$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154202.roa File: AS154202.roa (raw, json) Hash identifier: 2l6wFtWIW0X1ofTUUfwgGQq7nOwLlqdTrBChNlbbJH0= Subject key identifier: 23:F2:66:6E:52:23:EB:86:10:04:41:96:5B:4F:6E:78:FF:BC:0F:9A Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 27A60B5ABE29A69D8D30C03554C3E31F0673B29B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154202.roa Signing time: Mon 08 Sep 2025 03:15:43 +0000 ROA not before: Mon 08 Sep 2025 03:10:43 +0000 ROA not after: Mon 07 Sep 2026 03:15:43 +0000 asID: 154202 IP address blocks: 203.26.218.0/24 maxlen: 24 2001:df6:15c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:a6:0b:5a:be:29:a6:9d:8d:30:c0:35:54:c3:e3:1f:06:73:b2:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 8 03:10:43 2025 GMT Not After : Sep 7 03:15:43 2026 GMT Subject: CN=23F2666E5223EB86100441965B4F6E78FFBC0F9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3a:e5:84:03:45:4c:7b:fa:a2:94:bf:e7:77: a5:00:59:aa:a0:5c:13:e5:6d:64:46:3b:99:b5:63: 35:b5:ba:78:59:fc:e7:0c:21:90:57:98:ab:8e:66: f4:ca:b4:fd:8a:10:49:38:44:3b:13:53:98:ba:96: a2:0e:52:24:d9:7c:b7:54:6d:c2:d2:88:be:3c:b8: 47:a4:7d:c0:cd:50:64:89:e2:3c:81:16:75:6e:f3: 99:74:bf:64:a6:0a:c8:2e:b1:c1:90:e7:52:32:34: 14:d2:c2:2f:4e:6a:02:06:8f:3e:a4:59:7f:3c:9f: 03:88:0b:bd:17:5c:ee:9e:1e:6d:25:ca:6c:c9:30: 3a:a8:4a:ed:49:cb:f3:60:ba:10:98:7f:e7:1f:e7: c6:6b:fa:f0:64:2b:5e:de:e3:f2:33:f7:22:23:2e: 7f:4e:35:91:7a:3d:88:35:2e:81:52:e8:6b:36:46: da:d4:11:72:72:aa:28:99:a3:56:4a:f9:15:3b:6c: 33:34:23:24:71:c0:52:2d:44:40:90:38:ba:6c:b0: 82:26:c4:e7:f0:a2:56:4f:60:b3:1a:e8:bb:a2:07: 32:c4:ca:58:bb:cf:5e:e9:07:3b:55:03:6c:40:03: d8:e0:32:62:bf:d8:2d:08:82:c0:70:96:30:00:b3: cd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F2:66:6E:52:23:EB:86:10:04:41:96:5B:4F:6E:78:FF:BC:0F:9A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154202.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.26.218.0/24 IPv6: 2001:df6:15c0::/48 Signature Algorithm: sha256WithRSAEncryption 91:41:46:c1:45:f9:f8:12:8e:38:e3:92:18:cf:20:d6:25:24: 15:2e:8a:de:55:85:c6:96:da:66:1f:c2:f8:4a:2c:28:75:bc: 88:a7:71:3b:5f:f0:f4:ab:7f:5c:22:c3:b1:c7:20:dd:ea:69: f3:16:24:7f:ed:92:6f:00:44:38:06:a2:41:c4:77:7d:9c:77: ca:a6:89:7a:be:77:b8:97:a2:ce:f6:c5:45:c3:77:7f:a7:6b: f1:5e:cc:c8:7b:c0:9c:7d:1b:f7:04:3f:83:e6:47:ec:67:f0: 40:e5:8f:14:81:9f:64:4f:fe:83:eb:86:1a:64:63:e3:ed:7f: ac:46:fd:a2:e6:55:ef:a0:f2:e2:03:70:33:a8:6d:48:02:2e: 76:71:d6:8e:cd:26:a6:72:5b:ee:81:76:c5:04:d8:f7:74:38: f4:4f:34:19:2c:8f:98:cc:d0:e7:c4:78:f4:7d:c8:a9:7d:5d: 5b:c3:b2:c9:ee:0a:69:ac:27:66:e0:28:f6:07:5b:d1:e9:6b: 8d:33:70:b1:53:07:b6:f3:6a:8a:b5:2c:66:4a:8b:e8:0c:ea: f0:d0:f3:8e:c2:f4:ae:9d:52:27:bb:00:e6:5c:78:0a:2b:73: ad:57:fc:5d:3b:3c:9b:2d:55:19:4e:8c:7a:29:43:1d:10:de: 3e:73:1f:29 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUJ6YLWr4ppp2NMMA1VMPjHwZzspswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkwODAzMTA0M1oX DTI2MDkwNzAzMTU0M1owMzExMC8GA1UEAxMoMjNGMjY2NkU1MjIzRUI4NjEwMDQ0 MTk2NUI0RjZFNzhGRkJDMEY5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMQ65YQDRUx7+qKUv+d3pQBZqqBcE+VtZEY7mbVjNbW6eFn85wwhkFeYq45m 9Mq0/YoQSThEOxNTmLqWog5SJNl8t1RtwtKIvjy4R6R9wM1QZIniPIEWdW7zmXS/ ZKYKyC6xwZDnUjI0FNLCL05qAgaPPqRZfzyfA4gLvRdc7p4ebSXKbMkwOqhK7UnL 82C6EJh/5x/nxmv68GQrXt7j8jP3IiMuf041kXo9iDUugVLoazZG2tQRcnKqKJmj Vkr5FTtsMzQjJHHAUi1EQJA4umywgibE5/CiVk9gsxrou6IHMsTKWLvPXukHO1UD bEAD2OAyYr/YLQiCwHCWMACzzcUCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBQj8mZu UiPrhhAEQZZbT254/7wPmjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDIwMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAMsa2jAPBAIAAjAJAwcAIAEN9hXAMA0GCSqGSIb3DQEBCwUAA4IB AQCRQUbBRfn4Eo4445IYzyDWJSQVLoreVYXGltpmH8L4SiwodbyIp3E7X/D0q39c IsOxxyDd6mnzFiR/7ZJvAEQ4BqJBxHd9nHfKpol6vne4l6LO9sVFw3d/p2vxXszI e8CcfRv3BD+D5kfsZ/BA5Y8UgZ9kT/6D64YaZGPj7X+sRv2i5lXvoPLiA3AzqG1I Ai52cdaOzSamclvugXbFBNj3dDj0TzQZLI+YzNDnxHj0fcipfV1bw7LJ7gpprCdm 4Cj2B1vR6WuNM3CxUwe282qKtSxmSovoDOrw0POOwvSunVInuwDmXHgKK3OtV/xd OzybLVUZTox6KUMdEN4+cx8p -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:22 2025 by rpki-client