$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153658.roa File: AS153658.roa (raw, json) Hash identifier: gjEiEF+FEDv2onItqiJPDqgKUIl7unbviFH+a7qjerU= Subject key identifier: 92:7E:2E:D0:6E:CA:51:AA:58:F8:8E:33:EA:12:EF:A5:68:45:6C:00 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5CAD8CC210A9F9D5B5A9CE49BC50D6F44DF113FC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153658.roa Signing time: Mon 28 Apr 2025 06:30:52 +0000 ROA not before: Mon 28 Apr 2025 06:25:52 +0000 ROA not after: Mon 27 Apr 2026 06:30:52 +0000 asID: 153658 IP address blocks: 163.61.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 14:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ad:8c:c2:10:a9:f9:d5:b5:a9:ce:49:bc:50:d6:f4:4d:f1:13:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 28 06:25:52 2025 GMT Not After : Apr 27 06:30:52 2026 GMT Subject: CN=927E2ED06ECA51AA58F88E33EA12EFA568456C00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e8:99:90:07:ee:9d:38:b8:56:a8:05:e5:64: 5d:b3:e2:72:c3:98:a1:dc:a6:c8:b6:66:3c:c6:95: e0:67:a5:e4:82:75:21:b4:ba:0b:b2:fa:9b:4d:90: 4d:43:3d:9a:ee:c0:6e:c4:a3:24:a1:5b:c9:e1:7b: cf:57:51:b6:9a:27:18:50:e6:de:6c:0c:0e:b2:1a: d9:40:ad:c2:e0:d0:dc:8c:a9:5a:05:dd:9e:b3:2b: 2f:cf:65:7c:0e:c7:11:6b:01:d6:3c:52:77:cf:87: 0b:e8:3d:ce:8d:88:d0:57:c0:42:d7:81:4a:c1:95: 4f:7b:b9:63:53:92:84:c3:5f:40:d4:42:51:c1:f4: 51:97:b3:8c:94:ae:bc:fd:68:45:18:b5:fd:69:80: 05:83:fc:3a:f3:04:86:9b:e3:78:63:bd:ce:34:ef: bc:77:84:53:55:ed:60:a0:4a:aa:c8:86:e5:aa:29: 9e:20:41:7d:a4:33:8d:b2:43:76:ca:2b:88:60:eb: dc:b8:c4:1e:c8:03:f7:57:f6:c3:59:86:f7:b5:5e: f0:8b:27:65:07:96:5a:5f:87:a7:2d:03:13:37:15: b2:79:3d:6a:43:bb:93:c6:95:26:2a:b7:d0:52:1b: e1:9c:d9:95:2b:79:81:68:10:01:03:33:f2:49:7b: 82:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7E:2E:D0:6E:CA:51:AA:58:F8:8E:33:EA:12:EF:A5:68:45:6C:00 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153658.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.254.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:64:b9:66:83:70:91:ae:a0:b0:4b:0a:f2:44:df:7e:47:a2: fd:96:6e:61:05:e0:82:ce:08:2c:ed:b6:c4:a2:0a:66:95:13: 72:44:21:d3:91:a5:67:ec:e1:ad:c6:61:48:ee:87:6a:85:8c: c3:50:4c:f4:8e:3b:33:83:52:ac:8e:4f:1b:50:be:f1:54:6b: 94:a8:93:4f:24:ab:c3:96:2e:76:0d:aa:6c:63:eb:93:6e:25: 87:4f:30:d5:f9:1c:bc:01:92:86:09:1d:12:d0:a8:35:52:02: 2d:8b:09:17:d4:50:f5:58:7f:24:a0:9a:b3:1f:98:90:ee:45: 32:0b:a0:0a:b9:f7:23:63:8b:cc:aa:62:80:05:bf:9a:3c:fa: 82:fa:c7:10:67:a2:20:09:9d:07:39:86:6f:7f:14:13:85:93: 20:4c:df:46:94:38:34:9b:b3:2f:b7:d0:4f:7b:8e:7d:9d:cc: 62:87:2e:70:40:9c:33:ee:14:a2:4a:2b:e5:03:37:54:e0:d2: 85:a2:8f:7f:f1:d9:17:3d:0d:23:05:af:0a:62:84:96:37:6f: b1:ee:65:b1:00:ec:d3:ee:7d:54:5b:d3:24:fa:22:47:54:82: 05:e7:19:33:e4:90:fd:ac:b4:92:01:b2:2f:ca:25:d0:e9:e2: 27:16:2b:b1 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUXK2MwhCp+dW1qc5JvFDW9E3xE/wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQyODA2MjU1MloX DTI2MDQyNzA2MzA1MlowMzExMC8GA1UEAxMoOTI3RTJFRDA2RUNBNTFBQTU4Rjg4 RTMzRUExMkVGQTU2ODQ1NkMwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANzomZAH7p04uFaoBeVkXbPicsOYodymyLZmPMaV4Gel5IJ1IbS6C7L6m02Q TUM9mu7AbsSjJKFbyeF7z1dRtponGFDm3mwMDrIa2UCtwuDQ3IypWgXdnrMrL89l fA7HEWsB1jxSd8+HC+g9zo2I0FfAQteBSsGVT3u5Y1OShMNfQNRCUcH0UZezjJSu vP1oRRi1/WmABYP8OvMEhpvjeGO9zjTvvHeEU1XtYKBKqsiG5aopniBBfaQzjbJD dsoriGDr3LjEHsgD91f2w1mG97Ve8IsnZQeWWl+Hpy0DEzcVsnk9akO7k8aVJiq3 0FIb4ZzZlSt5gWgQAQMz8kl7gisCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSSfi7Q bspRqlj4jjPqEu+laEVsADAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzY1OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKM9/jANBgkqhkiG9w0BAQsFAAOCAQEAGmS5ZoNwka6gsEsK8kTf fkei/ZZuYQXggs4ILO22xKIKZpUTckQh05GlZ+zhrcZhSO6HaoWMw1BM9I47M4NS rI5PG1C+8VRrlKiTTySrw5Yudg2qbGPrk24lh08w1fkcvAGShgkdEtCoNVICLYsJ F9RQ9Vh/JKCasx+YkO5FMgugCrn3I2OLzKpigAW/mjz6gvrHEGeiIAmdBzmGb38U E4WTIEzfRpQ4NJuzL7fQT3uOfZ3MYocucECcM+4Uokor5QM3VODShaKPf/HZFz0N IwWvCmKEljdvse5lsQDs0+59VFvTJPoiR1SCBecZM+SQ/ay0kgGyL8ol0OniJxYr sQ== -----END CERTIFICATE-----Generated at Tue May 6 02:18:28 2025 by rpki-client