$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153796.roa File: AS153796.roa (raw, json) Hash identifier: 0wYZ1CJPNlB/77o3Wvv0aMcEBhkT1JYxHMaKEw1j698= Subject key identifier: A4:7F:9A:3B:D3:72:AC:09:28:C7:6C:6A:BB:A9:5A:19:85:56:D9:6D Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 093D464208B6B6EA024BD0DA277E4235B63AB32B Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153796.roa Signing time: Wed 30 Apr 2025 04:50:29 +0000 ROA not before: Wed 30 Apr 2025 04:45:29 +0000 ROA not after: Wed 29 Apr 2026 04:50:29 +0000 asID: 153796 IP address blocks: 161.248.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 08:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:3d:46:42:08:b6:b6:ea:02:4b:d0:da:27:7e:42:35:b6:3a:b3:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 30 04:45:29 2025 GMT Not After : Apr 29 04:50:29 2026 GMT Subject: CN=A47F9A3BD372AC0928C76C6ABBA95A198556D96D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:78:61:dd:f7:0a:1f:76:40:df:3c:70:f9:d1: 20:b2:53:68:fc:fb:6f:46:92:d3:d0:71:d9:ac:7d: cd:3e:ed:a9:21:37:62:d7:00:12:73:b0:e6:37:06: 36:e7:c9:00:3f:4d:cd:31:11:15:68:d6:ce:27:a3: 3a:42:d1:f0:08:4a:4c:4c:57:b1:23:47:14:c4:5b: c4:1e:ef:5e:19:fb:b5:fb:97:79:20:d8:c4:9b:5b: ce:18:7c:25:89:80:9e:d5:87:44:a0:25:18:ba:fb: 72:10:cd:ea:96:5b:1b:6c:88:fd:e9:72:73:de:f0: bc:6c:35:b7:25:3c:a1:ef:7f:6c:b5:1a:29:f9:cf: e3:5c:3d:ab:2b:24:b5:3c:0b:80:eb:ed:81:69:98: cc:c3:c9:23:ee:4e:db:4a:12:35:0c:dc:1a:7e:50: 93:c6:d6:36:c9:2d:31:19:b5:68:49:5f:66:51:08: b5:a5:c1:e6:f4:65:1a:b8:f0:52:8e:32:1a:ae:5c: b4:c9:c0:81:40:b0:03:d1:88:9a:45:8f:9b:12:12: e9:75:6f:74:84:de:79:6e:78:67:92:6f:34:54:d1: 92:8c:c4:41:be:08:55:97:48:72:13:c9:11:2d:c6: 51:82:90:86:b6:1c:08:33:ae:26:53:bf:6c:93:4b: de:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7F:9A:3B:D3:72:AC:09:28:C7:6C:6A:BB:A9:5A:19:85:56:D9:6D X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153796.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.248.240.0/24 Signature Algorithm: sha256WithRSAEncryption 09:81:c4:06:8d:f6:d2:70:c4:6c:b7:0e:67:31:da:15:67:17: fc:24:5c:07:cd:82:89:94:c1:5e:04:fe:e9:3b:ba:f9:d3:df: 20:ec:f3:33:73:ee:24:b9:00:ce:0e:da:dc:da:b7:ca:15:1e: bf:86:bd:a2:63:a5:12:49:70:61:60:0b:1a:c5:10:a7:7c:d2: 79:38:aa:b1:30:34:a1:cc:70:0e:e8:f5:3a:d7:4a:f7:29:15: ec:d5:28:ad:55:3a:f1:47:a6:b9:cc:80:ec:4a:2f:76:8a:e6: 02:8a:94:0c:3f:85:5c:2f:20:bd:ab:97:93:44:36:ac:74:1c: 9a:5b:96:42:4a:fd:8e:96:4e:9d:43:b0:1a:4f:65:78:e5:be: 8a:bb:af:ba:7b:0d:0f:90:3d:67:da:5b:5c:d5:f6:59:13:7a: 21:a9:05:3c:ce:f9:9d:22:13:66:b9:0e:f5:93:f3:f0:37:10: 6a:ea:7b:f0:ec:73:41:24:0f:9f:e1:be:3a:f0:d0:c8:ed:6a: c5:eb:33:fa:5b:6d:70:c8:48:46:35:03:f9:91:d8:53:13:b6: 13:d8:8e:62:f3:a6:d2:90:8d:56:08:f3:bc:05:23:3a:71:7f: b6:bb:f9:89:8e:16:92:7a:b7:30:9e:cf:62:a0:d9:ac:01:99: 21:bb:57:58 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUCT1GQgi2tuoCS9DaJ35CNbY6syswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDQzMDA0NDUyOVoX DTI2MDQyOTA0NTAyOVowMzExMC8GA1UEAxMoQTQ3RjlBM0JEMzcyQUMwOTI4Qzc2 QzZBQkJBOTVBMTk4NTU2RDk2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJZ4Yd33Ch92QN88cPnRILJTaPz7b0aS09Bx2ax9zT7tqSE3YtcAEnOw5jcG NufJAD9NzTERFWjWziejOkLR8AhKTExXsSNHFMRbxB7vXhn7tfuXeSDYxJtbzhh8 JYmAntWHRKAlGLr7chDN6pZbG2yI/elyc97wvGw1tyU8oe9/bLUaKfnP41w9qysk tTwLgOvtgWmYzMPJI+5O20oSNQzcGn5Qk8bWNsktMRm1aElfZlEItaXB5vRlGrjw Uo4yGq5ctMnAgUCwA9GImkWPmxIS6XVvdITeeW54Z5JvNFTRkozEQb4IVZdIchPJ ES3GUYKQhrYcCDOuJlO/bJNL3u0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSkf5o7 03KsCSjHbGq7qVoZhVbZbTAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1Mzc5Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKH48DANBgkqhkiG9w0BAQsFAAOCAQEACYHEBo320nDEbLcOZzHa FWcX/CRcB82CiZTBXgT+6Tu6+dPfIOzzM3PuJLkAzg7a3Nq3yhUev4a9omOlEklw YWALGsUQp3zSeTiqsTA0ocxwDuj1OtdK9ykV7NUorVU68UemucyA7EovdormAoqU DD+FXC8gvauXk0Q2rHQcmluWQkr9jpZOnUOwGk9leOW+iruvunsND5A9Z9pbXNX2 WRN6IakFPM75nSITZrkO9ZPz8DcQaup78OxzQSQPn+G+OvDQyO1qxesz+lttcMhI RjUD+ZHYUxO2E9iOYvOm0pCNVgjzvAUjOnF/trv5iY4Wknq3MJ7PYqDZrAGZIbtX WA== -----END CERTIFICATE-----Generated at Sun Jun 29 21:41:38 2025 by rpki-client