$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154097.roa File: AS154097.roa (raw, json) Hash identifier: kZNHTnfoE8OrNr3WlKIk6HgZO06z6g7JIhMzzHn9ztA= Subject key identifier: 00:1B:56:25:4D:4A:BA:CE:26:48:CF:EE:65:D5:9D:E5:C5:3E:9E:B2 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 49AFF8BF246DBF78A007F7C27B63F9E7CCB28921 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154097.roa Signing time: Fri 08 Aug 2025 02:39:04 +0000 ROA not before: Fri 08 Aug 2025 02:34:04 +0000 ROA not after: Fri 07 Aug 2026 02:39:04 +0000 asID: 154097 IP address blocks: 165.99.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:af:f8:bf:24:6d:bf:78:a0:07:f7:c2:7b:63:f9:e7:cc:b2:89:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Aug 8 02:34:04 2025 GMT Not After : Aug 7 02:39:04 2026 GMT Subject: CN=001B56254D4ABACE2648CFEE65D59DE5C53E9EB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2c:c6:49:10:74:39:0b:58:88:7b:0b:e8:52: 86:2c:1e:ec:32:99:95:57:cb:c3:c5:63:fe:ce:da: 80:b8:63:fb:14:f2:e7:72:9f:fc:a4:9a:98:5f:9c: 8b:05:4c:90:fc:22:8a:00:59:a3:e3:45:fd:03:23: 95:2e:a8:89:72:15:35:69:11:50:d6:40:e1:30:d0: c9:15:82:b9:7d:95:b8:95:5e:24:57:7e:35:a3:1e: 1f:b4:a8:f7:0a:bc:da:b6:4d:23:f2:1b:4a:17:fa: a4:b2:91:12:97:38:63:43:aa:94:a9:41:5d:f4:ca: 03:39:04:4e:3a:16:11:70:1c:a4:0f:c2:8f:bb:a5: af:40:b4:75:ce:4d:9d:93:83:a1:80:92:76:01:b7: bd:db:5e:67:76:3d:50:67:ec:9a:0d:ff:3c:86:36: 88:30:bf:73:ab:e3:09:c7:23:d1:3b:46:aa:c0:be: af:d4:dc:76:eb:6f:b4:13:73:29:08:2a:b8:42:51: d5:82:93:28:78:dd:7e:bc:ab:2d:81:ac:e5:c7:16: 8c:d5:55:93:d8:a5:77:72:fb:f5:bd:7a:07:97:24: d9:b3:c1:a3:9d:4b:72:ff:27:be:9c:c0:09:14:51: f3:dc:52:30:a8:d8:ff:39:19:4b:86:87:7c:49:cd: 83:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1B:56:25:4D:4A:BA:CE:26:48:CF:EE:65:D5:9D:E5:C5:3E:9E:B2 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154097.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.99.98.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:72:d3:cf:7d:a5:6f:53:99:4a:e0:9f:70:60:fa:0d:56:76: c7:fe:81:77:b2:d0:fa:bb:e4:6f:77:c9:cd:fe:64:58:81:2c: dc:c6:e7:63:24:b8:a8:7e:0e:61:22:fb:5e:c4:17:fc:d1:21: 4c:06:f0:e7:72:c4:9e:49:23:c8:b5:bb:6a:b5:ec:c4:e2:db: 63:90:a6:68:aa:f5:1f:77:7a:1d:05:45:6e:1e:06:c7:69:db: 5c:15:d5:d5:b9:77:e2:f2:c4:95:34:92:89:26:42:0c:66:5e: c0:f7:b9:0d:23:27:79:32:6f:a0:90:67:0b:88:32:24:c9:19: c8:63:bf:bb:02:75:5b:d2:03:1a:4e:cc:61:3c:d9:f0:a2:8b: ba:ac:53:fb:7e:ae:a6:cf:94:1d:61:b9:19:a1:60:b6:e6:a0: d8:0b:4a:6f:b5:f3:66:6f:c8:78:73:f7:5c:fd:19:b8:88:4f: 4e:12:2d:bd:35:4d:7d:f7:73:c5:0e:1a:8f:51:1c:d7:02:17: d6:90:75:0f:43:c5:75:bf:7e:90:15:af:b4:79:4a:fd:50:00: 44:9c:3c:6d:5f:24:ce:ac:df:ab:75:f9:61:1a:49:02:0a:90: d7:f6:c1:ef:ed:1c:7c:aa:16:8e:61:ad:f9:bb:0b:b7:f4:40: 4f:5a:7c:35 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUSa/4vyRtv3igB/fCe2P558yyiSEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDgwODAyMzQwNFoX DTI2MDgwNzAyMzkwNFowMzExMC8GA1UEAxMoMDAxQjU2MjU0RDRBQkFDRTI2NDhD RkVFNjVENTlERTVDNTNFOUVCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUsxkkQdDkLWIh7C+hShiwe7DKZlVfLw8Vj/s7agLhj+xTy53Kf/KSamF+c iwVMkPwiigBZo+NF/QMjlS6oiXIVNWkRUNZA4TDQyRWCuX2VuJVeJFd+NaMeH7So 9wq82rZNI/IbShf6pLKREpc4Y0OqlKlBXfTKAzkETjoWEXAcpA/Cj7ulr0C0dc5N nZODoYCSdgG3vdteZ3Y9UGfsmg3/PIY2iDC/c6vjCccj0TtGqsC+r9TcdutvtBNz KQgquEJR1YKTKHjdfryrLYGs5ccWjNVVk9ild3L79b16B5ck2bPBo51Lcv8nvpzA CRRR89xSMKjY/zkZS4aHfEnNg00CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQAG1Yl TUq6ziZIz+5l1Z3lxT6esjAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1NDA5Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKVjYjANBgkqhkiG9w0BAQsFAAOCAQEAC3LTz32lb1OZSuCfcGD6 DVZ2x/6Bd7LQ+rvkb3fJzf5kWIEs3MbnYyS4qH4OYSL7XsQX/NEhTAbw53LEnkkj yLW7arXsxOLbY5CmaKr1H3d6HQVFbh4Gx2nbXBXV1bl34vLElTSSiSZCDGZewPe5 DSMneTJvoJBnC4gyJMkZyGO/uwJ1W9IDGk7MYTzZ8KKLuqxT+36ups+UHWG5GaFg tuag2AtKb7XzZm/IeHP3XP0ZuIhPThItvTVNffdzxQ4aj1Ec1wIX1pB1D0PFdb9+ kBWvtHlK/VAARJw8bV8kzqzfq3X5YRpJAgqQ1/bB7+0cfKoWjmGt+bsLt/RAT1p8 NQ== -----END CERTIFICATE-----Generated at Sat Aug 23 14:36:29 2025 by rpki-client