$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153670.roa File: AS153670.roa (raw, json) Hash identifier: VkKhxnttxqoRVa7jCOyG73pBQH35JDVM4rlmvqzSgJ0= Subject key identifier: 81:AB:93:E0:9F:1E:52:B3:06:D3:16:B4:AE:F3:D6:2C:0B:25:68:A5 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4888729666B43790F3D45BB0E7F8A329B70D97AB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153670.roa Signing time: Tue 19 Aug 2025 04:30:48 +0000 ROA not before: Tue 19 Aug 2025 04:25:48 +0000 ROA not after: Tue 18 Aug 2026 04:30:48 +0000 asID: 153670 IP address blocks: 163.61.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:88:72:96:66:b4:37:90:f3:d4:5b:b0:e7:f8:a3:29:b7:0d:97:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 19 04:25:48 2025 GMT Not After : Aug 18 04:30:48 2026 GMT Subject: CN=81AB93E09F1E52B306D316B4AEF3D62C0B2568A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7a:5e:78:35:f0:e2:e4:53:87:44:ba:e2:7a: 0d:11:25:87:bf:ff:30:71:48:8b:4f:bc:62:6e:dc: 49:86:3c:f6:c5:a2:6a:0b:cd:fe:56:e2:54:19:33: 08:30:e8:b8:f6:e2:b9:57:bd:28:95:62:db:fa:c2: 4f:49:2a:62:4c:a2:1d:f9:cf:8a:55:34:5d:c3:7a: 1f:8b:a6:88:ea:95:57:30:b9:08:c7:38:53:1f:90: f4:4f:10:f2:dd:fe:84:74:73:b0:26:02:60:74:cd: 03:b0:d8:50:05:d2:ab:e7:02:ac:e3:fc:76:ee:18: 55:12:e9:02:81:1e:a6:ac:60:12:fc:63:31:bc:c7: db:88:85:79:51:d3:57:2a:36:ba:c9:1a:ae:75:a5: 9f:20:11:e5:ce:15:39:07:19:e2:6c:03:86:c9:21: da:4f:72:00:5f:82:be:0b:2a:82:90:b0:cd:35:26: 1f:ba:d1:06:f0:35:f9:8a:f6:ef:6d:56:0a:95:94: 57:31:28:c3:14:6e:e3:71:41:06:cf:25:fe:d1:46: 29:75:1e:58:63:0e:b8:e5:be:8a:92:e8:21:58:d6: a6:fa:03:be:45:0c:1c:df:81:2b:d3:c3:58:a4:5c: 8b:c4:f0:ba:ac:dd:a2:b7:33:24:5a:1d:56:2a:ba: b3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:AB:93:E0:9F:1E:52:B3:06:D3:16:B4:AE:F3:D6:2C:0B:25:68:A5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153670.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.251.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:07:f7:8d:8b:23:83:8b:4c:d9:f6:fb:0c:1a:e4:47:e3:cb: 68:e2:2e:60:ee:f6:18:61:e0:24:86:3f:21:c9:8d:5e:7e:66: c9:ea:33:9d:92:69:6a:58:97:fa:da:e0:b1:7b:53:f8:52:9c: d0:3d:87:12:4c:91:9b:c8:85:9c:78:73:0a:cc:4a:30:66:1c: 34:96:6c:a8:3b:20:8c:d9:b8:53:53:1d:fd:f4:74:6b:56:dc: 90:76:79:6b:2e:0b:60:bc:0f:61:e2:50:6a:5a:8f:90:e7:e5: 3e:a9:06:f1:0b:91:56:e2:ef:c6:9b:d6:8f:01:e8:bc:0c:a3: 16:33:d4:19:ca:a5:1e:45:10:78:0d:8f:09:9a:90:d6:39:1b: 8e:df:68:11:13:75:93:8e:75:dc:4e:74:dc:5b:fb:d3:62:6b: e0:7e:f7:26:fe:a2:d0:c6:fe:44:1d:98:11:e3:e9:79:ee:b1: 65:bb:e7:b0:72:1c:50:90:55:5a:02:4f:bd:ca:7f:4a:24:0c: 0c:e0:97:2e:df:f4:1a:f1:22:b0:aa:0b:26:77:1e:ea:3e:86: d1:3a:aa:ab:8e:17:fb:48:da:eb:19:2f:c2:19:a6:fd:fd:00: 87:57:e0:a0:77:e6:e3:d2:55:da:2e:83:63:42:b1:9a:60:5b: c6:2f:b5:75 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUSIhylma0N5Dz1Fuw5/ijKbcNl6swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxOTA0MjU0OFoX DTI2MDgxODA0MzA0OFowMzExMC8GA1UEAxMoODFBQjkzRTA5RjFFNTJCMzA2RDMx NkI0QUVGM0Q2MkMwQjI1NjhBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALx6Xng18OLkU4dEuuJ6DRElh7//MHFIi0+8Ym7cSYY89sWiagvN/lbiVBkz CDDouPbiuVe9KJVi2/rCT0kqYkyiHfnPilU0XcN6H4umiOqVVzC5CMc4Ux+Q9E8Q 8t3+hHRzsCYCYHTNA7DYUAXSq+cCrOP8du4YVRLpAoEepqxgEvxjMbzH24iFeVHT Vyo2uskarnWlnyAR5c4VOQcZ4mwDhskh2k9yAF+CvgsqgpCwzTUmH7rRBvA1+Yr2 721WCpWUVzEowxRu43FBBs8l/tFGKXUeWGMOuOW+ipLoIVjWpvoDvkUMHN+BK9PD WKRci8TwuqzdorczJFodViq6s20CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSBq5Pg nx5SswbTFrSu89YsCyVopTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MzY3MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKM9+zANBgkqhkiG9w0BAQsFAAOCAQEAPAf3jYsjg4tM2fb7DBrk R+PLaOIuYO72GGHgJIY/IcmNXn5myeoznZJpaliX+trgsXtT+FKc0D2HEkyRm8iF nHhzCsxKMGYcNJZsqDsgjNm4U1Md/fR0a1bckHZ5ay4LYLwPYeJQalqPkOflPqkG 8QuRVuLvxpvWjwHovAyjFjPUGcqlHkUQeA2PCZqQ1jkbjt9oERN1k4513E503Fv7 02Jr4H73Jv6i0Mb+RB2YEePpee6xZbvnsHIcUJBVWgJPvcp/SiQMDOCXLt/0GvEi sKoLJnce6j6G0Tqqq44X+0ja6xkvwhmm/f0Ah1fgoHfm49JV2i6DY0KxmmBbxi+1 dQ== -----END CERTIFICATE-----Generated at Sat Aug 23 11:57:40 2025 by rpki-client