$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154266.roa File: AS154266.roa (raw, json) Hash identifier: Dzg85klgqqxiiDeCaSEDVKkP7c4mrZIF8FxiuO5BnP0= Subject key identifier: 77:49:A1:7E:02:EA:4B:30:D7:6B:D8:45:9E:2C:C8:89:FE:35:22:69 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 50CA1B075A4F9C711FB60AD5302D50CE72DB5AD2 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154266.roa Signing time: Sat 02 May 2026 09:26:25 +0000 ROA not before: Sat 02 May 2026 09:21:25 +0000 ROA not after: Sat 01 May 2027 09:26:25 +0000 asID: 154266 IP address blocks: 2001:df5:9540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ca:1b:07:5a:4f:9c:71:1f:b6:0a:d5:30:2d:50:ce:72:db:5a:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:25 2026 GMT Not After : May 1 09:26:25 2027 GMT Subject: CN=7749A17E02EA4B30D76BD8459E2CC889FE352269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:71:76:74:d3:73:8c:8d:f4:15:32:8a:20:cb: 9f:c9:4e:1e:09:e6:c2:56:08:d1:96:f3:dd:fc:c9: 35:0b:08:98:62:b9:1e:1c:c1:77:0e:21:fe:b7:3e: f5:0b:c0:67:d1:ed:79:a7:1a:b4:7c:23:6d:1c:77: 5a:30:37:d7:64:d7:4a:5f:29:c8:19:31:12:e6:d0: 44:9d:d3:29:70:99:00:be:a5:66:a3:8a:64:71:cb: 57:3e:1e:f4:58:35:30:7d:4a:00:de:75:f5:d7:4f: af:f5:e6:40:68:da:cf:bb:60:00:ca:bf:78:1d:97: 55:f1:2b:37:43:d2:a9:45:e6:24:bc:7b:76:74:ab: 92:f2:a1:d6:28:90:84:0d:cb:32:3d:fb:44:5c:f5: d9:08:4d:d4:ab:ab:c5:fb:c6:e0:6c:64:75:19:8f: 0c:53:4c:b0:21:4d:cf:30:87:80:77:cb:4e:a1:c1: 3c:11:94:f9:e1:e8:1b:77:fb:a8:78:f3:63:2f:8e: f0:8a:34:19:7c:45:61:ec:fe:f6:8b:0f:14:1a:61: 1e:30:3a:8b:c0:29:b7:e3:4f:e9:0a:7a:1f:83:67: b0:9a:42:84:c7:8c:6f:27:5b:87:d8:53:1f:18:5f: 74:a8:e8:98:ae:33:c8:58:89:86:31:9c:86:1f:15: f7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:49:A1:7E:02:EA:4B:30:D7:6B:D8:45:9E:2C:C8:89:FE:35:22:69 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154266.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:9540::/48 Signature Algorithm: sha256WithRSAEncryption 33:4e:bd:86:4b:28:a5:94:47:fd:f2:d1:3a:45:0a:24:b2:b8: cd:fc:d2:05:b3:92:90:a0:cf:8c:ab:2b:27:ae:2e:48:82:49: df:20:ae:d3:d9:ad:33:c4:f6:2a:7f:4a:e4:fe:a6:e2:66:6a: 00:f0:33:11:c8:37:f2:24:9c:90:2c:4c:04:63:9e:9f:89:e2: 2f:9e:b8:7a:dc:eb:b2:e6:82:fa:db:67:6a:73:c2:4b:96:ec: ef:24:a4:fa:10:62:9f:10:49:27:7c:6a:52:a2:7f:0f:0b:de: 16:6a:65:c4:de:65:55:f4:33:c5:1e:8a:33:49:ac:96:aa:7e: 41:15:11:29:7d:f4:55:78:04:68:d7:6b:74:e8:8e:58:ea:09: b3:f1:75:0f:0e:91:06:8d:b4:c5:e3:4d:4b:96:d7:39:ca:a9: 0a:e0:24:a0:07:dc:a9:6e:09:5a:44:08:21:5a:7f:eb:03:ff: 86:37:1a:cd:04:a3:0b:0c:c2:51:3f:38:32:23:c7:ed:a8:d9: 27:1e:5d:67:96:6c:07:8c:92:b1:ae:1d:b4:22:ee:cb:74:f2: 7f:07:e8:34:33:ed:a0:c5:c4:7b:40:18:23:ac:fe:9c:33:21: 6e:07:c0:65:3a:c5:39:ae:a9:d8:1a:b5:5c:4a:30:f4:e3:b4: 84:4e:e1:a9 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUUMobB1pPnHEftgrVMC1QznLbWtIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjEyNVoX DTI3MDUwMTA5MjYyNVowMzExMC8GA1UEAxMoNzc0OUExN0UwMkVBNEIzMEQ3NkJE ODQ1OUUyQ0M4ODlGRTM1MjI2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM9xdnTTc4yN9BUyiiDLn8lOHgnmwlYI0Zbz3fzJNQsImGK5HhzBdw4h/rc+ 9QvAZ9HteacatHwjbRx3WjA312TXSl8pyBkxEubQRJ3TKXCZAL6lZqOKZHHLVz4e 9Fg1MH1KAN519ddPr/XmQGjaz7tgAMq/eB2XVfErN0PSqUXmJLx7dnSrkvKh1iiQ hA3LMj37RFz12QhN1KurxfvG4GxkdRmPDFNMsCFNzzCHgHfLTqHBPBGU+eHoG3f7 qHjzYy+O8Io0GXxFYez+9osPFBphHjA6i8Apt+NP6Qp6H4NnsJpChMeMbydbh9hT HxhfdKjomK4zyFiJhjGchh8V99UCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBR3SaF+ AupLMNdr2EWeLMiJ/jUiaTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0MjY2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9ZVAMA0GCSqGSIb3DQEBCwUAA4IBAQAzTr2GSyillEf98tE6RQok srjN/NIFs5KQoM+Mqysnri5IgknfIK7T2a0zxPYqf0rk/qbiZmoA8DMRyDfyJJyQ LEwEY56fieIvnrh63Ouy5oL622dqc8JLluzvJKT6EGKfEEknfGpSon8PC94WamXE 3mVV9DPFHoozSayWqn5BFREpffRVeARo12t06I5Y6gmz8XUPDpEGjbTF401Lltc5 yqkK4CSgB9ypbglaRAghWn/rA/+GNxrNBKMLDMJRPzgyI8ftqNknHl1nlmwHjJKx rh20Iu7LdPJ/B+g0M+2gxcR7QBgjrP6cMyFuB8BlOsU5rqnYGrVcSjD047SETuGp -----END CERTIFICATE-----Generated at Sun May 3 01:44:02 2026 by rpki-client