$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154557.roa File: AS154557.roa (raw, json) Hash identifier: SEqOrMy5ZLUstvs+rUwmQYzJ4Zpdbiup2d3ncRet9fE= Subject key identifier: 54:9C:0B:71:D2:00:A5:1C:68:B1:CB:25:E9:7F:17:86:60:DE:D6:5A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3F8ED5D628A7E1416306A6D9771784841E4E6E42 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154557.roa Signing time: Sat 02 May 2026 09:27:11 +0000 ROA not before: Sat 02 May 2026 09:22:11 +0000 ROA not after: Sat 01 May 2027 09:27:11 +0000 asID: 154557 IP address blocks: 163.128.58.0/23 maxlen: 24 2001:df6:d3c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:8e:d5:d6:28:a7:e1:41:63:06:a6:d9:77:17:84:84:1e:4e:6e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:22:11 2026 GMT Not After : May 1 09:27:11 2027 GMT Subject: CN=549C0B71D200A51C68B1CB25E97F178660DED65A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f1:5b:4d:be:86:54:d2:27:9e:3f:08:eb:4f: ed:41:5f:89:e6:3b:bf:38:6f:a7:37:84:9d:03:d6: 52:cc:b8:69:cb:64:03:60:ec:85:ed:37:d2:25:a6: 4b:6e:d3:fc:0e:61:37:35:41:2c:49:fd:e0:a4:1b: 61:8e:a3:0d:09:54:44:c5:7a:8e:76:2c:3a:fc:c4: b2:c9:03:a8:3e:ab:10:e5:59:fe:d9:d3:70:e4:71: eb:b5:9e:0a:36:70:09:b6:22:7b:23:10:1c:df:26: 23:b5:50:f4:78:80:66:db:4f:68:96:96:49:3a:be: ef:9e:4e:7e:46:87:11:54:0f:75:5a:85:2a:5a:3f: 50:46:5e:eb:2d:02:81:0d:71:32:a4:6f:73:9a:46: 80:12:0d:22:82:c8:41:f4:c5:07:5a:80:09:4e:5b: a0:b6:15:62:70:32:1b:e7:e2:9e:9e:e9:a2:22:42: 90:42:26:b1:3c:ff:e7:2a:fa:9c:86:96:3d:87:d9: b7:00:bf:5f:5e:00:b1:39:74:bc:3c:5d:bd:d9:08: 26:2d:78:fa:1d:ba:e8:38:06:6d:9d:04:0d:d4:08: 3a:db:32:ee:95:a0:fb:b0:b3:38:71:50:6a:45:73: a3:28:ab:09:eb:48:d9:48:bc:56:bc:4d:d8:2d:69: db:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9C:0B:71:D2:00:A5:1C:68:B1:CB:25:E9:7F:17:86:60:DE:D6:5A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154557.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.128.58.0/23 IPv6: 2001:df6:d3c0::/48 Signature Algorithm: sha256WithRSAEncryption a6:ab:27:eb:24:20:c2:67:86:76:59:85:e6:d4:d2:2d:54:6e: 98:ce:7e:0e:36:27:5a:ad:74:a8:88:5e:23:9b:52:d0:b6:7f: c5:10:c2:c7:04:e9:d9:4b:9f:d6:6c:5a:42:92:82:a5:7e:4e: 1b:58:1a:78:5d:9b:eb:4f:7e:6e:2b:19:66:d2:bc:aa:7d:42: 50:22:f5:22:4b:42:f0:26:74:77:19:6c:95:88:7a:a8:d8:0e: d1:fa:b1:88:9f:c6:32:d7:c9:34:73:f6:49:93:d3:7d:16:b9: 8f:03:dd:23:ce:4e:c2:3c:a0:26:e7:bd:1e:ce:e4:0b:27:0b: e5:fd:3b:cd:ac:b9:f6:cd:53:d9:ce:db:d1:45:1a:cb:ee:71: 89:db:79:19:90:d1:11:77:f2:3f:e8:3f:90:6b:bb:32:1f:c1: 34:93:ea:80:f8:78:99:0a:c9:a9:f8:a5:2b:9f:0f:ba:e3:82: 4b:8a:76:b6:a3:59:02:aa:a9:3f:8b:d5:fd:ca:c6:4d:ce:12: 2f:d1:42:b2:5d:ea:1e:8f:d3:78:ae:ad:cd:fc:af:03:f7:38: d0:5e:59:89:b9:de:3b:2d:66:33:17:dd:d1:4e:8a:af:e2:51: 9f:4d:94:c7:be:c0:05:b1:32:bf:bd:ac:7e:c3:8a:9f:47:f7: 2f:f6:64:6b -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUP47V1iin4UFjBqbZdxeEhB5ObkIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjIxMVoX DTI3MDUwMTA5MjcxMVowMzExMC8GA1UEAxMoNTQ5QzBCNzFEMjAwQTUxQzY4QjFD QjI1RTk3RjE3ODY2MERFRDY1QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHxW02+hlTSJ54/COtP7UFfieY7vzhvpzeEnQPWUsy4actkA2Dshe030iWm S27T/A5hNzVBLEn94KQbYY6jDQlURMV6jnYsOvzEsskDqD6rEOVZ/tnTcORx67We CjZwCbYieyMQHN8mI7VQ9HiAZttPaJaWSTq+755OfkaHEVQPdVqFKlo/UEZe6y0C gQ1xMqRvc5pGgBINIoLIQfTFB1qACU5boLYVYnAyG+finp7poiJCkEImsTz/5yr6 nIaWPYfZtwC/X14AsTl0vDxdvdkIJi14+h266DgGbZ0EDdQIOtsy7pWg+7CzOHFQ akVzoyirCetI2Ui8VrxN2C1p27ECAwEAAaOCAd0wggHZMB0GA1UdDgQWBBRUnAtx 0gClHGixyyXpfxeGYN7WWjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0NTU3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBo4A6MA8EAgACMAkDBwAgAQ3208AwDQYJKoZIhvcNAQELBQADggEBAKar J+skIMJnhnZZhebU0i1UbpjOfg42J1qtdKiIXiObUtC2f8UQwscE6dlLn9ZsWkKS gqV+ThtYGnhdm+tPfm4rGWbSvKp9QlAi9SJLQvAmdHcZbJWIeqjYDtH6sYifxjLX yTRz9kmT030WuY8D3SPOTsI8oCbnvR7O5AsnC+X9O82sufbNU9nO29FFGsvucYnb eRmQ0RF38j/oP5BruzIfwTST6oD4eJkKyan4pSufD7rjgkuKdrajWQKqqT+L1f3K xk3OEi/RQrJd6h6P03iurc38rwP3ONBeWYm53jstZjMX3dFOiq/iUZ9NlMe+wAWx Mr+9rH7Dip9H9y/2ZGs= -----END CERTIFICATE-----Generated at Sun May 3 01:40:39 2026 by rpki-client