$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154337.roa File: AS154337.roa (raw, json) Hash identifier: wlPKNLOcyWbgW/VDr0xa38d4y9F1+XyFNDYbPcdgWs8= Subject key identifier: 01:7A:1B:2C:1C:00:E3:9E:B2:AB:0E:F6:3A:38:05:5F:90:73:99:AA Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7E48B006459454AF570EB5AAE5C8EF678BE7EEC7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154337.roa Signing time: Sat 02 May 2026 08:36:50 +0000 ROA not before: Sat 02 May 2026 08:31:50 +0000 ROA not after: Sat 01 May 2027 08:36:50 +0000 asID: 154337 IP address blocks: 2001:df6:3dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:48:b0:06:45:94:54:af:57:0e:b5:aa:e5:c8:ef:67:8b:e7:ee:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:31:50 2026 GMT Not After : May 1 08:36:50 2027 GMT Subject: CN=017A1B2C1C00E39EB2AB0EF63A38055F907399AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:75:7e:ac:19:fb:d1:c9:e5:a5:de:a3:4c:9a: ad:c9:3d:24:29:8e:40:da:da:3b:7e:40:5b:68:66: 14:f5:33:cd:ef:5b:62:6d:df:36:56:7f:c5:1b:7a: d9:87:24:f3:d6:21:a4:7b:53:35:c0:20:4f:87:67: b0:39:76:6a:aa:c2:c1:00:7d:d5:f6:f2:b8:a0:6f: 0a:ef:be:b9:f1:40:a0:bc:60:76:9b:97:ab:a1:43: 1c:49:fd:aa:fc:93:fc:96:a8:16:35:80:36:61:51: 3a:63:76:2a:59:e9:24:16:b5:76:6f:5b:83:9a:a5: 64:06:a3:8c:9e:86:91:f6:27:5a:9b:f7:87:2d:d6: 9e:44:6f:df:27:ad:52:60:ef:a7:2e:97:b5:bc:74: 5d:8b:37:ba:90:b9:cc:06:61:e9:d3:8d:4c:ef:ea: c6:cb:cb:46:53:e0:62:1b:f9:ae:15:48:fe:c7:62: c1:cb:aa:fa:c4:f2:a6:17:78:b3:91:cb:6c:c1:09: 2f:0e:e9:4c:02:fa:f5:13:69:e4:ad:81:c6:66:71: 4e:f1:9f:9a:6a:ec:96:b5:99:e7:6d:9e:ed:bb:a0: 07:12:b4:93:1d:03:1a:28:4c:15:c2:22:2e:1e:97: 14:4e:a8:d3:9d:5f:af:a8:0c:9e:e9:63:2f:c6:06: 53:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7A:1B:2C:1C:00:E3:9E:B2:AB:0E:F6:3A:38:05:5F:90:73:99:AA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:3dc0::/48 Signature Algorithm: sha256WithRSAEncryption 0b:3a:bf:bd:a4:8f:51:2a:71:11:e5:27:7c:2d:66:ac:5e:ba: f3:9b:1c:97:c1:5d:ec:6b:61:c8:48:12:9b:7b:ff:ae:39:f2: 22:00:0e:ad:7a:e3:57:5c:23:70:82:d7:04:00:1f:c3:f8:ef: dd:e2:ef:88:f4:d2:ae:4c:8f:fd:c3:35:7f:ad:f9:fb:a1:7c: 16:88:8e:2d:21:31:f4:fd:78:d1:35:25:f2:01:c6:12:de:3a: c3:56:88:af:d6:cf:1a:e6:90:ef:8f:e2:df:f6:2d:a2:f5:eb: 44:35:64:3b:76:c9:fc:ac:c9:63:4f:af:41:a7:33:65:91:eb: 8c:22:a8:22:dd:1d:04:86:4e:76:f1:fb:d7:ec:6a:88:89:64: fa:21:a4:f3:bd:9a:83:66:00:db:0d:1e:e5:55:fd:45:b7:58: 3c:05:76:91:9b:c4:60:fb:e8:51:ec:f1:94:15:d1:7b:34:22: 03:02:e7:98:ba:5d:40:d1:18:04:c3:19:c6:98:16:9f:90:e8: 7a:c8:29:7c:9b:df:7a:f2:eb:f4:a2:f2:ed:8d:73:8c:38:e6: 63:99:43:4e:fb:15:ea:5d:85:f9:f5:a9:19:fd:5d:a2:24:b1: a7:68:9c:ab:bf:26:69:07:29:cc:a9:8e:35:01:de:54:53:2b: f5:93:49:6b -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUfkiwBkWUVK9XDrWq5cjvZ4vn7scwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzE1MFoX DTI3MDUwMTA4MzY1MFowMzExMC8GA1UEAxMoMDE3QTFCMkMxQzAwRTM5RUIyQUIw RUY2M0EzODA1NUY5MDczOTlBQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMt1fqwZ+9HJ5aXeo0yarck9JCmOQNraO35AW2hmFPUzze9bYm3fNlZ/xRt6 2Yck89YhpHtTNcAgT4dnsDl2aqrCwQB91fbyuKBvCu++ufFAoLxgdpuXq6FDHEn9 qvyT/JaoFjWANmFROmN2KlnpJBa1dm9bg5qlZAajjJ6GkfYnWpv3hy3WnkRv3yet UmDvpy6Xtbx0XYs3upC5zAZh6dONTO/qxsvLRlPgYhv5rhVI/sdiwcuq+sTyphd4 s5HLbMEJLw7pTAL69RNp5K2BxmZxTvGfmmrslrWZ522e7bugBxK0kx0DGihMFcIi Lh6XFE6o051fr6gMnuljL8YGU8ECAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQBehss HADjnrKrDvY6OAVfkHOZqjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0MzM3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9j3AMA0GCSqGSIb3DQEBCwUAA4IBAQALOr+9pI9RKnER5Sd8LWas XrrzmxyXwV3sa2HISBKbe/+uOfIiAA6teuNXXCNwgtcEAB/D+O/d4u+I9NKuTI/9 wzV/rfn7oXwWiI4tITH0/XjRNSXyAcYS3jrDVoiv1s8a5pDvj+Lf9i2i9etENWQ7 dsn8rMljT69BpzNlkeuMIqgi3R0Ehk528fvX7GqIiWT6IaTzvZqDZgDbDR7lVf1F t1g8BXaRm8Rg++hR7PGUFdF7NCIDAueYul1A0RgEwxnGmBafkOh6yCl8m9968uv0 ovLtjXOMOOZjmUNO+xXqXYX59akZ/V2iJLGnaJyrvyZpBynMqY41Ad5UUyv1k0lr -----END CERTIFICATE-----Generated at Sun May 3 00:39:53 2026 by rpki-client