$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154963.roa File: AS154963.roa (raw, json) Hash identifier: 41vFZSLMJRbnIwa0qNHVvBbF9v7lb4PsJkNoCfU5f+Y= Subject key identifier: 55:43:9A:66:B9:B9:8F:60:42:5C:82:2E:CE:F6:80:6E:04:35:84:45 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 526F575E750F795881688879A8E23B99F5DA383B Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154963.roa Signing time: Tue 29 Sep 2026 06:39:48 +0000 ROA not before: Tue 29 Sep 2026 06:34:48 +0000 ROA not after: Tue 28 Sep 2027 06:39:48 +0000 asID: 154963 IP address blocks: 198.61.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:6f:57:5e:75:0f:79:58:81:68:88:79:a8:e2:3b:99:f5:da:38:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Sep 29 06:34:48 2026 GMT Not After : Sep 28 06:39:48 2027 GMT Subject: CN=55439A66B9B98F60425C822ECEF6806E04358445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4c:37:8f:b1:91:c4:52:e5:d8:3b:e8:15:3c: fd:b4:dc:b9:70:5a:e1:de:38:41:c0:83:31:ae:b4: 01:d0:af:c4:f3:74:13:f4:70:a1:5e:7d:4e:79:fe: ee:75:24:0b:4a:9c:52:b4:2f:ab:9e:61:dc:4c:e0: 66:d9:ef:15:c2:49:c4:b8:f9:c6:e4:4b:2b:c5:ff: ee:d1:c5:ee:22:19:54:a5:08:dd:e0:c4:ca:fc:94: 50:95:af:81:ff:e2:25:56:20:a6:54:0e:5d:ea:78: aa:56:6b:e3:6b:77:99:dd:e5:06:ec:d7:37:be:b3: 65:94:2e:0a:32:9b:c7:9f:d3:db:35:ef:34:df:1c: fb:a2:61:91:04:c6:21:00:45:84:65:7e:fd:d6:66: 64:81:2f:e7:de:68:fe:f8:fa:43:41:db:47:ab:0d: 66:ec:7b:a6:f1:58:48:ae:10:17:f9:51:45:f0:d6: 01:8d:20:3c:6b:b6:7e:80:9f:4e:73:97:ef:a1:44: 20:f2:a8:0b:21:d0:04:53:82:bd:5f:f6:39:04:b2: e2:3d:cd:30:7f:22:99:9f:54:01:89:95:17:b1:64: cc:bf:a7:2c:25:26:bd:e8:2a:ae:f3:34:ea:d5:03: 34:9a:f5:53:bc:84:4f:47:e0:f9:dc:b0:e0:fd:a8: c6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:43:9A:66:B9:B9:8F:60:42:5C:82:2E:CE:F6:80:6E:04:35:84:45 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154963.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.61.14.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:cc:62:2e:e6:11:19:76:a8:a8:48:a1:8d:30:ed:75:47:4c: 63:cd:ad:bd:1b:05:35:53:78:61:7e:0a:8b:9f:b3:f2:20:37: de:c4:92:53:1f:5d:65:63:20:8a:a6:29:8f:5b:90:35:25:f5: b9:5a:89:cb:a9:f6:9e:c9:d2:6b:1e:67:0c:55:b2:61:e2:06: 33:26:ed:f4:be:fd:a1:be:01:4c:ff:f8:3f:0c:32:5c:2d:e2: dd:8d:6a:f8:b0:2b:a8:04:bc:7c:8c:e9:aa:9a:9a:62:59:a4: 7e:b9:b3:d8:62:e4:59:ca:62:a0:b6:94:13:dc:f2:a3:da:79: 60:3e:ef:c6:fa:80:06:e0:c1:f3:a0:f3:10:32:06:0a:7e:ee: ec:26:b2:a3:6d:c9:04:8f:16:be:7b:2c:f8:0c:90:18:80:21: 08:9f:e5:ec:7d:51:e1:f4:c5:c6:2e:9f:7a:28:48:4e:3a:39: 82:93:90:fe:03:1f:80:00:dc:b0:7f:60:87:39:72:72:64:ed: 41:40:f8:0e:3d:97:8f:d7:6e:12:ef:75:88:da:a1:fa:1c:c4: 67:45:14:af:32:5f:b2:96:b8:2a:e4:14:21:2b:77:e6:f9:42: 15:6d:fa:3d:10:b9:15:d5:4a:9a:6c:09:1b:e7:92:c8:bb:72: 32:a1:96:43 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUUm9XXnUPeViBaIh5qOI7mfXaODswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDkyOTA2MzQ0OFoX DTI3MDkyODA2Mzk0OFowMzExMC8GA1UEAxMoNTU0MzlBNjZCOUI5OEY2MDQyNUM4 MjJFQ0VGNjgwNkUwNDM1ODQ0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOBMN4+xkcRS5dg76BU8/bTcuXBa4d44QcCDMa60AdCvxPN0E/RwoV59Tnn+ 7nUkC0qcUrQvq55h3EzgZtnvFcJJxLj5xuRLK8X/7tHF7iIZVKUI3eDEyvyUUJWv gf/iJVYgplQOXep4qlZr42t3md3lBuzXN76zZZQuCjKbx5/T2zXvNN8c+6JhkQTG IQBFhGV+/dZmZIEv595o/vj6Q0HbR6sNZux7pvFYSK4QF/lRRfDWAY0gPGu2foCf TnOX76FEIPKoCyHQBFOCvV/2OQSy4j3NMH8imZ9UAYmVF7FkzL+nLCUmvegqrvM0 6tUDNJr1U7yET0fg+dyw4P2oxkkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRVQ5pm ubmPYEJcgi7O9oBuBDWERTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0OTYzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBxj0OMA0GCSqGSIb3DQEBCwUAA4IBAQCezGIu5hEZdqioSKGNMO11R0xj za29GwU1U3hhfgqLn7PyIDfexJJTH11lYyCKpimPW5A1JfW5WonLqfaeydJrHmcM VbJh4gYzJu30vv2hvgFM//g/DDJcLeLdjWr4sCuoBLx8jOmqmppiWaR+ubPYYuRZ ymKgtpQT3PKj2nlgPu/G+oAG4MHzoPMQMgYKfu7sJrKjbckEjxa+eyz4DJAYgCEI n+XsfVHh9MXGLp96KEhOOjmCk5D+Ax+AANywf2CHOXJyZO1BQPgOPZeP124S73WI 2qH6HMRnRRSvMl+ylrgq5BQhK3fm+UIVbfo9ELkV1UqabAkb55LIu3IyoZZD -----END CERTIFICATE-----Generated at Sat Oct 24 07:09:51 2026 by rpki-client