$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154483.roa File: AS154483.roa (raw, json) Hash identifier: Wwc+Y3vFFGc1LD6aznqAv6uWmY1bIZ4hoifsX5Uy1xk= Subject key identifier: CF:FF:AB:19:34:D8:1E:55:23:B6:A6:2D:5A:77:25:85:C6:6F:13:51 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 315E15FF6C32BDCB89DDC1D14EB82B847930B7A8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154483.roa Signing time: Sat 02 May 2026 09:27:12 +0000 ROA not before: Sat 02 May 2026 09:22:12 +0000 ROA not after: Sat 01 May 2027 09:27:12 +0000 asID: 154483 IP address blocks: 2001:df6:a340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:5e:15:ff:6c:32:bd:cb:89:dd:c1:d1:4e:b8:2b:84:79:30:b7:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:22:12 2026 GMT Not After : May 1 09:27:12 2027 GMT Subject: CN=CFFFAB1934D81E5523B6A62D5A772585C66F1351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:26:4b:45:57:45:9b:02:5f:7d:3f:8b:63:a4: 9a:37:e6:c4:e8:68:96:69:55:f1:b0:ae:26:d9:05: 98:1d:c5:08:a7:67:99:25:4a:df:a7:c4:a4:e3:f1: b4:f8:ef:e7:28:01:f2:e6:9f:d1:53:6a:e4:d7:cb: 79:d9:70:d3:f2:2f:ae:b5:51:e5:fb:e5:c4:bb:c5: 1b:db:a1:9c:a5:0b:a0:bb:8e:2e:7b:6d:61:ad:34: df:da:79:3c:06:55:79:28:95:98:4e:e9:c8:0c:fa: a8:55:0a:fe:44:cd:47:51:24:7d:e5:0d:65:f1:04: 9f:99:c7:30:b9:53:af:60:2b:d0:bb:5c:d0:5e:99: 38:64:76:b9:c1:62:f5:2c:81:86:65:07:d5:6e:36: 40:83:ed:9c:75:ea:2d:cb:61:9f:7b:b8:f9:64:a2: f6:5d:26:3e:8c:32:11:d7:c4:54:69:db:4c:13:06: ea:5e:fd:3c:c9:de:b4:be:6b:c8:89:c6:30:f8:c3: d4:60:53:4b:a9:88:18:7a:8c:cc:92:59:b3:a5:d0: 4e:1a:78:60:98:3b:1f:e0:4d:a4:2d:61:0e:81:ba: ae:eb:1e:e9:05:93:3c:cd:7c:b3:18:da:2f:20:d2: 35:b6:b3:cd:4e:d2:6e:03:d6:06:06:c1:14:f8:0f: 1c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FF:AB:19:34:D8:1E:55:23:B6:A6:2D:5A:77:25:85:C6:6F:13:51 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154483.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:a340::/48 Signature Algorithm: sha256WithRSAEncryption 88:f8:77:bb:64:a4:2a:7d:f7:11:79:4f:a4:8d:15:f0:45:b3: 68:06:63:84:74:1d:e1:91:58:d1:7e:45:ab:e8:f0:76:17:39: d4:68:ee:ac:f3:62:25:b5:a8:7f:19:12:3d:d3:e0:16:1a:67: 87:e9:ad:5a:72:41:e4:56:cb:d9:8c:a9:f6:5c:44:59:2f:30: 09:67:a4:7e:4e:35:64:1a:ca:3b:66:46:f5:d4:96:60:75:e4: b6:43:e6:3f:f2:95:31:ef:23:cf:b3:72:e4:b6:72:e1:48:2b: a5:91:61:64:c3:34:b9:32:83:a5:35:c3:6f:0e:1f:e6:5e:67: 45:aa:8f:9d:f1:e0:8e:04:0f:36:1b:28:34:a7:fd:ad:e6:74: 4c:58:f1:da:7a:66:e7:98:20:f4:30:8c:05:90:63:bb:b5:c6: a3:6e:b3:b7:80:5f:89:33:22:33:05:38:7e:10:a2:56:2e:6d: 9c:46:ac:a4:bd:ff:cb:55:aa:f6:d4:42:3f:c0:10:84:46:60: 59:26:ed:9b:f9:5a:6c:83:64:36:6a:e4:61:46:04:2a:82:5d: 6d:74:f0:34:ab:f8:9e:e4:5c:6b:fc:e1:5e:94:90:cc:6f:2d: 16:22:c8:a6:6b:d7:f7:d8:4d:6d:a0:48:e5:c5:69:d7:d3:ba: 4c:fc:c6:02 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUMV4V/2wyvcuJ3cHRTrgrhHkwt6gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjIxMloX DTI3MDUwMTA5MjcxMlowMzExMC8GA1UEAxMoQ0ZGRkFCMTkzNEQ4MUU1NTIzQjZB NjJENUE3NzI1ODVDNjZGMTM1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ4mS0VXRZsCX30/i2OkmjfmxOholmlV8bCuJtkFmB3FCKdnmSVK36fEpOPx tPjv5ygB8uaf0VNq5NfLedlw0/IvrrVR5fvlxLvFG9uhnKULoLuOLnttYa0039p5 PAZVeSiVmE7pyAz6qFUK/kTNR1EkfeUNZfEEn5nHMLlTr2Ar0Ltc0F6ZOGR2ucFi 9SyBhmUH1W42QIPtnHXqLcthn3u4+WSi9l0mPowyEdfEVGnbTBMG6l79PMnetL5r yInGMPjD1GBTS6mIGHqMzJJZs6XQThp4YJg7H+BNpC1hDoG6ruse6QWTPM18sxja LyDSNbazzU7SbgPWBgbBFPgPHPECAwEAAaOCAc8wggHLMB0GA1UdDgQWBBTP/6sZ NNgeVSO2pi1adyWFxm8TUTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0NDgzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9qNAMA0GCSqGSIb3DQEBCwUAA4IBAQCI+He7ZKQqffcReU+kjRXw RbNoBmOEdB3hkVjRfkWr6PB2FznUaO6s82Iltah/GRI90+AWGmeH6a1ackHkVsvZ jKn2XERZLzAJZ6R+TjVkGso7Zkb11JZgdeS2Q+Y/8pUx7yPPs3LktnLhSCulkWFk wzS5MoOlNcNvDh/mXmdFqo+d8eCOBA82Gyg0p/2t5nRMWPHaembnmCD0MIwFkGO7 tcajbrO3gF+JMyIzBTh+EKJWLm2cRqykvf/LVar21EI/wBCERmBZJu2b+Vpsg2Q2 auRhRgQqgl1tdPA0q/ie5Fxr/OFelJDMby0WIsima9f32E1toEjlxWnX07pM/MYC -----END CERTIFICATE-----Generated at Sun May 3 00:39:43 2026 by rpki-client