$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154747.roa File: AS154747.roa (raw, json) Hash identifier: K5y6KvogffJ830XmHQL168QPD2/fsUEASOM+DY0Hh3Q= Subject key identifier: 48:65:66:B2:23:8E:C9:0E:53:E7:05:3B:B0:29:E6:3F:51:16:14:40 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3543DBA8B87FC2C644CC1AE0DF273476A0A74C4A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154747.roa Signing time: Tue 06 Oct 2026 02:58:22 +0000 ROA not before: Tue 06 Oct 2026 02:53:22 +0000 ROA not after: Tue 05 Oct 2027 02:58:22 +0000 asID: 154747 IP address blocks: 2001:df6:79c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:43:db:a8:b8:7f:c2:c6:44:cc:1a:e0:df:27:34:76:a0:a7:4c:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 6 02:53:22 2026 GMT Not After : Oct 5 02:58:22 2027 GMT Subject: CN=486566B2238EC90E53E7053BB029E63F51161440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:dd:01:09:97:52:5e:9c:b7:88:40:55:fb:86: ca:ff:6d:e5:d1:63:71:5c:ca:7d:f7:9b:22:cf:e9: 0b:17:f8:d4:68:3a:71:43:d8:fb:6e:a0:90:7a:a7: 1e:99:38:6a:4b:52:e8:5a:5d:42:81:5a:d9:d0:15: 9f:01:db:94:28:3b:46:b4:30:4e:84:19:7a:2a:7c: f0:26:a9:ad:2a:f3:95:76:d8:d3:79:c7:0f:68:62: 2d:d9:34:ab:f8:40:52:da:68:a1:52:e8:8c:b1:56: ca:9f:3e:b1:b3:6c:62:d1:0c:f2:ce:3e:72:5a:9a: 24:91:a5:6f:51:6e:33:e8:37:5f:03:36:e5:87:ae: 72:0f:ed:4c:d1:a5:de:b2:fb:e4:78:df:34:38:66: 04:e3:da:28:44:f8:7e:70:41:69:b6:55:a1:bf:21: 64:1e:1c:86:c8:a1:7e:7c:6e:d7:b2:f6:de:64:82: 54:39:73:b8:09:8a:97:2e:a3:ba:16:7a:77:fc:b7: 0c:75:c2:53:50:b1:b2:4a:a5:aa:b6:90:ae:e7:de: be:1e:a8:80:f2:e5:ae:b4:cf:29:23:f0:85:8f:7f: a3:0d:ea:99:d4:01:c4:e0:fd:d9:07:1e:dc:ab:5c: c4:4f:02:36:5a:70:e8:16:68:cc:be:af:fd:78:d7: d4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:65:66:B2:23:8E:C9:0E:53:E7:05:3B:B0:29:E6:3F:51:16:14:40 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154747.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:79c0::/48 Signature Algorithm: sha256WithRSAEncryption a1:b5:2b:1f:f8:32:58:57:35:53:a3:a8:64:fd:43:cf:0b:76: b0:64:2b:a2:2d:a5:9f:88:63:ee:50:92:5e:13:4c:d7:67:ac: 56:3b:57:23:a9:76:da:2d:53:92:b6:65:96:22:bb:bd:15:6e: 53:8d:54:9e:3c:05:09:78:64:68:eb:1a:f7:1e:2c:d8:8b:5b: 33:13:ad:ee:88:e5:0e:f6:e1:44:17:f3:12:91:df:61:14:71: 2c:4d:d8:78:64:ce:ac:66:31:80:23:fe:55:fb:45:99:aa:84: 72:e0:3a:a1:a3:ad:a7:a7:e6:ea:0d:56:2a:cc:6b:06:7d:c5: e3:81:a3:d6:e7:50:23:2a:7d:89:53:d5:d5:39:63:04:8e:80: df:87:39:08:0f:72:1a:d9:4b:d8:e6:ce:43:5e:1b:56:80:96: 3e:78:f8:fa:2f:10:a3:6b:69:10:51:1e:d5:72:7f:36:4f:8d: ed:c7:41:fd:b0:d7:2e:f2:21:cc:25:a4:68:56:6c:09:d6:fa: ae:4e:89:65:9a:2e:24:65:f5:5c:b0:1b:cc:95:3b:50:9c:4b: 58:de:1e:14:70:4a:14:b6:17:71:39:4d:0b:99:d0:33:fc:8d: d0:00:c2:c4:27:df:7f:9a:d4:2f:31:ab:f1:fa:e6:03:f2:9b: cd:32:dd:5c -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUNUPbqLh/wsZEzBrg3yc0dqCnTEowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAwNjAyNTMyMloX DTI3MTAwNTAyNTgyMlowMzExMC8GA1UEAxMoNDg2NTY2QjIyMzhFQzkwRTUzRTcw NTNCQjAyOUU2M0Y1MTE2MTQ0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMrdAQmXUl6ct4hAVfuGyv9t5dFjcVzKffebIs/pCxf41Gg6cUPY+26gkHqn Hpk4aktS6FpdQoFa2dAVnwHblCg7RrQwToQZeip88CaprSrzlXbY03nHD2hiLdk0 q/hAUtpooVLojLFWyp8+sbNsYtEM8s4+clqaJJGlb1FuM+g3XwM25Yeucg/tTNGl 3rL75HjfNDhmBOPaKET4fnBBabZVob8hZB4chsihfnxu17L23mSCVDlzuAmKly6j uhZ6d/y3DHXCU1CxskqlqraQrufevh6ogPLlrrTPKSPwhY9/ow3qmdQBxOD92Qce 3KtcxE8CNlpw6BZozL6v/XjX1GUCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRIZWay I47JDlPnBTuwKeY/URYUQDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0NzQ3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9nnAMA0GCSqGSIb3DQEBCwUAA4IBAQChtSsf+DJYVzVTo6hk/UPP C3awZCuiLaWfiGPuUJJeE0zXZ6xWO1cjqXbaLVOStmWWIru9FW5TjVSePAUJeGRo 6xr3HizYi1szE63uiOUO9uFEF/MSkd9hFHEsTdh4ZM6sZjGAI/5V+0WZqoRy4Dqh o62np+bqDVYqzGsGfcXjgaPW51AjKn2JU9XVOWMEjoDfhzkID3Ia2UvY5s5DXhtW gJY+ePj6LxCja2kQUR7Vcn82T43tx0H9sNcu8iHMJaRoVmwJ1vquTollmi4kZfVc sBvMlTtQnEtY3h4UcEoUthdxOU0LmdAz/I3QAMLEJ99/mtQvMavx+uYD8pvNMt1c -----END CERTIFICATE-----Generated at Sat Oct 24 07:09:50 2026 by rpki-client