$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147173.roa File: AS147173.roa (raw, json) Hash identifier: 7uKZcBD81PG6Wso+g9Cq/SicO33KmxPY4+frV3/hAeE= Subject key identifier: 30:9C:94:7A:DC:B1:18:50:D0:7C:1B:9E:1C:EE:AE:16:7E:AA:0B:E8 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2E259F410F792A9CF7A55F2E14F20B08572F535C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147173.roa Signing time: Tue 04 Nov 2025 10:05:46 +0000 ROA not before: Tue 04 Nov 2025 10:00:46 +0000 ROA not after: Tue 03 Nov 2026 10:05:46 +0000 asID: 147173 IP address blocks: 2001:df6:3540::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 13:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:25:9f:41:0f:79:2a:9c:f7:a5:5f:2e:14:f2:0b:08:57:2f:53:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 4 10:00:46 2025 GMT Not After : Nov 3 10:05:46 2026 GMT Subject: CN=309C947ADCB11850D07C1B9E1CEEAE167EAA0BE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:04:be:ec:3b:f5:0f:24:56:5c:b2:1e:6b:cc: 47:f5:9f:57:0c:10:a6:5e:42:9c:16:80:76:f7:5f: 20:50:bc:5d:3f:6f:45:88:41:60:23:93:a9:90:4b: b7:98:ae:4c:74:29:d1:fa:30:cf:a2:c3:0a:da:fb: 01:ea:01:ba:c7:f0:26:cf:a3:57:cd:02:b7:3d:33: ac:b8:01:7c:30:c4:a4:d3:47:56:c4:73:46:8e:d2: 2f:60:0a:d7:d8:c1:34:d4:0c:b9:a4:85:5b:be:a9: 83:85:37:55:88:33:04:56:07:72:a6:6d:fc:ea:e4: c5:a4:35:b9:6b:b4:86:86:2f:68:bc:e4:9e:64:de: 6b:5f:ea:ac:0c:a9:14:3b:70:ea:66:89:fb:d4:35: 73:34:49:ff:d0:18:9b:16:d6:e8:b3:51:9c:02:d5: 1d:bb:3c:d6:e8:28:7e:56:39:a3:be:b6:a9:b3:91: 73:69:67:ca:31:f7:e9:71:20:a7:9b:4d:7e:bb:bd: 50:37:2d:57:71:c9:86:e4:84:17:e1:ab:6b:c2:0f: 2d:23:b4:ad:e7:a4:65:1c:e5:96:b6:a2:63:85:75: 1b:44:49:54:e6:6f:6f:3e:98:3e:6b:32:0d:5a:02: 3f:79:2a:c9:55:e7:56:88:cd:b8:dd:35:3d:51:6b: fe:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9C:94:7A:DC:B1:18:50:D0:7C:1B:9E:1C:EE:AE:16:7E:AA:0B:E8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147173.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:3540::/48 Signature Algorithm: sha256WithRSAEncryption 83:e0:c5:f1:7d:67:b5:15:db:a5:a8:53:a9:4f:9f:20:56:b4: 25:b4:62:8f:46:e2:73:b0:08:40:67:02:63:5f:3f:0a:1f:9a: 3a:52:3c:3c:1f:e3:02:c2:31:f2:41:72:68:77:ca:61:c5:df: fb:7d:9a:a4:06:22:c6:36:0b:35:2a:8d:43:04:83:bd:49:95: 41:d0:f1:04:e4:79:a9:ea:25:28:05:0c:f1:0f:f3:34:f1:9d: 06:3a:8e:00:a1:76:ff:5f:71:11:bb:ad:a4:1e:38:11:be:50: 81:06:35:f0:81:a1:42:04:9a:a1:82:61:ea:ff:a4:56:bd:ad: 2d:ff:fe:27:58:3d:db:7e:a7:f4:0c:56:37:b4:0a:39:24:7c: d7:f7:4e:44:f5:d6:fb:e6:cb:e6:03:c5:26:24:6d:1d:90:d5: 1c:9e:06:8d:07:8e:e0:c4:2f:34:1a:df:b3:ee:83:fb:d0:88: e2:70:0a:e1:24:ad:1b:02:42:9e:f0:0d:60:4b:31:d4:ec:01: 6f:c6:1f:9e:73:ca:7e:e6:07:3a:37:7b:aa:20:8d:5c:8c:cb: a3:89:04:84:04:73:85:16:72:4b:0c:10:a4:2a:40:c5:cb:8d: 6c:64:14:76:56:32:5f:ae:bb:93:d2:ce:94:e2:d3:f5:12:ca: 48:f4:80:17 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIULiWfQQ95Kpz3pV8uFPILCFcvU1wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEwNDEwMDA0NloX DTI2MTEwMzEwMDU0NlowMzExMC8GA1UEAxMoMzA5Qzk0N0FEQ0IxMTg1MEQwN0Mx QjlFMUNFRUFFMTY3RUFBMEJFODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKgEvuw79Q8kVlyyHmvMR/WfVwwQpl5CnBaAdvdfIFC8XT9vRYhBYCOTqZBL t5iuTHQp0fowz6LDCtr7AeoBusfwJs+jV80Ctz0zrLgBfDDEpNNHVsRzRo7SL2AK 19jBNNQMuaSFW76pg4U3VYgzBFYHcqZt/OrkxaQ1uWu0hoYvaLzknmTea1/qrAyp FDtw6maJ+9Q1czRJ/9AYmxbW6LNRnALVHbs81ugoflY5o762qbORc2lnyjH36XEg p5tNfru9UDctV3HJhuSEF+Gra8IPLSO0reekZRzllraiY4V1G0RJVOZvbz6YPmsy DVoCP3kqyVXnVojNuN01PVFr/iMCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQwnJR6 3LEYUNB8G54c7q4WfqoL6DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0NzE3My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfY1QDANBgkqhkiG9w0BAQsFAAOCAQEAg+DF8X1ntRXbpahT qU+fIFa0JbRij0bic7AIQGcCY18/Ch+aOlI8PB/jAsIx8kFyaHfKYcXf+32apAYi xjYLNSqNQwSDvUmVQdDxBOR5qeolKAUM8Q/zNPGdBjqOAKF2/19xEbutpB44Eb5Q gQY18IGhQgSaoYJh6v+kVr2tLf/+J1g9236n9AxWN7QKOSR81/dORPXW++bL5gPF JiRtHZDVHJ4GjQeO4MQvNBrfs+6D+9CI4nAK4SStGwJCnvANYEsx1OwBb8YfnnPK fuYHOjd7qiCNXIzLo4kEhARzhRZySwwQpCpAxcuNbGQUdlYyX667k9LOlOLT9RLK SPSAFw== -----END CERTIFICATE-----Generated at Thu Nov 6 05:52:11 2025 by rpki-client