
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154765.roa
File: AS154765.roa (raw, json)
Hash identifier: cyCrRETf888uJLHjBbBnfNkFeGwcI5MAoqYZpi9vt90=
Subject key identifier: BE:E7:00:02:56:6F:ED:02:9A:90:9D:52:89:5A:54:59:78:56:C3:87
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 6EF76E0E4943196C46378318D595378FA9BE7A
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154765.roa
Signing time: Fri 31 Jul 2026 04:26:28 +0000
ROA not before: Fri 31 Jul 2026 04:21:28 +0000
ROA not after: Fri 30 Jul 2027 04:26:28 +0000
asID: 154765
IP address blocks: 2001:df7:4140::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:f7:6e:0e:49:43:19:6c:46:37:83:18:d5:95:37:8f:a9:be:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Jul 31 04:21:28 2026 GMT
Not After : Jul 30 04:26:28 2027 GMT
Subject: CN=BEE70002566FED029A909D52895A54597856C387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:28:4f:16:fb:a5:27:80:2b:61:33:69:5b:
4a:29:84:01:5b:d4:6f:4a:a0:c9:76:a7:1a:c9:14:
4c:7f:a1:81:12:58:4f:a3:26:13:00:67:21:54:64:
fb:3b:13:d1:c5:80:71:67:51:ee:08:e2:8c:57:2c:
75:ee:ce:17:5e:56:88:a6:c9:e6:69:43:de:21:56:
45:f7:f8:5b:5a:ad:c0:0c:4a:b6:d5:e6:b3:d9:c0:
4d:15:c2:c0:16:71:75:dd:96:b9:c5:8c:ca:12:10:
2c:ba:2e:3d:45:22:70:af:d8:8a:78:23:86:d2:44:
71:97:aa:26:b9:1f:5e:c3:1a:da:09:de:2e:8e:28:
b0:d2:c7:71:7e:ed:58:49:39:96:30:b8:a3:49:30:
ce:4e:06:be:9d:70:29:c0:62:a2:c5:e8:54:42:bf:
73:19:71:a4:34:12:c1:b5:0f:b2:b5:b5:6e:da:1d:
03:88:7f:85:98:dc:27:54:d1:50:6a:a1:5c:b4:05:
77:a9:49:1b:64:6a:6b:8e:93:62:9c:ad:3d:3b:13:
26:72:3a:86:f4:c5:e8:bb:98:a3:42:e8:83:5c:51:
14:6e:67:97:bd:78:b4:2e:36:d8:39:b7:f3:d6:b5:
29:b7:55:1b:17:3a:9c:32:90:90:a9:b8:56:d1:83:
a3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E7:00:02:56:6F:ED:02:9A:90:9D:52:89:5A:54:59:78:56:C3:87
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154765.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:4140::/48
Signature Algorithm: sha256WithRSAEncryption
93:5b:b6:fb:68:28:d4:3b:d2:9a:03:6d:56:cc:4a:0c:5e:81:
66:8d:3b:b2:a9:09:ee:77:1a:35:e1:89:18:60:7b:52:b4:bb:
af:7c:fc:57:1d:d9:01:6e:20:ec:cf:87:cf:2c:1d:c8:e4:6c:
e3:03:d6:ee:ac:38:a8:ab:e7:70:08:10:ed:df:93:34:bb:23:
c2:4c:0b:24:cf:9c:b2:a8:9e:1c:0e:34:6e:c4:4b:38:84:7c:
12:4a:f9:ac:42:48:b9:65:54:21:d9:5a:74:af:c0:6e:84:7e:
c1:f3:3d:40:a4:a2:72:a6:ab:93:81:d3:03:3e:d1:39:7a:40:
4f:10:df:f9:2f:5a:dc:11:9b:c1:c2:e6:36:d8:3a:fb:44:27:
5e:19:8a:94:09:ea:36:6b:fe:30:74:8c:0b:24:8d:bf:41:74:
27:0b:10:c5:f7:7c:8c:c5:09:d3:fb:4c:9e:76:00:ba:b6:86:
94:61:a7:68:3f:4b:9a:72:7c:2d:c2:5f:44:2d:31:86:11:93:
0a:ab:25:ef:b7:99:13:8f:d9:61:d1:41:3e:92:64:7c:37:c6:
43:a3:51:b2:11:0a:ce:5b:18:30:4e:18:ec:73:f4:d7:79:97:
37:3e:08:cf:d0:c7:03:55:d0:68:c3:28:b6:6b:7c:b0:e9:42:
34:68:dd:1d
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgITbvduDklDGWxGN4MY1ZU3j6m+ejANBgkqhkiG9w0BAQsF
ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKDQxOUE4NUNERjhB
NDMwNTE2OTQ2ODY5RDFDNDkyMDM3RDZCQzZFOUUwHhcNMjYwNzMxMDQyMTI4WhcN
MjcwNzMwMDQyNjI4WjAzMTEwLwYDVQQDEyhCRUU3MDAwMjU2NkZFRDAyOUE5MDlE
NTI4OTVBNTQ1OTc4NTZDMzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo4MoTxb7pSeAK2EzaVtKKYQBW9RvSqDJdqcayRRMf6GBElhPoyYTAGchVGT7
OxPRxYBxZ1HuCOKMVyx17s4XXlaIpsnmaUPeIVZF9/hbWq3ADEq21eaz2cBNFcLA
FnF13Za5xYzKEhAsui49RSJwr9iKeCOG0kRxl6omuR9ewxraCd4ujiiw0sdxfu1Y
STmWMLijSTDOTga+nXApwGKixehUQr9zGXGkNBLBtQ+ytbVu2h0DiH+FmNwnVNFQ
aqFctAV3qUkbZGprjpNinK09OxMmcjqG9MXou5ijQuiDXFEUbmeXvXi0LjbYObfz
1rUpt1UbFzqcMpCQqbhW0YOjkwIDAQABo4IBzzCCAcswHQYDVR0OBBYEFL7nAAJW
b+0CmpCdUolaVFl4VsOHMB8GA1UdIwQYMBaAFEGahc34pDBRaUaGnRxJIDfWvG6e
MA4GA1UdDwEB/wQEAwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kt
cnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80MTlBODVDREY4QTQzMDUxNjk0
Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB
BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFGemZpa01GRnBSb2FkSEVrZ045
YThicDQuY2VyMFIGCCsGAQUFBwELBEYwRDBCBggrBgEFBQcwC4Y2cnN5bmM6Ly9y
cGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvQVMxNTQ3NjUucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAgAQ33QUAwDQYJKoZIhvcNAQELBQADggEBAJNbtvtoKNQ70poDbVbMSgxe
gWaNO7KpCe53GjXhiRhge1K0u698/Fcd2QFuIOzPh88sHcjkbOMD1u6sOKir53AI
EO3fkzS7I8JMCyTPnLKonhwONG7ESziEfBJK+axCSLllVCHZWnSvwG6EfsHzPUCk
onKmq5OB0wM+0Tl6QE8Q3/kvWtwRm8HC5jbYOvtEJ14ZipQJ6jZr/jB0jAskjb9B
dCcLEMX3fIzFCdP7TJ52ALq2hpRhp2g/S5pyfC3CX0QtMYYRkwqrJe+3mROP2WHR
QT6SZHw3xkOjUbIRCs5bGDBOGOxz9Nd5lzc+CM/QxwNV0GjDKLZrfLDpQjRo3R0=
-----END CERTIFICATE-----
Generated at Sun Aug 2 14:23:56 2026 by rpki-client