$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153664.roa File: AS153664.roa (raw, json) Hash identifier: 9H0IXV6CYOS/17hisM0DznRXDTInN6Ir9UUks0TCmrQ= Subject key identifier: F7:A4:9B:2B:8E:2D:25:DA:E7:69:A4:45:4C:D0:19:10:99:72:60:EE Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 686335C5EC82426CDAE51FF0EF0D750C68D3CEA4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153664.roa Signing time: Fri 02 May 2025 01:27:15 +0000 ROA not before: Fri 02 May 2025 01:22:15 +0000 ROA not after: Fri 01 May 2026 01:27:15 +0000 asID: 153664 IP address blocks: 163.61.244.0/23 maxlen: 24 2001:df5:24c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 14:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:63:35:c5:ec:82:42:6c:da:e5:1f:f0:ef:0d:75:0c:68:d3:ce:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 2 01:22:15 2025 GMT Not After : May 1 01:27:15 2026 GMT Subject: CN=F7A49B2B8E2D25DAE769A4454CD01910997260EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:88:d4:4d:a0:35:85:d8:96:aa:ae:bf:81:ac: 50:93:b1:5c:35:4f:9c:d9:bc:80:a9:3b:07:bc:49: ff:ab:27:20:37:f5:f6:37:23:6c:dd:a8:ca:6e:e2: b1:9d:43:65:f0:fe:ee:50:23:dc:13:0c:25:c8:05: 4b:db:dc:ec:7f:91:62:33:8c:0f:23:d9:ba:f4:9a: d6:80:b1:ff:fd:49:09:d0:9f:81:e5:70:db:5e:70: 9e:3c:3c:37:07:e6:a4:67:79:e8:1e:30:ee:a4:3f: 14:03:79:7d:23:69:ee:44:28:4b:e9:53:8b:07:81: db:10:f5:f3:42:64:11:01:f4:56:5a:77:41:5b:4d: c8:d1:ac:3b:19:df:88:af:dd:d9:2b:3a:dd:08:2f: 30:17:5d:38:d3:2b:a4:cd:13:3f:53:d6:63:c2:cc: 41:4b:9c:c5:7c:c8:b9:de:59:ca:c3:b2:77:b3:71: 6d:98:65:41:54:35:1d:0f:e4:1b:c5:b4:b2:72:44: 2e:69:a3:c2:34:c3:38:1b:96:6b:56:e9:77:b9:fe: 10:63:9e:40:eb:8f:f4:76:b2:d9:a4:3c:13:77:1b: d6:78:83:64:08:7e:47:ef:85:b4:9e:48:8e:d7:f9: a3:a7:57:42:28:9e:e4:54:57:c3:e5:93:f6:f2:3c: 6e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A4:9B:2B:8E:2D:25:DA:E7:69:A4:45:4C:D0:19:10:99:72:60:EE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153664.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.244.0/23 IPv6: 2001:df5:24c0::/48 Signature Algorithm: sha256WithRSAEncryption 8d:0e:de:b1:b2:59:84:dd:65:ef:b9:49:7f:8c:8f:a1:d0:8a: 23:a6:da:13:f8:8e:59:17:5d:d6:de:9e:c2:0e:40:88:91:02: b3:18:f3:7c:21:13:75:bb:31:32:dd:15:02:9b:48:94:46:bb: 7c:43:53:63:6e:17:c4:5c:99:7e:e8:dc:b8:ad:b6:a6:04:40: 13:96:b7:fb:c2:72:e2:17:9f:1f:7a:b6:17:cd:88:23:e8:5e: 99:1e:b7:75:4e:ca:37:6c:92:96:34:8b:be:b4:a9:38:62:c8: ef:4e:db:7d:d6:df:64:de:9e:da:e5:44:4f:80:9e:ea:bb:bd: e7:ef:aa:d7:7b:32:3b:69:5a:2a:25:d8:e6:a7:54:13:15:51: bd:44:cd:22:81:19:6d:84:a4:0a:c9:80:02:87:05:d2:30:e0: a2:9e:97:a5:f5:52:6e:29:0e:a7:54:d9:dc:18:9c:d1:37:39: 2c:6c:69:6b:bf:08:d8:86:24:10:0c:c2:cb:75:32:81:06:7e: c4:87:eb:91:47:a9:70:80:7e:c8:3d:f7:0c:32:50:0f:f8:41: 67:04:c0:9a:a6:cc:16:de:5c:de:4f:29:d1:5a:2a:92:b2:43: 9f:04:a4:13:23:0d:fb:12:9f:d1:2e:a8:1a:72:ab:82:46:83: ac:33:a9:6e -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUaGM1xeyCQmza5R/w7w11DGjTzqQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUwMjAxMjIxNVoX DTI2MDUwMTAxMjcxNVowMzExMC8GA1UEAxMoRjdBNDlCMkI4RTJEMjVEQUU3NjlB NDQ1NENEMDE5MTA5OTcyNjBFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKOI1E2gNYXYlqquv4GsUJOxXDVPnNm8gKk7B7xJ/6snIDf19jcjbN2oym7i sZ1DZfD+7lAj3BMMJcgFS9vc7H+RYjOMDyPZuvSa1oCx//1JCdCfgeVw215wnjw8 NwfmpGd56B4w7qQ/FAN5fSNp7kQoS+lTiweB2xD180JkEQH0Vlp3QVtNyNGsOxnf iK/d2Ss63QgvMBddONMrpM0TP1PWY8LMQUucxXzIud5ZysOyd7NxbZhlQVQ1HQ/k G8W0snJELmmjwjTDOBuWa1bpd7n+EGOeQOuP9Hay2aQ8E3cb1niDZAh+R++FtJ5I jtf5o6dXQiie5FRXw+WT9vI8bjsCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBT3pJsr ji0l2udppEVM0BkQmXJg7jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzY2NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAaM99DAPBAIAAjAJAwcAIAEN9STAMA0GCSqGSIb3DQEBCwUAA4IB AQCNDt6xslmE3WXvuUl/jI+h0IojptoT+I5ZF13W3p7CDkCIkQKzGPN8IRN1uzEy 3RUCm0iURrt8Q1NjbhfEXJl+6Ny4rbamBEATlrf7wnLiF58ferYXzYgj6F6ZHrd1 Tso3bJKWNIu+tKk4YsjvTtt91t9k3p7a5URPgJ7qu73n76rXezI7aVoqJdjmp1QT FVG9RM0igRlthKQKyYAChwXSMOCinpel9VJuKQ6nVNncGJzRNzksbGlrvwjYhiQQ DMLLdTKBBn7Eh+uRR6lwgH7IPfcMMlAP+EFnBMCapswW3lzeTynRWiqSskOfBKQT Iw37Ep/RLqgacquCRoOsM6lu -----END CERTIFICATE-----Generated at Mon May 5 13:40:19 2025 by rpki-client