$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS153946.roa File: AS153946.roa (raw, json) Hash identifier: CPenCBazYemw65erk51e/H+nmH1XdhUFK7M1LR253sQ= Subject key identifier: 78:24:35:E0:6E:B9:84:BF:74:A5:51:87:92:10:B5:27:65:2E:20:B5 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1CCBCC471D0E8C5A94A5FBBD61AE85CF6B27C3E1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153946.roa Signing time: Wed 04 Nov 2026 02:44:04 +0000 ROA not before: Wed 04 Nov 2026 02:39:04 +0000 ROA not after: Wed 03 Nov 2027 02:44:04 +0000 asID: 153946 IP address blocks: 101.1.18.0/24 maxlen: 24 2001:df5:97c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 01:16:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:cb:cc:47:1d:0e:8c:5a:94:a5:fb:bd:61:ae:85:cf:6b:27:c3:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Nov 4 02:39:04 2026 GMT Not After : Nov 3 02:44:04 2027 GMT Subject: CN=782435E06EB984BF74A551879210B527652E20B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3b:18:79:08:cd:8a:11:33:c4:dc:e9:90:0b: 27:00:3d:c0:6d:96:4d:70:69:ec:dd:e9:ab:68:85: 79:c5:11:b7:63:35:0d:14:2e:65:e6:39:18:30:09: d2:c0:99:09:df:73:20:17:37:be:35:04:79:cf:04: ac:03:50:98:6d:2f:9f:00:d5:a5:7e:b3:1f:f5:1d: 2c:3a:02:10:bb:bf:9f:04:c5:27:22:87:c7:19:01: 2c:17:a9:5b:0f:94:33:28:87:97:71:47:e6:4b:84: ec:4f:db:3c:33:f2:13:ac:c6:ae:61:f7:da:7b:ad: b0:92:c1:1e:1b:35:79:70:90:38:18:ac:de:64:94: 14:66:0e:93:3f:b1:04:40:6c:49:71:5e:e0:0d:76: 78:13:02:4a:a5:45:ec:7d:cf:39:47:61:5c:7c:10: 5f:12:bf:39:48:8e:e0:20:67:02:ad:6b:57:cd:ca: 2f:e7:0a:7f:b8:bb:ab:a4:b2:f5:01:d9:52:ba:80: fd:97:c9:d8:a4:9a:e7:6d:a3:70:66:72:6f:a4:19: f8:6d:2d:9e:0c:74:de:ac:09:14:46:dd:9c:83:d3: b3:ad:8e:54:ba:85:0a:a1:38:66:26:b6:80:a4:05: ac:bc:4f:cc:8d:92:b1:f3:82:9b:53:cd:f5:40:68: ab:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:24:35:E0:6E:B9:84:BF:74:A5:51:87:92:10:B5:27:65:2E:20:B5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS153946.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.1.18.0/24 IPv6: 2001:df5:97c0::/48 Signature Algorithm: sha256WithRSAEncryption 5f:a9:fa:af:13:c1:83:01:cc:82:7f:74:27:ef:2f:28:a1:f5: 61:5c:31:e8:68:24:d7:f4:a5:f1:76:20:2a:14:83:65:e1:80: 6e:01:9f:71:c7:82:ae:11:2c:5c:cd:06:b4:5a:b0:81:06:d7: 3d:c9:88:d9:b3:dd:be:66:aa:ef:16:f7:b7:01:86:6e:7e:4a: b6:20:67:c7:d8:1a:d8:98:96:08:66:72:ce:0b:b0:4f:d2:df: 3c:c0:00:2d:ef:0f:95:5a:ab:c0:02:49:43:4f:c6:44:fa:cd: 2e:34:e9:01:2b:5b:90:be:ea:49:be:35:2f:d8:fa:a8:bf:32: 89:e8:08:db:73:5f:b1:5a:55:e8:6e:82:f0:12:64:e7:cd:8a: 44:a1:5f:25:c4:6a:3b:08:a5:9d:d6:f3:5d:70:b7:32:26:a2: 7f:b5:d4:cf:aa:6f:0a:32:58:e8:b4:fb:73:6c:0c:a8:0e:22: 7c:05:ad:94:ac:7c:2c:bb:20:ea:21:30:3a:3a:a3:c3:a2:f5: 24:87:ae:35:bd:8a:5a:35:08:d4:6c:b3:e7:88:47:10:41:7c: bf:f7:39:e3:f0:3e:af:a3:43:e3:fe:74:29:be:57:7a:ec:f7: 16:6c:72:20:63:49:07:3b:9c:e3:d7:8d:2a:b7:5b:fb:fe:82: 99:2a:eb:04 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUHMvMRx0OjFqUpfu9Ya6Fz2snw+EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTEwNDAyMzkwNFoX DTI3MTEwMzAyNDQwNFowMzExMC8GA1UEAxMoNzgyNDM1RTA2RUI5ODRCRjc0QTU1 MTg3OTIxMEI1Mjc2NTJFMjBCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJc7GHkIzYoRM8Tc6ZALJwA9wG2WTXBp7N3pq2iFecURt2M1DRQuZeY5GDAJ 0sCZCd9zIBc3vjUEec8ErANQmG0vnwDVpX6zH/UdLDoCELu/nwTFJyKHxxkBLBep Ww+UMyiHl3FH5kuE7E/bPDPyE6zGrmH32nutsJLBHhs1eXCQOBis3mSUFGYOkz+x BEBsSXFe4A12eBMCSqVF7H3POUdhXHwQXxK/OUiO4CBnAq1rV83KL+cKf7i7q6Sy 9QHZUrqA/ZfJ2KSa522jcGZyb6QZ+G0tngx03qwJFEbdnIPTs62OVLqFCqE4Zia2 gKQFrLxPzI2SsfOCm1PN9UBoq4cCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBR4JDXg brmEv3SlUYeSELUnZS4gtTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUzOTQ2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAZQESMA8EAgACMAkDBwAgAQ31l8AwDQYJKoZIhvcNAQELBQADggEBAF+p +q8TwYMBzIJ/dCfvLyih9WFcMehoJNf0pfF2ICoUg2XhgG4Bn3HHgq4RLFzNBrRa sIEG1z3JiNmz3b5mqu8W97cBhm5+SrYgZ8fYGtiYlghmcs4LsE/S3zzAAC3vD5Va q8ACSUNPxkT6zS406QErW5C+6km+NS/Y+qi/MonoCNtzX7FaVehugvASZOfNikSh XyXEajsIpZ3W811wtzImon+11M+qbwoyWOi0+3NsDKgOInwFrZSsfCy7IOohMDo6 o8Oi9SSHrjW9ilo1CNRss+eIRxBBfL/3OePwPq+jQ+P+dCm+V3rs9xZsciBjSQc7 nOPXjSq3W/v+gpkq6wQ= -----END CERTIFICATE-----Generated at Thu Nov 5 05:08:44 2026 by rpki-client