:3a:1a:77:40:e6:1f:91: ef:bc:bf:a4:ff:db:fb:0d:92:59:d3:d5:a3:90:8b:67:45:18: 42:90:71:3a:50:aa:06:af:c1:d9:f2:ff:9a:a7:3e:f5:3b:68: be:28:a6:ab:99:ef:d6:d2:22:f4:b1:77:e6:69:c1:46:b8:74: e1:2e:4b:c6:09:36:6b:59:bc:4f:d7:5b:ca:4d:fe:3d:1a:a5: 39:ef:2f:d1:2a:6b:8d:cd:66:8d:8f:ae:97:d6:c9:86:7a:85: a5:95:a6:af:57:74:22:97:47:2a:b4:d4:c7:91:c9:8c:1f:a9: 07:47:d4:ef:aa:6c:e1:16:18:20:2a:d4:72:08:72:f3:95:83: 09:92:8a:90:96:85:36:91:f8:29:7f:84:5b:b4:c3:42:76:91: 5e:23:e0:c3:61:50:9e:42:9d:f7:ca:56:d4:07:05:e0:38:2b: cc:03:93:5c:70:04:de:8e:7e:05:07:1c:c3:8e:d5:b4:66:3e: f3:00:62:97:02:92:52:33:66:85:f7:0a:14:85:45:67:c0:13: 44:ce:2a:f1 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUZUe3cKk9TEDLx1g0fUlrTYp/lGcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTAyMjAyMjg1M1oX DTI2MTAyMTAyMzM1M1owMzExMC8GA1UEAxMoNTg3NDUwMkYzNjhERUMyNDIzREIw Q0E5RDE3QjgxMjhDQkY5OTI4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJqQXMXt1g6QzZGAx/x8PunNYXvuBTCZUmVbLFLImOXB1Mio4+aFELqRQ5YN uY9xtiCnNrIOHPfTdKwvRlIOhMOfzy0RSyAW42Pq4YOjd/s4+YQN9YXM4ZEue9GI rxMzd/5ezShNThz3Ur8HIg7zqlXsJlcYVRhaSYfLyS2JHUh0lb1k0JSHTX6d/qux qAdT0QFLvQjQ3KOpiXwbq6jV5tGBpBirMP/cGNF1b9D/h7tBEcMsdo+XYpj0JDmf myxDEhoUh411i72kSoDE9LG+da2kHvaER3jBLqWmv/ZKVMHMdwaou8dUV/wahsA6 u8GEubErV6jUnS0B4ZMAj6q+wOMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRYdFAv No3sJCPbDKnRe4Eoy/mSgTAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1NDMwNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIr8RjANBgkqhkiG9w0BAQsFAAOCAQEAatMOICypeogZ7SqjOMB4 fXHzQ5fRWYfDxSp3iF+1hl/MRAEJAawjyDHESUcGyAQ6GndA5h+R77y/pP/b+w2S WdPVo5CLZ0UYQpBxOlCqBq/B2fL/mqc+9Ttoviimq5nv1tIi9LF35mnBRrh04S5L xgk2a1m8T9dbyk3+PRqlOe8v0Sprjc1mjY+ul9bJhnqFpZWmr1d0IpdHKrTUx5HJ jB+pB0fU76ps4RYYICrUcghy85WDCZKKkJaFNpH4KX+EW7TDQnaRXiPgw2FQnkKd 98pW1AcF4DgrzAOTXHAE3o5+BQccw47VtGY+8wBilwKSUjNmhfcKFIVFZ8ATRM4q 8Q== -----END CERTIFICATE-----Generated at Wed Nov 5 07:38:23 2025 by rpki-client