$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153968.roa File: AS153968.roa (raw, json) Hash identifier: h8YJq7WtmDghAPVpHqC/P2vlWaDVYvr2mPGrT5qeKbc= Subject key identifier: F1:1A:69:9C:EC:05:A0:97:63:9B:93:63:1D:94:F6:C2:4E:19:48:DB Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 756E20BA00F7EBE16EC3348F12F0165D0BD7EBAB Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153968.roa Signing time: Wed 25 Jun 2025 07:51:17 +0000 ROA not before: Wed 25 Jun 2025 07:46:17 +0000 ROA not after: Wed 24 Jun 2026 07:51:17 +0000 asID: 153968 IP address blocks: 165.99.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 08:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:6e:20:ba:00:f7:eb:e1:6e:c3:34:8f:12:f0:16:5d:0b:d7:eb:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jun 25 07:46:17 2025 GMT Not After : Jun 24 07:51:17 2026 GMT Subject: CN=F11A699CEC05A097639B93631D94F6C24E1948DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5e:a8:3c:cc:54:18:d5:ae:cb:cb:86:0d:f7: ff:9a:59:9c:6d:cc:09:df:c1:4d:23:fb:2a:6d:e2: 80:32:7f:bc:f5:f8:9f:73:d2:51:63:30:fb:9f:96: e6:eb:e5:70:f2:be:e4:4d:d2:9a:d0:12:0f:39:80: c5:28:41:06:e7:ca:0b:a6:bc:d3:69:2e:7c:41:24: 7b:0a:9a:30:69:1a:b7:eb:27:7b:c0:c0:59:ec:7f: 4c:75:ea:95:64:1c:fe:6a:48:33:a4:6f:8d:3c:88: 03:95:72:08:e6:6f:c4:a0:d0:8d:89:c1:76:87:ae: 98:8c:da:9e:ac:d4:cf:aa:2f:b4:25:35:41:8f:c5: df:d3:8c:d4:5a:86:75:ff:06:56:b2:e4:ca:54:4e: 93:09:f2:cb:a7:a9:76:56:4f:63:45:ad:59:df:57: 54:9c:9f:58:4b:ac:7d:33:8f:cc:83:e6:02:d3:52: b8:ea:a1:14:39:7c:2e:d2:36:d8:37:9a:3d:ca:14: 77:aa:95:4d:ae:96:02:57:e1:84:bb:fa:61:3a:17: 1a:44:9e:94:b7:91:93:a8:3c:84:60:fa:db:6c:96: 21:2e:bd:4f:62:1e:e2:b8:c9:00:f7:7f:fd:71:e8: bf:67:22:d2:3e:43:3f:8f:95:f2:83:28:01:ec:14: e3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1A:69:9C:EC:05:A0:97:63:9B:93:63:1D:94:F6:C2:4E:19:48:DB X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153968.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.99.238.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:04:16:26:5f:d4:86:48:24:69:08:78:43:54:bc:e5:cc:8f: c3:e2:96:44:c6:cc:4e:e3:b9:8b:39:cb:47:c1:ca:1f:15:fb: c0:c9:30:d8:b0:8d:53:5b:44:79:73:f7:8a:82:fb:b6:f3:00: ec:78:91:9c:88:e9:51:43:f6:af:44:96:81:c6:0d:3b:d1:fa: 4e:80:cf:a8:a4:a4:71:23:e7:67:0b:89:59:e3:6a:ee:c9:8b: b7:76:07:4b:3c:87:a4:7e:76:90:89:68:aa:fc:2f:4c:19:60: db:01:39:45:50:f1:9f:b6:e6:14:34:09:2b:fe:b9:7f:6c:cd: aa:d9:c2:22:be:aa:6b:81:03:2e:b0:2d:a0:89:74:97:88:99: 82:e5:33:3d:bf:fc:98:e9:d7:81:85:bd:0c:25:d6:b9:0f:b6: 2e:3d:73:28:d9:31:78:20:6e:b3:e3:36:fe:b0:92:10:52:2a: 7c:84:1e:6a:1f:5e:6a:87:46:57:4d:0f:a3:9d:ec:5a:13:2a: f8:b3:84:ee:fc:79:be:bc:ff:08:09:88:95:ac:4a:2b:5b:f7: f4:63:73:31:53:17:62:30:6b:44:7a:1f:3d:2a:e0:fd:11:ec: f5:d6:c8:dd:ba:45:1e:fa:89:f6:a6:6a:9d:36:be:ab:d1:17: f6:03:fd:be -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUdW4gugD36+FuwzSPEvAWXQvX66swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDYyNTA3NDYxN1oX DTI2MDYyNDA3NTExN1owMzExMC8GA1UEAxMoRjExQTY5OUNFQzA1QTA5NzYzOUI5 MzYzMUQ5NEY2QzI0RTE5NDhEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALteqDzMVBjVrsvLhg33/5pZnG3MCd/BTSP7Km3igDJ/vPX4n3PSUWMw+5+W 5uvlcPK+5E3SmtASDzmAxShBBufKC6a802kufEEkewqaMGkat+sne8DAWex/THXq lWQc/mpIM6RvjTyIA5VyCOZvxKDQjYnBdoeumIzanqzUz6ovtCU1QY/F39OM1FqG df8GVrLkylROkwnyy6epdlZPY0WtWd9XVJyfWEusfTOPzIPmAtNSuOqhFDl8LtI2 2DeaPcoUd6qVTa6WAlfhhLv6YToXGkSelLeRk6g8hGD622yWIS69T2Ie4rjJAPd/ /XHov2ci0j5DP4+V8oMoAewU4w8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTxGmmc 7AWgl2Obk2MdlPbCThlI2zAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1Mzk2OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaVj7jANBgkqhkiG9w0BAQsFAAOCAQEATwQWJl/UhkgkaQh4Q1S8 5cyPw+KWRMbMTuO5iznLR8HKHxX7wMkw2LCNU1tEeXP3ioL7tvMA7HiRnIjpUUP2 r0SWgcYNO9H6ToDPqKSkcSPnZwuJWeNq7smLt3YHSzyHpH52kIloqvwvTBlg2wE5 RVDxn7bmFDQJK/65f2zNqtnCIr6qa4EDLrAtoIl0l4iZguUzPb/8mOnXgYW9DCXW uQ+2Lj1zKNkxeCBus+M2/rCSEFIqfIQeah9eaodGV00Po53sWhMq+LOE7vx5vrz/ CAmIlaxKK1v39GNzMVMXYjBrRHofPSrg/RHs9dbI3bpFHvqJ9qZqnTa+q9EX9gP9 vg== -----END CERTIFICATE-----Generated at Sun Jun 29 21:27:50 2025 by rpki-client