$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154495.roa File: AS154495.roa (raw, json) Hash identifier: GkBpJiBLYhmjJATNCILEAA4bHqr8K9kCQl7iLe1lZOw= Subject key identifier: E5:BA:80:16:57:5C:F0:A0:7F:01:71:70:72:B8:8E:69:2A:70:D0:FF Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0B9684059416C2C91042CF01E91365020F860E2B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154495.roa Signing time: Thu 12 Mar 2026 03:57:23 +0000 ROA not before: Thu 12 Mar 2026 03:52:23 +0000 ROA not after: Thu 11 Mar 2027 03:57:23 +0000 asID: 154495 IP address blocks: 2001:df6:9840::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 09:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:96:84:05:94:16:c2:c9:10:42:cf:01:e9:13:65:02:0f:86:0e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 12 03:52:23 2026 GMT Not After : Mar 11 03:57:23 2027 GMT Subject: CN=E5BA8016575CF0A07F01717072B88E692A70D0FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:39:0b:91:eb:3e:36:7d:62:fb:0c:b9:44:4a: 66:d5:a9:ca:ab:12:b6:3a:53:36:fd:b2:54:6f:3f: 06:d2:e4:7a:60:e5:5f:45:52:d0:aa:02:26:7a:7a: b9:70:a2:b6:ae:a3:e6:af:d0:28:79:61:22:af:64: 53:af:a7:70:af:64:65:92:40:6d:a1:85:b6:f2:ce: 03:64:22:0a:71:cc:f5:b1:3c:79:d4:2b:ce:7e:26: 10:93:bf:db:6c:e1:27:cc:95:33:fa:31:99:da:f1: d9:c7:79:d6:65:2b:00:0e:a1:7a:e2:73:b5:5e:e0: 6b:67:ba:ef:a0:ff:ba:43:cf:35:f1:2f:db:56:05: 89:f4:4e:b6:06:6b:6c:12:51:ba:90:b1:6c:b2:d3: 7f:85:ba:b8:66:e9:87:6b:0d:28:f6:42:43:86:6c: 33:2b:56:c8:02:78:b9:62:33:69:ed:73:b3:7a:10: 7a:6c:3f:f5:b6:81:2e:ba:7a:18:30:03:25:65:d6: 98:aa:ff:81:27:fb:ad:68:81:80:70:19:8e:8e:17: 42:55:3d:6d:70:02:4f:48:32:c2:c8:72:51:f9:fb: 3f:56:cd:18:26:0d:77:e1:89:eb:cc:62:e4:d7:b1: ca:4c:f7:b9:2f:fe:b2:8d:de:8e:46:de:e1:cf:10: a8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:BA:80:16:57:5C:F0:A0:7F:01:71:70:72:B8:8E:69:2A:70:D0:FF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154495.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:9840::/48 Signature Algorithm: sha256WithRSAEncryption 4f:59:37:c6:59:a3:d1:a7:2a:24:21:ba:b7:4a:ef:76:2d:e5: a2:94:c3:92:bd:48:d6:78:37:63:26:49:92:22:2d:09:0f:f4: e0:a3:5b:fa:d0:3b:6b:c4:fe:d6:49:35:0b:96:13:47:fa:bf: d8:03:f4:d3:6c:0f:c2:87:a3:c5:dc:51:6d:81:17:16:51:7f: 27:7b:95:f3:b6:28:0b:b4:1f:49:f2:db:8b:41:b8:70:85:60: d3:ec:2f:f6:86:97:d1:fa:af:87:66:b4:52:89:c7:e7:09:ec: fc:d1:c8:ab:87:5c:c4:1e:f6:e9:92:87:01:16:e3:88:45:2a: 0e:c4:3f:92:df:ff:69:d1:df:3f:a0:f6:05:a9:8d:0b:40:0c: 10:cd:de:94:7d:12:0e:14:a1:b2:a6:21:73:bd:48:45:59:ca: 06:f6:ab:11:96:ad:a0:88:47:e7:2e:b2:a8:f6:71:42:f0:72: 02:fa:f2:a5:db:f9:f2:b5:c5:34:db:cb:72:e0:5a:e8:ac:e0: 61:ab:6d:91:c0:96:d3:79:8b:26:c3:9b:fa:1c:56:b2:7e:35: b1:da:a5:d3:06:83:0c:ef:86:5c:3e:8f:87:31:7e:55:72:c6: e3:d1:e6:9e:bd:3e:d9:24:dd:72:4d:ff:b4:f7:d2:db:56:40: f4:49:ff:98 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUC5aEBZQWwskQQs8B6RNlAg+GDiswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxMjAzNTIyM1oX DTI3MDMxMTAzNTcyM1owMzExMC8GA1UEAxMoRTVCQTgwMTY1NzVDRjBBMDdGMDE3 MTcwNzJCODhFNjkyQTcwRDBGRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMQ5C5HrPjZ9YvsMuURKZtWpyqsStjpTNv2yVG8/BtLkemDlX0VS0KoCJnp6 uXCitq6j5q/QKHlhIq9kU6+ncK9kZZJAbaGFtvLOA2QiCnHM9bE8edQrzn4mEJO/ 22zhJ8yVM/oxmdrx2cd51mUrAA6heuJztV7ga2e676D/ukPPNfEv21YFifROtgZr bBJRupCxbLLTf4W6uGbph2sNKPZCQ4ZsMytWyAJ4uWIzae1zs3oQemw/9baBLrp6 GDADJWXWmKr/gSf7rWiBgHAZjo4XQlU9bXACT0gywshyUfn7P1bNGCYNd+GJ68xi 5Nexykz3uS/+so3ejkbe4c8QqFcCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBTluoAW V1zwoH8BcXByuI5pKnDQ/zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDQ5NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfaYQDANBgkqhkiG9w0BAQsFAAOCAQEAT1k3xlmj0acqJCG6 t0rvdi3lopTDkr1I1ng3YyZJkiItCQ/04KNb+tA7a8T+1kk1C5YTR/q/2AP002wP woejxdxRbYEXFlF/J3uV87YoC7QfSfLbi0G4cIVg0+wv9oaX0fqvh2a0UonH5wns /NHIq4dcxB726ZKHARbjiEUqDsQ/kt//adHfP6D2BamNC0AMEM3elH0SDhShsqYh c71IRVnKBvarEZatoIhH5y6yqPZxQvByAvrypdv58rXFNNvLcuBa6KzgYattkcCW 03mLJsOb+hxWsn41sdql0waDDO+GXD6PhzF+VXLG49Hmnr0+2STdck3/tPfS21ZA 9En/mA== -----END CERTIFICATE-----Generated at Thu Mar 19 08:11:53 2026 by rpki-client