$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154154.roa File: AS154154.roa (raw, json) Hash identifier: Xm4YUx7+Fks7Ygk7R/kA1NAJAottqbn+RDxKKNznEXg= Subject key identifier: 5F:9D:26:85:3F:00:E1:0D:4D:81:7B:0A:DE:3C:99:55:04:3F:80:5A Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 02E8932E19683153A7A991D9879F0EEB8CAF09E4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154154.roa Signing time: Sat 25 Oct 2025 06:54:24 +0000 ROA not before: Sat 25 Oct 2025 06:49:24 +0000 ROA not after: Sat 24 Oct 2026 06:54:24 +0000 asID: 154154 IP address blocks: 203.11.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:e8:93:2e:19:68:31:53:a7:a9:91:d9:87:9f:0e:eb:8c:af:09:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 25 06:49:24 2025 GMT Not After : Oct 24 06:54:24 2026 GMT Subject: CN=5F9D26853F00E10D4D817B0ADE3C9955043F805A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:95:3d:ae:8a:dd:fd:97:86:fe:8b:d6:53:2c: a5:e0:55:98:86:6d:d2:e4:c7:c6:06:83:9c:cd:44: 62:25:7f:64:0c:b0:20:67:18:97:0f:ae:6a:d2:cf: 91:46:4a:20:fd:91:48:0f:43:00:55:07:9e:c6:04: f5:71:3b:8d:9f:7b:04:c7:08:74:8d:e4:14:fb:b8: 3b:9c:80:0e:a2:60:7d:84:eb:fa:07:33:71:4d:86: 8a:cb:44:c8:b7:43:6a:b2:df:db:c3:ac:e9:c1:7b: 08:9d:fb:63:8c:78:4a:4f:83:ed:df:65:27:06:f6: c6:3e:9e:2b:91:29:e9:cc:3c:80:cb:df:71:f5:ba: b7:5e:1e:e1:c7:65:84:5d:81:67:4d:55:fe:84:9a: e2:82:08:c5:71:e4:b9:9b:58:ab:71:d6:e1:e7:1a: 2a:79:f1:3e:de:7a:4d:51:ba:20:91:b6:4b:5a:61: de:55:6f:51:9a:b0:99:ed:ac:72:68:e5:c4:74:ef: 2f:d0:54:8b:40:a9:41:14:ba:29:c5:87:2a:37:9c: 76:15:de:be:8d:c9:d3:ad:29:3a:e4:18:8f:84:ef: 2e:66:5d:30:b3:f1:bf:2e:42:4b:5c:63:19:29:98: 31:e3:8e:dd:89:ac:d6:ff:c5:54:21:8b:00:48:94: 00:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9D:26:85:3F:00:E1:0D:4D:81:7B:0A:DE:3C:99:55:04:3F:80:5A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154154.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.11.91.0/24 Signature Algorithm: sha256WithRSAEncryption 67:ed:fd:5f:82:f0:06:1b:20:e0:92:77:1f:9c:a4:31:48:17: 38:b9:03:0f:fa:46:ef:7d:5c:ae:1f:26:4f:cc:0f:34:bc:15: f5:63:29:66:f4:86:f7:46:80:e9:71:67:82:20:fd:bc:b3:a1: 84:54:b9:a2:dc:0d:6d:f7:83:c2:52:db:8b:99:6a:81:68:67: df:82:8c:07:62:68:19:83:8e:40:45:16:ea:3e:f6:2e:57:3f: bc:4f:02:7c:02:16:7b:33:72:fd:3b:46:0d:05:77:6e:53:86: aa:21:39:85:17:31:b2:5a:e8:ec:cf:c2:fa:4f:45:56:36:66: de:af:13:6b:1a:88:9e:e1:1e:f4:fb:3a:1c:f4:f8:58:7e:5a: 87:f0:ac:d3:b5:09:63:86:5a:14:6c:6a:dc:f0:e3:e6:b1:67: e3:52:31:04:bd:c3:61:72:e3:f4:b5:58:b2:46:8c:9a:e6:9c: fd:f3:47:e2:76:ee:b2:00:1f:d3:41:1b:29:b5:8e:d6:86:d8: 41:3f:52:c5:05:83:52:ea:3f:3a:14:0e:01:3b:81:88:c2:bc: 30:62:9b:6f:ce:f7:be:d8:ba:c2:5a:55:e9:6a:43:04:f1:f0: 14:e6:51:f9:ab:6b:66:04:08:cc:83:01:a0:60:8d:3b:fa:37: 64:f1:be:76 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUAuiTLhloMVOnqZHZh58O64yvCeQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAyNTA2NDkyNFoX DTI2MTAyNDA2NTQyNFowMzExMC8GA1UEAxMoNUY5RDI2ODUzRjAwRTEwRDREODE3 QjBBREUzQzk5NTUwNDNGODA1QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALuVPa6K3f2Xhv6L1lMspeBVmIZt0uTHxgaDnM1EYiV/ZAywIGcYlw+uatLP kUZKIP2RSA9DAFUHnsYE9XE7jZ97BMcIdI3kFPu4O5yADqJgfYTr+gczcU2GistE yLdDarLf28Os6cF7CJ37Y4x4Sk+D7d9lJwb2xj6eK5Ep6cw8gMvfcfW6t14e4cdl hF2BZ01V/oSa4oIIxXHkuZtYq3HW4ecaKnnxPt56TVG6IJG2S1ph3lVvUZqwme2s cmjlxHTvL9BUi0CpQRS6KcWHKjecdhXevo3J060pOuQYj4TvLmZdMLPxvy5CS1xj GSmYMeOO3Yms1v/FVCGLAEiUABECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRfnSaF PwDhDU2BewrePJlVBD+AWjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDE1NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMsLWzANBgkqhkiG9w0BAQsFAAOCAQEAZ+39X4LwBhsg4JJ3H5yk MUgXOLkDD/pG731crh8mT8wPNLwV9WMpZvSG90aA6XFngiD9vLOhhFS5otwNbfeD wlLbi5lqgWhn34KMB2JoGYOOQEUW6j72Llc/vE8CfAIWezNy/TtGDQV3blOGqiE5 hRcxslro7M/C+k9FVjZm3q8TaxqInuEe9Ps6HPT4WH5ah/Cs07UJY4ZaFGxq3PDj 5rFn41IxBL3DYXLj9LVYskaMmuac/fNH4nbusgAf00EbKbWO1obYQT9SxQWDUuo/ OhQOATuBiMK8MGKbb873vti6wlpV6WpDBPHwFOZR+atrZgQIzIMBoGCNO/o3ZPG+ dg== -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:22 2025 by rpki-client