$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151588.roa File: AS151588.roa (raw, json) Hash identifier: iFGnKe6JbM1bQHCxd0VzH2HAr43r2SVKSbwGli2aoaI= Subject key identifier: FF:3F:CD:DE:99:5A:F0:84:20:F4:9A:E5:55:F4:46:6E:C5:82:37:AF Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 11A48C0838CACACDE1A373FE82211F00FCB7EB89 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151588.roa Signing time: Mon 20 Oct 2025 03:00:00 +0000 ROA not before: Mon 20 Oct 2025 02:55:00 +0000 ROA not after: Mon 19 Oct 2026 03:00:00 +0000 asID: 151588 IP address blocks: 2001:df3:6740::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a4:8c:08:38:ca:ca:cd:e1:a3:73:fe:82:21:1f:00:fc:b7:eb:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 20 02:55:00 2025 GMT Not After : Oct 19 03:00:00 2026 GMT Subject: CN=FF3FCDDE995AF08420F49AE555F4466EC58237AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ea:54:55:13:ec:72:0b:eb:b5:3b:c0:86:01: de:1e:3f:f8:da:3c:4d:71:bc:fc:4c:b1:22:a5:ce: 19:d9:95:22:5d:6b:6c:0f:86:0e:be:e0:86:b7:3e: 64:bb:72:05:c1:b3:73:58:5b:87:8a:48:d5:c1:bf: 70:c1:36:b4:6b:1f:96:4f:dc:5e:27:36:5f:cd:43: 32:8f:3e:66:e8:65:3b:eb:7f:dd:21:08:9c:b1:7c: dc:23:32:3c:43:18:b1:3a:05:c4:ea:8a:0c:7c:df: d0:35:5f:9e:68:fc:41:68:36:3f:1f:af:84:fb:29: 0a:3c:5e:37:e1:a3:b7:6d:e9:9c:21:1e:e4:6e:a6: 1f:4f:91:d2:1e:f2:f4:c8:87:7c:bc:f7:84:67:56: 00:4e:ce:3d:f6:90:12:cf:c5:56:0c:1a:37:14:e6: 79:1e:db:4f:26:aa:f6:aa:36:e1:5b:9a:ed:e6:53: a1:86:a1:14:d1:d7:72:53:39:2f:68:08:5e:cb:14: 5e:15:e1:3b:4c:ec:c5:12:8d:39:ee:d9:4d:2e:09: c8:0c:21:9e:fa:d7:be:d4:eb:d7:7f:65:8c:3b:92: 12:36:41:e3:e9:79:fa:d4:c2:8f:62:8e:82:13:e5: 7a:34:14:b1:2f:7e:30:49:61:12:7e:d8:30:fa:a7: e9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:3F:CD:DE:99:5A:F0:84:20:F4:9A:E5:55:F4:46:6E:C5:82:37:AF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151588.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:6740::/48 Signature Algorithm: sha256WithRSAEncryption 97:10:6e:6a:70:f1:15:ec:43:08:e9:de:2d:ff:c1:f1:5f:46: 35:ee:94:1d:53:4c:e5:31:7b:13:b6:24:11:2e:6a:92:59:8c: 06:eb:31:b3:97:59:0b:fd:d2:2c:25:e8:ed:a5:7e:a5:15:d8: a8:d3:bc:64:f3:86:a0:59:6b:45:9c:4b:77:3e:d5:8f:61:73: d1:1c:d3:24:e6:c0:05:bc:6f:18:1e:49:b7:53:e5:bd:99:76: 86:b0:21:ea:73:aa:7b:10:41:53:02:b1:f5:f6:26:d2:29:de: 6f:a2:74:a2:0b:e7:f5:ed:a1:5c:ef:c5:06:be:f5:6c:27:bd: ee:ce:d8:ec:c7:c7:2a:85:a1:29:0c:89:15:88:56:48:c9:bc: 3a:d7:81:0d:57:81:54:83:ee:da:0d:a6:c0:b2:a9:a5:f5:73: d0:13:f1:cd:d5:86:41:bb:78:65:26:cf:46:5f:1d:04:86:fe: 3e:fe:20:a5:bf:44:2a:e7:6f:e2:2f:d8:24:fb:61:1e:4c:5f: c8:71:be:da:a8:68:0b:43:7b:49:95:c0:30:67:f0:01:c8:ab: a3:9d:92:e0:b0:8e:8b:8e:59:08:f4:93:f9:e7:a5:97:52:93: f9:11:4d:96:34:29:42:87:0f:1b:04:78:88:d6:ab:2e:f0:91: ea:f5:4c:b3 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUEaSMCDjKys3ho3P+giEfAPy364kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAyMDAyNTUwMFoX DTI2MTAxOTAzMDAwMFowMzExMC8GA1UEAxMoRkYzRkNEREU5OTVBRjA4NDIwRjQ5 QUU1NTVGNDQ2NkVDNTgyMzdBRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALDqVFUT7HIL67U7wIYB3h4/+No8TXG8/EyxIqXOGdmVIl1rbA+GDr7ghrc+ ZLtyBcGzc1hbh4pI1cG/cME2tGsflk/cXic2X81DMo8+ZuhlO+t/3SEInLF83CMy PEMYsToFxOqKDHzf0DVfnmj8QWg2Px+vhPspCjxeN+Gjt23pnCEe5G6mH0+R0h7y 9MiHfLz3hGdWAE7OPfaQEs/FVgwaNxTmeR7bTyaq9qo24Vua7eZToYahFNHXclM5 L2gIXssUXhXhO0zsxRKNOe7ZTS4JyAwhnvrXvtTr139ljDuSEjZB4+l5+tTCj2KO ghPlejQUsS9+MElhEn7YMPqn6XsCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBT/P83e mVrwhCD0muVV9EZuxYI3rzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MTU4OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfNnQDANBgkqhkiG9w0BAQsFAAOCAQEAlxBuanDxFexDCOne Lf/B8V9GNe6UHVNM5TF7E7YkES5qklmMBusxs5dZC/3SLCXo7aV+pRXYqNO8ZPOG oFlrRZxLdz7Vj2Fz0RzTJObABbxvGB5Jt1PlvZl2hrAh6nOqexBBUwKx9fYm0ine b6J0ogvn9e2hXO/FBr71bCe97s7Y7MfHKoWhKQyJFYhWSMm8OteBDVeBVIPu2g2m wLKppfVz0BPxzdWGQbt4ZSbPRl8dBIb+Pv4gpb9EKudv4i/YJPthHkxfyHG+2qho C0N7SZXAMGfwAciro52S4LCOi45ZCPST+eell1KT+RFNljQpQocPGwR4iNarLvCR 6vVMsw== -----END CERTIFICATE-----Generated at Mon Oct 20 06:22:31 2025 by rpki-client