$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154039.roa File: AS154039.roa (raw, json) Hash identifier: 4pupmE/Rxv1NokXM/3BVMaHtdvybRKx0e2M8/VN3CrI= Subject key identifier: 39:10:91:B0:94:8E:CE:75:81:94:6C:87:2E:77:C1:5B:2C:F3:E9:5A Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 48DA893A9A58CBE4640E861A3417FD679CA4FA51 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154039.roa Signing time: Fri 08 Aug 2025 02:37:21 +0000 ROA not before: Fri 08 Aug 2025 02:32:21 +0000 ROA not after: Fri 07 Aug 2026 02:37:21 +0000 asID: 154039 IP address blocks: 2001:df5:89c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:da:89:3a:9a:58:cb:e4:64:0e:86:1a:34:17:fd:67:9c:a4:fa:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 8 02:32:21 2025 GMT Not After : Aug 7 02:37:21 2026 GMT Subject: CN=391091B0948ECE7581946C872E77C15B2CF3E95A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4f:b6:ad:cb:00:46:d8:2f:c0:2a:df:38:31: ad:cb:8c:fa:47:6d:ea:53:da:30:ef:fd:16:fa:c4: 3e:80:d8:17:53:7c:57:57:72:ac:d7:a4:31:b2:36: 68:e2:d7:ab:b6:d4:b0:54:d2:d0:bb:d0:38:6a:a6: 25:82:47:5c:76:a9:68:ae:51:a0:c0:09:9d:f7:c2: 0d:3b:14:91:bd:7f:e1:15:84:48:e0:44:04:3b:63: 4c:0c:99:f8:f0:68:76:cb:3f:d9:c6:d5:fa:1a:7c: e4:cb:01:1a:26:bd:81:94:3f:b5:8b:a1:b3:78:78: 51:28:62:31:bd:28:61:c3:9f:35:06:4b:c6:f5:df: a1:27:0e:10:4c:f3:c5:3f:d2:9d:7a:85:25:bf:17: dc:63:a6:4b:28:fd:f5:e7:a6:d8:93:69:bd:e4:ab: 1f:e1:82:68:18:54:0e:a0:7b:ca:ad:01:b4:72:a4: 29:15:16:52:32:8f:2e:7b:43:b1:f8:49:d3:ea:58: 2f:f4:11:af:3d:0e:1b:3b:65:31:b9:82:d9:a4:42: d9:b3:f1:ff:3e:c9:59:e8:fe:5b:50:63:3a:ac:ed: db:bf:0b:bb:93:7e:cf:e5:7e:67:16:93:5f:8a:f4: f9:92:4f:86:c4:f8:fd:6a:bf:a9:d3:a3:f7:f0:33: 86:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:10:91:B0:94:8E:CE:75:81:94:6C:87:2E:77:C1:5B:2C:F3:E9:5A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:89c0::/48 Signature Algorithm: sha256WithRSAEncryption 81:d3:82:04:b2:53:87:03:b4:c0:4b:3f:87:b5:d7:47:23:50: 7e:cb:26:07:04:af:7c:24:5d:ec:c2:3c:ed:90:7c:25:f0:9a: 22:49:12:ba:1b:a9:34:8c:d0:b6:74:0f:dc:66:63:3d:df:2c: d4:2b:36:90:ab:81:a6:59:43:e2:97:56:37:54:65:fb:60:b1: 59:13:bd:11:c7:d3:65:be:e1:5d:8c:2d:5f:89:86:8f:13:89: 80:eb:fb:da:d8:57:28:ae:49:de:1b:49:c5:67:07:40:a4:66: af:3e:d8:1f:ec:74:d4:3f:ac:0e:fa:05:e1:4f:fe:4a:21:4f: 51:32:fc:5e:9c:17:7c:1d:e6:76:42:a6:fb:de:de:72:7a:c6: e9:49:e0:ee:ff:6a:0b:41:6e:83:9d:58:d3:e7:fb:59:9a:8f: 92:d5:61:1a:d3:a1:c9:57:a2:a1:2d:7a:04:12:13:bb:25:ae: 9d:1e:12:17:3a:5d:a2:94:48:11:7e:0a:da:08:6e:20:62:ca: 20:38:c2:0e:77:40:df:08:4a:3e:6c:5c:4c:77:26:99:c0:76: 09:42:b4:95:72:c9:5f:4f:f0:59:82:24:d8:7f:b9:ef:98:83: dd:88:d7:3f:3c:6d:44:96:3f:1f:5b:5c:53:ba:31:5e:96:88: a9:11:e3:67 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUSNqJOppYy+RkDoYaNBf9Z5yk+lEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgwODAyMzIyMVoX DTI2MDgwNzAyMzcyMVowMzExMC8GA1UEAxMoMzkxMDkxQjA5NDhFQ0U3NTgxOTQ2 Qzg3MkU3N0MxNUIyQ0YzRTk1QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOJPtq3LAEbYL8Aq3zgxrcuM+kdt6lPaMO/9FvrEPoDYF1N8V1dyrNekMbI2 aOLXq7bUsFTS0LvQOGqmJYJHXHapaK5RoMAJnffCDTsUkb1/4RWESOBEBDtjTAyZ +PBodss/2cbV+hp85MsBGia9gZQ/tYuhs3h4UShiMb0oYcOfNQZLxvXfoScOEEzz xT/SnXqFJb8X3GOmSyj99eem2JNpveSrH+GCaBhUDqB7yq0BtHKkKRUWUjKPLntD sfhJ0+pYL/QRrz0OGztlMbmC2aRC2bPx/z7JWej+W1BjOqzt278Lu5N+z+V+ZxaT X4r0+ZJPhsT4/Wq/qdOj9/Azhp8CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQ5EJGw lI7OdYGUbIcud8FbLPPpWjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDAzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfWJwDANBgkqhkiG9w0BAQsFAAOCAQEAgdOCBLJThwO0wEs/ h7XXRyNQfssmBwSvfCRd7MI87ZB8JfCaIkkSuhupNIzQtnQP3GZjPd8s1Cs2kKuB pllD4pdWN1Rl+2CxWRO9EcfTZb7hXYwtX4mGjxOJgOv72thXKK5J3htJxWcHQKRm rz7YH+x01D+sDvoF4U/+SiFPUTL8XpwXfB3mdkKm+97ecnrG6Ung7v9qC0Fug51Y 0+f7WZqPktVhGtOhyVeioS16BBITuyWunR4SFzpdopRIEX4K2ghuIGLKIDjCDndA 3whKPmxcTHcmmcB2CUK0lXLJX0/wWYIk2H+575iD3YjXPzxtRJY/H1tcU7oxXpaI qRHjZw== -----END CERTIFICATE-----Generated at Sat Aug 23 08:54:13 2025 by rpki-client