$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153946.roa File: AS153946.roa (raw, json) Hash identifier: j1sjiTLReaSSQOy+SdQzDXgbvlR5iNk9I1nhoN14Suo= Subject key identifier: C3:54:52:DF:86:5B:A9:C6:A0:91:6B:6B:93:70:8B:DC:B3:05:66:BF Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6F43B124788985D9469FE300121DBA4F4DF79F70 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153946.roa Signing time: Wed 23 Jul 2025 03:33:25 +0000 ROA not before: Wed 23 Jul 2025 03:28:25 +0000 ROA not after: Wed 22 Jul 2026 03:33:25 +0000 asID: 153946 IP address blocks: 2001:df5:97c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:43:b1:24:78:89:85:d9:46:9f:e3:00:12:1d:ba:4f:4d:f7:9f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 23 03:28:25 2025 GMT Not After : Jul 22 03:33:25 2026 GMT Subject: CN=C35452DF865BA9C6A0916B6B93708BDCB30566BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9a:04:f7:ee:a0:d5:ab:f1:85:20:42:eb:7e: 9e:1e:e0:d7:fb:0d:98:9f:31:d7:61:18:d6:57:54: af:a4:40:36:c4:f3:08:29:bf:3e:8c:16:c5:79:e7: 45:0f:f8:62:23:34:a9:f1:92:41:93:41:98:ee:6d: dc:55:26:d7:45:81:51:c0:cc:d6:3d:66:7b:5e:f8: e1:17:48:b7:20:d2:81:03:16:c9:a3:be:cb:40:f2: 86:c9:e0:a7:0e:91:4e:35:61:6e:e8:a5:31:50:3f: f7:10:c3:ff:97:9d:27:48:e8:ed:fa:0d:0a:23:f4: a1:b2:0e:62:2b:6b:38:65:3e:0a:95:b6:91:ff:b7: e3:97:54:08:07:c4:6a:88:df:c8:fc:16:3d:89:08: fa:85:84:a7:5b:03:4d:90:38:08:b7:25:e5:a6:65: 11:37:56:7c:71:de:65:a8:38:c5:89:68:97:ed:0d: 9a:4b:81:60:43:9e:4b:23:18:f8:1f:2f:3e:b8:20: 4e:0a:8b:83:4e:57:7f:07:92:0a:70:45:5f:8a:ec: cb:04:e9:02:42:64:66:8a:e0:0c:f0:fe:01:e6:f5: 07:28:c8:2f:7a:26:38:5b:77:40:55:64:82:a0:b2: dd:21:04:36:e9:f4:0e:a0:f5:00:0d:d1:db:37:43: 79:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:54:52:DF:86:5B:A9:C6:A0:91:6B:6B:93:70:8B:DC:B3:05:66:BF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153946.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:97c0::/48 Signature Algorithm: sha256WithRSAEncryption 09:16:87:49:de:04:4c:e9:83:f8:fb:60:2a:74:1c:d0:6a:6e: d1:03:1b:ff:72:2e:4f:e4:69:3b:d0:ed:c8:b3:eb:e2:8e:96: 1e:f7:75:8a:d8:9f:a8:35:0e:c3:85:60:6a:57:57:03:c4:7e: ff:21:e5:de:bd:4a:7d:b3:f7:fe:d6:b7:b2:4e:ad:56:45:b0: f1:98:a2:a0:c0:06:46:f0:e1:73:a8:f7:04:b6:27:80:5b:c6: 36:11:17:b8:1c:d3:21:42:49:9c:57:40:9b:e3:e0:f2:eb:4b: ff:28:85:ce:bc:4a:c7:de:3c:89:37:e2:c7:88:13:c7:e4:ab: 6b:d4:76:d1:8e:b1:cc:c6:76:29:db:23:2f:cb:2c:3a:a9:42: 88:c3:bb:11:13:c3:fa:70:d8:d5:8e:a4:46:88:e3:ff:5a:37: 39:cd:32:e6:65:f5:f6:2e:57:a2:8f:9a:66:0f:5f:01:9c:ce: ce:fc:ec:c0:97:db:98:68:75:2f:c0:c7:12:82:2b:44:3f:b7: 3f:3d:94:76:2c:c1:bc:45:b4:9b:a4:18:45:fc:ba:27:22:02: 71:fc:fa:b6:e1:02:f5:0e:c1:4d:de:0a:16:ac:10:08:24:a6: 2b:e5:af:b7:b2:25:29:e6:21:9f:73:08:e1:1b:76:ed:66:7e: 5c:c4:a7:f7 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUb0OxJHiJhdlGn+MAEh26T033n3AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcyMzAzMjgyNVoX DTI2MDcyMjAzMzMyNVowMzExMC8GA1UEAxMoQzM1NDUyREY4NjVCQTlDNkEwOTE2 QjZCOTM3MDhCRENCMzA1NjZCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM+aBPfuoNWr8YUgQut+nh7g1/sNmJ8x12EY1ldUr6RANsTzCCm/PowWxXnn RQ/4YiM0qfGSQZNBmO5t3FUm10WBUcDM1j1me1744RdItyDSgQMWyaO+y0Dyhsng pw6RTjVhbuilMVA/9xDD/5edJ0jo7foNCiP0obIOYitrOGU+CpW2kf+345dUCAfE aojfyPwWPYkI+oWEp1sDTZA4CLcl5aZlETdWfHHeZag4xYlol+0NmkuBYEOeSyMY +B8vPrggTgqLg05XfweSCnBFX4rsywTpAkJkZorgDPD+Aeb1ByjIL3omOFt3QFVk gqCy3SEENun0DqD1AA3R2zdDeZMCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBTDVFLf hlupxqCRa2uTcIvcswVmvzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1Mzk0Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfWXwDANBgkqhkiG9w0BAQsFAAOCAQEACRaHSd4ETOmD+Ptg KnQc0Gpu0QMb/3IuT+RpO9DtyLPr4o6WHvd1itifqDUOw4VgaldXA8R+/yHl3r1K fbP3/ta3sk6tVkWw8ZiioMAGRvDhc6j3BLYngFvGNhEXuBzTIUJJnFdAm+Pg8utL /yiFzrxKx948iTfix4gTx+Sra9R20Y6xzMZ2KdsjL8ssOqlCiMO7ERPD+nDY1Y6k Rojj/1o3Oc0y5mX19i5Xoo+aZg9fAZzOzvzswJfbmGh1L8DHEoIrRD+3Pz2UdizB vEW0m6QYRfy6JyICcfz6tuEC9Q7BTd4KFqwQCCSmK+Wvt7IlKeYhn3MI4Rt27WZ+ XMSn9w== -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:41 2025 by rpki-client