$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153910.roa File: AS153910.roa (raw, json) Hash identifier: 0k8u/0itn5OqLY8Kwhf5aRBKVKP5/Povd9XfR+1qF7s= Subject key identifier: F0:2F:C6:FD:B0:21:E5:48:6E:04:A9:64:EC:8B:DE:CF:EE:8C:82:44 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5AED4587856FDDB7964A766D531251A1DAB1627D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153910.roa Signing time: Thu 12 Jun 2025 06:16:39 +0000 ROA not before: Thu 12 Jun 2025 06:11:39 +0000 ROA not after: Thu 11 Jun 2026 06:16:39 +0000 asID: 153910 IP address blocks: 2001:df5:93c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ed:45:87:85:6f:dd:b7:96:4a:76:6d:53:12:51:a1:da:b1:62:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 12 06:11:39 2025 GMT Not After : Jun 11 06:16:39 2026 GMT Subject: CN=F02FC6FDB021E5486E04A964EC8BDECFEE8C8244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:c9:04:77:b1:cd:2a:12:3f:dd:a4:3d:06:da: d3:a0:c1:46:fe:a5:6c:62:72:f2:0b:7c:48:2d:7d: 01:49:9d:44:4b:42:bc:a1:0e:5c:0f:84:21:41:af: 1c:83:51:23:66:6b:1c:3d:0a:4f:6f:81:f0:5e:09: d0:d8:1d:f2:61:08:8b:4a:f9:62:12:58:1d:88:66: 18:36:6c:56:86:c5:04:d4:e2:43:47:1e:ae:5c:41: dc:d4:70:fb:39:55:b1:6f:fa:e1:ff:95:a9:8e:60: 0e:bd:6e:cd:87:fc:4a:09:36:c5:7b:97:d2:9a:9c: c4:44:96:49:db:52:47:8a:55:00:c7:db:bb:12:07: 73:30:aa:2e:56:8b:d9:9f:50:7d:7c:de:ee:d4:e9: a4:1e:fd:94:bd:1b:89:e4:9f:1f:f9:23:9e:9c:d3: 22:77:26:fa:96:f9:91:b6:70:40:64:87:f9:91:06: 3d:81:c1:ce:4f:4c:45:16:72:ea:b6:fc:bb:ec:7d: a2:a6:05:cc:f7:59:4e:2b:ae:9d:42:d0:bd:4f:c8: be:b3:0f:f3:21:e0:75:f8:ff:8f:e3:0d:ec:f8:a0: ac:b6:05:f6:94:c3:ec:8e:49:8a:48:47:d4:a6:9b: c0:16:18:1f:2f:15:82:e5:32:b5:e8:1e:aa:19:81: 2d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2F:C6:FD:B0:21:E5:48:6E:04:A9:64:EC:8B:DE:CF:EE:8C:82:44 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153910.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:93c0::/48 Signature Algorithm: sha256WithRSAEncryption 10:91:c4:25:31:0c:a7:d8:13:fb:10:6b:df:be:f1:60:7e:3a: 8f:07:08:04:f1:59:27:71:df:57:87:31:d0:ca:7b:66:26:6b: 80:e9:5c:01:b6:b3:77:88:56:fd:07:49:a0:b9:51:d9:da:75: d1:00:ab:00:fc:00:de:c5:32:b1:7a:8c:9f:1a:8c:fe:db:3e: a5:8e:29:77:a2:26:a8:5c:3b:5b:ce:f3:94:c8:4f:3a:d2:d0: 4f:0c:a7:6c:eb:df:12:d7:17:43:e8:be:cf:db:9d:c6:64:66: 78:1c:1f:52:ee:34:70:20:65:5c:b9:e1:c3:1c:5b:ba:63:49: 40:00:e1:2b:00:79:5c:e1:17:1d:21:e3:8e:15:c2:6b:0d:2e: d6:5e:22:f5:43:b7:c5:bf:71:01:b9:9d:a7:61:7a:ec:c3:71: ac:76:70:e5:69:02:7f:c7:f1:5d:47:3b:fa:4f:03:10:2c:c0: 42:91:15:0e:52:64:cc:34:da:33:67:13:11:45:65:70:be:d4: fb:8f:13:93:26:cf:09:da:c6:a4:ab:a1:d5:74:38:21:b1:f6: aa:d3:00:fc:4b:37:b9:a7:d9:01:33:dd:66:cc:26:ca:18:43: 47:c2:28:f0:a5:42:d6:a8:d8:c4:9e:e5:0e:e6:83:d8:95:d6: 73:35:00:04 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUWu1Fh4Vv3beWSnZtUxJRodqxYn0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYxMjA2MTEzOVoX DTI2MDYxMTA2MTYzOVowMzExMC8GA1UEAxMoRjAyRkM2RkRCMDIxRTU0ODZFMDRB OTY0RUM4QkRFQ0ZFRThDODI0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPfJBHexzSoSP92kPQba06DBRv6lbGJy8gt8SC19AUmdREtCvKEOXA+EIUGv HINRI2ZrHD0KT2+B8F4J0Ngd8mEIi0r5YhJYHYhmGDZsVobFBNTiQ0cerlxB3NRw +zlVsW/64f+VqY5gDr1uzYf8Sgk2xXuX0pqcxESWSdtSR4pVAMfbuxIHczCqLlaL 2Z9QfXze7tTppB79lL0bieSfH/kjnpzTIncm+pb5kbZwQGSH+ZEGPYHBzk9MRRZy 6rb8u+x9oqYFzPdZTiuunULQvU/IvrMP8yHgdfj/j+MN7PigrLYF9pTD7I5JikhH 1KabwBYYHy8VguUytegeqhmBLXcCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBTwL8b9 sCHlSG4EqWTsi97P7oyCRDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzkxMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfWTwDANBgkqhkiG9w0BAQsFAAOCAQEAEJHEJTEMp9gT+xBr 377xYH46jwcIBPFZJ3HfV4cx0Mp7ZiZrgOlcAbazd4hW/QdJoLlR2dp10QCrAPwA 3sUysXqMnxqM/ts+pY4pd6ImqFw7W87zlMhPOtLQTwynbOvfEtcXQ+i+z9udxmRm eBwfUu40cCBlXLnhwxxbumNJQADhKwB5XOEXHSHjjhXCaw0u1l4i9UO3xb9xAbmd p2F67MNxrHZw5WkCf8fxXUc7+k8DECzAQpEVDlJkzDTaM2cTEUVlcL7U+48TkybP CdrGpKuh1XQ4IbH2qtMA/Es3uafZATPdZswmyhhDR8Io8KVC1qjYxJ7lDuaD2JXW czUABA== -----END CERTIFICATE-----Generated at Mon Jun 16 20:20:39 2025 by rpki-client