$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154178.roa File: AS154178.roa (raw, json) Hash identifier: YpmeUCKHWQpLq3L9Uv5ysgCOZ5//+N8XbJfINQbDd3I= Subject key identifier: BC:F1:1E:A0:7F:86:A3:09:8E:A7:7D:53:00:AE:CA:52:79:DB:33:2A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1890591BABE96FD064C0DC073AB1A070D19D3FEE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154178.roa Signing time: Sat 02 May 2026 09:26:49 +0000 ROA not before: Sat 02 May 2026 09:21:49 +0000 ROA not after: Sat 01 May 2027 09:26:49 +0000 asID: 154178 IP address blocks: 2001:df5:d540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:90:59:1b:ab:e9:6f:d0:64:c0:dc:07:3a:b1:a0:70:d1:9d:3f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:49 2026 GMT Not After : May 1 09:26:49 2027 GMT Subject: CN=BCF11EA07F86A3098EA77D5300AECA5279DB332A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6e:8e:8a:c2:92:ff:4c:9c:e6:57:d9:06:5a: 5e:b7:97:e1:02:db:cd:45:44:ec:4c:b3:5b:ed:bc: af:d0:9e:b1:fe:1e:54:c2:97:4a:63:e6:3c:3b:ee: 56:4d:3d:54:2b:e5:16:63:c2:ef:e4:fe:a1:43:55: 2d:06:83:98:87:f9:08:3e:9b:86:fe:b1:79:62:87: b2:85:62:89:1e:26:c0:c0:34:93:54:a8:16:3f:52: 58:c9:99:ca:7c:35:f7:9c:3f:e2:cc:1a:84:9b:16: 90:94:51:b2:fb:b9:37:c8:3c:cd:4e:f3:d6:aa:72: 65:04:38:c3:ea:ca:eb:0a:c5:39:36:f3:6f:17:22: 8c:5f:34:79:30:c3:81:af:1f:e4:4f:4a:dd:16:c0: a1:dd:b1:d1:20:bd:3e:3f:fe:d4:42:d1:c2:99:37: 3d:df:d1:8b:f0:e1:1a:7a:a1:a3:09:ab:dd:6e:69: 1d:ff:88:7c:be:dd:b5:29:30:d8:a4:e8:01:79:5a: 2a:7f:79:ab:ba:f7:75:5d:ad:ee:38:11:a3:86:13: f1:40:b7:1f:52:d4:10:49:19:d6:bc:5d:e3:be:3a: d1:16:e8:d8:e7:51:a7:bd:47:ec:9f:1e:e8:ea:b3: 24:33:39:a3:34:d7:e0:1f:94:64:ea:29:69:27:6e: 79:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F1:1E:A0:7F:86:A3:09:8E:A7:7D:53:00:AE:CA:52:79:DB:33:2A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154178.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:d540::/48 Signature Algorithm: sha256WithRSAEncryption 74:31:e0:25:7b:0f:4e:1e:a2:a8:ea:4f:77:17:20:8c:4b:00: 05:54:b4:1d:37:d8:08:b7:99:62:47:b6:44:31:e7:d2:50:da: 72:56:fe:b5:dd:f5:d4:3c:1e:a9:6a:23:ad:9a:69:2f:20:13: 9b:a9:b2:39:11:c7:bc:e8:42:ea:b6:08:5d:e7:27:50:5f:32: 2d:b9:b1:c5:fe:37:de:f4:ae:a8:b7:c5:09:8f:2b:06:25:b1: 0c:c7:ad:c0:b4:d9:b5:5b:be:6c:ee:76:79:8d:11:85:dc:c6: 4b:c3:9f:f2:2c:8e:fd:a7:df:5e:be:51:77:e5:d3:88:3e:3a: 5e:ac:d5:66:eb:0b:62:87:ac:fd:0a:af:65:20:2f:18:db:6d: d7:ed:f2:6d:7b:2c:31:45:a7:cf:07:8d:12:ed:f1:7d:9f:58: 5b:fb:79:3e:e7:a3:b6:ec:d1:f0:af:09:b5:6c:1f:48:ee:6f: 79:0d:6b:71:62:19:b0:5b:09:2c:34:a7:4f:01:0a:06:70:8c: bc:d9:5e:f3:c1:9a:f5:7a:6e:26:17:ba:ec:d5:81:09:2b:33: db:30:8c:94:25:ab:74:c4:9a:31:ba:1f:c9:ad:30:d8:cc:e8: 0d:96:53:97:4d:74:de:1b:c6:0a:71:9d:a1:92:45:59:e9:fa: 93:bd:cd:f5 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUGJBZG6vpb9BkwNwHOrGgcNGdP+4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjE0OVoX DTI3MDUwMTA5MjY0OVowMzExMC8GA1UEAxMoQkNGMTFFQTA3Rjg2QTMwOThFQTc3 RDUzMDBBRUNBNTI3OURCMzMyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALJujorCkv9MnOZX2QZaXreX4QLbzUVE7EyzW+28r9Cesf4eVMKXSmPmPDvu Vk09VCvlFmPC7+T+oUNVLQaDmIf5CD6bhv6xeWKHsoViiR4mwMA0k1SoFj9SWMmZ ynw195w/4swahJsWkJRRsvu5N8g8zU7z1qpyZQQ4w+rK6wrFOTbzbxcijF80eTDD ga8f5E9K3RbAod2x0SC9Pj/+1ELRwpk3Pd/Ri/DhGnqhowmr3W5pHf+IfL7dtSkw 2KToAXlaKn95q7r3dV2t7jgRo4YT8UC3H1LUEEkZ1rxd47460Rbo2OdRp71H7J8e 6OqzJDM5ozTX4B+UZOopaSdueTsCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBS88R6g f4ajCY6nfVMArspSedszKjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0MTc4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9dVAMA0GCSqGSIb3DQEBCwUAA4IBAQB0MeAlew9OHqKo6k93FyCM SwAFVLQdN9gIt5liR7ZEMefSUNpyVv613fXUPB6paiOtmmkvIBObqbI5Ece86ELq tghd5ydQXzItubHF/jfe9K6ot8UJjysGJbEMx63AtNm1W75s7nZ5jRGF3MZLw5/y LI79p99evlF35dOIPjperNVm6wtih6z9Cq9lIC8Y223X7fJteywxRafPB40S7fF9 n1hb+3k+56O27NHwrwm1bB9I7m95DWtxYhmwWwksNKdPAQoGcIy82V7zwZr1em4m F7rs1YEJKzPbMIyUJat0xJoxuh/JrTDYzOgNllOXTXTeG8YKcZ2hkkVZ6fqTvc31 -----END CERTIFICATE-----Generated at Sun May 3 00:39:46 2026 by rpki-client