$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147097.roa File: AS147097.roa (raw, json) Hash identifier: SqTaZTuVgoqBidsyDrLN3CbtzGBlClCppA7GL0ukQbs= Subject key identifier: A0:38:BF:2E:51:33:99:BD:05:0B:AF:54:72:AC:CE:6F:CE:26:E2:29 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 77941DAE97307F516BAB1575280DA6EDC899AC79 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147097.roa Signing time: Fri 15 Aug 2025 07:02:27 +0000 ROA not before: Fri 15 Aug 2025 06:57:27 +0000 ROA not after: Fri 14 Aug 2026 07:02:27 +0000 asID: 147097 IP address blocks: 2001:df2:4640::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 11:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:94:1d:ae:97:30:7f:51:6b:ab:15:75:28:0d:a6:ed:c8:99:ac:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 15 06:57:27 2025 GMT Not After : Aug 14 07:02:27 2026 GMT Subject: CN=A038BF2E513399BD050BAF5472ACCE6FCE26E229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:17:e7:ab:69:03:a2:bc:3c:71:48:3c:10:32: cb:1f:8b:7d:cc:8d:18:66:26:74:9d:50:e2:2d:19: d5:8e:b1:04:0e:34:18:0e:a4:df:a5:78:e1:b8:93: db:e7:69:49:41:ae:25:86:2c:f6:df:52:1c:6f:8b: b6:28:5b:6d:21:36:13:e3:06:ef:f0:6f:5d:e3:68: ff:02:ec:07:33:70:f0:57:c4:12:ae:fb:60:69:2c: 20:47:f2:f7:9e:de:be:3b:f0:76:ce:2e:e3:00:82: da:da:f9:21:7a:41:e8:49:8d:35:7c:d9:39:cc:0b: 3d:7a:6c:63:ae:03:f7:dd:c3:74:63:fe:6a:b5:7e: ee:c1:8e:bb:44:0c:42:0e:70:37:e0:86:78:bc:cd: 3b:8f:ad:b5:9b:18:1d:b2:0b:4d:90:6c:55:e5:67: 80:98:26:5e:06:e2:65:c6:4f:e3:78:1a:76:27:74: 99:13:6b:42:ed:6a:fe:f6:02:13:24:46:25:ef:83: 42:3a:47:92:05:c0:64:b3:94:e0:c7:a9:a6:47:1e: 97:3a:a8:06:c5:8a:6d:24:eb:ab:bc:7b:1e:0c:bf: df:a4:b2:a1:e7:9a:24:26:94:ca:75:90:5e:f5:ee: 25:e8:b4:03:29:cc:c6:a0:00:c7:34:36:a5:d0:74: 60:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:38:BF:2E:51:33:99:BD:05:0B:AF:54:72:AC:CE:6F:CE:26:E2:29 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147097.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:4640::/48 Signature Algorithm: sha256WithRSAEncryption 45:a9:a9:cf:a7:a9:f8:7f:89:19:59:b8:da:53:8d:97:06:32: fa:a6:59:99:13:ab:ad:a2:ff:28:ab:1e:97:53:92:c7:5c:7b: 2f:dc:42:c4:ca:7e:0b:17:ba:aa:77:91:34:53:21:f8:8c:c3: a5:c0:1a:5f:12:36:ea:75:c8:18:38:1a:8a:c9:d4:b1:69:60: e6:28:c8:15:3a:7b:48:84:ee:2b:99:e5:8d:e8:7c:10:18:54: a5:06:fc:92:ab:e5:f3:0b:41:9c:4d:a6:0c:a0:c5:61:4f:1d: 5f:cd:d3:3e:f5:ed:06:12:29:10:a0:fb:50:0c:37:e9:2e:87: ed:19:3d:65:f4:00:0a:18:77:b2:09:71:1b:be:a8:b5:01:fc: 36:cd:0a:e2:b4:64:fe:fd:7d:b9:57:d7:4f:e1:26:36:28:24: 5b:6e:35:a4:c9:a6:24:b2:6d:30:ff:10:4c:f5:b2:16:8f:fc: 88:17:2d:d3:9e:fb:42:0f:79:2a:cd:9d:bf:22:dc:e8:2e:44: 5c:55:59:a7:5e:ed:df:00:ec:f8:4a:8f:18:02:29:ee:14:66: d7:d1:17:08:d8:4e:0d:6e:6c:1e:57:57:f9:5a:25:aa:d1:df: 6f:34:0a:01:e2:2d:26:45:6f:71:1f:ce:69:fd:00:b8:aa:6b: c7:9e:30:e1 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUd5Qdrpcwf1FrqxV1KA2m7ciZrHkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxNTA2NTcyN1oX DTI2MDgxNDA3MDIyN1owMzExMC8GA1UEAxMoQTAzOEJGMkU1MTMzOTlCRDA1MEJB RjU0NzJBQ0NFNkZDRTI2RTIyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALAX56tpA6K8PHFIPBAyyx+LfcyNGGYmdJ1Q4i0Z1Y6xBA40GA6k36V44biT 2+dpSUGuJYYs9t9SHG+LtihbbSE2E+MG7/BvXeNo/wLsBzNw8FfEEq77YGksIEfy 957evjvwds4u4wCC2tr5IXpB6EmNNXzZOcwLPXpsY64D993DdGP+arV+7sGOu0QM Qg5wN+CGeLzNO4+ttZsYHbILTZBsVeVngJgmXgbiZcZP43gadid0mRNrQu1q/vYC EyRGJe+DQjpHkgXAZLOU4MeppkcelzqoBsWKbSTrq7x7Hgy/36SyoeeaJCaUynWQ XvXuJei0AynMxqAAxzQ2pdB0YKkCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBSgOL8u UTOZvQULr1RyrM5vzibiKTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0NzA5Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfJGQDANBgkqhkiG9w0BAQsFAAOCAQEARampz6ep+H+JGVm4 2lONlwYy+qZZmROrraL/KKsel1OSx1x7L9xCxMp+Cxe6qneRNFMh+IzDpcAaXxI2 6nXIGDgaisnUsWlg5ijIFTp7SITuK5nljeh8EBhUpQb8kqvl8wtBnE2mDKDFYU8d X83TPvXtBhIpEKD7UAw36S6H7Rk9ZfQAChh3sglxG76otQH8Ns0K4rRk/v19uVfX T+EmNigkW241pMmmJLJtMP8QTPWyFo/8iBct0577Qg95Ks2dvyLc6C5EXFVZp17t 3wDs+EqPGAIp7hRm19EXCNhODW5sHldX+VolqtHfbzQKAeItJkVvcR/Oaf0AuKpr x54w4Q== -----END CERTIFICATE-----Generated at Sat Aug 23 07:11:50 2025 by rpki-client