$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154533.roa File: AS154533.roa (raw, json) Hash identifier: 4qtyxBJTkv4jZdUYxhdm1hUEw+OUfAax6WpgH0jwf1U= Subject key identifier: C4:7E:7C:DE:1D:C0:75:6B:CF:34:96:86:6C:4F:14:BA:EF:89:35:81 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 10B1EFE7FE62E90851DF71795E554EFA1D1BAB53 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154533.roa Signing time: Tue 10 Mar 2026 06:53:34 +0000 ROA not before: Tue 10 Mar 2026 06:48:34 +0000 ROA not after: Tue 09 Mar 2027 06:53:34 +0000 asID: 154533 IP address blocks: 163.128.20.0/24 maxlen: 24 2001:df6:cc40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 09:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b1:ef:e7:fe:62:e9:08:51:df:71:79:5e:55:4e:fa:1d:1b:ab:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 10 06:48:34 2026 GMT Not After : Mar 9 06:53:34 2027 GMT Subject: CN=C47E7CDE1DC0756BCF3496866C4F14BAEF893581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e1:6d:2f:18:39:38:05:5c:ac:bf:93:8c:57: 4a:8d:86:ed:15:8d:3b:4c:af:61:28:6a:f2:95:1b: 44:f0:86:2c:b6:45:f3:69:cf:51:17:53:f9:12:b2: b7:44:09:8e:3b:c0:95:85:d3:5a:f0:12:3f:d4:dd: ab:36:5a:a9:d5:ef:de:90:ce:26:09:f6:7b:13:a8: 1a:ab:a6:93:4c:5e:5c:5e:25:89:44:13:56:07:6b: 4e:b0:0e:52:0a:7e:69:4c:b6:bd:32:3d:b9:95:99: 41:d4:5c:9d:22:76:59:bc:90:f5:23:ad:2b:e9:e5: 8d:ee:a8:f3:2a:30:3b:28:8b:ca:6e:9e:b0:ed:22: 30:a5:a9:27:07:09:ee:1d:51:3e:87:3f:f6:08:06: 69:5c:2c:fd:e1:d7:b3:40:0d:1a:da:7c:bb:38:8a: 82:e7:c0:3a:23:ac:7b:7b:30:e6:f4:0c:b9:76:4c: fc:f2:f6:c8:20:82:af:e1:ca:04:0a:ae:a2:38:ff: 71:e2:97:6f:63:b7:f4:65:90:57:85:a2:2c:32:cc: 07:c8:16:23:9c:d8:93:5c:7b:d8:02:f6:c4:34:df: d9:7f:27:59:4e:95:20:b4:39:f7:f6:51:30:76:2b: b7:92:61:6a:f8:05:ef:cd:b7:5d:3e:23:91:4e:64: 1d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7E:7C:DE:1D:C0:75:6B:CF:34:96:86:6C:4F:14:BA:EF:89:35:81 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.128.20.0/24 IPv6: 2001:df6:cc40::/48 Signature Algorithm: sha256WithRSAEncryption 95:38:08:be:d4:e3:cb:08:35:9b:10:a6:ed:9c:4b:5a:46:2a: c3:a2:cc:d0:01:45:d8:c3:54:a1:8d:cf:85:93:85:2b:fd:0a: 14:99:a9:11:8c:a3:2b:54:bf:47:d9:62:bb:3b:fb:23:d8:f2: 3e:b2:54:44:1e:29:e1:03:29:03:54:05:57:5d:2d:3e:43:52: d8:95:6d:33:e2:67:8d:89:ca:dc:36:2f:7d:4e:04:a9:89:56: a4:af:40:ee:31:e6:95:1f:58:77:65:96:bb:9c:39:41:f2:ed: 06:bb:d1:88:d5:e8:c7:7a:2d:a9:13:1d:44:e2:3e:da:b1:8c: 30:8e:92:03:2a:96:aa:ea:83:09:89:f2:58:33:59:cd:55:e0: 29:ff:54:cc:ed:8f:fc:a1:96:13:4e:1c:b1:88:c8:c2:68:b6: 09:95:e5:66:20:f8:cd:de:f3:14:8d:f0:b4:2b:1b:22:2b:93: 43:18:22:81:e8:86:01:f9:7d:c9:14:98:95:84:36:d5:b0:20: 42:78:82:b2:20:2d:58:be:4f:2d:2e:86:9d:dc:49:72:f3:f5: 94:88:be:9f:fa:75:57:94:cc:d1:3f:c7:5c:d7:49:06:ac:34: 04:3d:4b:7b:d0:17:21:c9:7b:ec:e7:0a:dd:14:41:60:dd:d7: 9f:de:f6:62 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUELHv5/5i6QhR33F5XlVO+h0bq1MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxMDA2NDgzNFoX DTI3MDMwOTA2NTMzNFowMzExMC8GA1UEAxMoQzQ3RTdDREUxREMwNzU2QkNGMzQ5 Njg2NkM0RjE0QkFFRjg5MzU4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJzhbS8YOTgFXKy/k4xXSo2G7RWNO0yvYShq8pUbRPCGLLZF82nPURdT+RKy t0QJjjvAlYXTWvASP9TdqzZaqdXv3pDOJgn2exOoGqumk0xeXF4liUQTVgdrTrAO Ugp+aUy2vTI9uZWZQdRcnSJ2WbyQ9SOtK+nlje6o8yowOyiLym6esO0iMKWpJwcJ 7h1RPoc/9ggGaVws/eHXs0ANGtp8uziKgufAOiOse3sw5vQMuXZM/PL2yCCCr+HK BAquojj/ceKXb2O39GWQV4WiLDLMB8gWI5zYk1x72AL2xDTf2X8nWU6VILQ59/ZR MHYrt5JhavgF7823XT4jkU5kHZUCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBTEfnze HcB1a880loZsTxS674k1gTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDUzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAKOAFDAPBAIAAjAJAwcAIAEN9sxAMA0GCSqGSIb3DQEBCwUAA4IB AQCVOAi+1OPLCDWbEKbtnEtaRirDoszQAUXYw1Shjc+Fk4Ur/QoUmakRjKMrVL9H 2WK7O/sj2PI+slREHinhAykDVAVXXS0+Q1LYlW0z4meNicrcNi99TgSpiVakr0Du MeaVH1h3ZZa7nDlB8u0Gu9GI1ejHei2pEx1E4j7asYwwjpIDKpaq6oMJifJYM1nN VeAp/1TM7Y/8oZYTThyxiMjCaLYJleVmIPjN3vMUjfC0KxsiK5NDGCKB6IYB+X3J FJiVhDbVsCBCeIKyIC1Yvk8tLoad3Ely8/WUiL6f+nVXlMzRP8dc10kGrDQEPUt7 0BchyXvs5wrdFEFg3def3vZi -----END CERTIFICATE-----Generated at Thu Mar 19 08:11:53 2026 by rpki-client