$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154122.roa File: AS154122.roa (raw, json) Hash identifier: b1Uf5lfOP+WpB5R502ctBiA3QYk+A3TyDzYGASSOBnA= Subject key identifier: EA:DD:BB:82:8C:E9:CA:A1:15:2B:58:3A:21:7D:E1:15:55:89:B3:FB Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 606C5EAE1EC4E9A1F2BA0F2F3A0395F9F6CFDDCB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154122.roa Signing time: Sat 02 May 2026 09:26:19 +0000 ROA not before: Sat 02 May 2026 09:21:19 +0000 ROA not after: Sat 01 May 2027 09:26:19 +0000 asID: 154122 IP address blocks: 2001:df5:ddc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:6c:5e:ae:1e:c4:e9:a1:f2:ba:0f:2f:3a:03:95:f9:f6:cf:dd:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:19 2026 GMT Not After : May 1 09:26:19 2027 GMT Subject: CN=EADDBB828CE9CAA1152B583A217DE1155589B3FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a8:c4:1b:50:5a:33:9c:cf:75:c5:7c:90:d5: da:01:88:81:d0:68:28:ae:ed:05:b5:09:fc:df:70: 95:f2:dd:ab:7b:36:a2:1f:6d:75:4d:62:55:f1:66: 59:2c:49:85:78:54:ac:6f:a7:4a:b7:d4:6b:d0:39: 71:81:4e:b0:c3:be:1e:c5:b1:fd:49:17:f9:88:1f: 61:5d:de:da:10:c2:11:46:47:03:f7:03:26:40:1e: 4c:a1:66:1a:27:d7:69:8d:9f:0f:1a:51:6d:1e:cd: 92:ac:c0:56:b3:00:4d:aa:81:95:5c:74:b9:12:2c: 25:d1:24:da:e6:09:0c:01:2e:a7:25:34:05:e6:43: 7c:66:f0:11:a5:8e:75:4a:bd:ad:54:c7:71:d5:16: 9c:59:ab:f1:bd:3d:b7:b6:0f:ce:1e:ed:39:82:df: 31:e4:2c:a9:ed:7f:c6:4e:3a:39:a1:5e:d9:55:c1: ab:8d:93:c7:7c:cf:f1:01:8c:55:9a:b3:73:e1:f1: 93:09:26:56:d9:d3:7d:ec:bb:cc:98:89:f4:10:bb: ea:ed:42:c7:a5:96:d6:3c:37:d7:b0:21:77:45:4c: 48:91:2d:21:9b:87:df:05:24:b6:8b:91:37:7e:ee: 4f:52:c0:2c:44:90:75:71:90:ce:ef:82:f2:79:f2: 3a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:DD:BB:82:8C:E9:CA:A1:15:2B:58:3A:21:7D:E1:15:55:89:B3:FB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154122.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:ddc0::/48 Signature Algorithm: sha256WithRSAEncryption 5b:96:f3:c9:bd:02:a3:af:c0:b8:cd:f4:41:00:36:18:a9:a7: a4:30:42:49:ce:ff:a9:cb:63:d3:af:b4:0f:c0:f8:ca:73:86: 81:24:05:5d:87:95:6e:0c:7c:4e:39:b1:a0:1c:5a:0b:4b:b6: f1:99:38:17:ea:d1:6f:79:5d:42:b8:00:75:c0:28:34:7d:76: 95:2f:99:eb:c7:df:d5:57:6a:9e:4c:15:52:be:03:5f:38:d6: 87:b6:b9:77:4f:fc:eb:31:3a:e9:e2:fd:a5:74:eb:33:3f:84: 08:da:d0:77:50:de:17:9b:8c:67:4c:50:9a:a7:af:80:8f:36: 77:ab:04:bc:33:ff:67:c0:02:b7:3b:57:18:6e:17:a6:1d:de: 06:1a:04:5b:58:f8:8d:1e:5b:de:13:1d:cc:c0:5f:29:27:4e: 2a:36:bf:a2:f4:80:f8:ee:a2:95:3f:d5:93:1c:f5:43:a3:87: 82:3b:c0:90:a6:bf:e9:80:78:c0:45:cf:6a:b0:88:22:49:f2: bf:7f:8b:77:36:76:59:c4:61:a5:22:56:11:64:a8:ec:1b:43: 1a:17:47:c6:4a:10:a9:9a:ba:5a:9f:e4:84:c2:a8:27:24:aa: 7e:44:21:d8:ea:f4:63:50:2e:d6:70:f1:a7:9a:9c:d9:b7:14: 02:36:a7:f1 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUYGxerh7E6aHyug8vOgOV+fbP3cswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjExOVoX DTI3MDUwMTA5MjYxOVowMzExMC8GA1UEAxMoRUFEREJCODI4Q0U5Q0FBMTE1MkI1 ODNBMjE3REUxMTU1NTg5QjNGQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJaoxBtQWjOcz3XFfJDV2gGIgdBoKK7tBbUJ/N9wlfLdq3s2oh9tdU1iVfFm WSxJhXhUrG+nSrfUa9A5cYFOsMO+HsWx/UkX+YgfYV3e2hDCEUZHA/cDJkAeTKFm GifXaY2fDxpRbR7NkqzAVrMATaqBlVx0uRIsJdEk2uYJDAEupyU0BeZDfGbwEaWO dUq9rVTHcdUWnFmr8b09t7YPzh7tOYLfMeQsqe1/xk46OaFe2VXBq42Tx3zP8QGM VZqzc+HxkwkmVtnTfey7zJiJ9BC76u1Cx6WW1jw317Ahd0VMSJEtIZuH3wUktouR N37uT1LALESQdXGQzu+C8nnyOjMCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBTq3buC jOnKoRUrWDohfeEVVYmz+zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0MTIyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9d3AMA0GCSqGSIb3DQEBCwUAA4IBAQBblvPJvQKjr8C4zfRBADYY qaekMEJJzv+py2PTr7QPwPjKc4aBJAVdh5VuDHxOObGgHFoLS7bxmTgX6tFveV1C uAB1wCg0fXaVL5nrx9/VV2qeTBVSvgNfONaHtrl3T/zrMTrp4v2ldOszP4QI2tB3 UN4Xm4xnTFCap6+AjzZ3qwS8M/9nwAK3O1cYbhemHd4GGgRbWPiNHlveEx3MwF8p J04qNr+i9ID47qKVP9WTHPVDo4eCO8CQpr/pgHjARc9qsIgiSfK/f4t3NnZZxGGl IlYRZKjsG0MaF0fGShCpmrpan+SEwqgnJKp+RCHY6vRjUC7WcPGnmpzZtxQCNqfx -----END CERTIFICATE-----Generated at Sun May 3 00:41:50 2026 by rpki-client