$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133357.roa File: AS133357.roa (raw, json) Hash identifier: YCBBZnAFw5RcxbcnUx1cH7dl0TrqIMHFlDCuMJsZ2Z8= Subject key identifier: 81:6A:7A:4F:15:CC:3F:18:24:09:3B:4B:4A:2F:D4:D7:B4:58:07:AB Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0EE28D3353081D352AE9DFCF8F0049C42632DBE9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133357.roa Signing time: Mon 14 Jul 2025 02:30:06 +0000 ROA not before: Mon 14 Jul 2025 02:25:06 +0000 ROA not after: Mon 13 Jul 2026 02:30:06 +0000 asID: 133357 IP address blocks: 2001:df3:fbc0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:e2:8d:33:53:08:1d:35:2a:e9:df:cf:8f:00:49:c4:26:32:db:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 14 02:25:06 2025 GMT Not After : Jul 13 02:30:06 2026 GMT Subject: CN=816A7A4F15CC3F1824093B4B4A2FD4D7B45807AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ac:88:42:4a:59:ea:65:67:76:88:ec:90:96: 77:f7:33:c4:3a:3f:20:5b:8f:17:89:bd:05:95:c4: 17:44:e6:8b:44:20:21:19:a5:28:58:e0:08:d7:40: 1d:e2:b0:53:e1:75:a4:bc:a6:d6:8d:06:e4:cd:a9: 99:18:4a:a4:62:19:db:44:82:25:e8:72:94:8d:15: 42:55:ea:a6:4a:91:ab:d4:a0:3a:74:4f:c9:3a:30: c9:d0:7f:11:60:6d:07:51:9f:b3:f5:35:2c:82:d1: 44:86:0d:94:14:08:6a:1f:9c:77:59:63:d2:c0:93: 23:f1:1b:dc:e2:9d:27:10:51:6d:ea:2c:e6:df:fa: cc:61:78:4f:69:a9:5a:8c:03:f4:7b:f8:5f:fe:a8: 76:09:79:cf:97:04:91:ef:b3:e2:05:6a:c6:ce:fc: 90:fb:4c:d9:48:de:36:ed:7c:8f:be:fd:ab:f5:20: 6a:2e:88:f5:ee:5a:85:f7:8d:b8:a9:3e:4c:5a:40: c7:12:fc:40:6a:e1:6e:1d:df:00:38:60:b5:2e:b4: c3:d1:5a:1c:b8:b2:17:81:c4:38:8f:53:aa:6f:45: 11:a6:23:18:dc:44:16:11:53:16:27:a5:cd:c4:9a: da:e7:9d:a8:18:3b:42:66:1f:36:af:b3:df:f0:4d: aa:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6A:7A:4F:15:CC:3F:18:24:09:3B:4B:4A:2F:D4:D7:B4:58:07:AB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133357.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:fbc0::/48 Signature Algorithm: sha256WithRSAEncryption 4b:4a:33:01:87:da:7b:6e:1d:25:84:2d:71:0a:21:14:41:f4: 0e:61:ff:d8:ca:4e:94:85:f2:d9:78:45:8e:1d:24:7c:f1:1d: f3:48:be:9e:a8:87:52:8e:06:77:3f:22:a7:1d:7b:e7:3d:85: f1:a2:ce:3c:92:5e:ed:e9:70:bd:95:16:11:0d:d8:e6:c1:a2: 8c:5b:aa:00:6f:06:0f:b6:26:fd:1c:75:8a:32:5c:b0:51:bd: 74:45:1a:1d:22:fa:59:d6:65:c3:04:12:99:23:de:ad:c1:77: a2:6e:5e:a3:da:ba:68:8a:8d:a2:bb:2e:07:17:9a:62:85:73: 14:3b:9b:ff:3f:de:a7:c7:32:9a:a2:35:8b:2c:e6:89:35:aa: b8:d3:6b:79:a6:0a:84:74:26:26:da:f5:73:9d:ae:1f:50:d0: 7d:a8:af:1c:1d:ca:30:8b:0f:f9:e8:16:0f:8f:3c:ef:c5:8a: 97:3e:f3:a8:d1:aa:76:bb:bf:c9:00:b0:29:84:89:0d:31:53: a3:42:ea:81:b6:c7:e5:0e:7a:aa:02:ec:12:0a:9e:40:c0:d8: 3c:27:f5:b5:33:64:df:c8:13:59:b5:cc:34:cd:ee:5d:85:b3: 33:56:17:76:df:f4:17:94:35:49:1d:68:ee:40:11:4f:28:eb: 0f:6c:af:4c -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUDuKNM1MIHTUq6d/PjwBJxCYy2+kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcxNDAyMjUwNloX DTI2MDcxMzAyMzAwNlowMzExMC8GA1UEAxMoODE2QTdBNEYxNUNDM0YxODI0MDkz QjRCNEEyRkQ0RDdCNDU4MDdBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALesiEJKWeplZ3aI7JCWd/czxDo/IFuPF4m9BZXEF0Tmi0QgIRmlKFjgCNdA HeKwU+F1pLym1o0G5M2pmRhKpGIZ20SCJehylI0VQlXqpkqRq9SgOnRPyTowydB/ EWBtB1Gfs/U1LILRRIYNlBQIah+cd1lj0sCTI/Eb3OKdJxBRbeos5t/6zGF4T2mp WowD9Hv4X/6odgl5z5cEke+z4gVqxs78kPtM2UjeNu18j779q/Ugai6I9e5ahfeN uKk+TFpAxxL8QGrhbh3fADhgtS60w9FaHLiyF4HEOI9Tqm9FEaYjGNxEFhFTFiel zcSa2uedqBg7QmYfNq+z3/BNqpsCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBSBanpP Fcw/GCQJO0tKL9TXtFgHqzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzMzM1Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfP7wDANBgkqhkiG9w0BAQsFAAOCAQEAS0ozAYfae24dJYQt cQohFEH0DmH/2MpOlIXy2XhFjh0kfPEd80i+nqiHUo4Gdz8ipx175z2F8aLOPJJe 7elwvZUWEQ3Y5sGijFuqAG8GD7Ym/Rx1ijJcsFG9dEUaHSL6WdZlwwQSmSPercF3 om5eo9q6aIqNorsuBxeaYoVzFDub/z/ep8cymqI1iyzmiTWquNNreaYKhHQmJtr1 c52uH1DQfaivHB3KMIsP+egWD48878WKlz7zqNGqdru/yQCwKYSJDTFTo0LqgbbH 5Q56qgLsEgqeQMDYPCf1tTNk38gTWbXMNM3uXYWzM1YXdt/0F5Q1SR1o7kARTyjr D2yvTA== -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:59 2025 by rpki-client