$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153119.roa File: AS153119.roa (raw, json) Hash identifier: fpOil81slL95jophJFLfUdH7y9nzQ9DsfIiGu46eT00= Subject key identifier: B4:07:0C:FB:D7:4B:9C:BB:B7:0B:5A:2E:4F:B7:FC:3F:9F:68:A4:26 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3E202C0D6BFA2BD8B808965B30433F54C5B8EA90 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153119.roa Signing time: Wed 10 Sep 2025 07:00:00 +0000 ROA not before: Wed 10 Sep 2025 06:55:00 +0000 ROA not after: Wed 09 Sep 2026 07:00:00 +0000 asID: 153119 IP address blocks: 2001:df4:4e40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:20:2c:0d:6b:fa:2b:d8:b8:08:96:5b:30:43:3f:54:c5:b8:ea:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 10 06:55:00 2025 GMT Not After : Sep 9 07:00:00 2026 GMT Subject: CN=B4070CFBD74B9CBBB70B5A2E4FB7FC3F9F68A426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2c:8d:8c:9e:4d:a9:9f:37:b0:d6:ae:25:16: fe:d1:9b:41:86:c9:56:48:4d:e0:ab:03:d8:a0:7b: fe:1f:77:bd:6f:40:26:7a:69:d7:95:eb:aa:42:e0: 22:ac:ad:b1:01:af:fc:39:9a:0e:9a:e5:59:3c:54: 65:bd:0e:92:7a:8d:b8:cb:a0:5d:57:f0:51:60:ec: ec:da:a7:c1:a0:59:b0:e7:24:a7:dc:4f:c9:68:29: ef:bd:92:7c:df:59:db:6e:aa:35:6e:e1:4d:2d:8d: f7:5f:71:77:5a:1f:67:3f:f0:50:03:94:9e:ff:e5: dd:cd:f3:55:a3:0d:d5:a1:92:d2:28:13:8f:8c:00: 10:09:de:b4:e7:b6:6e:8b:0b:59:cd:70:be:51:42: 82:40:ba:9d:cb:d3:a0:b4:22:aa:ea:21:67:64:ce: 1b:73:c5:32:a5:2f:d4:24:35:89:51:ed:8b:d6:0e: c0:ea:b5:93:40:69:0d:87:3e:0b:37:96:a8:e2:85: bd:75:4a:c9:85:0a:c9:00:6a:5c:92:3e:f0:11:dc: 9d:49:19:a4:d8:90:b7:05:50:a2:94:c5:30:49:3f: cd:2a:18:ea:91:24:b7:75:0d:cd:dc:1b:5e:17:75: 31:00:22:bd:24:7d:d1:8f:57:74:1b:cd:bb:45:8d: 02:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:07:0C:FB:D7:4B:9C:BB:B7:0B:5A:2E:4F:B7:FC:3F:9F:68:A4:26 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153119.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:4e40::/48 Signature Algorithm: sha256WithRSAEncryption 03:1b:82:60:4a:83:13:b7:31:52:0d:f0:b2:a4:30:03:73:ff: 8d:13:f0:0b:9a:a9:bf:07:7f:82:43:93:6a:23:81:ca:99:20: 60:95:13:5e:5d:0f:43:8c:0c:e3:1b:c6:f0:e8:f2:11:37:07: 73:24:7b:78:ba:3b:50:da:f7:55:b3:14:00:b9:ed:a0:ad:93: 81:64:7e:63:12:8d:25:a0:4c:f2:f5:c4:f7:b7:89:63:a1:a9: d7:00:4b:67:4f:a1:f4:e5:55:10:06:6b:77:07:c8:05:8c:21: 59:b2:77:b7:eb:c1:c8:2c:a3:99:8d:8c:29:80:89:08:68:cc: 2e:23:7a:a2:ce:29:af:78:33:ce:5f:f3:cd:c9:23:42:9d:55: ab:d8:1c:b5:00:d2:fc:08:37:6f:7c:6b:78:10:15:dd:9a:65: bc:a7:e3:6d:09:5e:d8:01:54:ff:56:fb:8d:b7:80:4e:21:2f: fb:e9:00:a9:aa:b0:da:25:19:1a:e1:d6:a8:0c:4a:68:73:55: 04:40:6a:6a:54:a1:d7:8b:e7:5f:55:c2:6b:10:81:f8:13:70: 3a:be:71:6a:45:73:6a:34:26:da:7d:2a:57:c1:28:44:17:32: 2a:ba:21:6d:2c:05:9d:cf:71:81:44:b4:20:77:31:85:84:d5: cc:2f:74:8d -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUPiAsDWv6K9i4CJZbMEM/VMW46pAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkxMDA2NTUwMFoX DTI2MDkwOTA3MDAwMFowMzExMC8GA1UEAxMoQjQwNzBDRkJENzRCOUNCQkI3MEI1 QTJFNEZCN0ZDM0Y5RjY4QTQyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMwsjYyeTamfN7DWriUW/tGbQYbJVkhN4KsD2KB7/h93vW9AJnpp15XrqkLg IqytsQGv/DmaDprlWTxUZb0OknqNuMugXVfwUWDs7NqnwaBZsOckp9xPyWgp772S fN9Z226qNW7hTS2N919xd1ofZz/wUAOUnv/l3c3zVaMN1aGS0igTj4wAEAnetOe2 bosLWc1wvlFCgkC6ncvToLQiquohZ2TOG3PFMqUv1CQ1iVHti9YOwOq1k0BpDYc+ CzeWqOKFvXVKyYUKyQBqXJI+8BHcnUkZpNiQtwVQopTFMEk/zSoY6pEkt3UNzdwb Xhd1MQAivSR90Y9XdBvNu0WNAv8CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBS0Bwz7 10ucu7cLWi5Pt/w/n2ikJjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzExOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfROQDANBgkqhkiG9w0BAQsFAAOCAQEAAxuCYEqDE7cxUg3w sqQwA3P/jRPwC5qpvwd/gkOTaiOBypkgYJUTXl0PQ4wM4xvG8OjyETcHcyR7eLo7 UNr3VbMUALntoK2TgWR+YxKNJaBM8vXE97eJY6Gp1wBLZ0+h9OVVEAZrdwfIBYwh WbJ3t+vByCyjmY2MKYCJCGjMLiN6os4pr3gzzl/zzckjQp1Vq9gctQDS/Ag3b3xr eBAV3ZplvKfjbQle2AFU/1b7jbeATiEv++kAqaqw2iUZGuHWqAxKaHNVBEBqalSh 14vnX1XCaxCB+BNwOr5xakVzajQm2n0qV8EoRBcyKrohbSwFnc9xgUS0IHcxhYTV zC90jQ== -----END CERTIFICATE-----Generated at Mon Oct 20 03:04:46 2025 by rpki-client