$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154073.roa File: AS154073.roa (raw, json) Hash identifier: C9qX5U6lbnNktpZYLxyVoWZ8edZlcwmwcVfuFihdVO4= Subject key identifier: 16:96:9E:6A:AD:5C:F3:6B:AA:44:B8:64:55:98:DD:5C:82:D2:9B:81 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 14C55D20403789B099D6F0E39554D09416D1D614 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154073.roa Signing time: Thu 30 Jul 2026 09:10:45 +0000 ROA not before: Thu 30 Jul 2026 09:05:45 +0000 ROA not after: Thu 29 Jul 2027 09:10:45 +0000 asID: 154073 IP address blocks: 2001:df7:40c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:c5:5d:20:40:37:89:b0:99:d6:f0:e3:95:54:d0:94:16:d1:d6:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jul 30 09:05:45 2026 GMT Not After : Jul 29 09:10:45 2027 GMT Subject: CN=16969E6AAD5CF36BAA44B8645598DD5C82D29B81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:10:fc:c0:16:76:c1:5a:07:ca:9e:61:12:d8: 15:e7:1c:d3:89:90:cb:15:2d:91:7d:9d:f8:95:ac: 85:e3:a7:e2:65:56:64:d5:17:45:51:eb:fa:cc:20: 20:2a:ac:9f:9b:a2:e5:85:1e:d8:52:76:da:0a:21: 86:52:f7:d5:3d:67:73:94:7d:5c:ef:36:63:5f:ac: c0:1d:b8:1c:99:01:f5:d8:81:5e:27:26:88:5d:15: f8:14:86:db:e8:b6:69:52:c1:07:c6:91:40:12:3a: 28:8e:4f:58:77:c0:de:32:6f:a6:ff:96:a8:ca:f6: a7:f3:a2:88:08:94:73:f4:b1:bf:19:af:35:bb:fb: 08:a6:5c:e9:2b:93:23:4c:87:ee:8b:5e:59:f9:18: 2f:04:f2:06:3b:c0:ac:7a:93:67:6b:e6:53:c5:6d: 8d:e9:85:2a:0a:23:35:88:cb:c4:c2:61:d8:5f:c4: 48:bc:c6:65:ef:f2:db:b1:5b:eb:f0:43:79:c7:a5: e0:df:2b:01:ba:68:3e:14:9a:ae:ba:ce:72:98:b1: 20:3e:86:ab:13:87:50:46:27:fb:19:3a:55:73:ce: fc:c0:26:e2:67:97:f6:e3:79:ca:92:f7:91:e0:4b: e8:2d:fd:47:3a:9b:ad:d2:63:0d:b1:4b:fb:be:78: 0b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:96:9E:6A:AD:5C:F3:6B:AA:44:B8:64:55:98:DD:5C:82:D2:9B:81 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154073.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:40c0::/48 Signature Algorithm: sha256WithRSAEncryption 3d:a6:88:dc:6e:4c:5a:5c:23:2e:a7:5d:b9:f6:52:02:5b:ca: b0:a8:1a:48:81:c1:b9:0f:88:9a:f1:62:69:0f:65:c0:28:31: ba:cf:07:1e:ac:61:62:d9:d9:90:53:13:24:64:5b:b2:1c:98: 90:ff:87:9d:a9:9f:b0:25:8e:7d:d7:0e:ad:2b:96:ef:79:bd: fa:b2:93:21:40:4a:d7:91:ee:b4:d4:7f:f8:46:ac:e7:a1:f3: fe:26:c3:0f:7d:37:bb:b2:07:7a:65:77:b3:5e:82:26:c3:34: f0:9d:68:06:95:de:06:6e:5c:f1:12:d4:d8:3a:f3:85:c3:28: 02:36:67:e5:47:d1:94:44:70:97:11:c7:28:cf:1b:64:95:4e: b2:cb:b2:83:6d:91:3f:8d:21:8f:21:d9:9d:8c:a7:d7:c3:f4: 7e:af:4e:7b:5d:e2:77:f6:c3:a8:ca:2b:26:2f:1c:cc:06:53: e0:1b:4a:f7:95:8a:09:30:a2:d2:c3:4d:a4:d0:0b:9f:3a:21: a9:52:36:37:36:e1:3a:d3:ca:15:2a:c1:ec:25:f2:47:45:6d: ab:fa:38:48:9e:f8:c8:57:29:c3:23:9a:61:3e:ea:90:8f:10: ec:b7:d0:00:29:e4:e2:f9:54:47:32:f5:3b:25:9a:b2:24:fe: 3a:e7:24:8a -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUFMVdIEA3ibCZ1vDjlVTQlBbR1hQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDczMDA5MDU0NVoX DTI3MDcyOTA5MTA0NVowMzExMC8GA1UEAxMoMTY5NjlFNkFBRDVDRjM2QkFBNDRC ODY0NTU5OERENUM4MkQyOUI4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIQ/MAWdsFaB8qeYRLYFecc04mQyxUtkX2d+JWsheOn4mVWZNUXRVHr+swg ICqsn5ui5YUe2FJ22gohhlL31T1nc5R9XO82Y1+swB24HJkB9diBXicmiF0V+BSG 2+i2aVLBB8aRQBI6KI5PWHfA3jJvpv+WqMr2p/OiiAiUc/SxvxmvNbv7CKZc6SuT I0yH7oteWfkYLwTyBjvArHqTZ2vmU8VtjemFKgojNYjLxMJh2F/ESLzGZe/y27Fb 6/BDecel4N8rAbpoPhSarrrOcpixID6GqxOHUEYn+xk6VXPO/MAm4meX9uN5ypL3 keBL6C39RzqbrdJjDbFL+754C6sCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQWlp5q rVzza6pEuGRVmN1cgtKbgTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0MDczLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN90DAMA0GCSqGSIb3DQEBCwUAA4IBAQA9pojcbkxaXCMup1259lIC W8qwqBpIgcG5D4ia8WJpD2XAKDG6zwcerGFi2dmQUxMkZFuyHJiQ/4edqZ+wJY59 1w6tK5bveb36spMhQErXke601H/4RqznofP+JsMPfTe7sgd6ZXezXoImwzTwnWgG ld4GblzxEtTYOvOFwygCNmflR9GURHCXEccozxtklU6yy7KDbZE/jSGPIdmdjKfX w/R+r057XeJ39sOoyismLxzMBlPgG0r3lYoJMKLSw02k0AufOiGpUjY3NuE608oV KsHsJfJHRW2r+jhInvjIVynDI5phPuqQjxDst9AAKeTi+VRHMvU7JZqyJP465ySK -----END CERTIFICATE-----Generated at Sun Aug 2 14:24:49 2026 by rpki-client