$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154555.roa File: AS154555.roa (raw, json) Hash identifier: wmJiSbph5J6lecK105eKdGc7p8FdU63+xuYE9zvyHNg= Subject key identifier: 99:1B:A5:E7:2F:2D:11:6A:D0:54:F8:4C:11:B7:A6:0F:D7:DD:59:42 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1396AEECD32F753B37BC830DB20F1601A9F2BFDA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154555.roa Signing time: Sat 02 May 2026 09:27:13 +0000 ROA not before: Sat 02 May 2026 09:22:13 +0000 ROA not after: Sat 01 May 2027 09:27:13 +0000 asID: 154555 IP address blocks: 163.128.11.0/24 maxlen: 24 2001:df6:c8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:96:ae:ec:d3:2f:75:3b:37:bc:83:0d:b2:0f:16:01:a9:f2:bf:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:22:13 2026 GMT Not After : May 1 09:27:13 2027 GMT Subject: CN=991BA5E72F2D116AD054F84C11B7A60FD7DD5942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:74:43:c1:15:f1:21:a4:2a:87:45:d8:84:94: c1:af:88:ee:e5:60:d9:3c:0b:bb:63:5e:78:fa:f9: a3:49:13:cf:df:29:6e:6e:ae:76:8c:5e:87:7b:d9: 61:61:d1:ff:12:e4:78:71:be:7c:4b:31:c9:6c:e0: 93:9e:62:cd:d4:30:1f:e0:39:83:00:0f:8b:02:86: 17:87:6e:27:c0:ef:ec:eb:ce:58:93:e0:c8:ec:d3: 2f:65:a2:1d:4b:b6:38:2e:05:65:1e:b9:6f:51:a2: 26:da:14:c8:5d:81:c2:98:be:45:5e:ec:8a:09:ab: de:32:0e:34:25:bb:a2:74:f0:f9:d9:6e:5f:30:4d: bd:21:80:0f:3c:ac:b2:0e:cf:ce:12:b2:ef:5c:81: 21:5f:c4:e2:f1:5e:fa:4e:b0:8c:b3:48:e0:23:90: 81:55:55:75:c5:b9:77:64:d6:36:df:cc:54:50:47: 5e:f6:b8:d9:6f:6f:9b:fd:bf:eb:31:7a:d0:93:44: c3:1b:ca:dd:7c:f0:dc:ba:67:88:36:63:71:ee:ec: ae:c4:2a:49:9f:b8:24:76:92:f9:89:42:87:9e:c5: 21:88:46:59:74:41:30:4b:ef:13:f8:9e:e3:f3:08: b6:c8:90:b9:49:1f:2d:cb:68:be:32:4b:a6:c5:d3: 03:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1B:A5:E7:2F:2D:11:6A:D0:54:F8:4C:11:B7:A6:0F:D7:DD:59:42 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154555.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.128.11.0/24 IPv6: 2001:df6:c8c0::/48 Signature Algorithm: sha256WithRSAEncryption 16:05:f8:3a:6e:5c:82:75:b4:70:37:78:eb:54:1f:2d:b7:28: 92:57:3a:ac:af:c5:3c:bb:6b:f5:87:e5:34:50:84:96:59:4b: 32:cd:96:7a:6c:fb:d2:20:ab:54:fc:c2:0d:0a:25:44:62:a1: 11:58:92:de:dc:8a:ee:62:82:c3:89:d9:60:f2:d3:9a:ba:bd: 3e:bd:6c:c3:e9:8a:0d:cc:68:1c:a4:3f:ec:98:ca:50:f8:84: 76:f2:31:70:85:48:6b:95:0e:67:43:5d:e4:de:bc:20:87:4e: 4e:39:bb:d8:e9:5d:b6:15:ca:c2:d0:af:6e:22:92:2f:99:4b: 82:9f:5c:3a:84:f8:b7:83:e4:0a:a5:70:97:cb:b4:ba:f1:f9: 1f:90:bc:4b:98:54:2d:9a:0f:ef:f5:ef:02:62:cd:05:c9:22: 2b:9b:d8:20:58:e3:3d:96:01:d6:df:e6:1c:d2:b3:96:23:0b: 31:6e:13:87:e6:64:ee:27:eb:9e:69:17:8a:8b:8f:19:65:32: 75:a3:cf:d4:34:42:e5:f0:8c:f1:44:9b:48:22:b3:9b:bb:eb: 3e:f7:32:63:de:df:db:c6:80:d9:06:cd:ad:90:19:24:ac:6b: d9:04:08:cb:a8:97:51:c8:08:0b:b9:05:5d:75:5c:41:e1:6a: f6:94:f6:3f -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUE5au7NMvdTs3vIMNsg8WAanyv9owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjIxM1oX DTI3MDUwMTA5MjcxM1owMzExMC8GA1UEAxMoOTkxQkE1RTcyRjJEMTE2QUQwNTRG ODRDMTFCN0E2MEZEN0RENTk0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN10Q8EV8SGkKodF2ISUwa+I7uVg2TwLu2NeePr5o0kTz98pbm6udoxeh3vZ YWHR/xLkeHG+fEsxyWzgk55izdQwH+A5gwAPiwKGF4duJ8Dv7OvOWJPgyOzTL2Wi HUu2OC4FZR65b1GiJtoUyF2Bwpi+RV7sigmr3jIONCW7onTw+dluXzBNvSGADzys sg7PzhKy71yBIV/E4vFe+k6wjLNI4COQgVVVdcW5d2TWNt/MVFBHXva42W9vm/2/ 6zF60JNEwxvK3Xzw3LpniDZjce7srsQqSZ+4JHaS+YlCh57FIYhGWXRBMEvvE/ie 4/MItsiQuUkfLctovjJLpsXTAxUCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBSZG6Xn Ly0RatBU+EwRt6YP191ZQjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0NTU1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAo4ALMA8EAgACMAkDBwAgAQ32yMAwDQYJKoZIhvcNAQELBQADggEBABYF +DpuXIJ1tHA3eOtUHy23KJJXOqyvxTy7a/WH5TRQhJZZSzLNlnps+9Igq1T8wg0K JURioRFYkt7ciu5igsOJ2WDy05q6vT69bMPpig3MaBykP+yYylD4hHbyMXCFSGuV DmdDXeTevCCHTk45u9jpXbYVysLQr24iki+ZS4KfXDqE+LeD5AqlcJfLtLrx+R+Q vEuYVC2aD+/17wJizQXJIiub2CBY4z2WAdbf5hzSs5YjCzFuE4fmZO4n655pF4qL jxllMnWjz9Q0QuXwjPFEm0gis5u76z73MmPe39vGgNkGza2QGSSsa9kECMuol1HI CAu5BV11XEHhavaU9j8= -----END CERTIFICATE-----Generated at Sun May 3 01:40:38 2026 by rpki-client