$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152010.roa File: AS152010.roa (raw, json) Hash identifier: WoPw0uGzszGWDIO0EIDfd6VjRI7v0LzofvN+RvNy0Rg= Subject key identifier: 75:14:F1:A2:55:D4:ED:F2:2E:3B:6F:20:57:EC:FE:F8:22:EE:3C:02 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 11156CC410803171366C9ED4BC5FCA7D8CE1A278 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152010.roa Signing time: Thu 11 Sep 2025 09:00:00 +0000 ROA not before: Thu 11 Sep 2025 08:55:00 +0000 ROA not after: Thu 10 Sep 2026 09:00:00 +0000 asID: 152010 IP address blocks: 36.50.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:15:6c:c4:10:80:31:71:36:6c:9e:d4:bc:5f:ca:7d:8c:e1:a2:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 11 08:55:00 2025 GMT Not After : Sep 10 09:00:00 2026 GMT Subject: CN=7514F1A255D4EDF22E3B6F2057ECFEF822EE3C02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ec:40:49:58:fc:70:e4:49:99:2d:5f:00:37: ab:51:e7:19:75:a9:90:ae:8d:bb:e5:7d:74:ff:75: 63:5b:65:ef:f5:08:88:b4:21:dc:35:87:65:79:67: e2:10:2b:e9:3d:24:23:e4:5c:c3:05:06:60:03:a3: 25:12:ec:71:43:d5:eb:e8:3a:f6:79:66:3d:d5:8f: d9:75:e4:45:5f:d0:c0:bf:5f:f2:ad:37:aa:22:ce: a8:4a:1b:5d:a6:19:80:45:21:e7:6f:bf:93:39:b1: 84:0d:f7:18:2d:e5:6e:a0:7d:1b:33:1c:fc:f6:ea: fa:3b:73:26:da:5c:aa:9a:7b:e8:10:75:da:be:55: f8:22:00:77:ce:80:a1:f2:53:80:b0:ac:b8:f4:9b: 82:53:f9:31:03:b4:9f:56:ed:1c:b3:2f:48:6c:d0: 33:1f:1a:3a:b3:d2:09:18:08:b0:90:4d:20:bc:43: a1:c8:30:4d:25:ea:a2:d1:95:b9:f7:70:32:f2:24: d7:60:e4:b9:d2:ec:38:e5:80:92:d3:fd:0b:f6:c5: 28:e5:d2:bc:5d:06:15:5a:2e:dd:61:5a:8e:77:b0: c1:e4:62:3d:f6:ab:b7:45:6b:44:88:23:5b:2a:4c: 87:b6:25:31:72:b0:30:ba:76:50:04:ab:a1:d3:ab: fd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:14:F1:A2:55:D4:ED:F2:2E:3B:6F:20:57:EC:FE:F8:22:EE:3C:02 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152010.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.44.0/23 Signature Algorithm: sha256WithRSAEncryption 76:90:9f:c1:92:44:0d:f6:d8:6b:d5:e7:63:60:ac:5a:a8:9c: fc:d5:99:d9:8b:04:7c:cb:2e:84:ed:82:f2:59:0e:4e:bb:13: 65:83:20:3e:da:9d:e6:1a:e1:03:dc:64:77:bc:ad:6b:e5:44: 38:4c:05:3f:02:c4:e1:73:6b:86:4c:dc:86:7c:63:0f:44:5e: b9:7e:cb:f8:38:65:4e:66:18:ac:35:13:6a:0d:5a:43:65:91: 1c:30:a7:d3:36:98:a1:25:41:61:6d:a8:c9:0c:02:fb:b9:d4: be:62:c3:c8:a8:cb:de:ca:ba:98:65:85:55:47:31:e1:c1:88: 07:ba:1e:9d:c2:aa:f1:f7:4a:3d:46:14:86:f7:ec:65:94:f0: 0f:05:42:bf:6f:14:4f:27:0a:82:da:30:63:43:f1:c4:d7:77: 0d:d8:d7:c4:33:20:dc:df:f0:20:be:45:60:68:c6:9a:ae:d4: 24:e1:9c:5e:e8:fb:c5:2f:59:8a:04:dd:9d:f5:18:d3:34:ff: 46:e2:7a:3e:6b:c2:3f:bc:5f:fc:8f:62:02:02:94:b8:54:5e: 92:8e:ce:49:55:74:ca:c1:d9:84:e6:38:25:e3:05:e0:49:da: 89:e2:b3:a6:02:9c:0b:09:2d:a7:e4:d0:f1:0b:d5:50:7b:0f: 12:3a:80:21 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUERVsxBCAMXE2bJ7UvF/KfYzhongwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkxMTA4NTUwMFoX DTI2MDkxMDA5MDAwMFowMzExMC8GA1UEAxMoNzUxNEYxQTI1NUQ0RURGMjJFM0I2 RjIwNTdFQ0ZFRjgyMkVFM0MwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPsQElY/HDkSZktXwA3q1HnGXWpkK6Nu+V9dP91Y1tl7/UIiLQh3DWHZXln 4hAr6T0kI+RcwwUGYAOjJRLscUPV6+g69nlmPdWP2XXkRV/QwL9f8q03qiLOqEob XaYZgEUh52+/kzmxhA33GC3lbqB9GzMc/Pbq+jtzJtpcqpp76BB12r5V+CIAd86A ofJTgLCsuPSbglP5MQO0n1btHLMvSGzQMx8aOrPSCRgIsJBNILxDocgwTSXqotGV ufdwMvIk12DkudLsOOWAktP9C/bFKOXSvF0GFVou3WFajnewweRiPfart0VrRIgj WypMh7YlMXKwMLp2UASrodOr/YUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBR1FPGi VdTt8i47byBX7P74Iu48AjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MjAxMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEASQyLDANBgkqhkiG9w0BAQsFAAOCAQEAdpCfwZJEDfbYa9XnY2Cs Wqic/NWZ2YsEfMsuhO2C8lkOTrsTZYMgPtqd5hrhA9xkd7yta+VEOEwFPwLE4XNr hkzchnxjD0ReuX7L+DhlTmYYrDUTag1aQ2WRHDCn0zaYoSVBYW2oyQwC+7nUvmLD yKjL3sq6mGWFVUcx4cGIB7oencKq8fdKPUYUhvfsZZTwDwVCv28UTycKgtowY0Px xNd3DdjXxDMg3N/wIL5FYGjGmq7UJOGcXuj7xS9ZigTdnfUY0zT/RuJ6PmvCP7xf /I9iAgKUuFReko7OSVV0ysHZhOY4JeMF4EnaieKzpgKcCwktp+TQ8QvVUHsPEjqA IQ== -----END CERTIFICATE-----Generated at Mon Oct 20 05:57:06 2025 by rpki-client