$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153961.roa File: AS153961.roa (raw, json) Hash identifier: Lku13+0nROzZ7YqLS3tDPLKer7MJJhQHyzmMnHuRAgw= Subject key identifier: 4C:AF:4E:57:1D:01:4E:9C:38:B8:0E:49:5A:D2:69:5E:C6:9E:7B:CE Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7A313B48A7A55B890A0FBD096700BA7785FF68A9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153961.roa Signing time: Tue 17 Jun 2025 03:14:20 +0000 ROA not before: Tue 17 Jun 2025 03:09:20 +0000 ROA not after: Tue 16 Jun 2026 03:14:20 +0000 asID: 153961 IP address blocks: 2001:df5:ab40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:31:3b:48:a7:a5:5b:89:0a:0f:bd:09:67:00:ba:77:85:ff:68:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 17 03:09:20 2025 GMT Not After : Jun 16 03:14:20 2026 GMT Subject: CN=4CAF4E571D014E9C38B80E495AD2695EC69E7BCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d9:3f:67:b0:17:1a:33:0f:80:0f:7f:d9:14: 67:1f:25:d4:35:bc:e4:62:2b:8d:8b:70:a1:30:69: d7:67:19:56:61:9b:57:70:0e:62:d4:e0:92:ac:cd: fd:b6:75:4e:e4:6a:d5:4b:c1:fe:5d:a8:88:a9:42: b2:46:9e:72:57:77:29:39:26:b4:c4:ac:1f:3b:31: cf:d0:9c:53:da:b8:ac:47:4a:92:e7:93:e7:cc:4f: e3:d3:57:8a:d9:8a:9e:75:80:10:91:0d:3d:d5:cb: 96:34:38:c2:9f:9a:6b:0d:ef:8d:b0:41:88:17:69: a9:0a:35:23:d6:54:69:94:5f:02:6c:f3:a7:61:95: 5e:fd:b6:c5:1c:d5:5d:a7:2f:61:3c:7a:9c:f7:8c: 2b:8a:cf:f0:33:34:06:a6:b5:b3:4d:53:a7:f8:02: 0f:6b:10:34:c3:ac:05:ff:62:f2:c3:5b:c8:54:4f: 88:4b:d3:db:9d:d2:3f:31:2b:40:7b:a2:30:9d:d9: b8:1c:04:a3:ea:db:8d:52:e7:8d:b7:95:95:d1:e7: 1e:70:90:b0:79:56:6f:fd:61:61:56:d4:a8:05:58: 8a:7e:3e:5a:59:03:71:86:bb:6a:38:1c:e4:e7:9c: 2e:68:79:8d:51:37:a0:64:43:a2:cd:98:62:f9:81: 8e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:AF:4E:57:1D:01:4E:9C:38:B8:0E:49:5A:D2:69:5E:C6:9E:7B:CE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS153961.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:ab40::/48 Signature Algorithm: sha256WithRSAEncryption 8d:8e:60:1c:68:8f:77:c4:51:8d:e8:3a:a4:69:a9:a5:d1:9a: 74:77:81:4a:3b:f9:bc:89:36:9b:04:f7:2f:4b:ea:92:76:53: a0:39:1f:34:f8:27:5e:2b:3a:ed:15:66:9f:fa:48:36:f4:56: 3e:d6:04:28:bf:83:b6:cf:61:f0:59:f6:25:0b:0f:b9:06:e7: e4:c7:77:4c:e7:ca:1a:1b:20:3e:9d:62:04:2b:c3:59:cb:9e: 3e:4c:7d:5c:0e:fb:2e:57:13:b5:29:1f:e3:62:0e:d8:a6:ad: 28:33:c5:9e:0a:a1:be:30:28:25:eb:02:c5:f3:1b:62:4e:43: be:04:df:d2:d4:e8:29:73:84:b2:55:89:bb:a7:94:97:69:c0: 35:1e:58:e8:a5:f3:f8:18:fc:46:75:fd:bd:2d:a6:54:73:ee: a8:69:25:7d:61:cc:f9:01:48:08:e1:01:87:6a:59:36:d9:e8: c1:f1:47:d8:f3:6b:9f:73:6c:62:30:80:58:f8:e0:1d:ad:6f: 0a:67:e7:3a:2f:68:55:8e:d9:4d:5b:6f:36:a5:9b:12:5c:73: 68:3c:d7:74:5e:43:7f:1d:f7:30:79:17:96:73:4f:ca:eb:c3: 92:bd:a9:2e:18:91:e6:cf:28:59:16:aa:a1:fa:d8:ec:65:11: 5f:72:cd:ff -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUejE7SKelW4kKD70JZwC6d4X/aKkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYxNzAzMDkyMFoX DTI2MDYxNjAzMTQyMFowMzExMC8GA1UEAxMoNENBRjRFNTcxRDAxNEU5QzM4Qjgw RTQ5NUFEMjY5NUVDNjlFN0JDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKnZP2ewFxozD4APf9kUZx8l1DW85GIrjYtwoTBp12cZVmGbV3AOYtTgkqzN /bZ1TuRq1UvB/l2oiKlCskaecld3KTkmtMSsHzsxz9CcU9q4rEdKkueT58xP49NX itmKnnWAEJENPdXLljQ4wp+aaw3vjbBBiBdpqQo1I9ZUaZRfAmzzp2GVXv22xRzV XacvYTx6nPeMK4rP8DM0Bqa1s01Tp/gCD2sQNMOsBf9i8sNbyFRPiEvT253SPzEr QHuiMJ3ZuBwEo+rbjVLnjbeVldHnHnCQsHlWb/1hYVbUqAVYin4+WlkDcYa7ajgc 5OecLmh5jVE3oGRDos2YYvmBjgUCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBRMr05X HQFOnDi4Dkla0mlexp57zjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1Mzk2MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfWrQDANBgkqhkiG9w0BAQsFAAOCAQEAjY5gHGiPd8RRjeg6 pGmppdGadHeBSjv5vIk2mwT3L0vqknZToDkfNPgnXis67RVmn/pINvRWPtYEKL+D ts9h8Fn2JQsPuQbn5Md3TOfKGhsgPp1iBCvDWcuePkx9XA77LlcTtSkf42IO2Kat KDPFngqhvjAoJesCxfMbYk5DvgTf0tToKXOEslWJu6eUl2nANR5Y6KXz+Bj8RnX9 vS2mVHPuqGklfWHM+QFICOEBh2pZNtnowfFH2PNrn3NsYjCAWPjgHa1vCmfnOi9o VY7ZTVtvNqWbElxzaDzXdF5Dfx33MHkXlnNPyuvDkr2pLhiR5s8oWRaqofrY7GUR X3LN/w== -----END CERTIFICATE-----Generated at Sun Jun 29 12:12:22 2025 by rpki-client