$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154958.roa File: AS154958.roa (raw, json) Hash identifier: Is8ANL7er+G2LCN8ecY1HSfObNnJgkX5Cio3RDkmc2I= Subject key identifier: 23:CF:45:F5:27:62:A2:6C:FD:62:43:27:8F:B9:20:63:DC:2C:AB:73 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 3BE798786F37FAFDA75746808DB488959B28ED02 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154958.roa Signing time: Wed 07 Oct 2026 06:59:42 +0000 ROA not before: Wed 07 Oct 2026 06:54:42 +0000 ROA not after: Wed 06 Oct 2027 06:59:42 +0000 asID: 154958 IP address blocks: 192.86.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:e7:98:78:6f:37:fa:fd:a7:57:46:80:8d:b4:88:95:9b:28:ed:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Oct 7 06:54:42 2026 GMT Not After : Oct 6 06:59:42 2027 GMT Subject: CN=23CF45F52762A26CFD6243278FB92063DC2CAB73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7d:16:1b:fe:bc:ce:a9:5a:21:48:47:fa:e5: 12:3d:f8:34:f5:2f:4a:47:0b:47:62:4e:94:14:66: 36:1b:11:09:14:e7:e7:33:b9:ff:e7:2e:55:6c:c0: 6f:3c:b4:cd:7b:3d:91:32:3d:4f:e7:85:11:93:0f: 11:3e:c1:41:68:8b:f1:d0:35:ee:19:fc:29:29:f2: 83:9a:49:da:15:c3:8d:86:52:b3:7d:db:d9:3a:df: c7:8e:b6:90:57:58:8a:26:ab:de:66:73:fd:cf:ae: bb:40:ae:51:06:b6:8f:bc:5b:ab:6e:c2:63:6b:34: b5:aa:bd:13:a2:3b:bb:cb:73:93:78:56:ab:25:e7: 39:d8:75:7f:a1:ff:2b:33:4d:1d:05:74:25:b2:1e: aa:2a:54:54:4d:6d:bf:3b:c2:ee:6b:3d:d4:56:c4: e6:67:40:2c:2c:19:f7:5c:3a:4d:74:89:dd:8f:3f: b5:0d:9a:c6:ee:b2:f6:af:be:ea:1d:78:4d:5e:3f: 79:45:1a:68:9d:1d:08:b7:74:ea:bc:60:42:b2:6b: 10:bd:1f:51:4b:56:6c:ed:00:cf:f0:11:fc:f4:f4: bc:52:2c:7d:6a:73:e8:af:df:aa:98:2a:25:67:d2: af:c5:14:e6:db:de:92:91:03:0f:4a:f3:f3:ae:48: f4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CF:45:F5:27:62:A2:6C:FD:62:43:27:8F:B9:20:63:DC:2C:AB:73 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154958.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.86.132.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:f7:4a:bf:4e:37:f8:ff:44:82:a7:c4:f5:58:ea:2e:b6:45: 42:a8:82:d6:26:53:f0:9e:e9:89:3b:82:fc:ee:05:df:8a:40: 5c:06:18:d8:40:20:12:91:d9:c5:04:de:53:10:36:13:2a:08: 5f:66:43:71:b7:bf:45:98:5b:46:36:14:07:bd:cb:b9:63:10: 35:c8:32:94:05:7e:0f:4a:e9:7a:d0:f1:c8:44:4e:3a:c9:34: c4:c9:6c:3c:4c:94:d9:ba:45:36:6d:f5:74:ec:ab:be:f7:08: 3b:f0:4f:6c:ed:ca:79:3d:4a:44:da:b0:45:80:cd:5d:7a:97: 51:34:6a:13:52:88:99:17:87:ed:9f:0a:40:3c:1e:c3:75:61: 82:e6:2d:d9:7d:fa:38:8a:7b:04:d6:f7:88:de:4d:60:2e:83: c9:e5:7e:1b:44:bf:6e:63:77:91:63:9f:da:23:f4:54:1c:06: 84:dd:da:53:50:1f:f6:e2:14:09:75:22:1f:2c:ec:9f:19:a3: 61:39:24:82:d2:46:49:91:c7:1d:3c:6c:a9:e1:73:23:89:67: 17:5b:49:47:5c:01:86:71:09:e9:45:11:97:1f:5a:a8:91:a6: 9e:e0:19:1f:64:38:6b:be:f7:65:7d:b9:c2:61:c0:dc:25:a1: d8:64:12:18 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUO+eYeG83+v2nV0aAjbSIlZso7QIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MTAwNzA2NTQ0MloX DTI3MTAwNjA2NTk0MlowMzExMC8GA1UEAxMoMjNDRjQ1RjUyNzYyQTI2Q0ZENjI0 MzI3OEZCOTIwNjNEQzJDQUI3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM59Fhv+vM6pWiFIR/rlEj34NPUvSkcLR2JOlBRmNhsRCRTn5zO5/+cuVWzA bzy0zXs9kTI9T+eFEZMPET7BQWiL8dA17hn8KSnyg5pJ2hXDjYZSs33b2Trfx462 kFdYiiar3mZz/c+uu0CuUQa2j7xbq27CY2s0taq9E6I7u8tzk3hWqyXnOdh1f6H/ KzNNHQV0JbIeqipUVE1tvzvC7ms91FbE5mdALCwZ91w6TXSJ3Y8/tQ2axu6y9q++ 6h14TV4/eUUaaJ0dCLd06rxgQrJrEL0fUUtWbO0Az/AR/PT0vFIsfWpz6K/fqpgq JWfSr8UU5tvekpEDD0rz865I9P0CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQjz0X1 J2KibP1iQyePuSBj3CyrczAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0OTU4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAwFaEMA0GCSqGSIb3DQEBCwUAA4IBAQBd90q/Tjf4/0SCp8T1WOoutkVC qILWJlPwnumJO4L87gXfikBcBhjYQCASkdnFBN5TEDYTKghfZkNxt79FmFtGNhQH vcu5YxA1yDKUBX4PSul60PHIRE46yTTEyWw8TJTZukU2bfV07Ku+9wg78E9s7cp5 PUpE2rBFgM1depdRNGoTUoiZF4ftnwpAPB7DdWGC5i3Zffo4insE1veI3k1gLoPJ 5X4bRL9uY3eRY5/aI/RUHAaE3dpTUB/24hQJdSIfLOyfGaNhOSSC0kZJkccdPGyp 4XMjiWcXW0lHXAGGcQnpRRGXH1qokaae4BkfZDhrvvdlfbnCYcDcJaHYZBIY -----END CERTIFICATE-----Generated at Sat Oct 24 11:00:17 2026 by rpki-client