$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153978.roa File: AS153978.roa (raw, json) Hash identifier: ynwUaAvOYXbdIEWAITa5bMKYFAHBqrKZXIw90Bj3p2E= Subject key identifier: A3:33:C8:74:88:BA:68:33:8E:CC:65:32:6F:A7:2E:2D:36:FA:2D:FA Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 3C49E35D95D4E0611B1839B84E432D5214FB36DC Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153978.roa Signing time: Thu 11 Sep 2025 02:31:36 +0000 ROA not before: Thu 11 Sep 2025 02:26:36 +0000 ROA not after: Thu 10 Sep 2026 02:31:36 +0000 asID: 153978 IP address blocks: 165.99.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:49:e3:5d:95:d4:e0:61:1b:18:39:b8:4e:43:2d:52:14:fb:36:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Sep 11 02:26:36 2025 GMT Not After : Sep 10 02:31:36 2026 GMT Subject: CN=A333C87488BA68338ECC65326FA72E2D36FA2DFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f7:e7:bc:d0:33:73:df:50:ea:5f:ac:2e:2f: fb:9e:23:d3:0f:ce:14:a1:c6:48:eb:83:52:82:c8: 7a:ec:dc:c9:de:ae:7a:7d:2f:1d:fd:a1:47:06:9e: 30:ea:39:fa:73:47:33:a4:17:22:ed:ea:e9:4e:f1: 31:83:51:ee:8c:be:62:ed:eb:3f:d3:3e:03:a4:ac: 3a:88:be:35:dc:d3:01:d7:dc:57:0b:15:5c:4e:56: ba:d4:a2:1a:c1:cd:28:0e:2b:44:c3:48:39:64:25: bc:8e:e9:8b:3f:5a:39:40:f7:72:cb:f0:f6:57:25: e9:be:04:6e:d6:5f:dd:2b:3a:7a:d6:6e:31:f2:bd: d3:be:00:23:c0:70:69:b7:07:6c:1b:43:18:7f:a3: d5:2b:c0:08:45:4b:d5:16:45:9b:cc:7b:f2:82:24: e3:d4:81:fb:fa:d3:0f:53:f4:90:ba:08:3a:3e:2e: 6c:43:cb:0d:1a:5c:cf:bb:04:95:78:8b:96:87:7e: a0:20:2a:98:44:6b:0e:bc:df:09:c8:1d:f1:0f:09: f5:50:42:57:41:0d:56:eb:e0:04:32:2b:db:a8:88: 95:f0:93:8d:4d:98:dd:6f:cf:46:01:60:60:3d:e1: a6:72:72:7d:38:ef:84:e1:20:f5:93:85:be:e9:a0: 01:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:33:C8:74:88:BA:68:33:8E:CC:65:32:6F:A7:2E:2D:36:FA:2D:FA X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153978.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.99.126.0/23 Signature Algorithm: sha256WithRSAEncryption 16:6e:dd:2b:a5:ac:6b:bb:ca:cc:d4:2c:53:de:c7:a8:11:b5: f7:4b:16:10:4e:67:15:c1:2d:22:64:54:0f:21:41:e7:46:7d: b9:a3:b4:84:51:28:ff:43:5d:47:ed:d1:84:d3:56:94:b7:b9: fc:e9:e9:36:b8:43:02:90:c7:52:55:a1:c9:cf:ca:10:e9:11: ca:d5:8d:9c:14:73:58:39:46:83:5a:9d:ca:58:c3:4a:0f:26: 72:cf:3c:b9:e0:8a:83:e7:87:be:ac:17:2e:b8:0b:58:64:a7: 42:7a:4f:72:08:d8:3c:12:45:4f:df:53:46:46:3f:78:6e:14: 52:89:fc:ea:43:ef:da:08:a4:d6:17:eb:70:9d:30:49:39:d8: 2e:08:a7:0e:7c:c8:31:f5:aa:f0:27:72:e2:b1:ba:65:52:11: 95:0f:d1:6c:99:da:2f:aa:05:82:bd:de:dd:45:9f:df:34:5e: 34:03:79:27:09:46:b5:10:fa:1f:4f:9c:4b:85:67:7d:ff:f2: 28:51:f8:3c:cc:66:73:e5:43:29:e8:99:e7:ee:4f:b3:c7:cf: b8:df:64:dd:ae:92:a4:4e:5c:31:6f:19:8a:00:3d:98:b5:94: c2:65:c2:53:77:52:0b:2a:f4:e8:04:b4:39:b7:34:29:6f:3c: a5:af:18:7f -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUPEnjXZXU4GEbGDm4TkMtUhT7NtwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDkxMTAyMjYzNloX DTI2MDkxMDAyMzEzNlowMzExMC8GA1UEAxMoQTMzM0M4NzQ4OEJBNjgzMzhFQ0M2 NTMyNkZBNzJFMkQzNkZBMkRGQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO7357zQM3PfUOpfrC4v+54j0w/OFKHGSOuDUoLIeuzcyd6uen0vHf2hRwae MOo5+nNHM6QXIu3q6U7xMYNR7oy+Yu3rP9M+A6SsOoi+NdzTAdfcVwsVXE5WutSi GsHNKA4rRMNIOWQlvI7piz9aOUD3csvw9lcl6b4EbtZf3Ss6etZuMfK9074AI8Bw abcHbBtDGH+j1SvACEVL1RZFm8x78oIk49SB+/rTD1P0kLoIOj4ubEPLDRpcz7sE lXiLlod+oCAqmERrDrzfCcgd8Q8J9VBCV0ENVuvgBDIr26iIlfCTjU2Y3W/PRgFg YD3hpnJyfTjvhOEg9ZOFvumgAR8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSjM8h0 iLpoM47MZTJvpy4tNvot+jAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1Mzk3OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaVjfjANBgkqhkiG9w0BAQsFAAOCAQEAFm7dK6Wsa7vKzNQsU97H qBG190sWEE5nFcEtImRUDyFB50Z9uaO0hFEo/0NdR+3RhNNWlLe5/OnpNrhDApDH UlWhyc/KEOkRytWNnBRzWDlGg1qdyljDSg8mcs88ueCKg+eHvqwXLrgLWGSnQnpP cgjYPBJFT99TRkY/eG4UUon86kPv2gik1hfrcJ0wSTnYLginDnzIMfWq8Cdy4rG6 ZVIRlQ/RbJnaL6oFgr3e3UWf3zReNAN5JwlGtRD6H0+cS4Vnff/yKFH4PMxmc+VD KeiZ5+5Ps8fPuN9k3a6SpE5cMW8ZigA9mLWUwmXCU3dSCyr06AS0Obc0KW88pa8Y fw== -----END CERTIFICATE-----Generated at Mon Oct 20 15:47:12 2025 by rpki-client