$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154191.roa File: AS154191.roa (raw, json) Hash identifier: B61H0FFtEo68l6l35G1o7HRYUQBxRa07RHlblTRBWiY= Subject key identifier: AC:22:1D:45:08:35:63:85:E0:D6:A6:49:36:BC:45:4E:42:44:C5:D0 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 34C0B37958AECB2CE576BFCC79A686CCFFF3C9BD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154191.roa Signing time: Sat 02 May 2026 09:27:36 +0000 ROA not before: Sat 02 May 2026 09:22:36 +0000 ROA not after: Sat 01 May 2027 09:27:36 +0000 asID: 154191 IP address blocks: 45.126.250.0/23 maxlen: 24 2001:df6:c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:c0:b3:79:58:ae:cb:2c:e5:76:bf:cc:79:a6:86:cc:ff:f3:c9:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:22:36 2026 GMT Not After : May 1 09:27:36 2027 GMT Subject: CN=AC221D4508356385E0D6A64936BC454E4244C5D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:da:e2:2e:8c:7a:43:9c:19:8d:f6:22:8d:5f: 74:7b:ed:1c:89:dc:d5:0f:12:b5:2a:f0:30:59:9d: 7d:69:bf:7b:80:f9:3b:6e:58:12:83:9f:33:6d:80: 35:a5:53:71:2d:ab:ba:3d:a2:0d:54:cf:6c:41:aa: 7d:10:00:2d:aa:72:d0:f7:8f:26:50:f0:cb:94:43: 6f:d8:0f:a3:5d:c7:38:0e:24:85:56:90:78:35:b7: 19:18:4e:36:4e:9f:c3:b0:3c:a7:41:f1:fc:bc:5a: 06:a8:36:93:e2:8f:b2:0d:2b:97:09:4a:2f:60:48: 13:2a:10:96:3c:c5:b2:c7:37:f3:87:a4:5a:ad:77: 6e:3a:ef:35:5a:2a:12:d7:a0:ea:44:8a:f8:09:b4: 9a:e3:d1:8c:5c:f7:55:1a:ce:9d:33:bd:7a:7c:34: d1:7c:a5:3f:94:a9:df:f9:29:28:09:2b:06:bb:17: db:b4:3f:59:79:49:c2:8b:86:b4:f4:61:75:2a:fa: b8:ec:90:96:7d:f8:b2:e4:8d:e9:10:96:bb:bf:b9: b8:81:55:93:95:61:48:ad:19:62:3e:07:54:8c:6b: aa:a4:90:f6:0e:96:85:34:fb:ce:78:0b:16:65:85: 22:35:5b:38:c5:d5:e1:0d:77:1f:3f:cb:6b:84:be: 1a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:22:1D:45:08:35:63:85:E0:D6:A6:49:36:BC:45:4E:42:44:C5:D0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154191.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.126.250.0/23 IPv6: 2001:df6:c40::/48 Signature Algorithm: sha256WithRSAEncryption 27:a7:1f:52:41:2e:0e:5d:ef:f0:0a:56:77:21:58:b7:57:9f: 12:97:c6:63:c2:3b:73:50:50:4e:17:0e:6a:a6:3b:12:9d:31: 04:dd:59:64:b5:15:05:4c:26:26:c9:1c:6b:63:7c:d5:f4:4c: 6f:f9:8a:78:27:c1:4a:a4:6d:35:e5:6a:1c:5a:69:69:ab:d7: b4:ab:27:f6:0b:67:33:13:26:6a:9c:4f:22:0e:8c:e4:ec:7e: 9f:54:8e:dc:56:be:50:7d:0e:cf:59:39:19:6d:6a:3f:88:72: f2:09:27:cf:80:35:7a:2b:5b:2b:e9:71:4f:fc:bc:23:f7:5d: aa:4b:8a:e7:ae:d5:e3:8d:4b:b2:c7:fd:ef:a0:f8:02:9f:86: c6:96:c4:7b:81:68:6f:05:a6:6d:f5:84:34:c0:90:b0:f3:70: 94:8a:0c:44:1a:ab:9b:e4:24:4a:f0:ed:55:b6:26:af:fc:45: fa:52:43:be:a1:e8:fb:c5:aa:17:18:ab:af:3a:44:46:18:79: e5:e3:12:5a:d1:7b:cb:4b:19:83:2d:82:be:69:7d:d3:ef:ac: e7:e7:08:20:be:0b:42:1e:1a:d6:8c:4d:ba:43:33:d8:a8:21: c0:00:46:44:e9:58:74:9d:c9:31:2d:0b:7b:10:8f:48:ab:f2: 43:17:02:51 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUNMCzeViuyyzldr/MeaaGzP/zyb0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjIzNloX DTI3MDUwMTA5MjczNlowMzExMC8GA1UEAxMoQUMyMjFENDUwODM1NjM4NUUwRDZB NjQ5MzZCQzQ1NEU0MjQ0QzVEMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMDa4i6MekOcGY32Io1fdHvtHInc1Q8StSrwMFmdfWm/e4D5O25YEoOfM22A NaVTcS2ruj2iDVTPbEGqfRAALapy0PePJlDwy5RDb9gPo13HOA4khVaQeDW3GRhO Nk6fw7A8p0Hx/LxaBqg2k+KPsg0rlwlKL2BIEyoQljzFssc384ekWq13bjrvNVoq Eteg6kSK+Am0muPRjFz3VRrOnTO9enw00XylP5Sp3/kpKAkrBrsX27Q/WXlJwouG tPRhdSr6uOyQln34suSN6RCWu7+5uIFVk5VhSK0ZYj4HVIxrqqSQ9g6WhTT7zngL FmWFIjVbOMXV4Q13Hz/La4S+Gp8CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBSsIh1F CDVjheDWpkk2vEVOQkTF0DAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0MTkxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBLX76MA8EAgACMAkDBwAgAQ32DEAwDQYJKoZIhvcNAQELBQADggEBACen H1JBLg5d7/AKVnchWLdXnxKXxmPCO3NQUE4XDmqmOxKdMQTdWWS1FQVMJibJHGtj fNX0TG/5ingnwUqkbTXlahxaaWmr17SrJ/YLZzMTJmqcTyIOjOTsfp9UjtxWvlB9 Ds9ZORltaj+IcvIJJ8+ANXorWyvpcU/8vCP3XapLiueu1eONS7LH/e+g+AKfhsaW xHuBaG8Fpm31hDTAkLDzcJSKDEQaq5vkJErw7VW2Jq/8RfpSQ76h6PvFqhcYq686 REYYeeXjElrRe8tLGYMtgr5pfdPvrOfnCCC+C0IeGtaMTbpDM9ioIcAARkTpWHSd yTEtC3sQj0ir8kMXAlE= -----END CERTIFICATE-----Generated at Sun May 3 00:39:49 2026 by rpki-client