$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153903.roa File: AS153903.roa (raw, json) Hash identifier: vawqTkYgIO6uyyD3QoXJKQKI+lPzkyDK/BYKCveZThY= Subject key identifier: 17:CA:43:6D:B6:54:3B:CE:A3:76:98:4C:7F:84:A4:4A:AB:04:14:A4 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: BD065C3B297E9C7CFF230C080A1901BFD21DAF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153903.roa Signing time: Tue 28 Oct 2025 03:30:00 +0000 ROA not before: Tue 28 Oct 2025 03:25:00 +0000 ROA not after: Tue 27 Oct 2026 03:30:00 +0000 asID: 153903 IP address blocks: 2001:df5:8740::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: bd:06:5c:3b:29:7e:9c:7c:ff:23:0c:08:0a:19:01:bf:d2:1d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 28 03:25:00 2025 GMT Not After : Oct 27 03:30:00 2026 GMT Subject: CN=17CA436DB6543BCEA376984C7F84A44AAB0414A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a5:e3:67:16:c1:1e:62:6e:b9:48:d9:f7:86: fb:56:56:60:e4:26:7d:1b:4c:39:f3:cd:f3:63:89: 22:97:8a:89:1f:31:bc:34:b0:3b:b9:3b:74:f8:48: 87:18:6d:28:bb:46:5e:1c:ae:45:4f:0a:87:6c:f9: 1d:f7:54:80:62:34:31:ae:81:e6:3d:77:c4:17:22: d2:ea:97:fb:cb:67:92:0f:b4:f2:d5:ca:91:99:83: de:b7:91:5a:0f:24:84:8c:8a:cd:27:ea:45:14:53: 05:ab:c9:d2:da:a8:ef:07:41:c6:df:2d:05:e8:ad: ce:e7:fc:dc:1c:9a:ff:16:ad:b7:0d:6f:95:a3:72: f0:c9:f1:e8:6a:9c:e9:06:2c:3d:74:3f:c8:fe:6d: 83:94:02:e3:7f:01:df:a0:d6:b1:88:e6:e4:d7:b8: b1:56:d0:94:54:fe:e1:7b:ca:e2:f9:0c:bc:e0:9c: 3e:09:b1:5a:e6:65:d5:19:39:91:f3:8d:49:cb:06: 5d:cd:4a:97:b0:6c:a1:bb:48:5d:f3:53:a3:63:5e: 3c:0a:6e:ec:2a:ea:ef:25:8f:a7:2e:ed:1b:13:50: 60:b5:2e:96:9c:da:d0:3c:0c:bf:f8:2b:d3:4d:08: 44:0f:ba:19:dc:4e:07:93:f7:a3:f3:16:bf:fc:1b: ad:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:CA:43:6D:B6:54:3B:CE:A3:76:98:4C:7F:84:A4:4A:AB:04:14:A4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153903.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:8740::/48 Signature Algorithm: sha256WithRSAEncryption 88:b6:11:11:85:46:ba:e3:09:50:25:8f:79:56:73:ce:40:6a: bb:46:26:b1:fc:2f:66:43:ef:8a:18:d7:46:95:46:59:88:7f: 79:2f:9a:ee:87:d8:ac:55:93:49:1a:35:80:d8:43:98:cb:0f: 22:04:01:da:c1:bb:a9:71:c5:43:79:1c:bf:e4:90:29:be:e6: ca:7e:43:2e:21:3f:3b:69:de:08:32:8b:a3:7e:ca:58:0b:ac: ba:bc:8f:81:75:99:83:53:ea:f1:6e:a5:6e:6c:31:bd:26:e0: a3:83:b3:5e:51:dd:93:8e:43:b3:ca:fd:a6:dc:db:a0:2e:86: d5:61:99:f5:96:44:13:61:a0:0b:16:43:ba:04:74:96:8d:f1: 23:5b:c4:32:41:a2:b9:f3:cf:51:6e:40:50:50:dc:a6:fa:dc: 93:e2:2b:78:d7:0e:5f:1f:9a:eb:20:2d:68:e5:96:5e:82:18: c8:d5:72:c2:76:11:29:b1:df:97:53:1a:c3:73:3e:69:6b:0d: 1f:63:41:05:90:bb:e3:20:19:47:fa:c6:23:ab:51:b8:39:1f: 2d:a7:06:70:0b:23:49:62:9d:7f:d4:06:08:22:d7:bd:3d:6a: 47:41:fe:2f:9b:5e:14:b7:76:f0:7e:5d:79:40:0c:df:ca:7c: 5c:4d:03:b5 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUAL0GXDspfpx8/yMMCAoZAb/SHa8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAyODAzMjUwMFoX DTI2MTAyNzAzMzAwMFowMzExMC8GA1UEAxMoMTdDQTQzNkRCNjU0M0JDRUEzNzY5 ODRDN0Y4NEE0NEFBQjA0MTRBNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOKl42cWwR5ibrlI2feG+1ZWYOQmfRtMOfPN82OJIpeKiR8xvDSwO7k7dPhI hxhtKLtGXhyuRU8Kh2z5HfdUgGI0Ma6B5j13xBci0uqX+8tnkg+08tXKkZmD3reR Wg8khIyKzSfqRRRTBavJ0tqo7wdBxt8tBeitzuf83Bya/xattw1vlaNy8Mnx6Gqc 6QYsPXQ/yP5tg5QC438B36DWsYjm5Ne4sVbQlFT+4XvK4vkMvOCcPgmxWuZl1Rk5 kfONScsGXc1Kl7BsobtIXfNTo2NePApu7Crq7yWPpy7tGxNQYLUulpza0DwMv/gr 000IRA+6GdxOB5P3o/MWv/wbrRsCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQXykNt tlQ7zqN2mEx/hKRKqwQUpDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzkwMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfWHQDANBgkqhkiG9w0BAQsFAAOCAQEAiLYREYVGuuMJUCWP eVZzzkBqu0YmsfwvZkPvihjXRpVGWYh/eS+a7ofYrFWTSRo1gNhDmMsPIgQB2sG7 qXHFQ3kcv+SQKb7myn5DLiE/O2neCDKLo37KWAusuryPgXWZg1Pq8W6lbmwxvSbg o4OzXlHdk45Ds8r9ptzboC6G1WGZ9ZZEE2GgCxZDugR0lo3xI1vEMkGiufPPUW5A UFDcpvrck+IreNcOXx+a6yAtaOWWXoIYyNVywnYRKbHfl1Maw3M+aWsNH2NBBZC7 4yAZR/rGI6tRuDkfLacGcAsjSWKdf9QGCCLXvT1qR0H+L5teFLd28H5deUAM38p8 XE0DtQ== -----END CERTIFICATE-----Generated at Tue Nov 4 02:00:30 2025 by rpki-client