$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154385.roa File: AS154385.roa (raw, json) Hash identifier: dbdNhXb4pR4XlBZLIibbRA+Ym9pYAhp5i/wPImw9vQk= Subject key identifier: AF:4E:6D:C2:C6:B6:05:FA:D6:1F:4A:09:DE:E0:7F:4B:0F:B3:C4:E3 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 724E241779FD405F50905461AFAF5116B17CF7DF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154385.roa Signing time: Sat 02 May 2026 09:27:12 +0000 ROA not before: Sat 02 May 2026 09:22:12 +0000 ROA not after: Sat 01 May 2027 09:27:12 +0000 asID: 154385 IP address blocks: 2001:df6:56c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:4e:24:17:79:fd:40:5f:50:90:54:61:af:af:51:16:b1:7c:f7:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:22:12 2026 GMT Not After : May 1 09:27:12 2027 GMT Subject: CN=AF4E6DC2C6B605FAD61F4A09DEE07F4B0FB3C4E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f2:b4:27:00:23:3a:a9:51:03:6c:19:fe:84: 92:4e:d1:d4:e0:a5:3d:36:13:2f:de:39:6a:b0:bd: 40:17:52:6d:8a:f0:cd:f7:87:a3:7a:95:cb:8c:bf: 5a:29:89:66:e7:b7:9d:58:fa:f3:d6:72:79:3a:8e: 9a:27:23:4a:f5:4e:21:35:a7:c7:46:4a:4d:e6:54: 2a:ce:51:5a:aa:95:a4:36:4c:f5:86:55:83:fb:b3: a7:45:88:f0:d5:e8:8f:0d:9d:e6:a5:76:e4:2d:ad: 78:74:f0:a4:d8:9f:50:c5:06:e9:08:bf:5d:8e:70: 10:47:0f:57:00:76:64:45:a1:83:d7:b0:0b:15:34: d7:e2:8c:30:ea:0d:54:11:c6:cd:63:eb:5b:15:d7: 9f:c8:98:79:70:42:94:32:b2:89:f0:64:4f:29:de: 62:14:f7:30:ec:04:38:18:9c:e4:78:28:cf:f4:49: 1d:a0:f5:3a:0e:68:6f:74:40:cf:0d:14:3f:7e:cb: 1c:a3:3a:d9:7d:55:0d:b0:d0:0a:3b:33:a1:48:88: ce:3c:0d:a4:a4:3f:af:19:a8:90:af:54:9d:1f:68: 39:ce:f3:31:62:60:44:ec:83:27:ab:12:47:10:be: f4:b5:8c:48:20:6d:05:48:a1:5b:46:8a:ea:76:94: 09:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:4E:6D:C2:C6:B6:05:FA:D6:1F:4A:09:DE:E0:7F:4B:0F:B3:C4:E3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154385.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:56c0::/48 Signature Algorithm: sha256WithRSAEncryption 6f:79:1d:87:bd:c6:c2:44:37:08:2e:dc:89:c2:7d:2d:a0:ca: 39:b7:dc:04:0b:90:a7:ba:5c:1c:c1:06:45:e8:03:0a:e5:d5: 7d:6b:43:d8:bd:5a:2e:c2:91:0d:f6:6a:35:b0:23:d8:81:ba: 3b:d4:67:cb:fe:4c:b7:0f:7b:52:38:cb:9f:d2:c2:c8:22:92: 4c:c0:92:13:8e:4e:59:1f:f8:e9:7e:96:a2:f0:a7:23:fc:9d: 47:60:75:08:6c:8f:4f:4e:f3:58:64:1d:52:34:30:f1:1d:b5: 12:07:27:e4:ed:17:f4:4b:9a:72:ba:11:4b:74:93:80:d0:6e: 78:b3:ee:91:4e:76:ab:e6:e7:06:4b:99:3b:90:e6:f3:cb:01: 34:1f:ce:dd:03:16:34:0b:e3:e5:ec:16:2f:6c:10:c1:87:91: 58:fc:91:54:c9:ee:15:50:a0:0c:bd:e0:2a:77:d8:fc:4b:5b: 47:be:d5:94:ca:c2:cc:9a:4f:77:5e:64:35:a0:4b:29:ed:94: 61:7f:2a:f3:f0:e1:2b:6a:ba:51:71:b3:d2:2d:c3:d6:17:0f: d1:93:58:26:43:8c:1d:55:52:2b:54:79:f6:e1:3a:9c:0c:dd: 7a:f3:17:ca:5a:3f:1e:55:d9:07:5c:d6:72:9f:55:e9:ce:e6: 02:43:bc:16 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUck4kF3n9QF9QkFRhr69RFrF8998wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjIxMloX DTI3MDUwMTA5MjcxMlowMzExMC8GA1UEAxMoQUY0RTZEQzJDNkI2MDVGQUQ2MUY0 QTA5REVFMDdGNEIwRkIzQzRFMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJPytCcAIzqpUQNsGf6Ekk7R1OClPTYTL945arC9QBdSbYrwzfeHo3qVy4y/ WimJZue3nVj689ZyeTqOmicjSvVOITWnx0ZKTeZUKs5RWqqVpDZM9YZVg/uzp0WI 8NXojw2d5qV25C2teHTwpNifUMUG6Qi/XY5wEEcPVwB2ZEWhg9ewCxU01+KMMOoN VBHGzWPrWxXXn8iYeXBClDKyifBkTyneYhT3MOwEOBic5Hgoz/RJHaD1Og5ob3RA zw0UP37LHKM62X1VDbDQCjszoUiIzjwNpKQ/rxmokK9UnR9oOc7zMWJgROyDJ6sS RxC+9LWMSCBtBUihW0aK6naUCdMCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBSvTm3C xrYF+tYfSgne4H9LD7PE4zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0Mzg1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9lbAMA0GCSqGSIb3DQEBCwUAA4IBAQBveR2HvcbCRDcILtyJwn0t oMo5t9wEC5CnulwcwQZF6AMK5dV9a0PYvVouwpEN9mo1sCPYgbo71GfL/ky3D3tS OMuf0sLIIpJMwJITjk5ZH/jpfpai8Kcj/J1HYHUIbI9PTvNYZB1SNDDxHbUSByfk 7Rf0S5pyuhFLdJOA0G54s+6RTnar5ucGS5k7kObzywE0H87dAxY0C+Pl7BYvbBDB h5FY/JFUye4VUKAMveAqd9j8S1tHvtWUysLMmk93XmQ1oEsp7ZRhfyrz8OErarpR cbPSLcPWFw/Rk1gmQ4wdVVIrVHn24TqcDN168xfKWj8eVdkHXNZyn1XpzuYCQ7wW -----END CERTIFICATE-----Generated at Sun May 3 00:40:22 2026 by rpki-client