$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154336.roa File: AS154336.roa (raw, json) Hash identifier: 4/kdlVj+2EtW280PNZAOhal0ooFWh6/X5ooAUAF7/K8= Subject key identifier: A3:E0:B7:27:C5:EF:F4:26:10:38:2A:5C:85:68:12:C7:0F:98:73:65 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 570891854AA0928E0B8E28DA36F26A5D2754D3F4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154336.roa Signing time: Sat 02 May 2026 09:27:03 +0000 ROA not before: Sat 02 May 2026 09:22:03 +0000 ROA not after: Sat 01 May 2027 09:27:03 +0000 asID: 154336 IP address blocks: 2001:df6:3cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:08:91:85:4a:a0:92:8e:0b:8e:28:da:36:f2:6a:5d:27:54:d3:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:22:03 2026 GMT Not After : May 1 09:27:03 2027 GMT Subject: CN=A3E0B727C5EFF42610382A5C856812C70F987365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:67:dd:a2:8b:d1:04:3b:ab:e1:3a:39:73:06: 19:a6:9a:8f:f6:aa:03:cf:5a:e6:99:e1:cd:18:2e: a5:12:03:10:98:38:c0:b2:89:d5:db:d0:a3:b1:8d: ad:a3:0d:63:8b:f2:bb:25:7c:92:8f:6d:fe:46:f6: 3a:e6:20:54:44:53:07:71:2b:17:33:7d:65:f5:26: 78:e7:84:27:7c:90:40:e5:31:bc:43:cb:96:4c:43: fd:af:43:b6:0d:b3:d5:fe:91:8c:d7:d3:09:8a:0b: 7f:6a:27:6c:db:b2:0d:55:df:c5:bc:74:6b:6f:23: e1:ed:0d:9e:aa:49:e6:27:d8:2e:00:44:21:46:72: bf:58:b3:ec:d8:c9:5c:e1:ba:1a:8d:28:ca:38:ea: 75:c6:19:e9:2c:aa:d1:19:c0:12:ab:56:07:47:b6: 10:61:a0:dc:05:c7:13:b5:ac:74:4b:72:06:22:1f: 66:df:86:14:a9:24:69:d8:25:ce:64:ac:ce:1f:d1: f8:fb:3a:49:53:65:ec:56:32:18:83:d8:8f:c8:0b: 09:86:37:13:9e:41:ba:e9:9f:9d:31:20:cd:e7:69: b4:8e:23:79:12:86:41:da:41:9a:f7:d9:be:9e:cb: 64:03:23:39:8c:b4:2e:b3:f5:6a:c1:63:b7:e9:30: 4b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E0:B7:27:C5:EF:F4:26:10:38:2A:5C:85:68:12:C7:0F:98:73:65 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:3cc0::/48 Signature Algorithm: sha256WithRSAEncryption 74:7f:56:d9:7e:a8:11:ba:db:fb:f9:26:a9:72:ba:ca:6d:c8: 90:e6:ea:a7:3c:a3:6f:31:a7:ac:9a:dc:e5:0e:7f:d8:77:69: 40:7b:c7:f1:82:d1:f7:21:29:9f:94:54:17:f8:89:9d:d3:bc: 57:a9:b7:f9:dc:99:fa:5a:24:0d:59:83:c8:24:6f:e1:61:06: 8a:25:58:5b:31:aa:f6:a8:12:d2:73:f4:53:01:6d:1d:9c:75: 02:44:03:d4:7b:45:0b:54:2c:20:1d:49:ef:8c:bb:fb:89:6a: 32:eb:50:c2:74:b3:50:43:2c:cf:0f:e0:f1:f7:69:97:16:f1: 79:ca:b7:1f:3a:0d:ed:64:2b:f3:37:e0:d0:ee:ef:66:a1:81: d8:17:12:a2:49:30:78:ec:5b:07:40:67:9e:a7:f6:18:15:28: d6:ec:5c:ef:b7:24:42:a6:7b:43:50:59:da:76:53:6c:ed:77: 8c:c4:82:77:f6:85:ec:b4:67:33:49:d0:23:5b:b3:20:36:82: ad:71:af:37:3e:aa:8c:98:71:f0:0f:92:27:23:e2:7b:79:ea: 87:54:77:b1:33:5c:39:52:c2:ad:dd:e7:bf:05:49:90:0d:95: b1:8d:ae:78:b6:aa:09:4f:54:7f:30:b9:18:a5:12:60:29:db: 48:7b:a0:ed -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUVwiRhUqgko4LjijaNvJqXSdU0/QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjIwM1oX DTI3MDUwMTA5MjcwM1owMzExMC8GA1UEAxMoQTNFMEI3MjdDNUVGRjQyNjEwMzgy QTVDODU2ODEyQzcwRjk4NzM2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKtn3aKL0QQ7q+E6OXMGGaaaj/aqA89a5pnhzRgupRIDEJg4wLKJ1dvQo7GN raMNY4vyuyV8ko9t/kb2OuYgVERTB3ErFzN9ZfUmeOeEJ3yQQOUxvEPLlkxD/a9D tg2z1f6RjNfTCYoLf2onbNuyDVXfxbx0a28j4e0NnqpJ5ifYLgBEIUZyv1iz7NjJ XOG6Go0oyjjqdcYZ6Syq0RnAEqtWB0e2EGGg3AXHE7WsdEtyBiIfZt+GFKkkadgl zmSszh/R+Ps6SVNl7FYyGIPYj8gLCYY3E55BuumfnTEgzedptI4jeRKGQdpBmvfZ vp7LZAMjOYy0LrP1asFjt+kwS+sCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBSj4Lcn xe/0JhA4KlyFaBLHD5hzZTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0MzM2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9jzAMA0GCSqGSIb3DQEBCwUAA4IBAQB0f1bZfqgRutv7+SapcrrK bciQ5uqnPKNvMaesmtzlDn/Yd2lAe8fxgtH3ISmflFQX+Imd07xXqbf53Jn6WiQN WYPIJG/hYQaKJVhbMar2qBLSc/RTAW0dnHUCRAPUe0ULVCwgHUnvjLv7iWoy61DC dLNQQyzPD+Dx92mXFvF5yrcfOg3tZCvzN+DQ7u9moYHYFxKiSTB47FsHQGeep/YY FSjW7FzvtyRCpntDUFnadlNs7XeMxIJ39oXstGczSdAjW7MgNoKtca83PqqMmHHw D5InI+J7eeqHVHexM1w5UsKt3ee/BUmQDZWxja54tqoJT1R/MLkYpRJgKdtIe6Dt -----END CERTIFICATE-----Generated at Sun May 3 00:42:19 2026 by rpki-client