$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152363.roa File: AS152363.roa (raw, json) Hash identifier: hX/aoQxvOBw0ccJQ5vZdRxwCFK2bbWUtZxsXVdVsD0c= Subject key identifier: 01:4E:06:D9:3D:EA:83:4C:C9:C5:1A:F5:4C:42:09:6C:1F:65:48:4A Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0BAD10EF396CAC00D3292453359601499B72C3B6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152363.roa Signing time: Thu 25 Sep 2025 04:00:00 +0000 ROA not before: Thu 25 Sep 2025 03:55:00 +0000 ROA not after: Thu 24 Sep 2026 04:00:00 +0000 asID: 152363 IP address blocks: 2001:df4:1140::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ad:10:ef:39:6c:ac:00:d3:29:24:53:35:96:01:49:9b:72:c3:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 25 03:55:00 2025 GMT Not After : Sep 24 04:00:00 2026 GMT Subject: CN=014E06D93DEA834CC9C51AF54C42096C1F65484A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f7:a3:d5:9b:ac:8d:48:ef:26:93:80:37:6d: 72:ba:fb:61:8e:eb:44:ca:82:02:41:57:56:85:32: 5e:9e:34:c7:43:32:79:fd:5a:c0:bd:35:f6:dd:36: a4:f0:1d:88:c9:ea:d1:4a:ed:61:5a:66:4f:e5:ad: 74:9e:2f:7b:46:ed:ac:ad:d5:ca:fd:c3:d6:94:1f: 48:e2:74:c5:f6:97:6d:07:64:2e:17:11:a8:4e:1a: 8a:64:16:a2:45:c8:d8:6b:9b:e4:aa:e6:65:53:23: 9a:03:a3:d7:ee:0b:30:db:00:90:9a:51:80:aa:fa: a1:eb:f9:d8:24:06:22:fa:71:f5:ff:92:c0:86:c4: dc:f6:92:51:c7:b3:20:16:11:be:bc:bc:2f:23:a5: f2:38:fa:0b:55:62:3c:15:8a:0d:f4:7b:db:cd:38: 05:8d:56:8f:7e:c9:c6:b8:59:43:1b:5a:88:35:39: cd:e5:3d:81:19:e1:8c:c4:06:e8:60:57:8e:99:5a: 29:f2:d0:74:78:0a:7d:59:af:eb:c9:e6:b4:af:e4: a2:ca:9e:ed:61:43:a3:44:d1:88:cc:aa:92:13:57: e7:55:4d:e3:a7:47:17:8d:0b:cb:1b:35:ec:d3:75: cf:e2:c8:91:40:88:6d:67:81:5d:02:61:3f:2c:cd: 49:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:4E:06:D9:3D:EA:83:4C:C9:C5:1A:F5:4C:42:09:6C:1F:65:48:4A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152363.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:1140::/48 Signature Algorithm: sha256WithRSAEncryption 58:14:a0:54:11:38:c0:37:5c:1e:43:03:aa:1d:5a:ab:52:2b: d3:ce:0b:65:40:3d:8a:94:cb:d8:b8:b0:b9:21:5f:95:db:f9: 15:0e:65:45:93:fc:1f:d7:9d:b6:73:5f:5b:46:33:31:54:c0: fc:c4:7e:73:81:cd:8c:2c:57:eb:6f:6d:0a:31:c3:97:60:28: c5:fe:12:85:0d:02:8d:58:37:ef:cd:73:1f:55:44:64:eb:d9: b6:76:e1:a1:33:67:8d:39:db:bd:41:ee:60:f7:14:a4:7e:c3: 7b:ac:14:ca:05:77:cc:1d:3d:75:7b:d9:3d:bf:f1:94:53:ad: 96:79:18:d3:fd:b7:ab:85:7d:5c:f8:4a:4e:6f:f5:19:6b:66: ff:cd:09:15:ed:1f:2a:3e:c3:65:fa:80:01:c5:d7:43:c8:6b: 45:8c:72:a6:4a:d0:72:c4:db:fd:b0:b9:d0:93:1b:2d:16:73: 28:83:27:ad:a5:f9:2e:a0:32:5f:1f:c2:f7:32:95:e7:0e:e0: 77:1b:35:a1:7e:14:fd:c0:b7:38:cd:db:ea:7a:d2:71:cd:79: 45:29:c1:aa:d9:69:f5:4a:e0:3d:de:86:0c:06:8b:1a:53:36: d1:00:f8:1b:83:b1:3e:6e:a9:3a:d7:bb:cb:b7:bb:4f:b5:22: fa:96:96:3b -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUC60Q7zlsrADTKSRTNZYBSZtyw7YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkyNTAzNTUwMFoX DTI2MDkyNDA0MDAwMFowMzExMC8GA1UEAxMoMDE0RTA2RDkzREVBODM0Q0M5QzUx QUY1NEM0MjA5NkMxRjY1NDg0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN73o9WbrI1I7yaTgDdtcrr7YY7rRMqCAkFXVoUyXp40x0Myef1awL019t02 pPAdiMnq0UrtYVpmT+WtdJ4ve0btrK3Vyv3D1pQfSOJ0xfaXbQdkLhcRqE4aimQW okXI2Gub5KrmZVMjmgOj1+4LMNsAkJpRgKr6oev52CQGIvpx9f+SwIbE3PaSUcez IBYRvry8LyOl8jj6C1ViPBWKDfR72804BY1Wj37JxrhZQxtaiDU5zeU9gRnhjMQG 6GBXjplaKfLQdHgKfVmv68nmtK/kosqe7WFDo0TRiMyqkhNX51VN46dHF40Lyxs1 7NN1z+LIkUCIbWeBXQJhPyzNSa0CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQBTgbZ PeqDTMnFGvVMQglsH2VISjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MjM2My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfQRQDANBgkqhkiG9w0BAQsFAAOCAQEAWBSgVBE4wDdcHkMD qh1aq1Ir084LZUA9ipTL2LiwuSFfldv5FQ5lRZP8H9edtnNfW0YzMVTA/MR+c4HN jCxX629tCjHDl2Aoxf4ShQ0CjVg3781zH1VEZOvZtnbhoTNnjTnbvUHuYPcUpH7D e6wUygV3zB09dXvZPb/xlFOtlnkY0/23q4V9XPhKTm/1GWtm/80JFe0fKj7DZfqA AcXXQ8hrRYxypkrQcsTb/bC50JMbLRZzKIMnraX5LqAyXx/C9zKV5w7gdxs1oX4U /cC3OM3b6nrScc15RSnBqtlp9UrgPd6GDAaLGlM20QD4G4OxPm6pOte7y7e7T7Ui +paWOw== -----END CERTIFICATE-----Generated at Mon Oct 20 05:56:25 2025 by rpki-client