$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154683.roa File: AS154683.roa (raw, json) Hash identifier: qCVq6r+q1cX4vBSvvMvp5AY12aOThvvOeUUi+HGqZhw= Subject key identifier: 0A:EF:08:39:A8:BA:E4:2E:76:B5:3E:46:62:44:10:E1:46:DC:6C:0D Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 15E6B6621D77062514D28C1577973DCADD2C196F Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154683.roa Signing time: Thu 29 Oct 2026 08:40:51 +0000 ROA not before: Thu 29 Oct 2026 08:35:51 +0000 ROA not after: Thu 28 Oct 2027 08:40:51 +0000 asID: 154683 IP address blocks: 162.4.134.0/23 maxlen: 23 162.4.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:e6:b6:62:1d:77:06:25:14:d2:8c:15:77:97:3d:ca:dd:2c:19:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Oct 29 08:35:51 2026 GMT Not After : Oct 28 08:40:51 2027 GMT Subject: CN=0AEF0839A8BAE42E76B53E46624410E146DC6C0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4a:92:ae:17:e3:9a:7b:65:bb:86:a1:0d:55: 93:f3:79:db:48:c3:30:3f:26:d5:b0:4d:39:51:38: 59:ad:c5:0c:11:74:83:d3:99:b8:4c:c7:48:7c:db: 13:f8:42:6d:fb:29:2e:a0:a5:95:32:6c:87:40:94: 13:1e:b9:89:c4:89:83:ae:3d:8f:dd:6a:a9:d8:8e: 07:25:95:a8:cc:ae:1d:22:ea:9b:ec:0c:a0:f0:68: 6c:c7:32:16:82:1c:bf:4f:97:d1:01:a6:f1:98:a8: 25:ce:ef:fb:bb:33:01:a1:08:e4:a5:fe:49:83:d6: 8a:20:af:e7:52:93:de:cb:38:d7:f4:10:9f:89:f0: 9c:a0:65:8a:24:6d:51:6a:9b:09:5d:66:a1:41:e4: c0:86:d3:86:ae:ba:e3:35:53:f3:f5:71:14:af:7a: 33:07:83:4e:f6:41:85:97:a2:96:db:31:8b:b9:69: 68:88:5e:d4:dc:ce:11:30:cb:f6:cc:5b:aa:ab:43: c1:85:7b:9d:f9:c4:5c:01:c6:66:d2:f8:fb:8f:8c: a0:f2:f2:7b:74:31:9a:11:9d:bf:15:81:e9:da:c6: e1:82:59:a1:14:1e:65:9a:e5:27:4c:54:32:19:18: ff:24:bf:28:73:ae:28:c9:a7:f3:93:e0:c1:4b:85: 9c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:EF:08:39:A8:BA:E4:2E:76:B5:3E:46:62:44:10:E1:46:DC:6C:0D X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154683.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.134.0/23 Signature Algorithm: sha256WithRSAEncryption 99:e8:7f:6c:63:40:52:6c:94:46:29:d4:07:06:b1:49:0e:aa: bb:21:b3:1e:4e:0c:d4:15:c8:02:6f:97:44:b0:a4:7e:62:51: 8d:c9:dd:04:0a:8a:b7:80:b8:d3:9a:74:50:6c:1d:fd:a7:57: 75:74:d9:f7:98:f9:30:71:ff:e2:46:cd:88:9a:e3:8f:cc:66: 58:2e:6a:43:d2:4d:dc:3e:a8:9f:b2:61:f9:66:2d:10:52:f3: 66:a1:10:bb:d8:98:53:58:1f:9c:ed:f3:24:44:74:71:0e:bf: 16:18:06:47:89:2a:06:53:5b:01:e9:6b:b0:b2:86:ed:e3:85: 4b:54:35:ef:99:f3:c6:de:57:15:17:0d:e9:41:65:50:2e:09: ad:a8:9d:7c:a9:2e:e2:64:fc:2a:0f:b9:ed:7a:51:bf:33:d2: 39:e7:cd:05:ca:0c:be:a6:71:5b:17:11:ef:fa:ae:b8:e2:78: 86:46:e3:11:62:f1:a3:dc:91:5c:8b:a3:85:fe:c4:99:ba:55: 1a:4c:0d:ce:93:45:62:7a:9f:4f:4d:8e:ba:71:4f:9b:dd:c3: 0b:25:44:b2:ce:87:78:a7:d7:73:2a:1c:23:15:1f:31:a4:23: dd:28:1e:07:5d:08:6b:39:0b:f8:68:88:e0:ab:08:0f:4f:d0: 46:da:92:94 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUFea2Yh13BiUU0owVd5c9yt0sGW8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MTAyOTA4MzU1MVoX DTI3MTAyODA4NDA1MVowMzExMC8GA1UEAxMoMEFFRjA4MzlBOEJBRTQyRTc2QjUz RTQ2NjI0NDEwRTE0NkRDNkMwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJFKkq4X45p7ZbuGoQ1Vk/N520jDMD8m1bBNOVE4Wa3FDBF0g9OZuEzHSHzb E/hCbfspLqCllTJsh0CUEx65icSJg649j91qqdiOByWVqMyuHSLqm+wMoPBobMcy FoIcv0+X0QGm8ZioJc7v+7szAaEI5KX+SYPWiiCv51KT3ss41/QQn4nwnKBliiRt UWqbCV1moUHkwIbThq664zVT8/VxFK96MweDTvZBhZeiltsxi7lpaIhe1NzOETDL 9sxbqqtDwYV7nfnEXAHGZtL4+4+MoPLye3QxmhGdvxWB6drG4YJZoRQeZZrlJ0xU MhkY/yS/KHOuKMmn85PgwUuFnFkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQK7wg5 qLrkLna1PkZiRBDhRtxsDTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NjgzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBogSGMA0GCSqGSIb3DQEBCwUAA4IBAQCZ6H9sY0BSbJRGKdQHBrFJDqq7 IbMeTgzUFcgCb5dEsKR+YlGNyd0ECoq3gLjTmnRQbB39p1d1dNn3mPkwcf/iRs2I muOPzGZYLmpD0k3cPqifsmH5Zi0QUvNmoRC72JhTWB+c7fMkRHRxDr8WGAZHiSoG U1sB6Wuwsobt44VLVDXvmfPG3lcVFw3pQWVQLgmtqJ18qS7iZPwqD7ntelG/M9I5 580Fygy+pnFbFxHv+q644niGRuMRYvGj3JFci6OF/sSZulUaTA3Ok0Viep9PTY66 cU+b3cMLJUSyzod4p9dzKhwjFR8xpCPdKB4HXQhrOQv4aIjgqwgPT9BG2pKU -----END CERTIFICATE-----Generated at Mon Nov 2 17:58:30 2026 by rpki-client