$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152425.roa File: AS152425.roa (raw, json) Hash identifier: iQWefrz4YypGPMtMlBWSvwXZ+pgCRKsYksxVvVnFOng= Subject key identifier: B2:59:CB:1C:97:7E:B0:B1:3D:E5:37:82:DC:BD:98:0F:F2:62:1B:83 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 69269473336222DB487A4A8D99E3431B285633DF Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152425.roa Signing time: Mon 08 Sep 2025 03:40:51 +0000 ROA not before: Mon 08 Sep 2025 03:35:51 +0000 ROA not after: Mon 07 Sep 2026 03:40:51 +0000 asID: 152425 IP address blocks: 161.248.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:26:94:73:33:62:22:db:48:7a:4a:8d:99:e3:43:1b:28:56:33:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Sep 8 03:35:51 2025 GMT Not After : Sep 7 03:40:51 2026 GMT Subject: CN=B259CB1C977EB0B13DE53782DCBD980FF2621B83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3d:22:b7:b4:bd:9d:eb:bd:56:35:dd:a0:a8: 80:a7:e7:dd:43:95:18:07:35:0c:e5:fa:bd:eb:00: e1:43:8a:1b:6f:48:2c:a6:0a:d1:d4:f1:8b:0e:c6: e3:2a:53:61:9a:a0:db:0a:a6:73:a6:5a:0d:73:ef: d8:d9:c1:73:6b:6d:af:73:e0:4d:d6:80:9d:4c:bd: cd:72:5c:b5:26:1b:d9:32:d5:c7:21:ae:8c:89:64: 10:35:20:0e:77:cb:0c:63:c9:8b:fc:1d:07:b1:b4: e4:5b:b2:70:9c:09:52:0e:5a:a7:1f:3f:0a:89:73: 36:3f:6f:6c:6e:a2:67:32:3d:03:c6:a3:ff:31:81: 0e:56:a2:7d:2c:38:7d:f9:7e:79:51:52:d0:4c:f0: b7:c6:4c:34:3f:5d:a5:b0:4f:54:e6:76:e1:60:ee: 9f:a9:ea:c5:55:6a:fb:da:7e:1e:64:b2:cb:36:7e: 6d:f0:34:23:d0:c1:27:b8:4c:f9:ea:a1:67:70:eb: 1c:bb:d5:02:63:b8:31:e6:ec:52:95:d5:3c:f7:22: f0:73:8f:da:f6:a3:d0:d3:a2:5d:c8:54:88:48:09: d0:e6:03:a5:86:a8:d6:94:d6:77:fd:d0:04:4b:ce: 7d:a8:9f:bf:41:c6:31:cb:58:6d:60:b0:9a:4f:1a: 34:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:59:CB:1C:97:7E:B0:B1:3D:E5:37:82:DC:BD:98:0F:F2:62:1B:83 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152425.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.248.173.0/24 Signature Algorithm: sha256WithRSAEncryption 78:8b:eb:7a:c0:2d:a6:aa:2e:c0:92:ca:03:c7:19:0e:12:20: 3c:31:9d:17:61:53:ed:18:91:12:d7:97:eb:63:9d:fa:56:6d: b0:08:82:23:21:6c:e3:37:91:d4:a5:54:e9:ec:20:b4:cf:16: 73:6e:17:7e:21:52:55:18:33:64:d2:c4:bb:3c:f0:3c:01:84: ab:6b:34:f4:39:47:3d:77:8d:40:69:61:20:c9:7a:df:d8:6b: 1f:fa:87:58:88:3d:10:8a:ef:4a:53:57:ab:d8:2d:99:bc:98: 76:ae:71:c8:fe:c2:ad:5a:3a:f9:88:8b:1e:69:a1:50:ed:a3: 78:d4:2a:c7:6c:93:92:67:ce:3a:74:13:eb:99:5d:38:22:14: 2b:fe:99:c2:b2:36:20:aa:e3:55:29:d5:21:5f:c5:ca:5c:87: e1:f4:fe:6b:09:e4:b6:a7:ba:cc:b5:a3:bb:bd:19:b6:94:e1: 9a:04:de:5d:27:a4:94:04:73:ae:02:47:d3:3c:5c:ee:2a:5a: 7f:60:66:fc:3e:85:2b:30:44:9a:dc:d5:bf:0d:0b:1a:b7:41: d0:8d:98:d6:f5:f7:8c:8d:26:70:14:6e:95:6d:42:d4:ef:cd: fb:bb:c2:76:41:f4:e8:e9:eb:02:3f:30:34:40:94:14:06:ca: a8:c7:b5:32 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUaSaUczNiIttIekqNmeNDGyhWM98wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDkwODAzMzU1MVoX DTI2MDkwNzAzNDA1MVowMzExMC8GA1UEAxMoQjI1OUNCMUM5NzdFQjBCMTNERTUz NzgyRENCRDk4MEZGMjYyMUI4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANU9Ire0vZ3rvVY13aCogKfn3UOVGAc1DOX6vesA4UOKG29ILKYK0dTxiw7G 4ypTYZqg2wqmc6ZaDXPv2NnBc2ttr3PgTdaAnUy9zXJctSYb2TLVxyGujIlkEDUg DnfLDGPJi/wdB7G05FuycJwJUg5apx8/ColzNj9vbG6iZzI9A8aj/zGBDlaifSw4 ffl+eVFS0Ezwt8ZMND9dpbBPVOZ24WDun6nqxVVq+9p+HmSyyzZ+bfA0I9DBJ7hM +eqhZ3DrHLvVAmO4MebsUpXVPPci8HOP2vaj0NOiXchUiEgJ0OYDpYao1pTWd/3Q BEvOfaifv0HGMctYbWCwmk8aNF0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSyWcsc l36wsT3lN4LcvZgP8mIbgzAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MjQyNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKH4rTANBgkqhkiG9w0BAQsFAAOCAQEAeIvresAtpqouwJLKA8cZ DhIgPDGdF2FT7RiREteX62Od+lZtsAiCIyFs4zeR1KVU6ewgtM8Wc24XfiFSVRgz ZNLEuzzwPAGEq2s09DlHPXeNQGlhIMl639hrH/qHWIg9EIrvSlNXq9gtmbyYdq5x yP7CrVo6+YiLHmmhUO2jeNQqx2yTkmfOOnQT65ldOCIUK/6ZwrI2IKrjVSnVIV/F ylyH4fT+awnktqe6zLWju70ZtpThmgTeXSeklARzrgJH0zxc7ipaf2Bm/D6FKzBE mtzVvw0LGrdB0I2Y1vX3jI0mcBRulW1C1O/N+7vCdkH06OnrAj8wNECUFAbKqMe1 Mg== -----END CERTIFICATE-----Generated at Mon Oct 20 18:12:42 2025 by rpki-client