$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154123.roa File: AS154123.roa (raw, json) Hash identifier: 8wZd0E7BDG+n/5b+02H0M2SU6mic2YnGvAODQUAyi8o= Subject key identifier: 09:16:FD:EF:E9:29:E7:1B:D9:C6:DD:AA:3E:2A:5E:CB:28:D4:3E:64 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 6F395922ECD26223283E2C7F8D1A38097B018B52 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154123.roa Signing time: Tue 12 Aug 2025 02:27:26 +0000 ROA not before: Tue 12 Aug 2025 02:22:26 +0000 ROA not after: Tue 11 Aug 2026 02:27:26 +0000 asID: 154123 IP address blocks: 192.188.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:39:59:22:ec:d2:62:23:28:3e:2c:7f:8d:1a:38:09:7b:01:8b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Aug 12 02:22:26 2025 GMT Not After : Aug 11 02:27:26 2026 GMT Subject: CN=0916FDEFE929E71BD9C6DDAA3E2A5ECB28D43E64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1f:10:46:2a:19:7d:74:09:00:5b:e8:b0:06: ae:8b:52:a9:5f:a7:f8:ae:f8:ac:b1:69:9a:55:27: c7:06:b5:fd:94:b3:cd:04:1f:05:b0:9f:79:8f:43: 50:0f:2f:35:54:1d:f6:81:b6:15:2a:47:ae:fa:8c: cf:dc:3c:8b:6f:2a:88:09:b1:4a:8f:dd:64:c0:1e: c7:ec:9f:ee:8d:9b:4c:96:16:7c:b5:fe:bb:8b:cc: b5:d0:5f:35:ed:15:64:2f:53:10:1d:8f:4b:a9:b8: 6d:54:40:05:d0:81:78:f3:12:eb:32:bd:f2:13:b9: 3b:ce:f7:d4:ca:88:2a:26:8c:15:f9:05:59:51:0f: 29:e0:bd:29:d4:1c:bd:0d:65:02:56:05:3e:58:85: 81:0a:b0:02:56:67:c8:7c:67:ed:e7:2f:11:f6:2e: 42:7c:86:e1:27:2b:95:d1:17:9b:7d:2a:de:d6:8c: 18:6f:d5:ff:9b:3d:90:d1:09:34:07:3d:78:52:5d: a7:7d:4e:25:d9:0d:4d:84:a5:bd:45:09:98:09:f5: ad:05:11:7b:40:12:0c:0d:b5:c2:7d:d6:38:b0:51: 39:e7:b0:3b:7b:25:bc:0e:45:18:ae:28:19:0f:cb: 7e:99:05:2e:ef:77:a9:d5:82:1d:c2:b0:fa:ef:ce: d8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:16:FD:EF:E9:29:E7:1B:D9:C6:DD:AA:3E:2A:5E:CB:28:D4:3E:64 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154123.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.188.80.0/24 Signature Algorithm: sha256WithRSAEncryption 49:6f:18:41:08:2a:80:a9:f1:f9:e6:7d:c1:c0:26:17:03:33: 7d:26:bf:e1:ef:67:03:77:15:3c:1b:04:61:a6:eb:34:f5:f6: 2b:dd:62:dd:50:b2:ad:64:dc:95:23:75:8f:42:f1:07:55:4f: 86:ca:4a:ea:59:d3:b0:b9:7b:83:ab:bb:05:2e:1e:7a:17:fd: f7:6f:8a:0c:c1:4a:ec:ef:f4:d0:a7:5b:6c:78:84:64:35:78: b8:e5:52:d1:6c:59:b1:b2:e7:8e:b2:04:6b:bd:e6:81:96:b0: 6b:e1:bd:a0:03:6e:a8:86:af:0d:dd:9b:f1:47:64:3a:7f:2e: 15:38:d7:41:b8:b6:3b:bc:46:37:5c:10:41:cc:f7:32:40:b7: 7d:06:d8:9e:84:f2:39:66:e6:f0:dd:59:ba:d1:d0:fa:14:47: d0:4f:bd:60:1d:cc:55:2f:ab:72:a5:ca:38:56:42:66:90:e1: 83:49:33:ef:d8:d1:c5:b0:78:1d:d7:e6:7c:50:86:6e:1c:8f: 43:86:25:7a:57:32:80:92:a9:ec:52:e9:77:62:7f:17:3c:ce: a4:08:97:f3:32:a4:bd:a6:af:00:5c:06:1f:a0:d5:6e:5a:30: 33:45:9e:4a:14:45:f0:11:00:5d:d9:60:bb:06:d0:59:20:a8: fd:65:5c:44 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUbzlZIuzSYiMoPix/jRo4CXsBi1IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDgxMjAyMjIyNloX DTI2MDgxMTAyMjcyNlowMzExMC8GA1UEAxMoMDkxNkZERUZFOTI5RTcxQkQ5QzZE REFBM0UyQTVFQ0IyOEQ0M0U2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKgfEEYqGX10CQBb6LAGrotSqV+n+K74rLFpmlUnxwa1/ZSzzQQfBbCfeY9D UA8vNVQd9oG2FSpHrvqMz9w8i28qiAmxSo/dZMAex+yf7o2bTJYWfLX+u4vMtdBf Ne0VZC9TEB2PS6m4bVRABdCBePMS6zK98hO5O8731MqIKiaMFfkFWVEPKeC9KdQc vQ1lAlYFPliFgQqwAlZnyHxn7ecvEfYuQnyG4ScrldEXm30q3taMGG/V/5s9kNEJ NAc9eFJdp31OJdkNTYSlvUUJmAn1rQURe0ASDA21wn3WOLBROeewO3slvA5FGK4o GQ/LfpkFLu93qdWCHcKw+u/O2FcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQJFv3v 6SnnG9nG3ao+Kl7LKNQ+ZDAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1NDEyMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMC8UDANBgkqhkiG9w0BAQsFAAOCAQEASW8YQQgqgKnx+eZ9wcAm FwMzfSa/4e9nA3cVPBsEYabrNPX2K91i3VCyrWTclSN1j0LxB1VPhspK6lnTsLl7 g6u7BS4eehf992+KDMFK7O/00KdbbHiEZDV4uOVS0WxZsbLnjrIEa73mgZawa+G9 oANuqIavDd2b8UdkOn8uFTjXQbi2O7xGN1wQQcz3MkC3fQbYnoTyOWbm8N1ZutHQ +hRH0E+9YB3MVS+rcqXKOFZCZpDhg0kz79jRxbB4HdfmfFCGbhyPQ4YlelcygJKp 7FLpd2J/FzzOpAiX8zKkvaavAFwGH6DVblowM0WeShRF8BEAXdlguwbQWSCo/WVc RA== -----END CERTIFICATE-----Generated at Sat Aug 23 14:35:51 2025 by rpki-client