$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154369.roa File: AS154369.roa (raw, json) Hash identifier: hkjexe2P8Sp64h291qwdBI0RGEtXiwY9+ttw8DiNPZo= Subject key identifier: 8E:48:6B:49:3C:FE:45:E8:46:9D:96:12:B0:45:A0:34:2F:0B:E1:26 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 369A8BDB11425A59FED3B7EB99546AA177F77282 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154369.roa Signing time: Sat 02 May 2026 08:35:50 +0000 ROA not before: Sat 02 May 2026 08:30:50 +0000 ROA not after: Sat 01 May 2027 08:35:50 +0000 asID: 154369 IP address blocks: 2001:df6:4dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:9a:8b:db:11:42:5a:59:fe:d3:b7:eb:99:54:6a:a1:77:f7:72:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:30:50 2026 GMT Not After : May 1 08:35:50 2027 GMT Subject: CN=8E486B493CFE45E8469D9612B045A0342F0BE126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:84:72:af:65:21:42:1f:3d:66:15:03:a7:ab: 9f:15:79:64:a9:df:25:1a:01:8a:00:93:8e:18:2f: eb:df:a8:a7:26:4c:d3:22:bf:81:96:9d:63:73:64: 6b:51:1e:e4:2c:f6:92:53:42:a0:65:45:20:d5:6d: e2:7f:e8:80:96:4c:a3:b4:22:bb:00:ac:53:60:a6: 7e:61:48:1b:5a:da:50:ec:62:aa:61:c1:9d:d5:d0: 5c:4a:ca:d4:27:58:6c:c7:91:36:a1:f3:cd:52:27: f3:49:8f:ef:4f:5e:c7:aa:60:9b:98:bf:2f:45:30: c0:4c:ee:9f:5b:7a:13:25:38:cc:93:4a:8d:0d:99: a6:73:9e:27:d3:36:f0:5a:e0:a4:d6:de:c2:4b:ff: bd:99:e0:ab:79:2f:53:aa:bf:24:46:ba:87:b5:ee: 18:67:b3:ca:4e:fc:dd:2a:29:3d:18:88:d5:a1:0a: ca:ca:56:bc:8b:57:48:d7:b2:5a:00:18:5f:f2:09: 46:fa:f0:7c:e3:59:f7:4b:17:7e:1c:e5:49:cd:87: b5:56:93:1b:17:e3:52:a0:ea:60:c9:d4:6f:e9:88: 7a:f9:37:26:4b:cb:1e:58:f1:06:10:1b:9b:1f:09: a6:5b:9a:3f:ed:77:d9:9e:da:e0:55:c4:e6:07:92: 94:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:48:6B:49:3C:FE:45:E8:46:9D:96:12:B0:45:A0:34:2F:0B:E1:26 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154369.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:4dc0::/48 Signature Algorithm: sha256WithRSAEncryption 44:e6:0d:23:47:f1:4a:e5:29:c7:de:95:04:b2:92:da:e6:6f: 1e:84:fe:62:2e:94:21:a1:b6:02:ea:c3:ee:8b:41:7e:06:ef: e3:82:ab:dc:40:c5:bf:e3:1c:45:7c:af:c1:95:32:89:7c:62: 2e:29:af:31:fe:16:a1:f5:22:98:88:76:49:7c:59:90:04:bd: bd:03:cf:2b:fb:f7:3f:b1:62:df:15:18:9a:1e:73:81:87:ab: 05:a0:4f:28:1e:d1:37:ba:4b:79:90:be:5f:1b:a0:b8:9d:7e: 48:96:24:3f:f9:c5:17:ca:0e:a2:a2:8d:59:cc:d9:b3:16:f8: 64:01:79:25:09:bd:e1:e9:ee:51:49:06:14:2a:b7:9b:94:3e: fe:c1:53:23:e1:3c:25:a4:b9:97:1d:96:7f:52:1b:ec:ff:11: 47:ca:19:b7:5c:87:de:1a:97:5d:7c:2b:67:80:67:6c:b3:60: 26:39:e6:ad:5e:50:fa:8c:e6:13:53:72:67:40:87:f2:9a:80: d1:23:f8:46:5b:9a:7e:7c:22:5a:c7:fa:80:a4:7d:67:59:20: de:0e:63:7d:3b:4f:43:58:cd:60:85:62:bd:5a:a3:5c:a6:6a: 3c:43:6f:df:b7:53:c3:f8:aa:a1:8f:dd:b7:1a:c9:71:83:fc: cd:a9:1b:e7 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUNpqL2xFCWln+07frmVRqoXf3coIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzA1MFoX DTI3MDUwMTA4MzU1MFowMzExMC8GA1UEAxMoOEU0ODZCNDkzQ0ZFNDVFODQ2OUQ5 NjEyQjA0NUEwMzQyRjBCRTEyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJWEcq9lIUIfPWYVA6ernxV5ZKnfJRoBigCTjhgv69+opyZM0yK/gZadY3Nk a1Ee5Cz2klNCoGVFINVt4n/ogJZMo7QiuwCsU2CmfmFIG1raUOxiqmHBndXQXErK 1CdYbMeRNqHzzVIn80mP709ex6pgm5i/L0UwwEzun1t6EyU4zJNKjQ2ZpnOeJ9M2 8FrgpNbewkv/vZngq3kvU6q/JEa6h7XuGGezyk783SopPRiI1aEKyspWvItXSNey WgAYX/IJRvrwfONZ90sXfhzlSc2HtVaTGxfjUqDqYMnUb+mIevk3JkvLHljxBhAb mx8JpluaP+132Z7a4FXE5geSlHcCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBSOSGtJ PP5F6EadlhKwRaA0LwvhJjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0MzY5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9k3AMA0GCSqGSIb3DQEBCwUAA4IBAQBE5g0jR/FK5SnH3pUEspLa 5m8ehP5iLpQhobYC6sPui0F+Bu/jgqvcQMW/4xxFfK/BlTKJfGIuKa8x/hah9SKY iHZJfFmQBL29A88r+/c/sWLfFRiaHnOBh6sFoE8oHtE3ukt5kL5fG6C4nX5IliQ/ +cUXyg6ioo1ZzNmzFvhkAXklCb3h6e5RSQYUKreblD7+wVMj4TwlpLmXHZZ/Uhvs /xFHyhm3XIfeGpddfCtngGdss2AmOeatXlD6jOYTU3JnQIfymoDRI/hGW5p+fCJa x/qApH1nWSDeDmN9O09DWM1ghWK9WqNcpmo8Q2/ft1PD+Kqhj923Gslxg/zNqRvn -----END CERTIFICATE-----Generated at Sun May 3 00:41:15 2026 by rpki-client