$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154548.roa File: AS154548.roa (raw, json) Hash identifier: nzytIYQthzQ0vzfKKqGLFcXTzj7Xt5hkwn5AouKhO+g= Subject key identifier: 9F:47:5D:B5:6C:89:55:24:82:85:F7:0E:78:2A:42:42:54:3D:80:60 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4639DC36F154A8B51CD0E501A4F1E3B45D941C83 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154548.roa Signing time: Sat 02 May 2026 09:26:55 +0000 ROA not before: Sat 02 May 2026 09:21:55 +0000 ROA not after: Sat 01 May 2027 09:26:55 +0000 asID: 154548 IP address blocks: 163.128.52.0/24 maxlen: 24 2001:df6:d240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:39:dc:36:f1:54:a8:b5:1c:d0:e5:01:a4:f1:e3:b4:5d:94:1c:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:55 2026 GMT Not After : May 1 09:26:55 2027 GMT Subject: CN=9F475DB56C8955248285F70E782A4242543D8060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e9:0d:2b:16:e5:92:1d:65:a0:27:01:1e:28: c4:b1:99:04:58:67:42:ba:63:d2:dc:e5:80:99:fb: 7d:ba:8d:7d:9e:de:07:79:71:29:4d:a4:06:ff:bb: 20:01:9b:94:65:2d:3f:43:f5:79:e3:96:83:3b:bc: f3:09:1e:3b:63:f2:69:9a:81:e2:82:02:de:33:fd: d4:7a:ff:d2:b8:17:f3:c8:43:3b:7e:a9:d3:a1:fe: 8a:73:1b:10:27:46:61:a6:5e:00:63:9d:cd:af:dc: 40:bc:66:88:08:c5:1f:61:99:5c:cf:c5:25:3a:a6: f2:ea:fa:69:21:6d:b7:f6:35:3c:2b:19:61:91:01: 75:7b:cc:77:c5:2e:c2:fa:f5:fa:e5:48:e9:2b:52: 8a:5e:6b:64:ab:e7:80:4b:a1:cf:ae:73:f0:c4:a1: ec:45:99:8e:ff:ab:82:b5:db:90:95:35:92:54:51: c4:6f:ad:e7:d1:4b:d2:11:c7:ce:7b:10:0f:8c:53: c7:73:8d:4e:c0:07:cf:3b:96:cc:c1:98:7b:c4:72: 5d:0c:fa:85:df:c0:64:6b:ef:90:14:b7:da:43:3d: 83:ea:0d:8f:76:13:f5:74:b8:4a:54:8a:25:9b:7c: 33:aa:6d:f1:f7:03:39:c0:a4:6c:fe:a9:fb:b9:59: b3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:47:5D:B5:6C:89:55:24:82:85:F7:0E:78:2A:42:42:54:3D:80:60 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154548.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.128.52.0/24 IPv6: 2001:df6:d240::/48 Signature Algorithm: sha256WithRSAEncryption 8c:15:a5:86:87:10:5d:4d:b1:7b:c5:10:10:37:1b:a1:e4:89: 95:13:60:30:f1:cf:da:aa:b1:ca:2d:13:85:a6:79:c8:49:71: 57:7a:06:c7:8a:35:c8:58:5e:a9:a5:95:e1:b2:cf:21:a7:cf: 13:c6:b4:d5:7f:f4:02:da:22:ef:01:a6:2b:36:c9:99:5f:96: 68:f9:16:31:04:36:cd:49:e0:11:f1:70:3d:9f:e1:c3:97:56: 12:4b:fb:28:02:36:e5:e3:0a:23:95:b8:fd:ec:c8:df:be:10: 89:79:f8:d3:99:be:ea:7c:c9:eb:60:ec:e0:6e:1b:de:25:d1: 9a:f2:ea:f3:fe:4a:e1:68:a2:bb:ee:c4:85:f2:92:0c:a0:29: f5:62:67:9c:81:ce:09:ce:96:c3:72:f7:42:e6:1b:68:3f:31: 79:d9:70:38:56:d5:1b:d1:da:34:ab:d1:5b:fb:ba:f8:6d:21: 80:14:d7:44:d9:c3:21:19:4a:54:36:dd:d8:2f:45:12:09:c1: 87:08:73:a0:ca:d5:c7:b1:e3:cd:3b:c6:fc:88:a7:a4:d8:96: c3:0e:d0:58:1d:ef:0e:15:a0:cb:37:6b:f3:95:3f:de:8a:f7: 87:4e:b8:db:14:00:f5:c0:d2:76:c0:a6:11:4f:5b:47:24:20: ca:b6:e2:bc -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIURjncNvFUqLUc0OUBpPHjtF2UHIMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjE1NVoX DTI3MDUwMTA5MjY1NVowMzExMC8GA1UEAxMoOUY0NzVEQjU2Qzg5NTUyNDgyODVG NzBFNzgyQTQyNDI1NDNEODA2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM/pDSsW5ZIdZaAnAR4oxLGZBFhnQrpj0tzlgJn7fbqNfZ7eB3lxKU2kBv+7 IAGblGUtP0P1eeOWgzu88wkeO2PyaZqB4oIC3jP91Hr/0rgX88hDO36p06H+inMb ECdGYaZeAGOdza/cQLxmiAjFH2GZXM/FJTqm8ur6aSFtt/Y1PCsZYZEBdXvMd8Uu wvr1+uVI6StSil5rZKvngEuhz65z8MSh7EWZjv+rgrXbkJU1klRRxG+t59FL0hHH znsQD4xTx3ONTsAHzzuWzMGYe8RyXQz6hd/AZGvvkBS32kM9g+oNj3YT9XS4SlSK JZt8M6pt8fcDOcCkbP6p+7lZs6UCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBSfR121 bIlVJIKF9w54KkJCVD2AYDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0NTQ4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAo4A0MA8EAgACMAkDBwAgAQ320kAwDQYJKoZIhvcNAQELBQADggEBAIwV pYaHEF1NsXvFEBA3G6HkiZUTYDDxz9qqscotE4WmechJcVd6BseKNchYXqmlleGy zyGnzxPGtNV/9ALaIu8Bpis2yZlflmj5FjEENs1J4BHxcD2f4cOXVhJL+ygCNuXj CiOVuP3syN++EIl5+NOZvup8yetg7OBuG94l0Zry6vP+SuFoorvuxIXykgygKfVi Z5yBzgnOlsNy90LmG2g/MXnZcDhW1RvR2jSr0Vv7uvhtIYAU10TZwyEZSlQ23dgv RRIJwYcIc6DK1cex4807xvyIp6TYlsMO0Fgd7w4VoMs3a/OVP96K94dOuNsUAPXA 0nbAphFPW0ckIMq24rw= -----END CERTIFICATE-----Generated at Sun May 3 00:39:41 2026 by rpki-client