$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154414.roa File: AS154414.roa (raw, json) Hash identifier: Svo3JEgKZRmS1l1O4JAsphPkdZmCVBebXKyuni2ICho= Subject key identifier: B7:76:B7:E9:57:EB:50:7F:AF:64:A9:17:C8:58:8C:7C:10:48:39:13 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 448DD055FAFB7AC0E26E5E7894EC500E4F91A989 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154414.roa Signing time: Sat 02 May 2026 09:26:47 +0000 ROA not before: Sat 02 May 2026 09:21:47 +0000 ROA not after: Sat 01 May 2027 09:26:47 +0000 asID: 154414 IP address blocks: 163.61.6.0/23 maxlen: 24 2001:df4:ff40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:8d:d0:55:fa:fb:7a:c0:e2:6e:5e:78:94:ec:50:0e:4f:91:a9:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:47 2026 GMT Not After : May 1 09:26:47 2027 GMT Subject: CN=B776B7E957EB507FAF64A917C8588C7C10483913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f9:49:fa:78:a2:15:12:8c:93:a0:e9:ba:89: e5:0f:bb:a0:f6:85:3f:51:55:8e:7c:59:c0:f3:2f: 95:34:de:68:7a:8c:a9:a0:0e:5b:f5:49:98:8c:18: 43:01:b5:8c:f5:1a:fa:72:41:c0:0b:33:84:db:c1: 51:93:7a:ee:a3:2c:57:fd:ff:a9:ce:16:0a:ee:ea: 65:5e:c8:62:c2:c1:f5:77:47:d5:4b:aa:9e:6b:39: ed:95:b5:50:4b:3d:e5:69:6b:2f:99:58:49:d0:54: c3:1c:e2:51:b5:ef:58:2a:c2:46:0b:b8:7d:8d:07: ea:25:3d:3a:d7:1f:69:3c:be:8c:45:df:21:e2:0b: 43:d4:c8:bd:12:11:51:45:d0:ef:74:63:7c:58:b7: 37:fd:2f:57:e1:63:65:8c:75:61:d7:fc:c7:66:d6: 6e:22:99:1a:ca:e7:1f:f2:4d:da:07:ff:61:a8:81: 7e:67:52:dd:f5:ee:e7:d3:a8:4b:e2:3b:74:cd:b1: 37:c1:83:88:fe:2e:e4:14:c4:df:ff:20:30:1f:c9: c3:b0:77:16:02:9b:fe:7d:07:a7:a4:ad:13:06:83: 9a:d4:83:e3:29:9d:e7:c2:8d:4f:26:ff:2a:01:60: 30:c1:1d:04:b5:5e:68:55:b6:64:f9:c0:9a:eb:b4: 78:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:76:B7:E9:57:EB:50:7F:AF:64:A9:17:C8:58:8C:7C:10:48:39:13 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154414.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.6.0/23 IPv6: 2001:df4:ff40::/48 Signature Algorithm: sha256WithRSAEncryption 53:86:49:89:d8:c1:ea:7c:6b:4f:e4:b0:62:ce:8b:25:26:41: 76:03:91:77:1a:14:a5:d3:72:ad:cc:bd:67:ac:d2:50:58:55: 0d:ea:a1:34:f4:3f:68:c7:12:b8:b7:7a:bd:83:82:74:e4:c8: 04:c2:42:89:bf:05:ff:de:2a:76:79:f8:24:44:c4:70:25:8f: 03:90:eb:4d:54:bf:46:55:aa:c8:a4:e7:27:87:5a:eb:f9:b6: 22:3d:7c:ff:77:9a:da:b1:1b:60:93:c6:51:7c:86:0b:f3:4e: a9:01:d4:2c:4e:8e:64:98:fd:c4:58:2c:ca:e8:4e:7e:42:34: 1b:d3:9d:c2:2b:5d:84:c5:d8:1d:44:0e:d1:1f:4a:2f:eb:e8: 64:e6:7e:a6:54:7c:34:55:b7:34:1d:5e:d8:48:ca:4e:44:e7: ea:10:cf:02:a9:92:ae:48:8b:2a:bb:b4:e5:9a:7b:cf:14:5c: f1:e9:c6:1e:9f:fd:0b:41:99:9f:05:7c:e4:54:bc:14:99:06: 9b:bb:cb:76:88:4f:a5:18:63:31:f7:52:60:88:5d:f8:13:24: 4d:51:69:57:02:f2:c6:9b:a5:61:1f:2b:a9:ee:4c:77:75:af: ca:60:95:bc:30:2f:95:e8:79:ca:28:6e:1f:f9:11:1b:34:ce: 16:5d:79:3c -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIURI3QVfr7esDibl54lOxQDk+RqYkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjE0N1oX DTI3MDUwMTA5MjY0N1owMzExMC8GA1UEAxMoQjc3NkI3RTk1N0VCNTA3RkFGNjRB OTE3Qzg1ODhDN0MxMDQ4MzkxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK35Sfp4ohUSjJOg6bqJ5Q+7oPaFP1FVjnxZwPMvlTTeaHqMqaAOW/VJmIwY QwG1jPUa+nJBwAszhNvBUZN67qMsV/3/qc4WCu7qZV7IYsLB9XdH1Uuqnms57ZW1 UEs95WlrL5lYSdBUwxziUbXvWCrCRgu4fY0H6iU9OtcfaTy+jEXfIeILQ9TIvRIR UUXQ73RjfFi3N/0vV+FjZYx1Ydf8x2bWbiKZGsrnH/JN2gf/YaiBfmdS3fXu59Oo S+I7dM2xN8GDiP4u5BTE3/8gMB/Jw7B3FgKb/n0Hp6StEwaDmtSD4ymd58KNTyb/ KgFgMMEdBLVeaFW2ZPnAmuu0eAMCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBS3drfp V+tQf69kqRfIWIx8EEg5EzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0NDE0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBoz0GMA8EAgACMAkDBwAgAQ30/0AwDQYJKoZIhvcNAQELBQADggEBAFOG SYnYwep8a0/ksGLOiyUmQXYDkXcaFKXTcq3MvWes0lBYVQ3qoTT0P2jHEri3er2D gnTkyATCQom/Bf/eKnZ5+CRExHAljwOQ601Uv0ZVqsik5yeHWuv5tiI9fP93mtqx G2CTxlF8hgvzTqkB1CxOjmSY/cRYLMroTn5CNBvTncIrXYTF2B1EDtEfSi/r6GTm fqZUfDRVtzQdXthIyk5E5+oQzwKpkq5Iiyq7tOWae88UXPHpxh6f/QtBmZ8FfORU vBSZBpu7y3aIT6UYYzH3UmCIXfgTJE1RaVcC8sabpWEfK6nuTHd1r8pglbwwL5Xo ecoobh/5ERs0zhZdeTw= -----END CERTIFICATE-----Generated at Sun May 3 01:41:18 2026 by rpki-client