$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154101.roa File: AS154101.roa (raw, json) Hash identifier: 2V5FOXpBWw7magEw7HANVCvr4AXm40VZWwnguwVm+sQ= Subject key identifier: FD:65:FF:1E:D0:CD:A6:4E:75:C0:1F:64:80:4E:D6:88:38:82:C6:34 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 624D7B325CA41EB4CE05B45474293E3A66F4CFD3 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154101.roa Signing time: Mon 20 Apr 2026 09:53:34 +0000 ROA not before: Mon 20 Apr 2026 09:48:34 +0000 ROA not after: Mon 19 Apr 2027 09:53:34 +0000 asID: 154101 IP address blocks: 192.135.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:4d:7b:32:5c:a4:1e:b4:ce:05:b4:54:74:29:3e:3a:66:f4:cf:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 20 09:48:34 2026 GMT Not After : Apr 19 09:53:34 2027 GMT Subject: CN=FD65FF1ED0CDA64E75C01F64804ED6883882C634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4a:ba:1d:e7:d2:9c:3d:78:89:e5:f0:12:86: 52:1d:66:24:61:a7:22:6c:de:8a:17:3d:dc:bd:c2: cb:99:07:5b:a1:50:75:69:01:cc:3a:f8:c1:96:1b: 05:f1:73:45:5e:42:36:1e:ed:8d:73:03:d7:3c:1d: 4f:5f:09:e8:a2:26:e8:28:95:68:18:c0:6c:f2:a8: 14:23:31:b0:fc:89:a2:19:7c:c3:b6:95:f6:86:af: b8:60:f4:d2:75:61:83:e9:7b:fa:e4:db:f5:e7:6d: 71:f1:ba:26:a5:e6:f2:27:3d:9b:9a:e5:a9:94:16: 24:29:99:2b:91:92:fd:9d:4d:ec:f9:08:d3:7e:d2: 28:ab:ef:98:67:2b:d0:e0:4b:a2:3a:40:a5:66:dd: 90:25:37:6f:7e:75:13:a3:13:91:91:ee:4e:9a:cd: a7:79:c2:a0:a9:24:3b:5c:38:ae:2e:d5:be:f0:5b: 95:ee:94:54:d7:38:a6:72:3d:b2:26:14:97:3c:22: 5a:3a:52:8b:43:a8:23:56:dd:fb:46:7a:78:26:07: a1:13:63:f4:69:50:77:e3:fe:87:9a:82:7b:98:f1: e2:b4:03:14:6a:d4:64:7a:07:83:7d:c3:c3:76:7f: 1d:c5:e2:e2:64:c8:90:26:50:fe:60:4d:aa:a9:63: ed:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:65:FF:1E:D0:CD:A6:4E:75:C0:1F:64:80:4E:D6:88:38:82:C6:34 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154101.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.135.98.0/24 Signature Algorithm: sha256WithRSAEncryption 94:27:3e:ab:f8:7f:fc:81:a7:87:a3:12:22:5b:b3:83:99:05: 50:82:1c:be:db:51:25:f0:23:c3:f7:f9:ef:fd:86:10:f5:3e: 89:86:ee:b6:47:22:27:fe:5c:fc:c1:5d:3b:4f:1e:c9:84:26: 26:d0:85:da:b2:26:71:b1:c6:33:a5:a9:2c:46:77:c5:75:0b: f0:2d:f3:80:a2:31:67:0a:c5:26:22:33:02:02:23:2e:8f:d9: 4e:ec:b8:99:f6:5f:a8:3f:2f:3c:8d:42:2f:e3:d6:22:4e:8a: 78:a9:03:f4:3d:97:9d:1b:40:ba:07:ff:d4:4a:2d:b6:8d:1d: 6b:d2:b5:29:05:3a:ff:e7:53:3b:44:0b:b9:e8:44:bd:55:ac: c0:ef:f1:b8:7f:3f:e7:bf:1e:8a:1e:cb:ce:5b:1b:e2:c3:92: 96:16:95:c7:ff:0a:58:4d:83:3d:d7:ec:51:29:10:32:63:25: be:23:10:4b:d8:c6:55:ce:43:a6:20:b0:08:4f:3e:4a:e3:1c: 4b:4d:31:50:e1:e7:e3:e5:18:9b:3c:5c:ef:ad:8b:97:1f:2c: 70:07:b5:2f:dc:65:95:fc:75:8b:5f:05:4d:86:86:0a:37:bc: d6:00:c5:15:57:0a:16:99:86:fa:26:9d:cb:71:4b:29:9f:35: 39:ab:7b:43 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUYk17MlykHrTOBbRUdCk+Omb0z9MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDQyMDA5NDgzNFoX DTI3MDQxOTA5NTMzNFowMzExMC8GA1UEAxMoRkQ2NUZGMUVEMENEQTY0RTc1QzAx RjY0ODA0RUQ2ODgzODgyQzYzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOlKuh3n0pw9eInl8BKGUh1mJGGnImzeihc93L3Cy5kHW6FQdWkBzDr4wZYb BfFzRV5CNh7tjXMD1zwdT18J6KIm6CiVaBjAbPKoFCMxsPyJohl8w7aV9oavuGD0 0nVhg+l7+uTb9edtcfG6JqXm8ic9m5rlqZQWJCmZK5GS/Z1N7PkI037SKKvvmGcr 0OBLojpApWbdkCU3b351E6MTkZHuTprNp3nCoKkkO1w4ri7VvvBble6UVNc4pnI9 siYUlzwiWjpSi0OoI1bd+0Z6eCYHoRNj9GlQd+P+h5qCe5jx4rQDFGrUZHoHg33D w3Z/HcXi4mTIkCZQ/mBNqqlj7dcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBT9Zf8e 0M2mTnXAH2SATtaIOILGNDAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1NDEwMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMCHYjANBgkqhkiG9w0BAQsFAAOCAQEAlCc+q/h//IGnh6MSIluz g5kFUIIcvttRJfAjw/f57/2GEPU+iYbutkciJ/5c/MFdO08eyYQmJtCF2rImcbHG M6WpLEZ3xXUL8C3zgKIxZwrFJiIzAgIjLo/ZTuy4mfZfqD8vPI1CL+PWIk6KeKkD 9D2XnRtAugf/1Eotto0da9K1KQU6/+dTO0QLuehEvVWswO/xuH8/578eih7Lzlsb 4sOSlhaVx/8KWE2DPdfsUSkQMmMlviMQS9jGVc5DpiCwCE8+SuMcS00xUOHn4+UY mzxc762Llx8scAe1L9xllfx1i18FTYaGCje81gDFFVcKFpmG+iady3FLKZ81Oat7 Qw== -----END CERTIFICATE-----Generated at Wed Apr 22 03:30:17 2026 by rpki-client