$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS155003.roa File: AS155003.roa (raw, json) Hash identifier: g2Edyq/MLzBmVg6hf1Ur6PoGQ8eAeubAwL9GVlHMnRQ= Subject key identifier: 42:87:93:92:19:58:F0:E6:66:A9:32:59:80:0F:08:9B:7D:CE:26:06 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 6A6DCFBD81D4DA06C5291C1B781049B883DC5EB3 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS155003.roa Signing time: Fri 09 Oct 2026 07:32:12 +0000 ROA not before: Fri 09 Oct 2026 07:27:12 +0000 ROA not after: Fri 08 Oct 2027 07:32:12 +0000 asID: 155003 IP address blocks: 198.17.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 03:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:6d:cf:bd:81:d4:da:06:c5:29:1c:1b:78:10:49:b8:83:dc:5e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Oct 9 07:27:12 2026 GMT Not After : Oct 8 07:32:12 2027 GMT Subject: CN=428793921958F0E666A93259800F089B7DCE2606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:12:fd:fd:ce:db:20:fc:a2:58:02:0f:6f:2c: f6:7e:54:9d:79:20:1f:c5:4f:58:df:24:24:9d:f8: 76:17:47:40:95:b5:73:99:84:af:8e:71:8e:49:a5: f2:30:f0:ae:b7:03:a1:42:da:2e:c6:f0:b8:ba:2a: e8:08:97:f0:a1:35:1b:95:0c:c2:68:33:0b:45:19: 47:d2:1c:c1:d2:64:cf:6d:a2:de:b0:ff:7f:2d:f1: 61:9f:7e:f3:d9:5d:d1:3f:a7:9b:34:e1:9e:d2:77: 81:2c:28:87:43:a5:a9:d4:97:e0:df:46:25:e8:8b: f6:7c:52:37:48:4c:a1:af:74:f4:49:c5:42:e5:1d: ea:a2:cc:69:eb:02:b6:48:c1:ad:40:31:80:e3:2c: 7e:c9:ee:db:5e:9d:37:15:71:cc:59:46:e9:e1:07: 94:7e:ba:30:15:f0:c2:0d:f8:26:fa:b0:f2:92:17: 62:66:af:37:c2:77:90:06:32:c7:de:c7:18:2a:96: f3:40:c4:59:e0:7d:ae:18:6e:9b:27:0e:30:7a:14: 55:4f:19:b4:e3:c1:34:bb:5a:ee:c5:3d:33:f9:7b: cc:89:58:48:0c:d3:1f:d9:df:b0:c9:16:ce:e6:f5: 3d:eb:6e:93:ed:88:a3:b5:8f:b6:70:3b:26:a4:1d: be:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:87:93:92:19:58:F0:E6:66:A9:32:59:80:0F:08:9B:7D:CE:26:06 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS155003.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.17.240.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:2f:12:2a:e7:f5:9e:fb:11:40:8e:34:09:15:66:80:b0:d3: 13:4b:ce:4e:64:b4:4c:37:e2:a0:e3:86:8a:0f:6f:26:85:51: e4:f1:90:69:e2:a6:67:3d:6e:c7:29:22:60:39:a4:5b:1f:1b: e4:64:6e:9b:6b:39:ff:09:38:62:35:be:cd:21:13:e4:f9:fd: af:4d:09:57:d8:c9:68:92:69:9e:78:6d:4b:b4:fd:5a:8c:af: 49:34:0a:13:35:be:bd:6b:73:00:ba:66:73:7e:d1:98:6b:46: eb:70:f2:af:2a:ed:0e:7f:28:fb:6f:96:d3:bd:69:4f:a0:a2: 88:95:5f:0b:e2:78:20:06:85:f3:ad:5c:66:c2:8c:1b:4f:f7: 7d:51:c1:46:dc:e0:bd:41:75:9c:b2:2d:e5:4d:bf:34:e0:4b: 6a:f5:ec:9c:9e:e8:9e:38:0c:dc:d2:57:92:52:49:d2:05:84: 2c:58:1d:18:51:de:bc:7a:46:78:64:fb:af:df:5e:31:49:13: 09:98:51:ed:48:40:36:24:82:52:c4:55:35:1a:41:0b:d7:f1: ce:64:e5:83:a7:61:41:27:45:d5:d2:ee:f4:1c:95:ed:d6:c4: 3d:d4:e5:cc:8c:9c:82:a1:51:e2:5e:36:c5:62:59:ed:e9:37: 33:87:d4:c8 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUam3PvYHU2gbFKRwbeBBJuIPcXrMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MTAwOTA3MjcxMloX DTI3MTAwODA3MzIxMlowMzExMC8GA1UEAxMoNDI4NzkzOTIxOTU4RjBFNjY2QTkz MjU5ODAwRjA4OUI3RENFMjYwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK0S/f3O2yD8olgCD28s9n5UnXkgH8VPWN8kJJ34dhdHQJW1c5mEr45xjkml 8jDwrrcDoULaLsbwuLoq6AiX8KE1G5UMwmgzC0UZR9IcwdJkz22i3rD/fy3xYZ9+ 89ld0T+nmzThntJ3gSwoh0OlqdSX4N9GJeiL9nxSN0hMoa909EnFQuUd6qLMaesC tkjBrUAxgOMsfsnu216dNxVxzFlG6eEHlH66MBXwwg34Jvqw8pIXYmavN8J3kAYy x97HGCqW80DEWeB9rhhumycOMHoUVU8ZtOPBNLta7sU9M/l7zIlYSAzTH9nfsMkW zub1Petuk+2Io7WPtnA7JqQdvokCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRCh5OS GVjw5mapMlmADwibfc4mBjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU1MDAzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAxhHwMA0GCSqGSIb3DQEBCwUAA4IBAQAKLxIq5/We+xFAjjQJFWaAsNMT S85OZLRMN+Kg44aKD28mhVHk8ZBp4qZnPW7HKSJgOaRbHxvkZG6bazn/CThiNb7N IRPk+f2vTQlX2MlokmmeeG1LtP1ajK9JNAoTNb69a3MAumZzftGYa0brcPKvKu0O fyj7b5bTvWlPoKKIlV8L4nggBoXzrVxmwowbT/d9UcFG3OC9QXWcsi3lTb804Etq 9eycnuieOAzc0leSUknSBYQsWB0YUd68ekZ4ZPuv314xSRMJmFHtSEA2JIJSxFU1 GkEL1/HOZOWDp2FBJ0XV0u70HJXt1sQ91OXMjJyCoVHiXjbFYlnt6Tczh9TI -----END CERTIFICATE-----Generated at Mon Nov 2 07:57:21 2026 by rpki-client