$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154205.roa File: AS154205.roa (raw, json) Hash identifier: 9HMlO/t1QEqgj1PR+zWSy7kN2Y2zOlBh0eHCYvdia2Q= Subject key identifier: 8A:CF:19:5F:15:2A:32:0D:F6:AC:50:8A:C5:23:74:B9:2F:0C:65:57 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 67EDD55C64414C76B2708946C502E1E1DB78D508 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154205.roa Signing time: Sat 02 May 2026 21:30:14 +0000 ROA not before: Sat 02 May 2026 21:25:14 +0000 ROA not after: Sat 01 May 2027 21:30:14 +0000 asID: 154205 IP address blocks: 203.17.189.0/24 maxlen: 24 2001:df6:8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ed:d5:5c:64:41:4c:76:b2:70:89:46:c5:02:e1:e1:db:78:d5:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:25:14 2026 GMT Not After : May 1 21:30:14 2027 GMT Subject: CN=8ACF195F152A320DF6AC508AC52374B92F0C6557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f5:05:6b:a7:ef:18:5b:b9:ac:e3:06:83:b8: db:07:9d:d1:c4:be:85:34:48:bd:82:af:c3:a7:85: 4a:6d:f6:63:e5:f4:68:62:33:3e:95:67:63:cf:a1: 70:40:a1:ab:2f:42:4b:a3:23:0f:4f:c5:8f:ad:7c: b3:ff:59:f4:23:ba:90:6d:7c:7a:10:e6:e5:e2:03: 03:c2:e6:dd:0a:0d:0a:4f:7d:96:75:0f:64:e6:51: 7d:57:28:78:69:1e:9c:ef:3f:08:af:19:f0:bb:af: 45:7d:76:99:12:29:33:80:b2:bc:4e:d4:c4:2d:b7: 3c:4f:4d:3b:d9:74:bf:d2:5f:ae:3e:03:68:e7:ba: 48:13:cb:4f:3f:82:61:37:da:5a:1d:5c:86:1b:ce: 86:ad:6a:32:b8:e9:1b:2e:e8:9f:57:f3:3a:24:9a: a9:c9:13:86:10:00:ef:7b:01:dd:8b:9b:a6:62:9f: 0f:d8:bb:4e:98:da:4b:68:74:14:9c:bb:66:40:90: 8e:0d:a6:08:33:e5:a7:86:ae:71:14:f3:55:f2:51: 74:1d:e1:ee:0b:c0:88:5f:bd:72:08:3b:20:82:5d: ef:a0:b0:13:cc:1c:6e:6c:93:ca:68:ef:f9:0b:21: 97:33:7e:34:27:00:17:67:39:2b:cc:80:53:bd:ff: f8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CF:19:5F:15:2A:32:0D:F6:AC:50:8A:C5:23:74:B9:2F:0C:65:57 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154205.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.17.189.0/24 IPv6: 2001:df6:8c0::/48 Signature Algorithm: sha256WithRSAEncryption 16:e5:ed:f8:a4:41:36:62:f8:66:7c:5f:cf:91:7b:09:95:d1: 2b:57:9f:f0:fd:39:cf:38:62:16:f5:5d:f2:fb:ee:ea:4b:ed: f9:07:92:2b:35:87:be:6e:f2:cc:86:f4:f6:05:36:a4:03:ac: 57:08:27:ba:b9:68:f5:c5:b8:01:70:e8:44:26:35:15:38:b5: 58:14:b2:5c:d1:33:02:0b:e2:8b:c9:12:c3:33:45:1a:39:69: 7b:66:21:7d:d3:f7:13:5c:ab:be:57:02:f0:ca:10:ca:a5:41: 14:b0:01:56:70:e7:41:e2:85:05:10:52:10:92:4e:0e:8b:45: ac:89:7b:f6:02:9e:bc:e7:d7:5f:7e:26:32:67:42:ac:cd:02: b1:6b:db:90:b6:8a:b3:ad:c0:bf:ef:f2:b6:e3:42:59:e8:d6: b6:04:5e:d5:2b:70:97:87:d4:88:eb:6b:d0:7d:ce:c0:d9:51: a6:33:13:12:e2:08:84:70:da:e2:50:76:5c:b5:80:2c:91:c6: 2c:b0:7a:4d:3a:5f:97:a3:ce:59:2f:b1:ee:f1:2f:72:ad:4f: 19:f7:78:d7:e1:0b:49:2c:6e:21:be:df:1c:52:75:44:c1:2c: 81:fc:dd:db:be:9e:0f:76:66:ee:01:e2:1a:8b:3f:a7:6d:68: eb:21:3b:6d -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUZ+3VXGRBTHaycIlGxQLh4dt41QgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjUxNFoX DTI3MDUwMTIxMzAxNFowMzExMC8GA1UEAxMoOEFDRjE5NUYxNTJBMzIwREY2QUM1 MDhBQzUyMzc0QjkyRjBDNjU1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKj1BWun7xhbuazjBoO42wed0cS+hTRIvYKvw6eFSm32Y+X0aGIzPpVnY8+h cEChqy9CS6MjD0/Fj618s/9Z9CO6kG18ehDm5eIDA8Lm3QoNCk99lnUPZOZRfVco eGkenO8/CK8Z8LuvRX12mRIpM4CyvE7UxC23PE9NO9l0v9Jfrj4DaOe6SBPLTz+C YTfaWh1chhvOhq1qMrjpGy7on1fzOiSaqckThhAA73sB3YubpmKfD9i7TpjaS2h0 FJy7ZkCQjg2mCDPlp4aucRTzVfJRdB3h7gvAiF+9cgg7IIJd76CwE8wcbmyTymjv +QshlzN+NCcAF2c5K8yAU73/+JECAwEAAaOCAd0wggHZMB0GA1UdDgQWBBSKzxlf FSoyDfasUIrFI3S5LwxlVzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0MjA1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAyxG9MA8EAgACMAkDBwAgAQ32CMAwDQYJKoZIhvcNAQELBQADggEBABbl 7fikQTZi+GZ8X8+RewmV0StXn/D9Oc84Yhb1XfL77upL7fkHkis1h75u8syG9PYF NqQDrFcIJ7q5aPXFuAFw6EQmNRU4tVgUslzRMwIL4ovJEsMzRRo5aXtmIX3T9xNc q75XAvDKEMqlQRSwAVZw50HihQUQUhCSTg6LRayJe/YCnrzn119+JjJnQqzNArFr 25C2irOtwL/v8rbjQlno1rYEXtUrcJeH1Ijra9B9zsDZUaYzExLiCIRw2uJQdly1 gCyRxiywek06X5ejzlkvse7xL3KtTxn3eNfhC0ksbiG+3xxSdUTBLIH83du+ng92 Zu4B4hqLP6dtaOshO20= -----END CERTIFICATE-----Generated at Sun May 3 00:40:22 2026 by rpki-client