$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154503.roa File: AS154503.roa (raw, json) Hash identifier: BMV6zWnGqzC3+0LaztTbiC4+wg31SYwb5zZVybVYZ3c= Subject key identifier: 32:A4:6A:49:42:8E:BA:17:2E:C4:6F:CA:1C:A0:AB:6E:31:6D:DA:E3 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5EA98357C121B4475799D5F6E8907C0E3354D6A8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154503.roa Signing time: Sat 02 May 2026 09:27:24 +0000 ROA not before: Sat 02 May 2026 09:22:24 +0000 ROA not after: Sat 01 May 2027 09:27:24 +0000 asID: 154503 IP address blocks: 2001:df6:afc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:a9:83:57:c1:21:b4:47:57:99:d5:f6:e8:90:7c:0e:33:54:d6:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:22:24 2026 GMT Not After : May 1 09:27:24 2027 GMT Subject: CN=32A46A49428EBA172EC46FCA1CA0AB6E316DDAE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:74:57:ba:64:fb:c1:8d:0d:9c:86:d4:aa:9d: 22:83:02:f8:39:4a:f0:b8:66:1c:1f:f0:fe:45:e5: e1:ad:23:8b:dc:7f:b4:ea:fb:a5:f1:b2:2a:56:0f: 77:fb:44:d1:2e:fd:10:3b:ea:fb:79:78:fb:df:7c: a3:bc:aa:aa:c0:ef:f9:04:53:57:ee:2e:21:56:49: e9:d0:a0:95:e4:ec:ac:5a:aa:36:ec:0e:08:7c:06: 5b:fd:29:2a:ee:c9:6c:c7:4d:4b:44:94:6d:cc:57: 72:00:55:13:98:55:37:83:77:1f:23:00:16:d4:91: 99:3f:d6:25:10:7b:fb:a2:20:39:26:25:7d:f4:21: c6:81:d4:bc:b6:17:c1:19:96:15:99:2f:21:8c:25: b7:c9:74:15:15:d3:9b:c1:0b:6d:cb:d1:da:1c:81: 50:ff:fc:31:0b:e8:82:d3:54:83:b4:c8:ef:93:71: 91:24:e8:10:ec:32:ea:ba:de:34:cd:de:4a:c5:9a: de:a0:79:08:df:7a:e0:a6:57:e2:05:10:c5:c0:f0: 2e:04:b0:8b:a3:df:7a:01:dc:64:10:00:39:7d:55: c4:65:b2:c6:7d:eb:49:67:34:58:4e:07:99:9f:74: 47:94:92:d3:0b:94:34:41:22:9f:58:45:1a:cc:bc: 27:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A4:6A:49:42:8E:BA:17:2E:C4:6F:CA:1C:A0:AB:6E:31:6D:DA:E3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154503.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:afc0::/48 Signature Algorithm: sha256WithRSAEncryption 52:e4:20:ce:45:f0:f8:58:fd:40:38:cc:b5:73:bc:d6:b4:25: bb:0a:85:5e:d5:9e:57:3a:a4:5d:1f:18:b9:2b:c8:dd:db:19: 36:ff:8d:b8:87:f8:a8:a2:ff:df:43:78:fd:da:58:92:3c:7b: e6:a3:8a:48:e5:47:06:1f:09:d6:ce:09:5b:3f:cd:17:bd:4b: 5b:4c:93:e2:9a:c0:62:b0:bc:df:87:55:9f:37:6f:1b:48:42: 1f:3e:1f:af:e0:ce:33:bf:d4:ff:88:ac:58:2c:10:50:46:e4: 84:f4:9c:77:b0:c9:3c:ce:cd:c4:a5:e9:f1:a6:e4:54:6d:fa: 71:96:d2:78:80:40:7e:9b:b9:dd:fd:be:d7:82:65:f4:11:e8: ad:92:3f:f3:ff:3b:f1:51:2d:7e:90:60:22:7a:08:a9:38:1c: 55:a1:79:f2:1c:8b:92:d8:5a:05:16:88:13:da:7c:d9:6e:20: bb:6b:7d:7b:8b:92:24:08:bb:c8:c9:52:a2:79:32:a5:70:55: e8:16:60:7c:2b:89:20:76:44:34:5c:f7:44:b5:7c:15:21:d2: 3a:97:5d:e1:3a:15:2a:22:87:bf:78:fa:2a:32:76:49:fa:2d: 1a:54:1d:27:fc:ce:0b:fe:3a:26:76:5b:6f:db:5a:8e:b8:53: 0a:33:aa:fb -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUXqmDV8EhtEdXmdX26JB8DjNU1qgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjIyNFoX DTI3MDUwMTA5MjcyNFowMzExMC8GA1UEAxMoMzJBNDZBNDk0MjhFQkExNzJFQzQ2 RkNBMUNBMEFCNkUzMTZEREFFMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL10V7pk+8GNDZyG1KqdIoMC+DlK8LhmHB/w/kXl4a0ji9x/tOr7pfGyKlYP d/tE0S79EDvq+3l4+998o7yqqsDv+QRTV+4uIVZJ6dCgleTsrFqqNuwOCHwGW/0p Ku7JbMdNS0SUbcxXcgBVE5hVN4N3HyMAFtSRmT/WJRB7+6IgOSYlffQhxoHUvLYX wRmWFZkvIYwlt8l0FRXTm8ELbcvR2hyBUP/8MQvogtNUg7TI75NxkSToEOwy6rre NM3eSsWa3qB5CN964KZX4gUQxcDwLgSwi6PfegHcZBAAOX1VxGWyxn3rSWc0WE4H mZ90R5SS0wuUNEEin1hFGsy8Jx8CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQypGpJ Qo66Fy7Eb8ocoKtuMW3a4zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0NTAzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9q/AMA0GCSqGSIb3DQEBCwUAA4IBAQBS5CDORfD4WP1AOMy1c7zW tCW7CoVe1Z5XOqRdHxi5K8jd2xk2/424h/ioov/fQ3j92liSPHvmo4pI5UcGHwnW zglbP80XvUtbTJPimsBisLzfh1WfN28bSEIfPh+v4M4zv9T/iKxYLBBQRuSE9Jx3 sMk8zs3EpenxpuRUbfpxltJ4gEB+m7nd/b7XgmX0Eeitkj/z/zvxUS1+kGAiegip OBxVoXnyHIuS2FoFFogT2nzZbiC7a317i5IkCLvIyVKieTKlcFXoFmB8K4kgdkQ0 XPdEtXwVIdI6l13hOhUqIoe/ePoqMnZJ+i0aVB0n/M4L/jomdltv21qOuFMKM6r7 -----END CERTIFICATE-----Generated at Sun May 3 01:40:02 2026 by rpki-client