$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154778.roa File: AS154778.roa (raw, json) Hash identifier: 7NtHeUMPVvDLZANzR0dl/bnBkWYIPGf9uzHzLSI6QXg= Subject key identifier: C3:81:9C:4E:82:DD:ED:7E:E1:DD:E3:D2:BF:4C:DB:DE:5D:13:2F:9D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6BAA3273F5D02009A244C9DDF160FB88D5F713CE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154778.roa Signing time: Thu 30 Jul 2026 09:23:26 +0000 ROA not before: Thu 30 Jul 2026 09:18:26 +0000 ROA not after: Thu 29 Jul 2027 09:23:26 +0000 asID: 154778 IP address blocks: 2001:df7:4540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:aa:32:73:f5:d0:20:09:a2:44:c9:dd:f1:60:fb:88:d5:f7:13:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jul 30 09:18:26 2026 GMT Not After : Jul 29 09:23:26 2027 GMT Subject: CN=C3819C4E82DDED7EE1DDE3D2BF4CDBDE5D132F9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fd:3e:9a:d8:b9:96:83:04:41:70:2e:82:30: 5e:37:5f:e4:46:e6:e2:e1:9b:fd:c8:75:b8:39:c0: 27:76:0a:f1:fb:d5:0a:75:36:5a:65:c5:6b:3e:69: 1d:94:b9:78:01:81:ea:76:d4:64:b8:8e:b1:b9:29: d0:f6:9a:3d:f0:e8:94:cc:e5:26:2b:df:c3:b4:40: c5:8f:d5:2b:68:4e:c5:0e:39:86:c4:43:3d:bf:f0: af:8f:f7:be:e0:5d:6b:e9:44:8e:98:ab:56:2e:bd: 5b:9a:93:54:a8:cc:d7:17:89:1c:1e:92:36:1a:de: fd:e8:e8:b5:0c:d5:13:4d:c3:70:2a:0f:ef:7a:2b: e9:00:3e:1c:8b:9b:0f:42:8f:91:3e:e6:68:2b:8c: 06:6f:34:eb:50:21:6f:f5:3d:63:05:62:38:f7:ce: e8:f1:3b:14:3c:24:36:bf:6f:17:cb:71:c9:24:36: bd:f6:9e:b4:ba:1b:cc:18:1f:d5:1e:ca:2d:1b:64: 73:b8:82:06:10:c0:04:1e:13:94:49:3e:bf:16:80: 18:df:e0:5b:87:86:ad:10:66:b3:4b:3d:2e:1b:85: 4e:0b:f4:9f:bf:cc:02:af:77:9d:ec:dc:f5:e2:5c: 4c:2c:39:63:cc:94:ad:98:ee:b8:b3:f7:21:92:62: 02:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:81:9C:4E:82:DD:ED:7E:E1:DD:E3:D2:BF:4C:DB:DE:5D:13:2F:9D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154778.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:4540::/48 Signature Algorithm: sha256WithRSAEncryption 16:6f:bf:8a:19:26:bd:0f:1c:3b:f1:2d:17:3d:04:c5:ca:40: 99:ae:c9:63:76:e2:1d:a6:74:cb:61:61:1d:5f:fa:f4:3b:3c: aa:80:4f:b3:5e:23:d3:05:4d:2a:de:41:37:8f:9e:e7:b6:7e: ee:97:e9:ce:3d:9d:2d:8f:24:24:ba:f2:df:9f:c8:51:bb:d2: 84:31:99:12:c6:05:22:ad:ed:d8:74:3e:64:20:d2:0b:40:21: 11:a5:09:38:7d:1d:3f:6f:8c:53:87:a6:81:90:ff:08:09:43: 2a:bf:7c:66:56:a8:88:a1:e5:2d:40:f4:e7:40:53:1a:a5:24: 80:92:d3:9d:e8:1b:dd:3f:80:2f:26:0f:42:01:9d:ce:d8:9e: c2:dd:18:0f:e5:1b:b4:a9:3a:99:af:18:c1:e4:fd:1e:bd:d5: ab:29:93:03:2a:d5:2d:74:a9:03:10:6b:71:c8:b5:a1:2e:d5: 0a:fd:83:25:7c:3c:25:16:95:25:a5:48:ca:3a:9f:27:c1:4a: 9d:3e:9c:9d:9a:04:d1:f2:f1:1f:e6:0f:c3:2a:b3:c7:25:65: e7:3b:7c:ca:52:9b:a0:e8:32:2f:bf:0d:c6:07:bc:b4:ad:28: 55:4e:08:53:36:5e:1c:b9:16:7d:ab:8b:4b:11:71:04:02:e3: 41:44:7a:70 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUa6oyc/XQIAmiRMnd8WD7iNX3E84wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDczMDA5MTgyNloX DTI3MDcyOTA5MjMyNlowMzExMC8GA1UEAxMoQzM4MTlDNEU4MkRERUQ3RUUxRERF M0QyQkY0Q0RCREU1RDEzMkY5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ/9PprYuZaDBEFwLoIwXjdf5Ebm4uGb/ch1uDnAJ3YK8fvVCnU2WmXFaz5p HZS5eAGB6nbUZLiOsbkp0PaaPfDolMzlJivfw7RAxY/VK2hOxQ45hsRDPb/wr4/3 vuBda+lEjpirVi69W5qTVKjM1xeJHB6SNhre/ejotQzVE03DcCoP73or6QA+HIub D0KPkT7maCuMBm8061Ahb/U9YwViOPfO6PE7FDwkNr9vF8txySQ2vfaetLobzBgf 1R7KLRtkc7iCBhDABB4TlEk+vxaAGN/gW4eGrRBms0s9LhuFTgv0n7/MAq93nezc 9eJcTCw5Y8yUrZjuuLP3IZJiAqsCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBTDgZxO gt3tfuHd49K/TNveXRMvnTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0Nzc4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN90VAMA0GCSqGSIb3DQEBCwUAA4IBAQAWb7+KGSa9Dxw78S0XPQTF ykCZrsljduIdpnTLYWEdX/r0OzyqgE+zXiPTBU0q3kE3j57ntn7ul+nOPZ0tjyQk uvLfn8hRu9KEMZkSxgUire3YdD5kINILQCERpQk4fR0/b4xTh6aBkP8ICUMqv3xm VqiIoeUtQPTnQFMapSSAktOd6BvdP4AvJg9CAZ3O2J7C3RgP5Ru0qTqZrxjB5P0e vdWrKZMDKtUtdKkDEGtxyLWhLtUK/YMlfDwlFpUlpUjKOp8nwUqdPpydmgTR8vEf 5g/DKrPHJWXnO3zKUpug6DIvvw3GB7y0rShVTghTNl4cuRZ9q4tLEXEEAuNBRHpw -----END CERTIFICATE-----Generated at Sun Aug 2 14:24:36 2026 by rpki-client