$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154191.roa File: AS154191.roa (raw, json) Hash identifier: 0hMBhSz3/bTIcGsjcZE8W/cu7QkY1m9GiH/ADjFt7XQ= Subject key identifier: 39:D1:F8:1D:E2:19:D4:FD:1A:4D:85:0C:22:85:C5:47:9A:D0:F0:45 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 28E2931A42F92FB467494FAD620302F8C1AD4427 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154191.roa Signing time: Mon 15 Sep 2025 03:44:43 +0000 ROA not before: Mon 15 Sep 2025 03:39:43 +0000 ROA not after: Mon 14 Sep 2026 03:44:43 +0000 asID: 154191 IP address blocks: 45.126.250.0/23 maxlen: 24 2001:df6:c40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:e2:93:1a:42:f9:2f:b4:67:49:4f:ad:62:03:02:f8:c1:ad:44:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 15 03:39:43 2025 GMT Not After : Sep 14 03:44:43 2026 GMT Subject: CN=39D1F81DE219D4FD1A4D850C2285C5479AD0F045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:69:c1:1b:5b:53:d9:83:4d:7f:37:7c:e0:e1: f1:57:9e:9a:28:d3:6c:bd:27:cc:30:2a:0b:53:cd: 4b:e8:ce:d0:20:7d:a1:2d:eb:9b:f3:85:ef:69:6c: c4:a2:c0:c8:30:54:1f:b3:62:d0:dc:c2:99:5b:67: c3:da:1e:67:8e:4d:46:09:a0:83:35:b2:16:8c:db: 5b:6f:33:9c:3b:49:78:37:72:d4:37:f4:e9:32:dc: 72:27:6e:cf:ef:b6:51:76:cc:5f:38:e7:ab:ba:84: 43:d2:00:be:0a:68:f8:f6:8c:cc:8d:61:f7:bf:9c: 4e:c5:52:5e:86:08:a3:ff:3a:15:8d:74:f7:ed:24: a0:c1:90:c8:85:d0:a8:d5:2f:75:4c:c3:6d:66:e6: 1b:89:4c:f1:dc:55:10:4b:55:e2:cc:e9:78:b9:7c: e8:f1:29:65:c5:3c:08:86:ec:db:13:ef:60:57:bf: 17:31:f1:4d:32:b8:75:95:02:e9:20:cd:3a:0e:c9: 25:53:58:4a:08:6d:03:b7:0b:16:6a:79:e5:74:a4: 73:35:42:7a:f2:c9:9a:34:70:50:0a:68:74:55:bb: 4a:ed:de:8d:4e:37:7f:00:86:df:ea:ff:c9:bd:09: 0f:31:0f:3d:92:56:b1:f2:80:1e:5c:2c:a9:46:9a: b5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D1:F8:1D:E2:19:D4:FD:1A:4D:85:0C:22:85:C5:47:9A:D0:F0:45 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154191.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.126.250.0/23 IPv6: 2001:df6:c40::/48 Signature Algorithm: sha256WithRSAEncryption 2a:ab:ff:ff:c7:6e:14:02:92:ef:61:14:41:aa:6e:23:42:9c: 3d:cf:00:9c:b6:20:fa:72:e5:d8:8b:25:c7:1e:19:b6:b7:19: 72:7f:66:df:3a:1a:c1:8c:04:5a:a8:35:a2:7f:3b:98:e5:24: b9:43:7c:35:7d:b5:3d:41:99:80:f9:3e:d9:bc:bb:1d:db:35: 64:11:b5:71:5e:dc:3a:cd:2d:25:b7:ae:0c:71:e7:be:dc:82: b5:21:a4:42:87:2e:c1:a6:dd:5f:48:3a:cd:7c:36:e6:0a:c7: 04:e8:5f:fe:af:ba:3c:33:c4:62:4f:4e:1e:89:b5:71:03:33: 11:64:73:03:bc:42:29:0d:27:85:a9:c4:17:5b:3a:ed:d5:76: 04:b1:a0:03:9e:15:fb:cd:72:32:58:71:a2:ae:bd:16:4c:5d: f5:76:61:a0:41:58:ae:e7:29:2b:0e:1b:71:53:7f:df:e2:b6: c6:4b:d1:87:dc:52:51:0f:d2:34:9f:0b:35:f5:28:47:9f:35: dd:aa:3f:b4:8c:e4:e8:08:e8:4e:2f:ec:3a:bf:eb:58:ea:0f: 3c:3d:04:c1:e9:d0:b1:0c:45:d3:24:b5:69:1f:98:43:33:0d: 43:ff:31:0c:77:ef:f2:13:ae:9c:33:cd:c0:e7:a6:8d:b2:67: c5:0a:ff:2c -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUKOKTGkL5L7RnSU+tYgMC+MGtRCcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkxNTAzMzk0M1oX DTI2MDkxNDAzNDQ0M1owMzExMC8GA1UEAxMoMzlEMUY4MURFMjE5RDRGRDFBNEQ4 NTBDMjI4NUM1NDc5QUQwRjA0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOlpwRtbU9mDTX83fODh8VeemijTbL0nzDAqC1PNS+jO0CB9oS3rm/OF72ls xKLAyDBUH7Ni0NzCmVtnw9oeZ45NRgmggzWyFozbW28znDtJeDdy1Df06TLccidu z++2UXbMXzjnq7qEQ9IAvgpo+PaMzI1h97+cTsVSXoYIo/86FY109+0koMGQyIXQ qNUvdUzDbWbmG4lM8dxVEEtV4szpeLl86PEpZcU8CIbs2xPvYFe/FzHxTTK4dZUC 6SDNOg7JJVNYSghtA7cLFmp55XSkczVCevLJmjRwUApodFW7Su3ejU43fwCG3+r/ yb0JDzEPPZJWsfKAHlwsqUaatUsCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBQ50fgd 4hnU/RpNhQwihcVHmtDwRTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDE5MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAS1++jAPBAIAAjAJAwcAIAEN9gxAMA0GCSqGSIb3DQEBCwUAA4IB AQAqq///x24UApLvYRRBqm4jQpw9zwCctiD6cuXYiyXHHhm2txlyf2bfOhrBjARa qDWifzuY5SS5Q3w1fbU9QZmA+T7ZvLsd2zVkEbVxXtw6zS0lt64Mcee+3IK1IaRC hy7Bpt1fSDrNfDbmCscE6F/+r7o8M8RiT04eibVxAzMRZHMDvEIpDSeFqcQXWzrt 1XYEsaADnhX7zXIyWHGirr0WTF31dmGgQViu5ykrDhtxU3/f4rbGS9GH3FJRD9I0 nws19ShHnzXdqj+0jOToCOhOL+w6v+tY6g88PQTB6dCxDEXTJLVpH5hDMw1D/zEM d+/yE66cM83A56aNsmfFCv8s -----END CERTIFICATE-----Generated at Sun Oct 19 12:51:19 2025 by rpki-client