$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154291.roa File: AS154291.roa (raw, json) Hash identifier: YIxLoLq+0pl+as7B7Nb0Rwy2oRi7h+7YTEXo4nFd99c= Subject key identifier: B8:75:EB:25:BE:3A:03:6E:86:D4:E1:F6:CD:8C:F2:2F:3F:8A:CE:1F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1A60086CA34C2C4C0D05FA473ECFEF47C2ED48F9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154291.roa Signing time: Fri 31 Oct 2025 02:37:22 +0000 ROA not before: Fri 31 Oct 2025 02:32:22 +0000 ROA not after: Fri 30 Oct 2026 02:37:22 +0000 asID: 154291 IP address blocks: 2001:df6:2fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:60:08:6c:a3:4c:2c:4c:0d:05:fa:47:3e:cf:ef:47:c2:ed:48:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 31 02:32:22 2025 GMT Not After : Oct 30 02:37:22 2026 GMT Subject: CN=B875EB25BE3A036E86D4E1F6CD8CF22F3F8ACE1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:af:5a:67:06:96:9e:50:8f:06:12:32:00:cf: 84:c9:f4:55:33:67:4d:f9:33:3a:26:9d:ba:cb:68: 73:f9:97:1b:4f:85:eb:ca:92:77:3e:70:c7:63:e6: b9:68:8d:9a:d0:98:ab:17:66:fc:9a:5a:6b:51:96: 30:ba:70:42:6f:19:83:4b:cb:5e:63:92:77:10:ef: 87:54:40:50:ed:f2:4c:c1:39:61:63:fc:5f:da:bf: a3:47:4e:fb:be:bb:a5:8c:8b:66:c5:8c:1b:6b:bc: ba:07:50:1b:78:28:36:05:f4:d7:35:9c:e0:79:03: 72:77:6c:98:34:91:32:24:7b:e7:c0:2a:08:5a:8a: 01:a3:51:e0:7f:7e:3d:50:5c:5f:f3:f4:42:3f:cc: 63:7d:ea:40:8e:0d:de:3d:ae:9b:68:e1:db:f6:70: d8:25:fa:ed:c7:af:b8:32:e6:02:29:14:b3:0b:b7: f5:6d:02:0a:85:d3:5b:67:6c:fc:2d:5d:2d:68:d2: cc:50:3e:b3:6b:be:40:27:85:cc:e0:59:0d:9b:09: 33:6e:46:07:52:34:b1:d6:d9:0f:30:4f:92:b2:39: 5b:a9:99:df:cc:47:94:a8:f2:40:5b:c2:d5:fe:05: 67:2a:4f:ed:99:48:9c:88:22:e8:e6:d6:a9:fe:ab: 33:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:75:EB:25:BE:3A:03:6E:86:D4:E1:F6:CD:8C:F2:2F:3F:8A:CE:1F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154291.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:2fc0::/48 Signature Algorithm: sha256WithRSAEncryption 40:17:8a:9b:41:9a:09:64:65:92:82:80:e7:7e:ea:9b:5e:42: f8:c2:07:66:27:91:55:c9:26:94:56:e7:95:63:d3:bd:22:49: 02:66:56:87:f2:10:71:93:fa:5f:bd:2a:46:46:37:c9:54:01: 93:c2:04:36:e1:fb:dd:6e:1b:55:2f:68:15:c3:ef:17:67:4f: e7:14:d4:31:47:e1:e4:53:ba:f4:0d:a1:72:d3:39:7a:f2:9a: 6e:a8:4c:87:dc:45:10:fd:ec:ee:db:82:eb:a7:c3:ff:3b:10: fb:63:39:ff:9e:28:fe:e6:8e:2b:d0:30:1e:a0:0a:eb:c5:b3: 4c:8d:c1:b5:50:51:d4:45:ba:a2:b2:28:d5:52:7f:57:84:1a: 7f:8a:f7:c1:63:95:07:bf:fb:48:15:6b:a0:2b:44:d7:b4:9d: 0a:e1:d8:53:c7:ba:8e:02:04:7a:a9:33:b3:bb:66:7a:e7:90: 6b:46:52:02:dd:27:08:db:76:5c:54:9b:fa:cf:07:53:bc:76: a3:91:ab:8d:d4:37:dd:04:90:79:db:d5:51:4e:03:e2:3c:82: 34:c1:b9:6d:c5:63:f8:90:c9:35:50:39:33:41:b1:31:84:03: 10:be:ea:20:0f:86:b0:bc:bf:e7:1e:3d:80:86:19:4c:14:19: de:37:8e:fc -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUGmAIbKNMLEwNBfpHPs/vR8LtSPkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAzMTAyMzIyMloX DTI2MTAzMDAyMzcyMlowMzExMC8GA1UEAxMoQjg3NUVCMjVCRTNBMDM2RTg2RDRF MUY2Q0Q4Q0YyMkYzRjhBQ0UxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL+vWmcGlp5QjwYSMgDPhMn0VTNnTfkzOiadustoc/mXG0+F68qSdz5wx2Pm uWiNmtCYqxdm/Jpaa1GWMLpwQm8Zg0vLXmOSdxDvh1RAUO3yTME5YWP8X9q/o0dO +767pYyLZsWMG2u8ugdQG3goNgX01zWc4HkDcndsmDSRMiR758AqCFqKAaNR4H9+ PVBcX/P0Qj/MY33qQI4N3j2um2jh2/Zw2CX67cevuDLmAikUswu39W0CCoXTW2ds /C1dLWjSzFA+s2u+QCeFzOBZDZsJM25GB1I0sdbZDzBPkrI5W6mZ38xHlKjyQFvC 1f4FZypP7ZlInIgi6ObWqf6rM00CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBS4desl vjoDbobU4fbNjPIvP4rOHzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDI5MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfYvwDANBgkqhkiG9w0BAQsFAAOCAQEAQBeKm0GaCWRlkoKA 537qm15C+MIHZieRVckmlFbnlWPTvSJJAmZWh/IQcZP6X70qRkY3yVQBk8IENuH7 3W4bVS9oFcPvF2dP5xTUMUfh5FO69A2hctM5evKabqhMh9xFEP3s7tuC66fD/zsQ +2M5/54o/uaOK9AwHqAK68WzTI3BtVBR1EW6orIo1VJ/V4Qaf4r3wWOVB7/7SBVr oCtE17SdCuHYU8e6jgIEeqkzs7tmeueQa0ZSAt0nCNt2XFSb+s8HU7x2o5GrjdQ3 3QSQedvVUU4D4jyCNMG5bcVj+JDJNVA5M0GxMYQDEL7qIA+GsLy/5x49gIYZTBQZ 3jeO/A== -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:21 2025 by rpki-client