$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153943.roa File: AS153943.roa (raw, json) Hash identifier: DdLTJpbiLNHu4iEUoqjwWDqH955NtV+u78L1jZzwwlI= Subject key identifier: D7:35:BC:FB:50:AB:C5:BA:D5:03:00:D9:FF:91:FA:8C:3B:3A:3A:71 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 799B0770A955AE6209CA479DFC81F6EBF92F88A5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153943.roa Signing time: Mon 04 Aug 2025 04:30:26 +0000 ROA not before: Mon 04 Aug 2025 04:25:26 +0000 ROA not after: Mon 03 Aug 2026 04:30:26 +0000 asID: 153943 IP address blocks: 103.154.72.0/23 maxlen: 24 2406:5540::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 13:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:9b:07:70:a9:55:ae:62:09:ca:47:9d:fc:81:f6:eb:f9:2f:88:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 4 04:25:26 2025 GMT Not After : Aug 3 04:30:26 2026 GMT Subject: CN=D735BCFB50ABC5BAD50300D9FF91FA8C3B3A3A71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7c:4b:10:b1:02:7c:24:f8:3c:74:e3:d2:91: c4:29:ae:ac:9d:6b:3c:9f:c0:7d:bf:c3:ed:c2:eb: dd:71:de:52:f6:5a:76:62:39:e6:f4:fa:22:a1:5b: 41:e2:89:01:12:82:9c:23:f8:82:24:5b:de:ca:87: e2:42:1f:6c:32:49:9c:f6:37:77:89:59:77:ea:c9: 74:27:cc:f6:8c:88:ab:45:32:34:82:aa:e3:6b:32: 3f:19:b3:16:93:2f:ae:55:92:80:76:86:7b:bc:53: 49:ab:0e:cf:19:fc:67:69:d4:90:59:78:ff:3c:67: c0:57:ca:4e:49:60:c0:95:0e:c9:94:03:81:46:81: 84:aa:f3:45:fd:a3:18:a0:ab:e3:fd:25:8a:e9:91: 68:52:b4:43:4b:bc:e6:71:77:0d:1a:25:86:6b:89: 07:32:eb:a5:95:01:25:7b:ac:54:85:7f:86:21:8b: c4:28:ce:97:c1:81:70:55:43:87:0e:a7:aa:9c:fb: 76:f0:b4:ff:d7:74:4d:06:c6:2b:03:98:5d:9f:5c: 55:e8:e2:40:13:49:55:e7:af:17:46:76:41:0b:59: af:db:4b:65:7e:4d:12:8c:59:d5:27:64:8a:84:c6: 64:83:4c:ad:fb:48:4f:45:cc:25:c2:bc:93:81:bc: 4a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:35:BC:FB:50:AB:C5:BA:D5:03:00:D9:FF:91:FA:8C:3B:3A:3A:71 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153943.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.154.72.0/23 IPv6: 2406:5540::/32 Signature Algorithm: sha256WithRSAEncryption 45:df:3c:cb:0a:44:6a:dc:94:3e:b2:a4:b0:73:8b:e6:35:02: 5b:c7:72:c1:01:78:40:d8:0b:31:9a:5c:72:93:e8:17:66:62: 32:ae:2a:db:e4:dd:13:16:08:43:75:fc:36:9a:3d:25:5b:83: b9:72:cd:65:49:5d:3e:97:24:bb:40:37:e0:09:ba:2e:93:9c: 6c:f3:a8:1a:70:62:42:f9:f8:28:22:ec:c9:d3:39:d8:6b:a8: 95:6a:ac:ec:9d:f3:aa:2e:f5:80:b3:7c:ca:23:e4:c2:72:d5: ab:e9:d9:81:56:f3:79:4f:bd:c8:eb:69:ad:56:87:2d:90:0c: b7:fa:0c:3f:e2:79:27:ce:29:75:45:d3:15:b6:cb:95:6e:c0: 54:0c:02:41:95:ed:11:fd:99:89:43:89:59:bb:66:15:55:fd: 7f:45:5c:92:b2:3a:cc:2b:70:c2:9f:a0:91:96:06:5e:76:52: ef:2a:ea:5e:47:53:70:02:6c:0c:a0:41:fe:c6:f2:70:80:49: b4:1e:72:bb:1f:23:46:ef:8a:a1:89:e0:af:6a:f3:24:95:ec: b9:e2:4c:55:14:81:d3:72:be:e5:d2:09:a6:e8:ec:31:16:d2: f2:c9:98:50:c6:d2:9f:64:7f:15:2b:d0:a5:0b:85:84:2e:a2: eb:32:8b:74 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUeZsHcKlVrmIJyked/IH26/kviKUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgwNDA0MjUyNloX DTI2MDgwMzA0MzAyNlowMzExMC8GA1UEAxMoRDczNUJDRkI1MEFCQzVCQUQ1MDMw MEQ5RkY5MUZBOEMzQjNBM0E3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALp8SxCxAnwk+Dx049KRxCmurJ1rPJ/Afb/D7cLr3XHeUvZadmI55vT6IqFb QeKJARKCnCP4giRb3sqH4kIfbDJJnPY3d4lZd+rJdCfM9oyIq0UyNIKq42syPxmz FpMvrlWSgHaGe7xTSasOzxn8Z2nUkFl4/zxnwFfKTklgwJUOyZQDgUaBhKrzRf2j GKCr4/0liumRaFK0Q0u85nF3DRolhmuJBzLrpZUBJXusVIV/hiGLxCjOl8GBcFVD hw6nqpz7dvC0/9d0TQbGKwOYXZ9cVejiQBNJVeevF0Z2QQtZr9tLZX5NEoxZ1Sdk ioTGZINMrftIT0XMJcK8k4G8StMCAwEAAaOCAd8wggHbMB0GA1UdDgQWBBTXNbz7 UKvFutUDANn/kfqMOzo6cTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1Mzk0My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAWeaSDANBAIAAjAHAwUAJAZVQDANBgkqhkiG9w0BAQsFAAOCAQEA Rd88ywpEatyUPrKksHOL5jUCW8dywQF4QNgLMZpccpPoF2ZiMq4q2+TdExYIQ3X8 Npo9JVuDuXLNZUldPpcku0A34Am6LpOcbPOoGnBiQvn4KCLsydM52GuolWqs7J3z qi71gLN8yiPkwnLVq+nZgVbzeU+9yOtprVaHLZAMt/oMP+J5J84pdUXTFbbLlW7A VAwCQZXtEf2ZiUOJWbtmFVX9f0VckrI6zCtwwp+gkZYGXnZS7yrqXkdTcAJsDKBB /sbycIBJtB5yux8jRu+KoYngr2rzJJXsueJMVRSB03K+5dIJpujsMRbS8smYUMbS n2R/FSvQpQuFhC6i6zKLdA== -----END CERTIFICATE-----Generated at Wed Aug 6 03:58:25 2025 by rpki-client