$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154668.roa File: AS154668.roa (raw, json) Hash identifier: NM5xLmKEVjiUwyaHyHjw58tL/TvDd8jQ25wx/8XszMI= Subject key identifier: EB:3F:92:8C:4A:67:71:FB:65:AC:78:AE:8F:4C:AB:D0:DF:4E:A0:0F Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6FF045E70E128807844F194535C23A45EEC24B11 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154668.roa Signing time: Wed 17 Jun 2026 03:07:38 +0000 ROA not before: Wed 17 Jun 2026 03:02:38 +0000 ROA not after: Wed 16 Jun 2027 03:07:38 +0000 asID: 154668 IP address blocks: 163.128.248.0/23 maxlen: 24 2001:df6:f2c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 07:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:f0:45:e7:0e:12:88:07:84:4f:19:45:35:c2:3a:45:ee:c2:4b:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jun 17 03:02:38 2026 GMT Not After : Jun 16 03:07:38 2027 GMT Subject: CN=EB3F928C4A6771FB65AC78AE8F4CABD0DF4EA00F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:65:c8:cc:4f:fc:e6:3f:2b:be:de:3f:b3:15: f9:9d:25:94:ff:cf:92:49:05:d1:38:89:3f:9c:93: c3:b9:0d:85:c9:dd:ef:d6:ec:7d:4d:84:df:e5:97: dc:1c:30:06:0b:75:03:76:0b:c8:93:ad:8f:37:17: 9b:a4:c8:12:be:8d:8a:f2:71:a5:df:ec:d4:03:e7: 76:55:22:d1:ea:45:0a:3e:bf:8a:fc:f9:5a:05:1b: e1:8d:10:f7:91:d7:f6:04:a9:ea:d0:73:15:b9:b4: 43:0b:c8:f5:81:35:b4:25:df:13:38:83:0f:ff:34: 17:2a:5b:54:45:32:b7:37:89:63:2e:be:77:85:96: 5f:cf:60:6b:5c:ec:f0:f9:48:57:b8:45:ad:f2:db: d9:78:f7:ff:96:07:69:e2:c6:b9:f7:d8:51:d0:18: 54:1f:99:a1:20:26:6c:7c:34:4f:bc:1f:9a:33:33: 39:f3:6f:9b:78:e7:9d:56:40:fb:85:45:74:26:eb: 5b:61:db:a9:56:4f:0a:77:91:64:57:85:03:d0:6d: 75:e6:49:fc:04:77:42:bf:e3:2e:c7:f6:0d:32:b0: 12:82:fb:de:ba:57:84:46:5d:83:02:e3:67:4f:e3: 9b:e4:22:07:ef:c9:fe:76:e6:5d:05:48:e4:27:f6: b2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3F:92:8C:4A:67:71:FB:65:AC:78:AE:8F:4C:AB:D0:DF:4E:A0:0F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154668.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.128.248.0/23 IPv6: 2001:df6:f2c0::/48 Signature Algorithm: sha256WithRSAEncryption 90:86:ab:5d:c7:71:e5:0e:5d:c2:cf:51:8c:73:97:ae:9a:67: 74:5c:ba:82:02:ae:07:65:8c:e1:a8:a4:6a:b0:da:95:65:d1: ea:e0:15:20:b5:f0:2c:9b:3a:2d:d3:51:0b:ae:6c:eb:28:2c: cc:df:c3:41:64:d3:1d:24:66:e5:86:59:ce:f2:4c:4e:b4:c9: fe:98:c4:04:e0:a7:5a:b5:0f:72:f2:71:10:1e:a5:8e:0b:05: 02:41:b9:dc:55:18:cc:d6:eb:d5:19:39:ac:3f:f6:ba:da:4d: 19:2f:91:6e:75:47:26:27:67:55:9a:38:b2:4d:9b:54:fa:7b: 3e:04:b0:bf:2f:f8:af:9e:85:94:73:20:5e:f4:8f:05:e1:1e: 99:9b:7b:a4:42:8b:70:41:2e:91:e5:ac:78:eb:f5:9f:6d:61: 0e:9e:ff:68:54:bd:82:32:c3:0b:b4:78:0c:c8:bd:54:09:44: f5:ac:5d:04:de:b9:69:bd:77:f6:7d:1d:b5:46:74:2f:fd:87: 83:cc:47:4b:d1:3a:67:e8:d9:f4:58:85:ba:45:b6:c4:a0:eb: 91:b4:f2:67:3b:d1:b4:6b:40:63:ca:0c:a4:d8:65:8e:71:29: 97:8d:8f:b4:f7:48:2d:36:9c:31:2a:de:44:a0:ed:ce:0a:31: 59:0c:1b:6a -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUb/BF5w4SiAeETxlFNcI6Re7CSxEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDYxNzAzMDIzOFoX DTI3MDYxNjAzMDczOFowMzExMC8GA1UEAxMoRUIzRjkyOEM0QTY3NzFGQjY1QUM3 OEFFOEY0Q0FCRDBERjRFQTAwRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI1lyMxP/OY/K77eP7MV+Z0llP/PkkkF0TiJP5yTw7kNhcnd79bsfU2E3+WX 3BwwBgt1A3YLyJOtjzcXm6TIEr6NivJxpd/s1APndlUi0epFCj6/ivz5WgUb4Y0Q 95HX9gSp6tBzFbm0QwvI9YE1tCXfEziDD/80FypbVEUytzeJYy6+d4WWX89ga1zs 8PlIV7hFrfLb2Xj3/5YHaeLGuffYUdAYVB+ZoSAmbHw0T7wfmjMzOfNvm3jnnVZA +4VFdCbrW2HbqVZPCneRZFeFA9BtdeZJ/AR3Qr/jLsf2DTKwEoL73rpXhEZdgwLj Z0/jm+QiB+/J/nbmXQVI5Cf2sikCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBTrP5KM Smdx+2WseK6PTKvQ306gDzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0NjY4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBo4D4MA8EAgACMAkDBwAgAQ328sAwDQYJKoZIhvcNAQELBQADggEBAJCG q13HceUOXcLPUYxzl66aZ3RcuoICrgdljOGopGqw2pVl0ergFSC18CybOi3TUQuu bOsoLMzfw0Fk0x0kZuWGWc7yTE60yf6YxATgp1q1D3LycRAepY4LBQJBudxVGMzW 69UZOaw/9rraTRkvkW51RyYnZ1WaOLJNm1T6ez4EsL8v+K+ehZRzIF70jwXhHpmb e6RCi3BBLpHlrHjr9Z9tYQ6e/2hUvYIywwu0eAzIvVQJRPWsXQTeuWm9d/Z9HbVG dC/9h4PMR0vROmfo2fRYhbpFtsSg65G08mc70bRrQGPKDKTYZY5xKZeNj7T3SC02 nDEq3kSg7c4KMVkMG2o= -----END CERTIFICATE-----Generated at Sat Jun 20 07:35:10 2026 by rpki-client