$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154533.roa File: AS154533.roa (raw, json) Hash identifier: DI9a+hlqFO7+f2HqPNZmp5Z1ZhttbHbK93UX3CmUknw= Subject key identifier: 45:23:3A:EF:25:43:1D:22:5E:A1:F0:90:07:0F:3B:73:82:C3:C4:01 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5F27691B4270BD46C206137D8324256BB82D04C5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154533.roa Signing time: Sat 02 May 2026 09:27:14 +0000 ROA not before: Sat 02 May 2026 09:22:14 +0000 ROA not after: Sat 01 May 2027 09:27:14 +0000 asID: 154533 IP address blocks: 163.128.20.0/24 maxlen: 24 2001:df6:cc40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:27:69:1b:42:70:bd:46:c2:06:13:7d:83:24:25:6b:b8:2d:04:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:22:14 2026 GMT Not After : May 1 09:27:14 2027 GMT Subject: CN=45233AEF25431D225EA1F090070F3B7382C3C401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:17:ff:dc:cf:0e:90:53:aa:a1:3e:a1:a7:3c: e0:c5:db:24:53:21:4a:96:e6:09:5e:9f:82:0a:e2: 2f:28:d9:1c:e0:ad:10:19:a4:54:c7:a6:0d:94:26: e1:8a:e2:d2:62:55:73:ea:75:b9:66:f9:0f:bb:31: 2c:66:b8:d5:95:b7:06:d9:16:b7:4a:b3:f0:86:c7: 78:71:a7:1d:0d:95:e6:64:1d:70:4d:e2:07:bb:8e: c6:55:cd:b4:83:99:84:52:db:08:64:e1:56:a5:42: c9:36:e0:eb:ab:dd:11:d8:5f:14:33:00:5a:d0:dc: cd:15:11:d1:aa:8b:a0:ba:99:e3:63:42:9e:74:fb: 33:73:92:bf:35:b2:a9:8d:2c:49:54:ca:da:41:ec: d0:49:b9:b6:ea:35:f5:57:c7:77:0e:58:25:8e:58: 7d:64:01:60:de:7d:12:91:64:5d:2f:5f:4d:94:54: 8f:3f:de:ea:71:35:a1:78:16:5c:d0:47:e9:e4:45: e2:6c:94:10:a1:ca:4c:6c:07:1c:bc:a6:5b:81:86: 0e:ae:4c:0f:77:26:10:2c:06:e4:5b:e6:4b:a0:b9: f2:c9:dc:f8:3b:a7:d3:31:c7:98:ae:3a:a1:c5:bb: 2e:da:3d:78:13:2a:9b:f0:c2:27:a4:d9:07:a9:fe: 44:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:23:3A:EF:25:43:1D:22:5E:A1:F0:90:07:0F:3B:73:82:C3:C4:01 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.128.20.0/24 IPv6: 2001:df6:cc40::/48 Signature Algorithm: sha256WithRSAEncryption 67:3e:5f:d3:1d:5e:26:3c:bb:04:ea:a1:d2:f0:bc:21:c3:48: 8d:fc:e5:3c:f8:c5:07:1a:76:34:53:93:a0:6f:8a:9c:6a:10: 49:65:94:d8:fd:36:d9:48:28:81:4f:f9:6e:f6:fe:b7:b2:b3: 32:cc:40:7b:26:97:9a:07:1d:1b:43:45:fa:6a:4e:3c:c0:fe: d9:a6:64:ae:1f:08:fc:7b:ad:6d:7b:25:80:78:c3:98:1f:13: c1:46:14:24:2f:1d:56:96:5a:9e:fe:88:9b:11:60:17:91:2d: 64:03:49:c6:90:6f:f2:02:9b:8d:05:dd:b4:05:64:40:d4:5b: 74:cf:b8:a9:41:da:bf:9b:ac:1f:f2:f0:bb:e3:a1:6c:66:75: 7f:68:47:d4:4e:73:ef:31:a3:cc:25:7d:a9:87:3f:4e:9f:e4: ce:5a:a7:3e:d7:31:26:45:a0:c6:12:a3:fa:7d:6e:37:c1:96: bd:d3:78:2b:93:c2:1e:da:1c:11:23:bb:5b:93:b6:b9:2d:53: 7e:59:9f:3d:ed:2d:7b:4c:e0:fd:10:8d:12:9d:93:5c:4f:c2: 06:a6:2b:09:6c:d6:4a:e8:00:c6:9f:3c:f0:5f:f6:43:94:f6: 28:7c:d2:07:f1:8f:ce:72:37:ec:21:7f:81:80:de:cb:f6:00: 16:cb:b9:cb -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUXydpG0JwvUbCBhN9gyQla7gtBMUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjIxNFoX DTI3MDUwMTA5MjcxNFowMzExMC8GA1UEAxMoNDUyMzNBRUYyNTQzMUQyMjVFQTFG MDkwMDcwRjNCNzM4MkMzQzQwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN0X/9zPDpBTqqE+oac84MXbJFMhSpbmCV6fggriLyjZHOCtEBmkVMemDZQm 4Yri0mJVc+p1uWb5D7sxLGa41ZW3BtkWt0qz8IbHeHGnHQ2V5mQdcE3iB7uOxlXN tIOZhFLbCGThVqVCyTbg66vdEdhfFDMAWtDczRUR0aqLoLqZ42NCnnT7M3OSvzWy qY0sSVTK2kHs0Em5tuo19VfHdw5YJY5YfWQBYN59EpFkXS9fTZRUjz/e6nE1oXgW XNBH6eRF4myUEKHKTGwHHLymW4GGDq5MD3cmECwG5FvmS6C58snc+Dun0zHHmK46 ocW7Lto9eBMqm/DCJ6TZB6n+RIUCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBRFIzrv JUMdIl6h8JAHDztzgsPEATAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0NTMzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAo4AUMA8EAgACMAkDBwAgAQ32zEAwDQYJKoZIhvcNAQELBQADggEBAGc+ X9MdXiY8uwTqodLwvCHDSI385Tz4xQcadjRTk6BvipxqEElllNj9NtlIKIFP+W72 /reyszLMQHsml5oHHRtDRfpqTjzA/tmmZK4fCPx7rW17JYB4w5gfE8FGFCQvHVaW Wp7+iJsRYBeRLWQDScaQb/ICm40F3bQFZEDUW3TPuKlB2r+brB/y8LvjoWxmdX9o R9ROc+8xo8wlfamHP06f5M5apz7XMSZFoMYSo/p9bjfBlr3TeCuTwh7aHBEju1uT trktU35Znz3tLXtM4P0QjRKdk1xPwgamKwls1kroAMafPPBf9kOU9ih80gfxj85y N+whf4GA3sv2ABbLucs= -----END CERTIFICATE-----Generated at Sun May 3 00:39:43 2026 by rpki-client