$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153877.roa File: AS153877.roa (raw, json) Hash identifier: XRDuYoHl5SeKsROsmRWpXnPtkUJtxfKCFaPTUzni/gg= Subject key identifier: F7:3E:45:02:37:1C:C4:89:43:38:86:58:35:4D:5F:57:6E:3F:2C:F8 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7B4FCEE0EAD6D76A32D41B5476C4BAC423EEC87A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153877.roa Signing time: Mon 16 Jun 2025 06:29:57 +0000 ROA not before: Mon 16 Jun 2025 06:24:57 +0000 ROA not after: Mon 15 Jun 2026 06:29:57 +0000 asID: 153877 IP address blocks: 2001:df5:8440::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:4f:ce:e0:ea:d6:d7:6a:32:d4:1b:54:76:c4:ba:c4:23:ee:c8:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 16 06:24:57 2025 GMT Not After : Jun 15 06:29:57 2026 GMT Subject: CN=F73E4502371CC48943388658354D5F576E3F2CF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:76:3b:27:75:fa:97:1e:3f:51:ab:5c:cd:df: 28:a0:89:51:c6:fd:e3:24:e9:37:2e:7f:67:c7:e1: 44:49:02:6f:d1:20:67:ca:d2:b6:2f:1f:03:f1:20: 85:bc:4f:dc:0d:ba:4d:00:37:50:5d:e2:3a:8d:18: 65:47:b0:7b:40:18:81:e9:97:bd:54:a1:32:70:57: bb:a7:90:0b:17:8b:73:84:d7:5c:50:39:1a:51:85: d4:fb:65:e9:1f:c4:a7:e9:bc:f9:bd:6c:09:13:c4: 09:87:12:85:d6:64:76:05:b0:03:3f:1d:7c:5e:18: b1:aa:0e:a1:1c:16:29:23:4e:ca:85:3d:ac:c1:f8: a7:c7:f2:4f:b5:79:48:8d:76:43:d4:4c:98:2e:3e: 24:c8:64:1d:1b:7c:26:8a:18:f5:8e:16:22:db:07: e0:0f:e4:c8:5e:49:e5:e1:0a:51:1c:17:22:7c:f8: 18:8e:b2:b1:f9:7f:61:94:e1:b2:e5:d9:99:9d:fe: e6:8c:09:98:88:05:42:71:06:13:5c:23:21:db:6b: 62:40:24:03:1c:c0:c9:0c:c4:e2:cf:cf:93:53:d7: fd:8f:ba:48:fa:4a:6a:8f:96:ca:42:f1:b8:05:6d: 1b:01:f0:9d:00:68:c8:1a:b5:b7:ad:a3:28:54:ae: 0f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:3E:45:02:37:1C:C4:89:43:38:86:58:35:4D:5F:57:6E:3F:2C:F8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153877.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:8440::/48 Signature Algorithm: sha256WithRSAEncryption 74:15:f4:1a:40:45:16:0d:a0:ff:b2:26:06:e6:5e:22:87:25: eb:fc:91:c1:a8:66:3a:81:4a:11:f9:a9:2c:2f:4f:db:52:18: 8c:23:db:bb:1f:1f:dd:62:82:4b:aa:be:f7:b7:00:59:b5:d1: a2:98:5c:52:96:7b:32:ea:10:f9:63:ee:ac:a3:8a:0a:22:e6: b1:7b:3a:3d:3d:17:c9:d2:f3:5a:48:35:32:ac:75:9c:49:e5: bd:11:72:bb:f1:ef:47:33:a1:12:68:8b:42:44:c8:cc:b0:27: e9:98:6e:c0:ad:af:f6:96:b6:1a:e7:55:92:dd:d8:56:50:74: 2d:e7:f8:50:a6:da:7b:99:12:ba:fa:94:76:ae:23:c8:89:9b: 42:da:26:c9:9a:a6:08:e6:ee:e9:0b:ce:66:9f:0f:65:88:d5: 4a:66:dd:cd:62:ed:15:95:de:d8:8a:e3:8a:2f:d7:a3:d5:36: 56:06:0e:10:67:0f:87:68:56:04:04:33:50:59:4e:14:fe:29: 2e:46:3b:e5:b2:2a:e3:fc:b7:1c:65:60:14:cb:69:cc:a9:cd: ef:9d:e5:78:3b:ea:4c:55:8e:83:d9:c5:5c:03:cd:b2:62:fe: 79:e8:33:e9:40:b4:79:29:fd:32:f8:fc:56:a8:5c:64:9c:bc: 3f:5d:a7:84 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUe0/O4OrW12oy1BtUdsS6xCPuyHowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYxNjA2MjQ1N1oX DTI2MDYxNTA2Mjk1N1owMzExMC8GA1UEAxMoRjczRTQ1MDIzNzFDQzQ4OTQzMzg4 NjU4MzU0RDVGNTc2RTNGMkNGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALR2Oyd1+pceP1GrXM3fKKCJUcb94yTpNy5/Z8fhREkCb9EgZ8rSti8fA/Eg hbxP3A26TQA3UF3iOo0YZUewe0AYgemXvVShMnBXu6eQCxeLc4TXXFA5GlGF1Ptl 6R/Ep+m8+b1sCRPECYcShdZkdgWwAz8dfF4YsaoOoRwWKSNOyoU9rMH4p8fyT7V5 SI12Q9RMmC4+JMhkHRt8JooY9Y4WItsH4A/kyF5J5eEKURwXInz4GI6ysfl/YZTh suXZmZ3+5owJmIgFQnEGE1wjIdtrYkAkAxzAyQzE4s/Pk1PX/Y+6SPpKao+WykLx uAVtGwHwnQBoyBq1t62jKFSuD+8CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBT3PkUC NxzEiUM4hlg1TV9Xbj8s+DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1Mzg3Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfWEQDANBgkqhkiG9w0BAQsFAAOCAQEAdBX0GkBFFg2g/7Im BuZeIocl6/yRwahmOoFKEfmpLC9P21IYjCPbux8f3WKCS6q+97cAWbXRophcUpZ7 MuoQ+WPurKOKCiLmsXs6PT0XydLzWkg1Mqx1nEnlvRFyu/HvRzOhEmiLQkTIzLAn 6ZhuwK2v9pa2GudVkt3YVlB0Lef4UKbae5kSuvqUdq4jyImbQtomyZqmCObu6QvO Zp8PZYjVSmbdzWLtFZXe2Irjii/Xo9U2VgYOEGcPh2hWBAQzUFlOFP4pLkY75bIq 4/y3HGVgFMtpzKnN753leDvqTFWOg9nFXAPNsmL+eegz6UC0eSn9Mvj8VqhcZJy8 P12nhA== -----END CERTIFICATE-----Generated at Sun Jun 29 12:19:20 2025 by rpki-client