$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154197.roa File: AS154197.roa (raw, json) Hash identifier: oJy8QYZOx5vcwxbqhsxets0PdPgjwSq+ZzWMBc9ySO0= Subject key identifier: 7F:83:04:44:F9:DA:0E:17:54:F0:0D:6F:6E:D1:5A:F4:FC:1D:61:AE Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 279AB2EE01A6089A0CEE0C10BDC494101374BEFF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154197.roa Signing time: Thu 11 Sep 2025 02:29:11 +0000 ROA not before: Thu 11 Sep 2025 02:24:11 +0000 ROA not after: Thu 10 Sep 2026 02:29:11 +0000 asID: 154197 IP address blocks: 45.126.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:9a:b2:ee:01:a6:08:9a:0c:ee:0c:10:bd:c4:94:10:13:74:be:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 11 02:24:11 2025 GMT Not After : Sep 10 02:29:11 2026 GMT Subject: CN=7F830444F9DA0E1754F00D6F6ED15AF4FC1D61AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ac:03:11:cb:33:a0:64:38:90:e4:a8:1d:a7: 7e:36:f3:20:94:c9:6b:cf:e1:7a:65:5f:66:46:9e: 56:e5:b8:3d:82:31:eb:e5:15:ae:15:c4:b3:cd:6f: e2:59:3c:0b:0e:4c:cd:d1:b9:84:22:7b:65:e8:04: 88:f8:31:61:5e:22:63:df:20:ef:63:e7:d0:78:11: 5a:d7:c9:4a:32:4d:c6:0a:68:4a:2f:4a:d9:49:3d: 6d:1d:87:d1:77:eb:fe:98:f6:bd:3d:56:01:e1:c5: 61:cb:6d:23:6e:d5:d5:1c:e8:a3:44:8d:55:f6:5e: bd:9d:51:76:89:55:5d:b6:5e:3c:75:c1:b6:d1:16: 4d:c3:f9:31:63:60:d2:c8:a1:06:ad:13:c5:ab:de: 74:16:13:cc:4b:17:2b:2d:3f:fa:a8:53:bb:13:43: 4b:46:36:f0:4f:6e:15:0a:b1:be:3b:14:e9:e9:15: 4b:3c:7e:fa:91:91:53:9a:1f:cd:df:a3:43:d0:43: ac:32:57:7b:06:cd:ea:93:f8:de:0d:0a:70:28:ca: a1:1e:37:06:73:83:4a:53:c9:2b:39:8a:44:5e:6c: 74:d2:16:0b:bb:68:a2:49:c2:72:69:fd:0b:c5:35: f2:f2:47:14:d3:c5:82:56:64:47:42:c9:9c:31:d2: 64:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:83:04:44:F9:DA:0E:17:54:F0:0D:6F:6E:D1:5A:F4:FC:1D:61:AE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154197.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.126.248.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:26:62:f9:38:2f:a2:d8:c7:8f:e2:eb:0f:8d:ce:01:ac:b5: 19:dc:96:8a:4b:6b:4f:6a:45:6a:3f:68:ad:62:aa:88:a8:4c: 56:6d:43:8b:04:c1:04:fe:eb:02:d2:65:d6:fb:61:f7:eb:2f: d3:97:b7:f5:79:1a:ac:f0:a6:5f:f3:a3:89:9a:ec:e8:45:6b: c3:23:3b:87:b1:4c:22:14:a8:ce:c4:e2:e5:01:23:29:a1:44: 4c:1a:96:c0:5f:ba:b7:6b:0c:c4:73:04:28:de:6c:85:c3:09: 2a:04:e3:09:47:37:ec:83:9a:e0:55:a7:fd:9d:01:a7:14:b5: 91:b0:bd:8a:ea:93:d1:07:66:05:0d:23:f9:dc:f7:f7:63:de: f4:83:2e:03:00:d1:2c:da:38:9c:31:d4:42:96:cc:81:7d:b3: 5c:e8:0e:48:ae:53:51:4d:b1:03:0d:d9:f7:ba:dd:04:7c:15: 8c:c9:bf:7c:2a:87:04:f9:f2:eb:7e:3b:61:a4:e7:11:2c:dd: 50:e6:49:10:f6:5e:3c:2f:14:10:0c:9a:84:db:23:92:b6:19: 3d:48:58:94:01:ce:2f:16:33:20:8c:f9:6a:c0:af:48:38:83: e6:e0:c4:c1:24:cd:ce:e9:c0:fd:59:4c:48:de:89:d3:ae:89: 8b:8f:9b:ba -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUJ5qy7gGmCJoM7gwQvcSUEBN0vv8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkxMTAyMjQxMVoX DTI2MDkxMDAyMjkxMVowMzExMC8GA1UEAxMoN0Y4MzA0NDRGOURBMEUxNzU0RjAw RDZGNkVEMTVBRjRGQzFENjFBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKysAxHLM6BkOJDkqB2nfjbzIJTJa8/hemVfZkaeVuW4PYIx6+UVrhXEs81v 4lk8Cw5MzdG5hCJ7ZegEiPgxYV4iY98g72Pn0HgRWtfJSjJNxgpoSi9K2Uk9bR2H 0Xfr/pj2vT1WAeHFYcttI27V1Rzoo0SNVfZevZ1RdolVXbZePHXBttEWTcP5MWNg 0sihBq0TxavedBYTzEsXKy0/+qhTuxNDS0Y28E9uFQqxvjsU6ekVSzx++pGRU5of zd+jQ9BDrDJXewbN6pP43g0KcCjKoR43BnODSlPJKzmKRF5sdNIWC7tooknCcmn9 C8U18vJHFNPFglZkR0LJnDHSZPECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBR/gwRE +doOF1TwDW9u0Vr0/B1hrjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDE5Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAS1++DANBgkqhkiG9w0BAQsFAAOCAQEAKyZi+TgvotjHj+LrD43O Aay1GdyWiktrT2pFaj9orWKqiKhMVm1DiwTBBP7rAtJl1vth9+sv05e39XkarPCm X/OjiZrs6EVrwyM7h7FMIhSozsTi5QEjKaFETBqWwF+6t2sMxHMEKN5shcMJKgTj CUc37IOa4FWn/Z0BpxS1kbC9iuqT0QdmBQ0j+dz392Pe9IMuAwDRLNo4nDHUQpbM gX2zXOgOSK5TUU2xAw3Z97rdBHwVjMm/fCqHBPny6347YaTnESzdUOZJEPZePC8U EAyahNsjkrYZPUhYlAHOLxYzIIz5asCvSDiD5uDEwSTNzunA/VlMSN6J066Ji4+b ug== -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:22 2025 by rpki-client