$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154423.roa File: AS154423.roa (raw, json) Hash identifier: iO0BXEzQNQaSLSYCEJeUxHwFOYQ09saReOMNehnVBwU= Subject key identifier: 52:91:AB:AB:9B:33:55:93:A1:30:D5:F6:63:21:7F:7C:4E:2F:45:4B Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0E105C22F63B9FC6B75E9122D347F961493902EC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154423.roa Signing time: Sat 02 May 2026 08:35:44 +0000 ROA not before: Sat 02 May 2026 08:30:44 +0000 ROA not after: Sat 01 May 2027 08:35:44 +0000 asID: 154423 IP address blocks: 2001:df6:6c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:10:5c:22:f6:3b:9f:c6:b7:5e:91:22:d3:47:f9:61:49:39:02:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:30:44 2026 GMT Not After : May 1 08:35:44 2027 GMT Subject: CN=5291ABAB9B335593A130D5F663217F7C4E2F454B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3a:a0:02:c4:ce:04:1e:1c:ae:95:d3:91:b0: 8d:d5:40:1e:92:cf:f4:50:a8:76:52:ec:43:c4:58: d2:4d:dd:0b:d1:7d:fd:c4:96:9d:8f:6b:0e:54:3e: 3d:60:c2:1b:ca:d3:51:a3:56:bb:60:d1:46:e2:29: 29:63:6c:30:ee:85:50:f8:db:d9:22:43:52:6d:9c: a7:24:7c:a9:ce:ef:bd:36:8c:e7:a9:f3:5a:9a:a4: ca:69:36:cb:a3:5c:61:32:7b:3c:aa:1f:43:62:2e: 76:1c:e2:77:2d:e2:0d:2f:19:d8:45:5b:28:8c:4b: af:c9:9a:2b:0b:d4:7b:14:ce:46:84:0e:59:ee:b2: c8:ce:b6:a9:e5:df:dc:d3:a1:7f:74:0a:56:0a:04: 4b:0e:2b:3e:f9:b7:b1:f9:82:33:7a:dd:67:ab:e6: 1a:97:d0:d0:8c:ba:30:fd:b1:4d:1b:38:c7:47:91: 48:75:bf:80:66:51:05:8d:a5:00:b1:ba:73:7a:2b: fe:1f:84:ac:e2:35:e8:76:e4:c8:6c:6e:e1:47:fe: fa:44:d5:79:97:57:3d:2f:27:e5:86:20:7a:2a:30: 78:b7:78:46:05:39:a4:65:64:6d:03:02:13:20:ce: da:6e:08:03:10:c3:fe:c3:63:21:cc:53:61:59:5a: 06:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:91:AB:AB:9B:33:55:93:A1:30:D5:F6:63:21:7F:7C:4E:2F:45:4B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154423.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:6c40::/48 Signature Algorithm: sha256WithRSAEncryption 94:4e:07:1c:18:f0:22:b5:2d:c9:57:1b:be:ff:6a:84:bc:4d: 48:8f:2a:c6:92:64:7b:3e:62:b1:90:e6:e6:1f:d6:1c:e2:f3: 40:94:dd:41:53:2f:b8:0e:5a:19:5f:a8:d0:8e:41:ae:5e:27: e1:9a:84:18:f1:a5:33:8a:5e:85:38:3d:c2:43:e0:ef:2f:8b: 34:93:ee:3a:f2:79:b2:59:3d:e5:f8:b0:ab:19:7b:85:fc:6f: 88:db:9c:dd:77:75:cf:d5:09:1e:1d:9f:a8:ec:21:f3:29:2b: 52:c1:70:9b:1a:b8:34:5c:b9:1e:55:42:d8:d2:f1:6c:73:f8: 97:ba:b7:05:88:d3:f7:a3:ee:e7:2e:4b:a2:d1:25:ed:67:bb: 89:3a:f6:ae:f5:b1:71:29:84:f8:76:13:88:23:44:f3:37:d5: 8a:15:58:79:bc:00:bc:e0:31:47:d6:bb:84:7c:38:0e:ef:61: f1:f2:fc:92:48:2a:6d:a9:98:e3:1e:3b:de:81:e1:fb:a8:ae: 52:a4:4f:6f:c4:ea:e6:67:c2:92:16:94:5c:3f:2d:d6:6d:4d: aa:09:6d:b3:38:0c:bd:ed:50:e8:cc:b0:14:15:c9:a7:ff:ee: 45:43:f5:49:42:a4:07:80:97:97:ea:b4:22:2f:6c:23:16:b0: 3c:1b:90:cd -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUDhBcIvY7n8a3XpEi00f5YUk5AuwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzA0NFoX DTI3MDUwMTA4MzU0NFowMzExMC8GA1UEAxMoNTI5MUFCQUI5QjMzNTU5M0ExMzBE NUY2NjMyMTdGN0M0RTJGNDU0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALE6oALEzgQeHK6V05GwjdVAHpLP9FCodlLsQ8RY0k3dC9F9/cSWnY9rDlQ+ PWDCG8rTUaNWu2DRRuIpKWNsMO6FUPjb2SJDUm2cpyR8qc7vvTaM56nzWpqkymk2 y6NcYTJ7PKofQ2Iudhzidy3iDS8Z2EVbKIxLr8maKwvUexTORoQOWe6yyM62qeXf 3NOhf3QKVgoESw4rPvm3sfmCM3rdZ6vmGpfQ0Iy6MP2xTRs4x0eRSHW/gGZRBY2l ALG6c3or/h+ErOI16HbkyGxu4Uf++kTVeZdXPS8n5YYgeioweLd4RgU5pGVkbQMC EyDO2m4IAxDD/sNjIcxTYVlaBosCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRSkaur mzNVk6Ew1fZjIX98Ti9FSzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0NDIzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9mxAMA0GCSqGSIb3DQEBCwUAA4IBAQCUTgccGPAitS3JVxu+/2qE vE1IjyrGkmR7PmKxkObmH9Yc4vNAlN1BUy+4DloZX6jQjkGuXifhmoQY8aUzil6F OD3CQ+DvL4s0k+468nmyWT3l+LCrGXuF/G+I25zdd3XP1QkeHZ+o7CHzKStSwXCb Grg0XLkeVULY0vFsc/iXurcFiNP3o+7nLkui0SXtZ7uJOvau9bFxKYT4dhOII0Tz N9WKFVh5vAC84DFH1ruEfDgO72Hx8vySSCptqZjjHjvegeH7qK5SpE9vxOrmZ8KS FpRcPy3WbU2qCW2zOAy97VDozLAUFcmn/+5FQ/VJQqQHgJeX6rQiL2wjFrA8G5DN -----END CERTIFICATE-----Generated at Sun May 3 01:40:41 2026 by rpki-client