$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154401.roa File: AS154401.roa (raw, json) Hash identifier: T3+9npZGbSIzyP7NWRrLAa0Mc5pxCpXLfMAHL1Yk3qs= Subject key identifier: B4:4D:14:E7:99:FC:04:DF:6C:45:28:AD:30:30:7E:35:A2:1A:CB:B2 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 21797062D582487C7F1D486CBDA4130E191347A3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154401.roa Signing time: Sat 02 May 2026 09:26:54 +0000 ROA not before: Sat 02 May 2026 09:21:54 +0000 ROA not after: Sat 01 May 2027 09:26:54 +0000 asID: 154401 IP address blocks: 2001:df6:5dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:79:70:62:d5:82:48:7c:7f:1d:48:6c:bd:a4:13:0e:19:13:47:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:54 2026 GMT Not After : May 1 09:26:54 2027 GMT Subject: CN=B44D14E799FC04DF6C4528AD30307E35A21ACBB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:dd:be:dd:1e:b4:3a:b7:b2:ba:75:26:c4:e3: 9b:c4:c8:eb:5b:ee:f9:09:57:d0:ff:31:ab:51:b2: cf:7d:de:ac:35:53:8d:eb:5a:ff:e6:54:86:9e:c0: a7:9a:93:d7:76:7d:fa:49:96:99:e1:8a:3a:aa:10: d1:85:e8:69:db:1d:a2:90:42:38:5b:70:ea:05:4a: f9:89:2e:d1:ab:0c:29:30:cb:af:6c:33:c8:a1:f7: 7d:b6:ad:4f:38:ec:db:5a:0a:73:ed:19:a6:22:21: 63:fb:50:07:ff:5e:91:a4:f0:01:b4:4e:5d:31:07: 5d:78:11:4f:3c:c1:74:0d:9b:33:0e:f3:28:f7:69: 4b:4b:42:24:20:12:15:e7:9f:51:ec:f0:3d:8a:fe: 10:ef:1b:b6:60:19:d3:4d:23:e4:93:eb:9e:2f:ed: 43:91:e5:38:2e:68:53:db:fd:ed:3f:4f:7e:d9:90: 2a:e1:82:ab:c3:bc:0a:98:81:cb:10:56:b5:a2:aa: c1:ba:85:2f:99:6a:a2:14:b9:6f:a3:5f:f0:8a:61: 5e:50:66:ee:7b:20:65:6a:f4:c6:41:f4:4b:0f:49: 7c:93:ee:26:65:82:46:ca:f9:f4:0d:c7:e7:27:17: 62:54:31:e6:25:6f:74:15:d9:62:a7:76:a0:3a:d5: c8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:4D:14:E7:99:FC:04:DF:6C:45:28:AD:30:30:7E:35:A2:1A:CB:B2 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154401.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:5dc0::/48 Signature Algorithm: sha256WithRSAEncryption 0f:c9:24:83:37:52:32:d0:78:33:3c:fc:0f:aa:66:b2:ad:95: 08:e8:22:42:49:e0:75:a9:58:b6:99:30:9e:77:d4:31:cf:aa: ba:82:be:1b:e7:7c:d5:7b:33:31:d4:41:52:b7:04:80:58:58: 6c:e3:2d:54:61:77:90:0a:b8:e9:79:33:2a:34:d3:05:7c:21: d9:6f:cb:bd:85:3f:a2:4f:ca:99:2e:3d:66:d4:fe:86:db:53: 75:3d:ff:9f:29:93:45:3f:1e:64:9b:0f:b2:24:88:0b:f5:17: 45:be:a9:ea:92:94:be:41:90:bd:5c:7f:d9:bd:84:96:37:17: ea:d5:76:31:34:8d:5a:26:2c:48:92:1b:d0:31:1a:60:ba:d6: 90:c6:1b:08:e8:01:4e:49:d0:de:78:84:8d:08:d1:d2:63:c8: 85:d3:e1:20:f6:18:1d:09:6b:60:43:27:48:69:22:86:c0:90: bd:01:5b:96:ba:39:e2:d1:7b:55:06:51:dc:97:57:ae:0f:01: 93:91:08:96:62:44:ec:b0:77:bc:60:db:65:ad:d0:dc:ae:31: 2b:1d:69:e2:36:79:4e:ea:df:87:5b:f0:19:35:34:65:14:e9: d8:15:06:79:2f:d1:99:4d:c8:85:36:b6:cc:6b:b2:72:9c:2b: 5c:b4:c1:d5 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUIXlwYtWCSHx/HUhsvaQTDhkTR6MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjE1NFoX DTI3MDUwMTA5MjY1NFowMzExMC8GA1UEAxMoQjQ0RDE0RTc5OUZDMDRERjZDNDUy OEFEMzAzMDdFMzVBMjFBQ0JCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKndvt0etDq3srp1JsTjm8TI61vu+QlX0P8xq1Gyz33erDVTjeta/+ZUhp7A p5qT13Z9+kmWmeGKOqoQ0YXoadsdopBCOFtw6gVK+Yku0asMKTDLr2wzyKH3fbat Tzjs21oKc+0ZpiIhY/tQB/9ekaTwAbROXTEHXXgRTzzBdA2bMw7zKPdpS0tCJCAS FeefUezwPYr+EO8btmAZ000j5JPrni/tQ5HlOC5oU9v97T9PftmQKuGCq8O8CpiB yxBWtaKqwbqFL5lqohS5b6Nf8IphXlBm7nsgZWr0xkH0Sw9JfJPuJmWCRsr59A3H 5ycXYlQx5iVvdBXZYqd2oDrVyMsCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBS0TRTn mfwE32xFKK0wMH41ohrLsjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0NDAxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9l3AMA0GCSqGSIb3DQEBCwUAA4IBAQAPySSDN1Iy0HgzPPwPqmay rZUI6CJCSeB1qVi2mTCed9Qxz6q6gr4b53zVezMx1EFStwSAWFhs4y1UYXeQCrjp eTMqNNMFfCHZb8u9hT+iT8qZLj1m1P6G21N1Pf+fKZNFPx5kmw+yJIgL9RdFvqnq kpS+QZC9XH/ZvYSWNxfq1XYxNI1aJixIkhvQMRpgutaQxhsI6AFOSdDeeISNCNHS Y8iF0+Eg9hgdCWtgQydIaSKGwJC9AVuWujni0XtVBlHcl1euDwGTkQiWYkTssHe8 YNtlrdDcrjErHWniNnlO6t+HW/AZNTRlFOnYFQZ5L9GZTciFNrbMa7JynCtctMHV -----END CERTIFICATE-----Generated at Sun May 3 00:39:43 2026 by rpki-client