$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154143.roa File: AS154143.roa (raw, json) Hash identifier: PHFTcfVNVt+L1vOB/w+N2/eASPk+5avxC/YX04JAuS0= Subject key identifier: F6:C3:5D:F1:78:DA:14:0F:E6:04:E3:03:84:9F:F1:05:9E:49:73:AC Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5932D3F52A8931F226823AF26DCEA717D8EEB1F4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154143.roa Signing time: Sat 02 May 2026 09:26:33 +0000 ROA not before: Sat 02 May 2026 09:21:33 +0000 ROA not after: Sat 01 May 2027 09:26:33 +0000 asID: 154143 IP address blocks: 203.1.91.0/24 maxlen: 24 2001:df5:f6c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:32:d3:f5:2a:89:31:f2:26:82:3a:f2:6d:ce:a7:17:d8:ee:b1:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:33 2026 GMT Not After : May 1 09:26:33 2027 GMT Subject: CN=F6C35DF178DA140FE604E303849FF1059E4973AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:af:b1:98:e5:83:d4:45:93:76:38:f2:ee:74: da:99:c2:a5:b6:c6:1f:0e:fd:32:9b:26:71:60:30: eb:05:a5:dd:c3:72:b4:d2:b5:4c:51:77:7f:28:f2: b2:e5:06:5f:d5:da:7f:7f:2e:47:24:22:83:b7:57: 88:40:1a:3d:18:e8:48:cd:65:5e:6c:bb:d8:9b:6f: fe:ce:ee:91:12:ad:0d:39:e7:72:eb:28:b5:12:a5: b0:82:e5:ae:b7:b2:ae:91:13:75:a5:b3:29:cf:d4: 5f:ca:76:2d:8b:ca:b8:bb:a0:15:5c:30:b0:eb:bf: 52:6e:51:6a:cf:74:67:93:f5:37:5e:f5:10:22:40: 0a:05:0c:41:7a:36:d8:48:90:d8:09:9b:4b:e1:61: f3:69:20:7c:b0:ee:f6:b5:d1:88:13:a1:ea:5d:0b: 52:cb:92:01:67:c4:c1:c4:9c:3c:56:b0:52:66:cb: 23:1c:40:e5:53:f5:31:99:db:d3:a8:19:dc:8c:00: b0:bd:cf:ea:1c:10:19:61:f6:36:3c:b4:87:c0:22: 58:b0:24:61:7e:13:62:64:a8:af:88:ae:03:f8:8e: 4b:a0:3d:3e:bb:99:9c:22:97:0f:74:0a:fb:0e:c1: 72:d4:2b:b3:b8:89:91:5f:6d:24:74:9a:db:71:08: b2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C3:5D:F1:78:DA:14:0F:E6:04:E3:03:84:9F:F1:05:9E:49:73:AC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154143.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.1.91.0/24 IPv6: 2001:df5:f6c0::/48 Signature Algorithm: sha256WithRSAEncryption 65:47:cc:47:34:6f:a3:1c:b9:1e:93:0a:9b:fc:24:48:08:af: 8b:37:cb:0c:6e:f1:df:1c:10:da:3b:23:4b:a8:7a:4f:97:fd: eb:bf:90:da:d5:da:28:bd:b9:37:6e:ce:6c:98:22:32:06:82: 8b:8b:85:46:fb:1f:d5:c0:0b:92:21:45:d9:85:fa:b8:69:42: bb:45:89:45:2f:3e:09:a8:ad:de:48:e9:03:71:45:ac:87:ae: b6:bd:e7:64:9a:56:8e:77:f7:8e:fd:7e:2c:c0:d0:52:72:35: 32:85:b8:a7:10:f3:83:8a:2b:61:01:53:93:44:7a:fe:8b:77: 9a:a4:a1:1a:6e:2a:d7:3e:3c:5d:c9:ff:93:d0:56:2f:8c:8d: 31:b1:e9:2a:33:2f:89:32:33:1a:ae:f3:60:bb:3d:2a:02:9f: 55:20:c5:0d:20:4b:bf:3b:c7:65:c2:3e:f7:14:f5:37:4c:fc: 7b:6a:44:99:45:b6:58:78:f4:d0:51:27:41:6d:ef:a9:c4:e8: 9c:b9:40:3a:76:b0:c4:54:7f:d7:d5:79:05:71:6e:ab:4e:aa: 32:af:a3:b2:00:cb:97:59:96:8b:e0:ba:3e:9f:cb:b0:0b:a3: 23:db:96:35:32:5d:a7:bd:06:35:8f:7f:b3:52:29:77:25:2c: 69:7c:da:cb -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUWTLT9SqJMfImgjrybc6nF9jusfQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjEzM1oX DTI3MDUwMTA5MjYzM1owMzExMC8GA1UEAxMoRjZDMzVERjE3OERBMTQwRkU2MDRF MzAzODQ5RkYxMDU5RTQ5NzNBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKmvsZjlg9RFk3Y48u502pnCpbbGHw79MpsmcWAw6wWl3cNytNK1TFF3fyjy suUGX9Xaf38uRyQig7dXiEAaPRjoSM1lXmy72Jtv/s7ukRKtDTnncusotRKlsILl rreyrpETdaWzKc/UX8p2LYvKuLugFVwwsOu/Um5Ras90Z5P1N171ECJACgUMQXo2 2EiQ2AmbS+Fh82kgfLDu9rXRiBOh6l0LUsuSAWfEwcScPFawUmbLIxxA5VP1MZnb 06gZ3IwAsL3P6hwQGWH2Njy0h8AiWLAkYX4TYmSor4iuA/iOS6A9PruZnCKXD3QK +w7BctQrs7iJkV9tJHSa23EIsgECAwEAAaOCAd0wggHZMB0GA1UdDgQWBBT2w13x eNoUD+YE4wOEn/EFnklzrDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0MTQzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAywFbMA8EAgACMAkDBwAgAQ319sAwDQYJKoZIhvcNAQELBQADggEBAGVH zEc0b6McuR6TCpv8JEgIr4s3ywxu8d8cENo7I0uoek+X/eu/kNrV2ii9uTduzmyY IjIGgouLhUb7H9XAC5IhRdmF+rhpQrtFiUUvPgmord5I6QNxRayHrra952SaVo53 9479fizA0FJyNTKFuKcQ84OKK2EBU5NEev6Ld5qkoRpuKtc+PF3J/5PQVi+MjTGx 6SozL4kyMxqu82C7PSoCn1UgxQ0gS787x2XCPvcU9TdM/HtqRJlFtlh49NBRJ0Ft 76nE6Jy5QDp2sMRUf9fVeQVxbqtOqjKvo7IAy5dZlovguj6fy7ALoyPbljUyXae9 BjWPf7NSKXclLGl82ss= -----END CERTIFICATE-----Generated at Sun May 3 01:44:15 2026 by rpki-client