$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154023.roa File: AS154023.roa (raw, json) Hash identifier: PjpwdICw4fHBfKxSTDGO531VF+XBikdDL7+SRqe+hDc= Subject key identifier: 32:3E:F0:54:EE:B3:90:51:26:C6:50:75:2B:B0:C5:4C:DC:01:F3:B1 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6EF00066EB367D9EC84B208F47D9EC83AA1CA031 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154023.roa Signing time: Sat 02 May 2026 09:26:35 +0000 ROA not before: Sat 02 May 2026 09:21:35 +0000 ROA not after: Sat 01 May 2027 09:26:35 +0000 asID: 154023 IP address blocks: 2001:df5:cac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:f0:00:66:eb:36:7d:9e:c8:4b:20:8f:47:d9:ec:83:aa:1c:a0:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:35 2026 GMT Not After : May 1 09:26:35 2027 GMT Subject: CN=323EF054EEB3905126C650752BB0C54CDC01F3B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:94:09:3a:0c:47:d9:51:62:f9:76:aa:7a:a1: 6f:50:b8:60:56:3e:2f:ab:30:52:74:bc:df:ec:e6: de:32:42:f0:10:48:48:d8:ed:e9:9e:fd:eb:a8:61: d9:71:fc:9b:79:5b:da:b3:96:66:e9:09:84:54:29: 74:2b:1c:e9:fc:e3:4b:50:08:61:9b:5f:e1:a0:96: 89:e3:a5:a5:09:0e:24:c5:e3:36:05:72:97:ac:40: 23:d5:df:2d:56:df:61:f2:b3:2d:30:60:56:b2:ac: 04:8d:ea:87:ed:d8:63:8c:f9:fb:6e:47:f7:6b:9f: 31:ed:36:27:4f:af:aa:7e:88:b9:ae:1a:fe:c2:df: 25:3c:a1:ac:e8:32:ba:83:34:7d:c9:bf:27:39:63: 60:72:fa:b0:d3:a3:0c:69:a3:7d:54:5a:6d:ef:c0: 78:0b:77:11:85:0b:33:24:39:77:61:bf:9c:9d:73: cf:33:6b:1e:a9:88:09:e1:a2:7f:f2:05:2e:6d:7f: 46:de:f4:2c:93:26:fb:ae:46:fc:b1:e0:94:e0:ec: 72:99:af:7a:ad:c1:7c:76:38:51:2a:39:ff:d7:e8: db:48:6f:ee:f7:eb:76:73:bd:c4:d3:49:2f:a2:00: 2b:d6:86:3d:a7:e8:eb:0a:e8:91:86:e4:3d:2c:71: 43:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3E:F0:54:EE:B3:90:51:26:C6:50:75:2B:B0:C5:4C:DC:01:F3:B1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154023.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:cac0::/48 Signature Algorithm: sha256WithRSAEncryption 8a:66:1b:49:09:e0:97:14:ba:5a:1e:37:27:91:b9:c2:95:8f: 1a:5c:51:17:e8:cf:6d:cc:be:38:58:78:f7:6b:81:e1:6c:8a: 1f:9b:5b:dd:4f:60:5d:a4:d7:3f:b1:53:51:74:4c:32:0c:bb: 4f:44:40:40:7e:75:0c:45:af:41:16:56:1c:ac:dd:7a:3a:dc: 8c:74:9c:af:c6:37:9b:8d:78:91:5a:7b:f5:bc:81:58:e4:29: fb:d0:d7:e4:b9:fa:e0:ca:75:55:2a:f3:3e:fa:62:23:8d:05: f4:a9:79:38:16:e7:5a:bc:a2:0a:59:5a:6d:b0:e3:25:a7:ba: fd:72:6a:a4:b4:0e:0c:87:c8:e6:2f:c2:0f:b8:60:43:2d:e0: a7:db:06:a1:07:1a:f3:d0:51:34:3f:ff:da:03:49:16:50:25: 31:16:06:fe:2e:0c:31:32:cc:e3:56:ff:bc:4e:50:10:f4:07: 79:86:55:66:5b:5b:33:b0:11:76:d5:d0:f6:78:9e:ce:bb:36: 3a:f0:89:28:c5:93:26:66:bf:a9:61:8b:6a:ab:8a:dd:1b:76: 5c:9f:e6:33:2d:3d:b0:9e:7a:a2:26:c5:52:1e:4b:d5:f3:51: 40:b8:37:0c:87:5b:06:78:35:95:04:d3:80:50:59:15:13:62: 10:37:2a:eb -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUbvAAZus2fZ7ISyCPR9nsg6ocoDEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjEzNVoX DTI3MDUwMTA5MjYzNVowMzExMC8GA1UEAxMoMzIzRUYwNTRFRUIzOTA1MTI2QzY1 MDc1MkJCMEM1NENEQzAxRjNCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN2UCToMR9lRYvl2qnqhb1C4YFY+L6swUnS83+zm3jJC8BBISNjt6Z7966hh 2XH8m3lb2rOWZukJhFQpdCsc6fzjS1AIYZtf4aCWieOlpQkOJMXjNgVyl6xAI9Xf LVbfYfKzLTBgVrKsBI3qh+3YY4z5+25H92ufMe02J0+vqn6Iua4a/sLfJTyhrOgy uoM0fcm/JzljYHL6sNOjDGmjfVRabe/AeAt3EYULMyQ5d2G/nJ1zzzNrHqmICeGi f/IFLm1/Rt70LJMm+65G/LHglODscpmveq3BfHY4USo5/9fo20hv7vfrdnO9xNNJ L6IAK9aGPafo6wrokYbkPSxxQ7cCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQyPvBU 7rOQUSbGUHUrsMVM3AHzsTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0MDIzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9crAMA0GCSqGSIb3DQEBCwUAA4IBAQCKZhtJCeCXFLpaHjcnkbnC lY8aXFEX6M9tzL44WHj3a4HhbIofm1vdT2BdpNc/sVNRdEwyDLtPREBAfnUMRa9B FlYcrN16OtyMdJyvxjebjXiRWnv1vIFY5Cn70NfkufrgynVVKvM++mIjjQX0qXk4 FudavKIKWVptsOMlp7r9cmqktA4Mh8jmL8IPuGBDLeCn2wahBxrz0FE0P//aA0kW UCUxFgb+LgwxMszjVv+8TlAQ9Ad5hlVmW1szsBF21dD2eJ7OuzY68IkoxZMmZr+p YYtqq4rdG3Zcn+YzLT2wnnqiJsVSHkvV81FAuDcMh1sGeDWVBNOAUFkVE2IQNyrr -----END CERTIFICATE-----Generated at Sun May 3 01:41:18 2026 by rpki-client