$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154233.roa File: AS154233.roa (raw, json) Hash identifier: GjWsXHOQaeCEHwghb2rIfoVpsv6bg2Dm9QuDlvjReKo= Subject key identifier: 11:0E:D5:E6:32:76:66:B5:94:8E:D0:4C:FD:22:AF:EE:B7:A3:25:27 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 360566FF48D2C50A4FDE23463AD7FF6E24B95F81 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154233.roa Signing time: Sat 02 May 2026 09:26:32 +0000 ROA not before: Sat 02 May 2026 09:21:32 +0000 ROA not after: Sat 01 May 2027 09:26:32 +0000 asID: 154233 IP address blocks: 163.227.96.0/23 maxlen: 24 2001:df5:60c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:05:66:ff:48:d2:c5:0a:4f:de:23:46:3a:d7:ff:6e:24:b9:5f:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:32 2026 GMT Not After : May 1 09:26:32 2027 GMT Subject: CN=110ED5E6327666B5948ED04CFD22AFEEB7A32527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2f:f0:b7:62:6c:65:73:83:fa:8a:c6:5f:4d: cb:10:ff:fe:a6:f0:70:3c:c2:f6:e8:72:ac:bf:5a: 50:37:42:2e:e7:3d:ee:23:24:fb:a7:b3:9e:ea:f2: 6a:d8:9e:9c:d6:5b:3b:70:99:e4:4c:1b:56:49:79: e6:ed:59:3f:14:9c:e3:4e:8a:65:93:34:85:45:2d: 68:5d:b7:02:b8:33:16:50:97:63:b2:d7:f1:ad:d4: 58:fc:c4:9e:62:20:2a:2c:12:5b:a8:2e:46:54:c9: 62:25:c6:42:bb:1f:76:43:39:d0:03:58:9d:c7:80: 2d:8d:db:cd:d0:60:62:68:a5:cd:b5:51:4e:f0:32: b5:66:c9:4f:39:20:cb:65:25:0f:1c:45:6f:69:30: e6:c4:32:a0:61:ae:f1:f7:88:25:3d:9a:cf:ab:80: 51:de:34:ff:40:b0:b5:14:4d:25:ad:99:97:67:a5: 4c:f3:72:67:bf:a6:78:40:1d:56:d4:f2:6a:7b:6d: 42:b2:79:4e:7d:36:a6:e8:fb:fe:8e:9e:29:95:f6: f8:54:57:c3:d8:49:f6:00:87:56:d5:df:13:06:e1: e4:4b:cc:9e:07:77:7f:f4:49:51:e7:5d:53:6f:12: 67:a0:e9:1b:0b:b1:98:4a:7d:db:79:e3:8a:24:aa: 73:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0E:D5:E6:32:76:66:B5:94:8E:D0:4C:FD:22:AF:EE:B7:A3:25:27 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.96.0/23 IPv6: 2001:df5:60c0::/48 Signature Algorithm: sha256WithRSAEncryption 19:fe:ac:a0:ae:11:00:bd:4b:d7:3a:84:24:3d:4b:c6:10:4d: 6a:a2:93:d4:70:b9:28:30:61:f9:b6:78:55:0b:c5:d4:2c:6c: ac:07:52:85:f8:f1:db:7e:31:d9:54:ce:89:da:ed:de:e6:ce: eb:86:a4:64:b1:28:2e:b0:f4:bb:8d:07:d0:0b:b6:44:e3:55: 41:ca:ae:6c:7d:91:c2:2e:bf:7e:86:61:15:63:9e:57:22:d3: c0:03:9b:fd:db:32:6c:ca:32:a8:40:ca:01:d0:76:35:68:86: 13:07:4f:4e:e2:83:6f:1a:de:90:c8:9c:e8:13:67:81:b1:6a: 2d:e7:c5:97:a2:ae:aa:96:5b:87:1d:85:de:21:49:98:34:06: bd:7b:75:f8:cb:7f:c3:0c:63:55:f8:45:81:3d:62:7c:b4:16: 1e:6e:d1:e3:b7:d0:dd:17:a2:1a:94:1c:b0:be:35:2a:8f:b2: f6:f5:ad:f9:71:67:b5:5d:62:f4:c7:8c:dc:75:c9:df:5e:17: 0b:f5:1b:0c:12:b0:bc:48:ab:70:01:cf:a8:9c:af:a7:57:bb: 8b:49:71:4c:08:b0:8a:8d:6f:e4:42:eb:0b:3c:ca:3d:2d:90: 46:3d:fc:64:cb:07:2f:9a:8e:62:59:82:a7:46:e2:e1:b9:00: 77:21:8f:e7 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUNgVm/0jSxQpP3iNGOtf/biS5X4EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjEzMloX DTI3MDUwMTA5MjYzMlowMzExMC8GA1UEAxMoMTEwRUQ1RTYzMjc2NjZCNTk0OEVE MDRDRkQyMkFGRUVCN0EzMjUyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJQv8LdibGVzg/qKxl9NyxD//qbwcDzC9uhyrL9aUDdCLuc97iMk+6eznury atienNZbO3CZ5EwbVkl55u1ZPxSc406KZZM0hUUtaF23ArgzFlCXY7LX8a3UWPzE nmIgKiwSW6guRlTJYiXGQrsfdkM50ANYnceALY3bzdBgYmilzbVRTvAytWbJTzkg y2UlDxxFb2kw5sQyoGGu8feIJT2az6uAUd40/0CwtRRNJa2Zl2elTPNyZ7+meEAd VtTyanttQrJ5Tn02puj7/o6eKZX2+FRXw9hJ9gCHVtXfEwbh5EvMngd3f/RJUedd U28SZ6DpGwuxmEp923njiiSqc20CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQRDtXm MnZmtZSO0Ez9Iq/ut6MlJzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0MjMzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBo+NgMA8EAgACMAkDBwAgAQ31YMAwDQYJKoZIhvcNAQELBQADggEBABn+ rKCuEQC9S9c6hCQ9S8YQTWqik9RwuSgwYfm2eFULxdQsbKwHUoX48dt+MdlUzona 7d7mzuuGpGSxKC6w9LuNB9ALtkTjVUHKrmx9kcIuv36GYRVjnlci08ADm/3bMmzK MqhAygHQdjVohhMHT07ig28a3pDInOgTZ4Gxai3nxZeirqqWW4cdhd4hSZg0Br17 dfjLf8MMY1X4RYE9Yny0Fh5u0eO30N0XohqUHLC+NSqPsvb1rflxZ7VdYvTHjNx1 yd9eFwv1GwwSsLxIq3ABz6icr6dXu4tJcUwIsIqNb+RC6ws8yj0tkEY9/GTLBy+a jmJZgqdG4uG5AHchj+c= -----END CERTIFICATE-----Generated at Sun May 3 00:40:22 2026 by rpki-client