$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154123.roa File: AS154123.roa (raw, json) Hash identifier: fCOakdi9g4S0b8v/ffoI94ctLVvhq1k4w+Opa167mNY= Subject key identifier: E5:78:5E:31:D3:B2:93:57:A9:3D:04:5C:96:72:E8:33:15:1E:EB:9B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 127BCFE8678A72537AE7F5D758B8D5D6E617EC1E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154123.roa Signing time: Tue 19 Aug 2025 04:00:40 +0000 ROA not before: Tue 19 Aug 2025 03:55:40 +0000 ROA not after: Tue 18 Aug 2026 04:00:40 +0000 asID: 154123 IP address blocks: 2001:df5:eec0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:7b:cf:e8:67:8a:72:53:7a:e7:f5:d7:58:b8:d5:d6:e6:17:ec:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 19 03:55:40 2025 GMT Not After : Aug 18 04:00:40 2026 GMT Subject: CN=E5785E31D3B29357A93D045C9672E833151EEB9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c9:aa:68:f0:7e:8c:86:35:82:b9:ac:8b:ec: 30:c0:90:89:73:43:e3:fe:de:3a:bf:32:4c:f4:0e: c5:3e:82:2a:dd:8a:68:c5:ae:f9:5d:0c:f0:f0:c8: 30:1d:28:65:8a:35:e9:b6:a3:bf:b8:b9:53:2f:45: 56:95:62:9f:26:c2:53:da:88:ef:bd:00:3c:05:d5: 82:7b:81:df:b3:2f:ff:48:df:4c:34:00:83:51:e8: e9:9f:f6:24:46:2a:e1:25:46:d4:c0:d7:90:6a:e6: 09:9a:b3:0b:25:37:b3:49:14:7f:28:56:90:0d:55: ed:ba:ff:ea:c6:e8:ad:3b:aa:e0:ce:fa:89:78:d4: ea:81:88:c9:67:ed:a5:a4:ca:0d:44:dd:ec:ba:c1: e3:28:74:92:12:f7:2d:84:4b:02:8e:f4:30:d6:8c: 18:fa:58:ed:81:35:9c:2c:ae:13:5d:4a:db:39:d9: 94:e2:85:51:95:e0:ee:3a:58:6b:3b:3b:b0:58:a1: d5:76:4b:0e:c0:a9:ee:f2:9b:8c:88:3e:8a:c3:f1: 26:3a:6d:54:ce:9d:85:1d:b4:be:7e:84:74:7a:28: 24:f8:2d:84:a1:6e:ff:5b:9a:28:a2:73:b2:fa:ce: 6e:78:23:e1:76:a8:b4:7b:53:7f:2c:9f:18:cb:4f: 5e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:78:5E:31:D3:B2:93:57:A9:3D:04:5C:96:72:E8:33:15:1E:EB:9B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154123.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:eec0::/48 Signature Algorithm: sha256WithRSAEncryption 96:dd:0e:ef:35:3d:ba:ad:a6:82:a6:77:6c:63:9e:70:85:eb: e7:f1:42:3e:4b:f9:0a:89:75:94:b5:d7:36:a1:91:9f:f5:40: 6a:53:9c:33:7e:3b:62:08:27:db:e4:50:71:d5:bd:ed:aa:4b: 24:6d:32:87:9c:7f:79:61:54:23:11:fa:59:c8:6c:cb:1a:74: 74:09:64:c2:8c:95:e9:c5:33:17:aa:2b:f3:35:f0:46:35:6b: 6a:51:cb:1e:4a:2d:38:65:88:90:b8:59:f0:86:e9:55:28:63: 06:b2:ad:40:21:02:1c:10:e5:eb:a3:e4:28:48:25:0b:9e:d4: 9b:f0:44:be:d9:1e:d7:16:70:52:ca:23:1a:16:ee:74:f9:79: e3:d8:95:fc:e6:f2:23:6b:ff:20:65:d7:69:59:0a:d3:39:ec: ed:77:79:05:25:92:20:69:c6:8c:29:7f:77:bf:0d:00:78:5e: 56:98:15:ea:a9:3e:58:82:cf:8c:c7:56:76:2b:21:ce:4a:be: 45:d5:74:17:11:cd:41:95:cc:db:5f:66:44:27:eb:9a:d1:e5: c3:f3:73:1f:b1:90:19:7b:fd:ee:5a:d7:dc:64:a2:88:9c:ba: d0:4b:2a:d7:8f:e3:1a:91:37:b1:28:ff:b4:14:1a:f1:28:4f: e3:8f:ad:36 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUEnvP6GeKclN65/XXWLjV1uYX7B4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxOTAzNTU0MFoX DTI2MDgxODA0MDA0MFowMzExMC8GA1UEAxMoRTU3ODVFMzFEM0IyOTM1N0E5M0Qw NDVDOTY3MkU4MzMxNTFFRUI5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALfJqmjwfoyGNYK5rIvsMMCQiXND4/7eOr8yTPQOxT6CKt2KaMWu+V0M8PDI MB0oZYo16bajv7i5Uy9FVpVinybCU9qI770APAXVgnuB37Mv/0jfTDQAg1Ho6Z/2 JEYq4SVG1MDXkGrmCZqzCyU3s0kUfyhWkA1V7br/6sborTuq4M76iXjU6oGIyWft paTKDUTd7LrB4yh0khL3LYRLAo70MNaMGPpY7YE1nCyuE11K2znZlOKFUZXg7jpY azs7sFih1XZLDsCp7vKbjIg+isPxJjptVM6dhR20vn6EdHooJPgthKFu/1uaKKJz svrObngj4XaotHtTfyyfGMtPXqcCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBTleF4x 07KTV6k9BFyWcugzFR7rmzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDEyMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfXuwDANBgkqhkiG9w0BAQsFAAOCAQEAlt0O7zU9uq2mgqZ3 bGOecIXr5/FCPkv5Col1lLXXNqGRn/VAalOcM347Yggn2+RQcdW97apLJG0yh5x/ eWFUIxH6Wchsyxp0dAlkwoyV6cUzF6or8zXwRjVralHLHkotOGWIkLhZ8IbpVShj BrKtQCECHBDl66PkKEglC57Um/BEvtke1xZwUsojGhbudPl549iV/ObyI2v/IGXX aVkK0zns7Xd5BSWSIGnGjCl/d78NAHheVpgV6qk+WILPjMdWdishzkq+RdV0FxHN QZXM219mRCfrmtHlw/NzH7GQGXv97lrX3GSiiJy60Esq14/jGpE3sSj/tBQa8ShP 44+tNg== -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:54 2025 by rpki-client