$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154956.roa File: AS154956.roa (raw, json) Hash identifier: E7L457vyuv0EdsWMHum0h9lCQRxWnJnlVJHEcjEZQDc= Subject key identifier: EF:B4:41:22:8E:16:17:84:20:96:2E:57:5D:16:50:45:60:36:6C:D5 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2FAC5F0594390D6699E10FD594189785CEF83005 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154956.roa Signing time: Mon 28 Sep 2026 03:47:45 +0000 ROA not before: Mon 28 Sep 2026 03:42:45 +0000 ROA not after: Mon 27 Sep 2027 03:47:45 +0000 asID: 154956 IP address blocks: 198.51.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ac:5f:05:94:39:0d:66:99:e1:0f:d5:94:18:97:85:ce:f8:30:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Sep 28 03:42:45 2026 GMT Not After : Sep 27 03:47:45 2027 GMT Subject: CN=EFB441228E16178420962E575D16504560366CD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6b:2d:23:42:a1:7e:54:1b:af:8b:81:fe:80: 09:e5:f6:f0:d8:4b:95:9f:d5:af:00:b3:54:64:68: 31:c4:43:16:c7:a0:10:60:d2:14:d2:e9:85:e1:d3: 49:d6:89:86:4a:73:47:0e:26:91:39:6d:fc:73:50: 7b:46:33:ad:3b:47:d2:da:17:29:60:7b:8d:3b:29: 6c:bc:54:6d:46:a0:04:92:45:55:5f:ad:fe:4a:fa: 40:34:91:c0:03:d9:0e:f3:65:54:2e:f3:53:95:0d: 08:9e:8f:cc:e4:f1:46:2e:9e:74:4c:b3:87:27:8f: 1b:71:81:d9:9f:9a:62:4f:11:9a:79:02:d5:72:12: 7a:1f:79:53:a8:d4:fd:60:51:99:20:62:65:85:cb: 08:47:ff:09:ef:ca:d8:87:7c:0e:85:db:aa:2f:44: 46:37:b7:22:0a:1e:de:89:b6:cc:18:fe:54:30:d6: 9a:f5:77:b8:16:00:88:1d:65:54:8d:d7:b4:22:46: 81:32:77:c9:69:6d:67:a4:e2:a5:c8:e2:19:30:a2: fd:c8:54:a3:43:4c:d2:7c:56:47:09:d1:70:82:ad: 84:56:26:d0:18:6a:b7:3b:43:a5:26:2b:34:8c:8f: 30:96:9f:49:57:4f:13:eb:8c:93:ca:c7:db:c9:44: 72:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B4:41:22:8E:16:17:84:20:96:2E:57:5D:16:50:45:60:36:6C:D5 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154956.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.51.4.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:1f:9e:91:97:05:eb:51:ef:b1:8a:21:4d:1e:61:33:0a:74: c2:d2:86:2e:8a:56:a5:21:d3:35:c4:a3:c1:05:4e:23:79:48: ba:8c:44:5e:78:62:e4:72:8c:0d:c0:9a:db:84:8d:e1:19:65: a1:80:94:95:20:f5:b0:ca:4a:9d:3d:01:c5:33:24:76:43:5b: 52:28:70:24:03:b3:35:42:3f:7d:23:67:a4:6a:4b:4d:eb:98: 82:55:3d:8a:99:4e:cb:95:d3:a6:b1:55:a0:04:70:6e:38:72: f0:21:e4:79:14:e7:47:29:a0:35:ea:f5:9c:13:a5:63:b1:59: 99:ae:b6:43:1e:bc:23:21:88:24:c1:6a:38:20:23:c7:09:12: 40:75:da:59:6b:2c:42:4b:20:f0:50:40:d9:99:f3:40:a4:b6: dd:7b:da:77:2d:f5:80:29:a4:83:74:cf:d8:bc:bb:d0:f3:5d: 1a:23:7c:03:6e:8b:87:42:27:b4:4b:db:85:9e:f5:55:5e:86: c5:44:a5:a7:3d:82:2e:30:56:bb:b7:83:b5:38:35:1f:5d:0b: 50:3b:6b:12:57:3e:73:59:c1:6d:be:52:0a:74:70:fa:2a:45: e9:ed:61:da:25:a7:f7:66:bc:bd:23:01:81:bf:2e:92:11:e6: 36:14:fa:9c -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUL6xfBZQ5DWaZ4Q/VlBiXhc74MAUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDkyODAzNDI0NVoX DTI3MDkyNzAzNDc0NVowMzExMC8GA1UEAxMoRUZCNDQxMjI4RTE2MTc4NDIwOTYy RTU3NUQxNjUwNDU2MDM2NkNENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM9rLSNCoX5UG6+Lgf6ACeX28NhLlZ/VrwCzVGRoMcRDFsegEGDSFNLpheHT SdaJhkpzRw4mkTlt/HNQe0YzrTtH0toXKWB7jTspbLxUbUagBJJFVV+t/kr6QDSR wAPZDvNlVC7zU5UNCJ6PzOTxRi6edEyzhyePG3GB2Z+aYk8RmnkC1XISeh95U6jU /WBRmSBiZYXLCEf/Ce/K2Id8DoXbqi9ERje3Igoe3om2zBj+VDDWmvV3uBYAiB1l VI3XtCJGgTJ3yWltZ6TipcjiGTCi/chUo0NM0nxWRwnRcIKthFYm0BhqtztDpSYr NIyPMJafSVdPE+uMk8rH28lEctMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTvtEEi jhYXhCCWLlddFlBFYDZs1TAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0OTU2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBxjMEMA0GCSqGSIb3DQEBCwUAA4IBAQA/H56RlwXrUe+xiiFNHmEzCnTC 0oYuilalIdM1xKPBBU4jeUi6jEReeGLkcowNwJrbhI3hGWWhgJSVIPWwykqdPQHF MyR2Q1tSKHAkA7M1Qj99I2ekaktN65iCVT2KmU7LldOmsVWgBHBuOHLwIeR5FOdH KaA16vWcE6VjsVmZrrZDHrwjIYgkwWo4ICPHCRJAddpZayxCSyDwUEDZmfNApLbd e9p3LfWAKaSDdM/YvLvQ810aI3wDbouHQie0S9uFnvVVXobFRKWnPYIuMFa7t4O1 ODUfXQtQO2sSVz5zWcFtvlIKdHD6KkXp7WHaJaf3Zry9IwGBvy6SEeY2FPqc -----END CERTIFICATE-----Generated at Sat Oct 24 07:09:54 2026 by rpki-client