$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154962.roa File: AS154962.roa (raw, json) Hash identifier: WyI0zh9tcCQUi9M5mpJoTwZVR2b6Fk5gK7+q6USUDFU= Subject key identifier: 03:24:AF:A7:EC:0D:6A:B1:5D:5E:F3:B6:BB:19:CA:C9:21:26:A7:F5 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 45085EA28C74AD9D9DE3103CF194825A6950776A Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154962.roa Signing time: Tue 29 Sep 2026 06:25:51 +0000 ROA not before: Tue 29 Sep 2026 06:20:51 +0000 ROA not after: Tue 28 Sep 2027 06:25:51 +0000 asID: 154962 IP address blocks: 198.61.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:08:5e:a2:8c:74:ad:9d:9d:e3:10:3c:f1:94:82:5a:69:50:77:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Sep 29 06:20:51 2026 GMT Not After : Sep 28 06:25:51 2027 GMT Subject: CN=0324AFA7EC0D6AB15D5EF3B6BB19CAC92126A7F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:37:11:17:08:0f:2e:fa:37:51:62:a8:6d:54: 6b:66:48:a5:89:84:d1:97:6d:de:12:02:a7:77:0b: 94:17:0c:45:f7:c9:e1:5a:33:16:ba:dd:18:1c:00: 4a:19:1d:48:d3:66:19:47:01:97:1d:96:00:fe:d1: 3c:0c:5e:82:65:84:c0:97:3c:a0:8f:7a:8c:8e:53: 5f:ba:58:2d:fd:9a:4a:65:5c:b8:3e:9c:83:58:c8: a2:60:9b:a2:03:ff:df:70:d9:f2:f1:5a:03:d1:1a: ea:3c:e2:6f:03:25:fe:32:42:d7:b6:cb:fb:36:16: 8b:65:ed:15:5a:44:e1:2b:4c:93:fc:73:d1:5f:ad: a7:fb:7f:9f:91:65:87:89:2b:af:75:11:67:03:63: b9:18:fb:4e:26:2a:ad:14:b3:cb:6e:83:30:b4:b7: ab:c3:ec:aa:cf:f9:8d:97:c4:f5:3a:f9:9e:88:ea: 95:f7:11:40:19:b2:ed:6b:55:54:84:82:26:a4:f3: 78:c8:ce:90:5e:c5:b6:f0:d5:0e:11:b7:8e:aa:80: 8a:a8:82:6e:e8:84:82:58:af:34:14:c3:a1:2d:3f: 29:ed:f6:e0:87:28:19:f5:32:30:b9:30:0a:01:98: d5:a3:a7:1f:23:3d:e5:c1:7c:3e:4c:1c:f7:ef:25: c5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:24:AF:A7:EC:0D:6A:B1:5D:5E:F3:B6:BB:19:CA:C9:21:26:A7:F5 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154962.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.61.12.0/23 Signature Algorithm: sha256WithRSAEncryption 27:a8:ac:90:1f:3a:1e:76:b5:22:3c:6e:68:70:fd:43:89:c8: 4a:35:f2:dd:d2:66:5a:84:62:72:c5:59:8e:bd:05:d5:1d:18: 64:c7:31:3c:74:24:bd:b2:e8:0d:fd:51:c2:17:d1:dd:53:3b: 7d:f7:a1:8b:31:48:b5:16:a4:df:26:78:7c:bc:24:01:30:16: af:36:06:85:7d:29:26:7b:8b:63:b5:f2:21:77:cd:fc:be:73: 1d:94:bd:72:a3:dd:43:02:ee:97:4a:a1:22:bf:a1:8b:89:1b: 87:f3:d0:ec:aa:35:f1:1d:c9:c2:64:e9:7f:5a:ea:09:1b:22: cc:98:fe:fa:69:9f:e3:cb:2d:ec:c7:95:55:30:99:6b:32:45: a6:98:85:0d:f9:9a:15:65:66:ad:e1:f6:97:c8:38:d0:8a:5c: c4:15:b3:99:10:d1:c1:01:20:6b:12:26:3c:08:83:93:45:48: a7:a9:de:35:67:9e:26:3b:f5:42:e5:97:af:b6:0f:5b:16:cd: 10:6a:5c:23:e9:13:ce:04:42:dd:a3:54:5a:37:87:23:a1:c3: 61:65:08:2a:c0:09:89:f0:77:09:61:f3:24:92:f0:53:37:66: 6b:03:1a:da:fd:40:96:cd:25:b4:c3:6b:ea:4b:b8:89:07:d7: 19:b2:99:99 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIURQheoox0rZ2d4xA88ZSCWmlQd2owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDkyOTA2MjA1MVoX DTI3MDkyODA2MjU1MVowMzExMC8GA1UEAxMoMDMyNEFGQTdFQzBENkFCMTVENUVG M0I2QkIxOUNBQzkyMTI2QTdGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMY3ERcIDy76N1FiqG1Ua2ZIpYmE0Zdt3hICp3cLlBcMRffJ4VozFrrdGBwA ShkdSNNmGUcBlx2WAP7RPAxegmWEwJc8oI96jI5TX7pYLf2aSmVcuD6cg1jIomCb ogP/33DZ8vFaA9Ea6jzibwMl/jJC17bL+zYWi2XtFVpE4StMk/xz0V+tp/t/n5Fl h4krr3URZwNjuRj7TiYqrRSzy26DMLS3q8Psqs/5jZfE9Tr5nojqlfcRQBmy7WtV VISCJqTzeMjOkF7FtvDVDhG3jqqAiqiCbuiEglivNBTDoS0/Ke324IcoGfUyMLkw CgGY1aOnHyM95cF8Pkwc9+8lxUMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQDJK+n 7A1qsV1e87a7GcrJISan9TAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0OTYyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBxj0MMA0GCSqGSIb3DQEBCwUAA4IBAQAnqKyQHzoedrUiPG5ocP1DichK NfLd0mZahGJyxVmOvQXVHRhkxzE8dCS9sugN/VHCF9HdUzt996GLMUi1FqTfJnh8 vCQBMBavNgaFfSkme4tjtfIhd838vnMdlL1yo91DAu6XSqEiv6GLiRuH89DsqjXx HcnCZOl/WuoJGyLMmP76aZ/jyy3sx5VVMJlrMkWmmIUN+ZoVZWat4faXyDjQilzE FbOZENHBASBrEiY8CIOTRUinqd41Z54mO/VC5Zevtg9bFs0Qalwj6RPOBELdo1Ra N4cjocNhZQgqwAmJ8HcJYfMkkvBTN2ZrAxra/UCWzSW0w2vqS7iJB9cZspmZ -----END CERTIFICATE-----Generated at Sat Oct 24 07:09:55 2026 by rpki-client