$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153485.roa File: AS153485.roa (raw, json) Hash identifier: 2a4hza8sRZUoIaYkodcEM+vKY1FaLALKos5pgjuKtps= Subject key identifier: 6C:E3:B3:BA:70:DD:6B:BC:91:B1:E9:17:25:55:9C:D0:D0:79:19:85 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 15E244D49ED33DBF6A3342DAD2C23F73C9B57A79 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153485.roa Signing time: Mon 04 Aug 2025 04:18:45 +0000 ROA not before: Mon 04 Aug 2025 04:13:45 +0000 ROA not after: Mon 03 Aug 2026 04:18:45 +0000 asID: 153485 IP address blocks: 2001:df4:b740::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 13:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:e2:44:d4:9e:d3:3d:bf:6a:33:42:da:d2:c2:3f:73:c9:b5:7a:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 4 04:13:45 2025 GMT Not After : Aug 3 04:18:45 2026 GMT Subject: CN=6CE3B3BA70DD6BBC91B1E91725559CD0D0791985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bf:74:cf:ce:50:62:55:83:5d:cb:b0:f8:0a: 0c:89:af:9b:bc:a6:06:e9:91:ed:41:1f:ae:bc:c0: 59:c3:3b:ab:3e:0b:43:10:d0:ec:8f:1c:6e:9f:48: a3:0f:6b:91:39:0a:9d:e6:7c:ee:a7:5d:5f:35:26: 8a:c6:1e:20:cd:11:2c:b9:dc:b6:65:cc:02:dc:d2: 05:83:c9:ed:86:2c:20:9b:c9:46:03:7f:4c:2b:4c: fd:ea:92:3b:27:28:65:bb:32:98:bd:f1:b7:25:d8: 7f:c2:7b:6f:c7:76:1c:fb:5c:4a:cc:cf:c8:b5:36: a3:12:5d:d0:3f:eb:3b:d3:eb:0c:97:93:83:37:ae: 4f:fb:01:0e:63:74:1c:82:52:e1:5a:35:8c:00:2f: 2f:30:6e:f1:42:92:95:2d:16:13:7b:1a:2a:55:c0: 25:79:4a:f6:0e:dc:de:84:d1:36:d8:f0:0f:b6:a9: 37:f4:8c:75:5a:d2:32:cf:7c:a0:f0:a3:55:d2:c2: 3f:97:cd:fb:30:66:a3:11:88:24:78:f7:39:9f:f9: 38:85:9d:bf:51:b1:dd:e6:42:f5:a4:d1:73:93:b6: 96:4c:7c:1d:c8:71:52:ea:7d:1a:a2:20:e3:9c:ed: 19:0f:6f:68:c7:ef:84:96:9d:d6:f7:19:55:e1:e1: 65:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E3:B3:BA:70:DD:6B:BC:91:B1:E9:17:25:55:9C:D0:D0:79:19:85 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153485.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:b740::/48 Signature Algorithm: sha256WithRSAEncryption 9c:5d:5f:19:92:10:15:b4:54:2c:59:8d:dc:b1:ae:60:be:3a: c0:fc:a1:ec:c7:7a:7c:50:f7:59:51:e1:31:45:a5:5e:27:fc: 62:56:f1:72:1b:e3:ce:70:28:1a:f4:e2:d0:5e:32:91:43:a8: cb:f6:d2:03:a0:ca:01:f2:e1:df:a1:67:ae:ff:08:e2:b1:0d: 6b:86:35:6f:1f:94:0a:e4:52:b2:4c:54:8a:4f:3e:c9:25:d9: d1:4f:c3:85:ee:dc:f7:fb:fb:ee:2c:fe:f9:98:1f:05:7f:84: 77:60:cd:50:aa:de:78:f9:5f:86:df:d9:e9:19:e7:36:ab:b9: f5:04:65:fb:fd:6e:20:b3:12:b1:f8:66:16:2e:7f:97:65:45: e2:4b:25:7e:0f:17:f6:af:57:53:fe:78:01:19:97:e8:f6:66: cc:b5:96:ce:de:80:5e:dc:a3:8f:14:3b:43:f7:f2:25:7f:5f: 16:28:94:08:c4:46:75:5b:62:4a:1c:8b:a0:d4:db:86:22:1f: 63:5a:7f:fd:50:cb:f5:5f:f3:1e:ac:d9:a7:2e:63:74:08:30: 07:c2:35:62:7a:67:b1:1c:a0:c1:e6:a8:07:7d:be:e6:8d:07: b9:41:6f:3b:64:95:7f:a0:d2:8e:d2:39:8a:f9:6c:c3:c8:2a: d8:0f:05:b9 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUFeJE1J7TPb9qM0La0sI/c8m1enkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgwNDA0MTM0NVoX DTI2MDgwMzA0MTg0NVowMzExMC8GA1UEAxMoNkNFM0IzQkE3MERENkJCQzkxQjFF OTE3MjU1NTlDRDBEMDc5MTk4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANW/dM/OUGJVg13LsPgKDImvm7ymBumR7UEfrrzAWcM7qz4LQxDQ7I8cbp9I ow9rkTkKneZ87qddXzUmisYeIM0RLLnctmXMAtzSBYPJ7YYsIJvJRgN/TCtM/eqS OycoZbsymL3xtyXYf8J7b8d2HPtcSszPyLU2oxJd0D/rO9PrDJeTgzeuT/sBDmN0 HIJS4Vo1jAAvLzBu8UKSlS0WE3saKlXAJXlK9g7c3oTRNtjwD7apN/SMdVrSMs98 oPCjVdLCP5fN+zBmoxGIJHj3OZ/5OIWdv1Gx3eZC9aTRc5O2lkx8HchxUup9GqIg 45ztGQ9vaMfvhJad1vcZVeHhZVMCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBRs47O6 cN1rvJGx6RclVZzQ0HkZhTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzQ4NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfS3QDANBgkqhkiG9w0BAQsFAAOCAQEAnF1fGZIQFbRULFmN 3LGuYL46wPyh7Md6fFD3WVHhMUWlXif8YlbxchvjznAoGvTi0F4ykUOoy/bSA6DK AfLh36Fnrv8I4rENa4Y1bx+UCuRSskxUik8+ySXZ0U/Dhe7c9/v77iz++ZgfBX+E d2DNUKreePlfht/Z6RnnNqu59QRl+/1uILMSsfhmFi5/l2VF4kslfg8X9q9XU/54 ARmX6PZmzLWWzt6AXtyjjxQ7Q/fyJX9fFiiUCMRGdVtiShyLoNTbhiIfY1p//VDL 9V/zHqzZpy5jdAgwB8I1YnpnsRygweaoB32+5o0HuUFvO2SVf6DSjtI5ivlsw8gq 2A8FuQ== -----END CERTIFICATE-----Generated at Wed Aug 6 05:51:29 2025 by rpki-client