$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153158.roa File: AS153158.roa (raw, json) Hash identifier: +J7ZPKkA9698cgbrds+iWjTfJ9+JjoIO4mEtkcBifkc= Subject key identifier: 07:01:8D:6F:17:D9:14:23:52:2A:00:96:39:E4:A0:5A:E0:D7:24:6A Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 7CF90E108C969BD1DAF5145C08E13A61B7C65D63 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153158.roa Signing time: Mon 23 Mar 2026 05:00:01 +0000 ROA not before: Mon 23 Mar 2026 04:55:01 +0000 ROA not after: Mon 22 Mar 2027 05:00:01 +0000 asID: 153158 IP address blocks: 160.191.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f9:0e:10:8c:96:9b:d1:da:f5:14:5c:08:e1:3a:61:b7:c6:5d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Mar 23 04:55:01 2026 GMT Not After : Mar 22 05:00:01 2027 GMT Subject: CN=07018D6F17D91423522A009639E4A05AE0D7246A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d9:19:c6:1a:05:c4:a2:56:25:e7:bb:31:92: 6d:49:0d:51:ad:2c:9b:e2:17:cb:8d:7f:7f:5b:c9: 5b:da:1d:a8:ff:5e:e4:06:de:50:3a:65:f9:06:40: 99:e5:ae:09:a6:48:8f:44:2e:3a:ce:ee:80:1e:30: 76:b4:e1:3a:10:07:5f:48:bc:96:08:1d:26:b9:01: a1:4c:c0:05:23:87:be:16:ec:3c:89:44:24:1c:7d: 4b:71:09:ec:ab:55:09:1b:f0:44:05:17:5e:fb:c1: 5a:4a:36:21:c8:c1:fa:c9:86:88:3b:15:42:35:5b: 65:8e:bf:17:7b:1d:fc:b1:fa:4c:87:98:93:13:37: 63:bb:8b:62:72:d7:38:b2:85:1b:92:5d:b2:b6:16: 54:cd:a9:90:e5:08:14:79:c3:9f:f5:e7:63:fe:ba: d0:82:97:96:fc:d8:f1:50:0b:a7:1b:cf:ed:a6:e5: aa:4a:e4:3a:ad:6c:67:bc:a2:fc:64:0e:d6:c3:4f: 20:9d:a8:49:c2:3f:21:17:18:67:1e:50:0f:28:b3: 6e:c1:02:de:fe:c4:a3:b9:09:9b:c7:36:10:2c:08: 85:91:91:21:a6:76:c6:a2:6a:79:13:53:78:99:09: a5:98:47:ad:98:69:53:49:e5:67:07:1a:c1:0b:3c: 76:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:01:8D:6F:17:D9:14:23:52:2A:00:96:39:E4:A0:5A:E0:D7:24:6A X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153158.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.204.0/23 Signature Algorithm: sha256WithRSAEncryption 28:10:43:c7:0e:86:b2:fc:62:65:94:e3:e9:d2:f0:e7:bd:4a: ee:91:c6:32:2d:c0:b4:9c:91:10:56:d8:19:f3:46:15:a6:a9: 1e:06:13:70:91:2e:d2:6f:06:fe:78:7f:9e:bd:e3:d3:f7:0f: ea:28:be:df:74:db:9b:d8:91:29:76:ef:10:cf:93:90:b2:f8: 98:a9:66:93:41:e4:15:6f:fb:b5:9c:6b:78:4a:70:d6:f0:05: 1c:da:83:35:40:be:9d:38:e1:86:24:74:58:f6:21:d3:f4:3b: c0:1f:44:5b:37:d0:0e:5b:fb:b3:6c:48:e2:9e:7d:1b:ab:6c: 95:47:4b:e7:c1:da:4b:eb:14:60:06:61:09:38:84:37:49:df: 16:6b:86:ed:b2:c2:ba:0f:6e:f4:c7:5b:e4:5c:fa:c6:1a:7c: 0e:81:18:00:38:01:67:0e:b9:65:74:f1:ab:e3:73:56:98:eb: 39:84:e8:48:46:e8:2b:e4:42:39:8c:79:79:7a:bf:00:58:5e: 22:33:04:2f:f4:2a:80:1d:24:80:ac:fc:0a:ae:c3:d3:b6:79: f6:27:6b:6a:03:65:2b:d1:1f:f4:02:89:35:c8:f2:c3:a7:4c: f1:af:c9:f7:e4:d9:ef:74:b4:c6:bd:f2:30:ad:87:4c:3f:d3: 6b:53:27:44 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUfPkOEIyWm9Ha9RRcCOE6YbfGXWMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDMyMzA0NTUwMVoX DTI3MDMyMjA1MDAwMVowMzExMC8GA1UEAxMoMDcwMThENkYxN0Q5MTQyMzUyMkEw MDk2MzlFNEEwNUFFMEQ3MjQ2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMDZGcYaBcSiViXnuzGSbUkNUa0sm+IXy41/f1vJW9odqP9e5AbeUDpl+QZA meWuCaZIj0QuOs7ugB4wdrThOhAHX0i8lggdJrkBoUzABSOHvhbsPIlEJBx9S3EJ 7KtVCRvwRAUXXvvBWko2IcjB+smGiDsVQjVbZY6/F3sd/LH6TIeYkxM3Y7uLYnLX OLKFG5JdsrYWVM2pkOUIFHnDn/XnY/660IKXlvzY8VALpxvP7ablqkrkOq1sZ7yi /GQO1sNPIJ2oScI/IRcYZx5QDyizbsEC3v7Eo7kJm8c2ECwIhZGRIaZ2xqJqeRNT eJkJpZhHrZhpU0nlZwcawQs8dlECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQHAY1v F9kUI1IqAJY55KBa4NckajAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MzE1OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaC/zDANBgkqhkiG9w0BAQsFAAOCAQEAKBBDxw6GsvxiZZTj6dLw 571K7pHGMi3AtJyREFbYGfNGFaapHgYTcJEu0m8G/nh/nr3j0/cP6ii+33Tbm9iR KXbvEM+TkLL4mKlmk0HkFW/7tZxreEpw1vAFHNqDNUC+nTjhhiR0WPYh0/Q7wB9E WzfQDlv7s2xI4p59G6tslUdL58HaS+sUYAZhCTiEN0nfFmuG7bLCug9u9Mdb5Fz6 xhp8DoEYADgBZw65ZXTxq+NzVpjrOYToSEboK+RCOYx5eXq/AFheIjMEL/QqgB0k gKz8Cq7D07Z59idragNlK9Ef9AKJNcjyw6dM8a/J9+TZ73S0xr3yMK2HTD/Ta1Mn RA== -----END CERTIFICATE-----Generated at Thu Mar 26 10:46:54 2026 by rpki-client