$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153126.roa File: AS153126.roa (raw, json) Hash identifier: YJ/P1zWifunYM3oH77qZVnhdZuiYoGzGvwTEdAn6XG4= Subject key identifier: 63:71:CF:88:A4:7D:30:DD:49:E9:C8:09:9F:A7:2D:02:75:9C:82:19 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1AB1C0E10ADCE155C219AD6B3C2C3A8221D61146 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153126.roa Signing time: Mon 21 Jul 2025 01:56:07 +0000 ROA not before: Mon 21 Jul 2025 01:51:07 +0000 ROA not after: Mon 20 Jul 2026 01:56:07 +0000 asID: 153126 IP address blocks: 2001:df4:48c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:b1:c0:e1:0a:dc:e1:55:c2:19:ad:6b:3c:2c:3a:82:21:d6:11:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 21 01:51:07 2025 GMT Not After : Jul 20 01:56:07 2026 GMT Subject: CN=6371CF88A47D30DD49E9C8099FA72D02759C8219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ec:c9:4e:5d:81:8f:75:09:c1:6d:59:d1:20: b1:d0:f7:d8:74:39:cd:12:18:d2:cf:8d:28:6c:a1: 05:29:50:71:aa:e5:95:98:6e:ee:92:52:90:ac:26: 78:b0:53:4e:f1:cd:d9:e2:fc:65:8a:fb:c8:73:e7: 40:37:8f:f4:01:5b:f6:f1:ee:3a:0f:1d:5a:ed:fc: ae:6a:e3:4c:73:53:d3:1b:83:78:01:4f:f6:25:4b: d0:d0:5b:93:fb:e9:07:55:0b:6f:85:4b:78:5a:8b: 07:ca:49:9a:05:66:52:ad:e7:a2:9d:c4:1f:c9:00: 9e:3b:a5:3f:d8:c0:1a:fb:9e:e1:aa:54:4d:a2:8f: 2a:be:9b:59:aa:ac:13:d7:58:42:54:10:d2:63:8c: 59:8e:86:a8:3b:bc:c5:bb:90:d5:e0:b9:6b:23:1a: 84:c9:a3:14:7a:17:d3:e4:b7:c0:6e:17:92:4f:fa: 5d:3a:54:17:d5:25:2a:9f:a9:71:06:ce:1a:d7:2d: c4:e9:b4:89:52:a7:5d:6c:c3:44:e6:9d:73:3a:7a: 9b:71:21:b1:50:17:26:4b:99:df:0c:a3:27:c5:62: 9b:ab:ec:ff:ac:e1:51:91:3a:d9:ef:a8:41:4a:da: 54:20:b3:dc:39:e4:06:ee:30:70:da:f1:92:61:d0: 36:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:71:CF:88:A4:7D:30:DD:49:E9:C8:09:9F:A7:2D:02:75:9C:82:19 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153126.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:48c0::/48 Signature Algorithm: sha256WithRSAEncryption 76:b3:d0:84:a2:b8:8f:fb:3c:01:1e:09:da:9a:3c:fd:4c:77: 59:18:6d:d6:78:45:b0:47:37:bf:84:b9:9a:f9:28:80:98:3b: ea:c3:16:8b:74:f1:64:cc:a6:fc:25:16:cb:14:f8:c6:aa:c9: 3c:c1:8c:7e:a9:7c:31:43:90:04:a2:dd:fc:c8:68:82:c9:83: df:d3:9a:4f:ec:b1:e5:74:d4:1d:95:d5:d5:a3:c7:45:6e:4c: 0e:f1:09:4d:9e:56:35:09:8e:ce:3b:ee:ac:19:e3:40:74:ec: 31:9f:f4:20:3f:ab:38:15:4f:0f:9a:74:2f:75:b4:11:34:06: ca:6c:1d:c5:4e:be:ac:b4:10:e4:1d:a6:1c:89:c0:88:c1:e8: a8:d9:f6:9a:8a:fd:ab:9d:ee:51:9c:cf:94:e9:49:b5:31:2b: 5b:99:ef:b6:66:1b:44:4e:91:a5:33:8d:dd:c2:a3:2e:c8:2d: ef:3f:33:b7:34:b5:87:d7:d8:96:c8:97:04:53:27:ab:fa:76: 15:0e:c0:50:2b:c3:f9:e2:c5:83:3d:3e:10:e2:f9:93:18:41: 03:dd:3e:b9:f6:19:ba:d5:cd:b1:78:34:02:1e:b2:91:3b:5d: 72:37:43:d7:46:67:3a:f8:73:d7:0a:36:73:68:46:33:58:1d: 2a:45:c3:57 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUGrHA4Qrc4VXCGa1rPCw6giHWEUYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcyMTAxNTEwN1oX DTI2MDcyMDAxNTYwN1owMzExMC8GA1UEAxMoNjM3MUNGODhBNDdEMzBERDQ5RTlD ODA5OUZBNzJEMDI3NTlDODIxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPTsyU5dgY91CcFtWdEgsdD32HQ5zRIY0s+NKGyhBSlQcarllZhu7pJSkKwm eLBTTvHN2eL8ZYr7yHPnQDeP9AFb9vHuOg8dWu38rmrjTHNT0xuDeAFP9iVL0NBb k/vpB1ULb4VLeFqLB8pJmgVmUq3nop3EH8kAnjulP9jAGvue4apUTaKPKr6bWaqs E9dYQlQQ0mOMWY6GqDu8xbuQ1eC5ayMahMmjFHoX0+S3wG4Xkk/6XTpUF9UlKp+p cQbOGtctxOm0iVKnXWzDROadczp6m3EhsVAXJkuZ3wyjJ8Vim6vs/6zhUZE62e+o QUraVCCz3DnkBu4wcNrxkmHQNhkCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBRjcc+I pH0w3UnpyAmfpy0CdZyCGTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzEyNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfRIwDANBgkqhkiG9w0BAQsFAAOCAQEAdrPQhKK4j/s8AR4J 2po8/Ux3WRht1nhFsEc3v4S5mvkogJg76sMWi3TxZMym/CUWyxT4xqrJPMGMfql8 MUOQBKLd/MhogsmD39OaT+yx5XTUHZXV1aPHRW5MDvEJTZ5WNQmOzjvurBnjQHTs MZ/0ID+rOBVPD5p0L3W0ETQGymwdxU6+rLQQ5B2mHInAiMHoqNn2mor9q53uUZzP lOlJtTErW5nvtmYbRE6RpTON3cKjLsgt7z8ztzS1h9fYlsiXBFMnq/p2FQ7AUCvD +eLFgz0+EOL5kxhBA90+ufYZutXNsXg0Ah6ykTtdcjdD10ZnOvhz1wo2c2hGM1gd KkXDVw== -----END CERTIFICATE-----Generated at Mon Nov 3 19:33:19 2025 by rpki-client