$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154217.roa File: AS154217.roa (raw, json) Hash identifier: PHjjbsVqyTkMP0AyQw7NenRaP0GPXuiqVWFLmC5zXOo= Subject key identifier: A4:65:C3:AA:D2:5F:D1:BC:D7:62:F8:49:75:00:AF:EC:CC:70:B0:0B Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0AE96C3194C46E5443EC9D4B0B7C261A482F9537 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154217.roa Signing time: Thu 06 Aug 2026 03:10:23 +0000 ROA not before: Thu 06 Aug 2026 03:05:23 +0000 ROA not after: Thu 05 Aug 2027 03:10:23 +0000 asID: 154217 IP address blocks: 103.227.107.0/24 maxlen: 24 202.6.192.0/23 maxlen: 24 2001:df6:dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:e9:6c:31:94:c4:6e:54:43:ec:9d:4b:0b:7c:26:1a:48:2f:95:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 6 03:05:23 2026 GMT Not After : Aug 5 03:10:23 2027 GMT Subject: CN=A465C3AAD25FD1BCD762F8497500AFECCC70B00B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:61:2d:f3:a1:75:2c:41:86:96:03:94:5a:58: 09:9b:0e:a1:84:cc:4c:e1:96:49:cd:70:ba:eb:1d: b0:63:ee:f4:0f:43:49:e5:e2:c5:aa:d8:85:50:ed: cf:84:97:21:93:65:72:50:74:eb:52:3d:f6:3e:62: 01:d5:62:3f:f1:d6:9c:7a:f2:42:09:ac:e1:ed:23: 93:a5:de:c5:75:67:86:7d:27:1f:d0:1a:e5:72:e3: f7:aa:0f:0d:2b:59:b4:8c:6c:ad:ad:df:82:b0:c2: 2f:bb:f6:6f:a2:74:7c:40:b8:58:61:f3:98:8e:e8: 9b:e8:ee:81:07:2b:42:b3:8b:62:57:c9:9a:f1:2f: 04:78:0f:08:fa:7e:bc:53:7d:f6:7c:a3:a6:1f:c7: 79:60:f3:7a:9f:44:0e:9b:09:fa:c3:7d:c4:fa:11: ee:b9:8e:bb:86:3a:ef:ab:ff:1f:b5:31:a6:58:00: 3a:53:fa:2d:d3:01:e4:f5:65:ba:66:4c:f7:e0:c6: 69:73:81:cc:d3:f6:f3:c8:f5:15:6a:75:c8:8d:a2: a1:9b:76:dc:d2:09:ca:65:12:f7:fd:df:fa:94:70: 71:c1:b7:ed:cd:ab:0a:b5:e7:cc:b2:c4:70:f2:ce: a7:94:9c:29:a6:c9:9e:de:e7:39:fa:c4:a8:be:db: fc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:65:C3:AA:D2:5F:D1:BC:D7:62:F8:49:75:00:AF:EC:CC:70:B0:0B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154217.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.227.107.0/24 202.6.192.0/23 IPv6: 2001:df6:dc0::/48 Signature Algorithm: sha256WithRSAEncryption 02:0b:42:9c:e2:14:f7:24:e8:47:47:04:32:d5:ad:d7:75:60: af:e7:c7:31:c9:ef:05:ff:e7:a0:da:a7:f5:bf:72:30:dc:4d: b8:46:fa:a8:bc:e5:06:0d:df:aa:ca:4e:46:de:34:7e:4b:e4: 4e:0e:bf:16:ab:e5:6c:8d:4d:8e:9b:74:f4:20:0c:0b:7b:a2: c9:1c:8e:df:eb:36:83:59:4b:7b:bf:d5:af:5b:a8:7b:84:84: 40:45:5e:00:90:26:9f:f6:e7:00:5f:fa:4b:1f:34:f8:51:8f: 9f:0c:02:e0:40:20:e4:4a:19:63:04:83:ac:b2:e8:a0:9a:d5: 85:21:e9:a4:4c:b3:a0:d4:1b:91:eb:5c:0b:bd:16:93:54:7d: fe:c1:e4:8a:4b:18:7e:70:ce:f8:51:8c:68:c5:ca:80:17:2d: b0:14:1b:1e:80:5c:83:ba:91:b5:45:22:ea:c0:7b:ab:56:8a: be:aa:b8:2f:c2:4d:8c:c5:ac:92:5f:31:b7:86:c2:ca:54:ff: fc:88:72:0f:06:0d:5e:11:ef:3e:93:54:8e:69:25:5c:b8:04: c2:11:7b:c7:20:9c:87:61:67:fa:8f:f3:8a:a5:5d:96:93:5c: ec:27:c2:ee:18:42:f2:33:8b:e0:b6:cf:92:98:79:08:cf:24: a4:29:99:51 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIUCulsMZTEblRD7J1LC3wmGkgvlTcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgwNjAzMDUyM1oX DTI3MDgwNTAzMTAyM1owMzExMC8GA1UEAxMoQTQ2NUMzQUFEMjVGRDFCQ0Q3NjJG ODQ5NzUwMEFGRUNDQzcwQjAwQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ1hLfOhdSxBhpYDlFpYCZsOoYTMTOGWSc1wuusdsGPu9A9DSeXixarYhVDt z4SXIZNlclB061I99j5iAdViP/HWnHryQgms4e0jk6XexXVnhn0nH9Aa5XLj96oP DStZtIxsra3fgrDCL7v2b6J0fEC4WGHzmI7om+jugQcrQrOLYlfJmvEvBHgPCPp+ vFN99nyjph/HeWDzep9EDpsJ+sN9xPoR7rmOu4Y676v/H7UxplgAOlP6LdMB5PVl umZM9+DGaXOBzNP288j1FWp1yI2ioZt23NIJymUS9/3f+pRwccG37c2rCrXnzLLE cPLOp5ScKabJnt7nOfrEqL7b/K0CAwEAAaOCAeMwggHfMB0GA1UdDgQWBBSkZcOq 0l/RvNdi+El1AK/szHCwCzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0MjE3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIA ATAMAwQAZ+NrAwQBygbAMA8EAgACMAkDBwAgAQ32DcAwDQYJKoZIhvcNAQELBQAD ggEBAAILQpziFPck6EdHBDLVrdd1YK/nxzHJ7wX/56Dap/W/cjDcTbhG+qi85QYN 36rKTkbeNH5L5E4Ovxar5WyNTY6bdPQgDAt7oskcjt/rNoNZS3u/1a9bqHuEhEBF XgCQJp/25wBf+ksfNPhRj58MAuBAIORKGWMEg6yy6KCa1YUh6aRMs6DUG5HrXAu9 FpNUff7B5IpLGH5wzvhRjGjFyoAXLbAUGx6AXIO6kbVFIurAe6tWir6quC/CTYzF rJJfMbeGwspU//yIcg8GDV4R7z6TVI5pJVy4BMIRe8cgnIdhZ/qP84qlXZaTXOwn wu4YQvIzi+C2z5KYeQjPJKQpmVE= -----END CERTIFICATE-----Generated at Thu Sep 3 06:18:00 2026 by rpki-client