$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154772.roa File: AS154772.roa (raw, json) Hash identifier: HfJsHslE0u7201YhDEov6j6yVGP1oargsv+ymcUHnlk= Subject key identifier: B1:9E:26:76:67:32:D3:95:57:BF:CB:99:61:EE:16:69:67:BB:65:6E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 39CE472C200A916D61A91C2EA4E759E4D107395E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154772.roa Signing time: Thu 30 Jul 2026 01:23:38 +0000 ROA not before: Thu 30 Jul 2026 01:18:38 +0000 ROA not after: Thu 29 Jul 2027 01:23:38 +0000 asID: 154772 IP address blocks: 2001:df7:4340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ce:47:2c:20:0a:91:6d:61:a9:1c:2e:a4:e7:59:e4:d1:07:39:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jul 30 01:18:38 2026 GMT Not After : Jul 29 01:23:38 2027 GMT Subject: CN=B19E26766732D39557BFCB9961EE166967BB656E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:65:de:12:8f:d5:74:b8:c3:3d:f7:3f:03:a8: a1:71:5e:11:45:be:80:68:0e:bb:cb:3f:fb:8c:29: 38:cd:d1:cf:80:66:af:63:61:72:f3:bb:20:39:a0: e2:1e:5a:db:b0:cc:59:13:d0:cd:6b:1a:38:b5:5d: 9c:1c:79:9e:ba:80:c6:7e:c1:96:ba:3f:aa:94:19: bf:16:e6:48:5d:c4:f0:0e:b8:3e:fe:15:a0:b9:d9: da:d7:5c:76:af:8f:dd:1d:6d:93:f9:43:a1:05:05: 40:f5:56:dd:f3:30:2a:b2:cd:f7:54:c6:6e:1e:14: 27:a2:b9:80:41:7f:63:9c:9b:1e:76:0c:0c:75:11: 0e:11:0c:e9:a3:56:d0:66:da:be:ba:ce:25:e6:a4: f0:b9:93:98:a0:8b:f0:95:dc:ea:07:da:0c:23:5c: 68:e3:89:88:79:c7:1d:53:f6:d3:6a:02:f1:39:f5: 9b:c3:9f:55:48:1c:4f:b2:5a:13:c1:53:0a:63:84: b0:7c:ef:a8:5e:f4:d4:38:24:01:ba:60:be:fb:94: f7:8e:a8:80:c5:c9:77:5d:43:21:13:9e:74:e1:74: 0c:0a:5c:05:80:09:8f:73:23:00:71:c1:cb:a8:f5: d5:bb:8d:6e:c9:86:d8:1d:a2:f6:1d:d4:c7:02:6c: 2b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9E:26:76:67:32:D3:95:57:BF:CB:99:61:EE:16:69:67:BB:65:6E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154772.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:4340::/48 Signature Algorithm: sha256WithRSAEncryption 9c:64:79:f8:77:83:ec:d9:b8:fd:1f:00:69:ed:36:19:93:05: 5e:6d:75:84:2e:a0:b1:73:1c:36:84:98:3f:86:ce:ed:f1:ea: 90:7a:9d:4e:73:2b:0d:ae:0f:24:1a:c6:e6:4b:e7:76:09:08: 45:4a:cc:05:a8:16:60:98:af:29:9c:34:d5:b8:33:cd:ee:d0: 91:a9:f9:4b:77:a2:a1:01:1b:47:9d:3f:67:e8:ee:41:e4:ee: 7a:7d:f3:70:99:62:0a:22:ec:e3:4c:fa:68:70:a1:9e:11:61: 55:6d:3f:b0:67:76:82:c1:ed:cc:b2:d4:2c:1c:12:b6:00:57: 01:f4:ab:ff:dd:fa:9f:a4:7a:1a:72:9d:14:ce:ce:95:9c:b6: 20:9b:5f:6b:7a:d9:91:5b:a1:81:28:8e:77:b5:8a:34:e1:f2: 77:92:08:99:db:67:a8:27:3b:c7:0d:96:e2:34:c8:47:39:59: 37:b3:38:9c:64:b6:a3:bc:72:c2:db:d8:16:2a:cb:4f:06:9e: d9:cf:46:b2:fd:21:b8:2c:6e:11:c7:b2:1b:db:c3:1d:c8:44: b0:f1:1c:73:37:c6:86:c7:c5:98:79:89:4e:cb:ad:f0:e5:da: ca:72:95:df:f9:6d:47:21:eb:85:5e:4d:95:7a:14:3e:ad:43: 77:e3:6a:73 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUOc5HLCAKkW1hqRwupOdZ5NEHOV4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDczMDAxMTgzOFoX DTI3MDcyOTAxMjMzOFowMzExMC8GA1UEAxMoQjE5RTI2NzY2NzMyRDM5NTU3QkZD Qjk5NjFFRTE2Njk2N0JCNjU2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZl3hKP1XS4wz33PwOooXFeEUW+gGgOu8s/+4wpOM3Rz4Bmr2NhcvO7IDmg 4h5a27DMWRPQzWsaOLVdnBx5nrqAxn7Blro/qpQZvxbmSF3E8A64Pv4VoLnZ2tdc dq+P3R1tk/lDoQUFQPVW3fMwKrLN91TGbh4UJ6K5gEF/Y5ybHnYMDHURDhEM6aNW 0GbavrrOJeak8LmTmKCL8JXc6gfaDCNcaOOJiHnHHVP202oC8Tn1m8OfVUgcT7Ja E8FTCmOEsHzvqF701DgkAbpgvvuU946ogMXJd11DIROedOF0DApcBYAJj3MjAHHB y6j11buNbsmG2B2i9h3UxwJsK/8CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBSxniZ2 ZzLTlVe/y5lh7hZpZ7tlbjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0NzcyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN90NAMA0GCSqGSIb3DQEBCwUAA4IBAQCcZHn4d4Ps2bj9HwBp7TYZ kwVebXWELqCxcxw2hJg/hs7t8eqQep1OcysNrg8kGsbmS+d2CQhFSswFqBZgmK8p nDTVuDPN7tCRqflLd6KhARtHnT9n6O5B5O56ffNwmWIKIuzjTPpocKGeEWFVbT+w Z3aCwe3MstQsHBK2AFcB9Kv/3fqfpHoacp0Uzs6VnLYgm19retmRW6GBKI53tYo0 4fJ3kgiZ22eoJzvHDZbiNMhHOVk3szicZLajvHLC29gWKstPBp7Zz0ay/SG4LG4R x7Ib28MdyESw8RxzN8aGx8WYeYlOy63w5drKcpXf+W1HIeuFXk2VehQ+rUN342pz -----END CERTIFICATE-----Generated at Sun Aug 2 14:23:48 2026 by rpki-client