$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154201.roa File: AS154201.roa (raw, json) Hash identifier: le9gZtGVm3y5YVZ6EHjTiXXU8seBOF4AgL9fnSD5ooE= Subject key identifier: 56:38:19:F6:CE:08:A8:6E:DE:1A:BC:A5:1E:76:B4:4F:C0:A7:5A:39 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0B40EDB35A651D4E4B18D7D90621204410550D09 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154201.roa Signing time: Tue 06 Oct 2026 03:01:37 +0000 ROA not before: Tue 06 Oct 2026 02:56:37 +0000 ROA not after: Tue 05 Oct 2027 03:01:37 +0000 asID: 154201 IP address blocks: 163.227.146.0/23 maxlen: 24 180.148.24.0/23 maxlen: 24 2001:df6:cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:40:ed:b3:5a:65:1d:4e:4b:18:d7:d9:06:21:20:44:10:55:0d:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 6 02:56:37 2026 GMT Not After : Oct 5 03:01:37 2027 GMT Subject: CN=563819F6CE08A86EDE1ABCA51E76B44FC0A75A39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e4:44:28:1a:d8:8c:06:ad:16:87:3b:43:9b: 71:ba:28:81:81:db:b7:13:7e:53:b2:58:26:20:c0: 52:20:ce:0a:1f:be:f8:cd:a8:36:40:ba:10:97:cf: 08:ed:db:a9:2c:b4:78:a1:66:b9:3e:9e:aa:a9:f2: 22:0d:25:ca:d9:ba:09:7f:49:60:4c:51:bf:6b:2a: 44:9d:f4:5c:7b:12:8e:ee:d1:7d:3b:82:dd:18:69: 87:e0:88:fe:07:1e:10:89:a7:e9:bd:76:38:af:ef: b8:3e:d5:e7:58:24:7b:e6:d3:9a:35:e0:7c:1e:cd: 11:f9:f7:0c:b0:1f:7a:08:23:08:db:48:61:73:c7: 54:c7:64:aa:e8:30:28:b2:f7:a2:a8:0b:90:a6:14: b7:d1:47:e7:28:a3:c6:9e:a4:61:28:e9:dc:92:93: 61:58:07:bf:eb:06:38:4d:e0:12:f2:70:df:02:62: 96:d1:86:72:20:8f:79:2f:95:aa:e3:cd:78:c0:e1: 00:41:c3:e1:2e:e9:2f:6c:14:d9:7d:e4:9c:5c:93: db:b2:f7:27:2c:5e:96:89:98:c4:41:87:e6:d2:ef: 52:d8:2c:32:b5:66:fd:0d:28:c2:38:d9:c5:b0:a2: 1e:64:7d:d8:c5:ab:f2:ce:a3:bc:75:b4:ab:3f:1b: 34:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:38:19:F6:CE:08:A8:6E:DE:1A:BC:A5:1E:76:B4:4F:C0:A7:5A:39 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154201.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.146.0/23 180.148.24.0/23 IPv6: 2001:df6:cc0::/48 Signature Algorithm: sha256WithRSAEncryption a5:70:17:f7:24:64:c1:6a:3a:5d:63:e0:e9:dd:94:04:8a:1d: 34:2e:d4:6b:06:e7:64:91:ba:8c:59:b9:57:b6:72:46:0c:21: 02:fc:4f:86:de:63:e4:e9:d0:23:e7:e3:d9:f7:a3:de:e9:3b: f4:4b:08:ad:55:6d:e5:dc:fb:2f:1d:17:87:16:15:65:a7:1e: 7e:8b:3b:15:97:95:95:c7:0a:72:d8:8c:90:58:ef:d7:1b:c1: c0:54:15:a1:89:05:a6:35:36:8d:f2:8e:c9:ab:8b:6c:8f:86: 7b:b6:ae:95:c8:74:55:d8:21:29:b0:c1:96:16:14:9f:60:43: e7:b7:3c:58:15:a4:1f:b4:82:6a:11:7f:da:95:1c:22:1c:16: 54:3e:d4:af:af:58:72:0a:01:6f:3b:97:f1:9b:36:97:61:1e: 59:f1:44:26:ce:3b:5a:59:46:74:28:33:e3:50:e6:24:83:fe: 5e:a7:af:05:8a:ba:1e:f0:b3:ad:9d:c0:50:1b:37:85:41:71: 3f:13:f8:cb:a0:3d:29:62:3b:b3:63:74:be:23:d1:e7:9c:1e: 1c:7d:ae:f1:b0:19:b5:ae:04:3c:cc:d3:d1:42:78:6e:27:56: a2:b8:c1:2d:19:dd:a6:f5:df:95:5c:85:31:98:f5:4d:6e:2b: 87:0a:56:ce -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIUC0Dts1plHU5LGNfZBiEgRBBVDQkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAwNjAyNTYzN1oX DTI3MTAwNTAzMDEzN1owMzExMC8GA1UEAxMoNTYzODE5RjZDRTA4QTg2RURFMUFC Q0E1MUU3NkI0NEZDMEE3NUEzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJrkRCga2IwGrRaHO0ObcboogYHbtxN+U7JYJiDAUiDOCh+++M2oNkC6EJfP CO3bqSy0eKFmuT6eqqnyIg0lytm6CX9JYExRv2sqRJ30XHsSju7RfTuC3Rhph+CI /gceEImn6b12OK/vuD7V51gke+bTmjXgfB7NEfn3DLAfeggjCNtIYXPHVMdkqugw KLL3oqgLkKYUt9FH5yijxp6kYSjp3JKTYVgHv+sGOE3gEvJw3wJiltGGciCPeS+V quPNeMDhAEHD4S7pL2wU2X3knFyT27L3JyxelomYxEGH5tLvUtgsMrVm/Q0owjjZ xbCiHmR92MWr8s6jvHW0qz8bNG0CAwEAAaOCAeMwggHfMB0GA1UdDgQWBBRWOBn2 zgiobt4avKUedrRPwKdaOTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0MjAxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIA ATAMAwQBo+OSAwQBtJQYMA8EAgACMAkDBwAgAQ32DMAwDQYJKoZIhvcNAQELBQAD ggEBAKVwF/ckZMFqOl1j4OndlASKHTQu1GsG52SRuoxZuVe2ckYMIQL8T4beY+Tp 0CPn49n3o97pO/RLCK1VbeXc+y8dF4cWFWWnHn6LOxWXlZXHCnLYjJBY79cbwcBU FaGJBaY1No3yjsmri2yPhnu2rpXIdFXYISmwwZYWFJ9gQ+e3PFgVpB+0gmoRf9qV HCIcFlQ+1K+vWHIKAW87l/GbNpdhHlnxRCbOO1pZRnQoM+NQ5iSD/l6nrwWKuh7w s62dwFAbN4VBcT8T+MugPSliO7NjdL4j0eecHhx9rvGwGbWuBDzM09FCeG4nVqK4 wS0Z3ab135VchTGY9U1uK4cKVs4= -----END CERTIFICATE-----Generated at Sat Oct 24 23:05:47 2026 by rpki-client