$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154789.roa File: AS154789.roa (raw, json) Hash identifier: fbHhTmk/4iK5xGsiN075hER0+eg24nmHmGtR2BzjgZ8= Subject key identifier: AA:B0:D1:1A:05:9B:0F:A2:23:AE:D8:41:8D:15:A2:DF:D6:BB:61:3B Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 481E693DF43529D9306A34809FE17E7C73E9C9EF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154789.roa Signing time: Mon 03 Aug 2026 04:55:19 +0000 ROA not before: Mon 03 Aug 2026 04:50:19 +0000 ROA not after: Mon 02 Aug 2027 04:55:19 +0000 asID: 154789 IP address blocks: 2001:df7:4ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:1e:69:3d:f4:35:29:d9:30:6a:34:80:9f:e1:7e:7c:73:e9:c9:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 3 04:50:19 2026 GMT Not After : Aug 2 04:55:19 2027 GMT Subject: CN=AAB0D11A059B0FA223AED8418D15A2DFD6BB613B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0b:ac:b1:bc:95:b4:de:d8:53:fe:b9:2c:d5: c1:eb:01:0d:2c:34:c5:fa:dd:06:c8:4c:47:91:ef: 20:1c:b5:a4:88:dd:6c:48:16:4e:ad:1d:45:5b:66: 88:ec:77:06:9c:34:10:2c:74:b2:41:07:60:86:7a: b2:44:a0:0f:f0:b1:70:6f:7a:1b:31:61:98:14:52: 36:95:7b:9c:ea:cd:87:1c:bc:61:f1:50:7d:49:55: 9a:cb:f9:4a:1b:7f:0a:77:d5:fb:de:b9:06:2a:51: 57:42:26:fe:5d:62:d0:e4:be:c1:1c:1c:41:38:9f: 98:05:2c:b7:b6:d3:26:05:d8:e6:95:c3:6f:a4:ee: 06:7d:05:f1:26:cc:60:8e:1c:3c:b3:d1:49:28:80: 9d:ff:99:1b:64:fa:e6:99:dd:73:69:f2:5e:17:b4: a4:c7:4d:d6:42:c0:c6:bf:4e:61:c9:e4:16:ec:35: f3:97:80:f5:62:5d:36:b1:af:74:3c:f5:61:57:79: 43:3c:5a:2d:75:2c:79:98:6e:4b:17:66:ca:49:dd: b6:f9:63:d5:f8:9a:b0:44:10:6b:8f:ea:f3:7d:6a: 90:d7:1b:84:8c:f3:61:fd:18:8b:23:46:48:8c:33: 13:3a:60:ad:e2:cf:d4:47:9c:d2:d3:2b:93:4e:8f: 55:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B0:D1:1A:05:9B:0F:A2:23:AE:D8:41:8D:15:A2:DF:D6:BB:61:3B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154789.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:4ac0::/48 Signature Algorithm: sha256WithRSAEncryption 81:de:1f:8f:0d:87:40:05:62:31:a1:3d:02:5c:1c:8c:fe:9d: 6c:23:ea:34:8b:91:45:a2:e9:f0:b4:b1:b4:79:bb:18:f2:e8: c3:e2:99:dd:93:69:28:fa:e9:50:a1:5f:d0:6b:df:e8:91:4c: 6e:f6:00:5d:c5:1f:21:3e:5b:10:27:d7:80:a6:cb:6b:57:76: fa:e7:1e:7d:b2:87:10:8c:91:59:77:42:03:fa:5a:26:49:1c: 6f:66:dc:81:d6:7d:59:92:da:bc:63:ad:61:70:55:f1:e3:b3: 2f:90:c1:78:ba:08:9f:46:f8:a3:2a:2b:53:74:84:a8:ad:09: f8:c8:b3:a5:4f:cb:b4:1d:f0:ca:d9:71:03:a8:2e:2d:e4:66: 19:8a:db:8f:5e:11:1c:b5:f0:f4:74:0d:2c:41:2b:0f:c8:7f: 28:24:02:62:83:f2:83:5e:76:dd:c3:5f:31:ff:bb:69:64:0d: 07:ce:2f:6a:92:69:87:1f:8a:13:a3:83:25:df:72:0d:9f:be: 40:3e:6b:26:48:29:6b:7f:b7:fc:e1:e6:d7:83:3d:68:5b:1f: 3f:ed:ec:f6:a8:ac:36:82:f6:df:f8:f7:bc:7b:5e:ae:28:1a: 78:ea:3e:9c:ea:e6:20:2e:86:e2:46:b9:9a:d5:7c:e9:03:ae: bb:e8:64:cb -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUSB5pPfQ1KdkwajSAn+F+fHPpye8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgwMzA0NTAxOVoX DTI3MDgwMjA0NTUxOVowMzExMC8GA1UEAxMoQUFCMEQxMUEwNTlCMEZBMjIzQUVE ODQxOEQxNUEyREZENkJCNjEzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKgLrLG8lbTe2FP+uSzVwesBDSw0xfrdBshMR5HvIBy1pIjdbEgWTq0dRVtm iOx3Bpw0ECx0skEHYIZ6skSgD/CxcG96GzFhmBRSNpV7nOrNhxy8YfFQfUlVmsv5 Sht/CnfV+965BipRV0Im/l1i0OS+wRwcQTifmAUst7bTJgXY5pXDb6TuBn0F8SbM YI4cPLPRSSiAnf+ZG2T65pndc2nyXhe0pMdN1kLAxr9OYcnkFuw185eA9WJdNrGv dDz1YVd5QzxaLXUseZhuSxdmykndtvlj1fiasEQQa4/q831qkNcbhIzzYf0YiyNG SIwzEzpgreLP1Eec0tMrk06PVW8CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBSqsNEa BZsPoiOu2EGNFaLf1rthOzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0Nzg5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN90rAMA0GCSqGSIb3DQEBCwUAA4IBAQCB3h+PDYdABWIxoT0CXByM /p1sI+o0i5FFounwtLG0ebsY8ujD4pndk2ko+ulQoV/Qa9/okUxu9gBdxR8hPlsQ J9eApstrV3b65x59socQjJFZd0ID+lomSRxvZtyB1n1Zktq8Y61hcFXx47MvkMF4 ugifRvijKitTdISorQn4yLOlT8u0HfDK2XEDqC4t5GYZituPXhEctfD0dA0sQSsP yH8oJAJig/KDXnbdw18x/7tpZA0Hzi9qkmmHH4oTo4Ml33INn75APmsmSClrf7f8 4ebXgz1oWx8/7ez2qKw2gvbf+Pe8e16uKBp46j6c6uYgLobiRrma1XzpA6676GTL -----END CERTIFICATE-----Generated at Thu Sep 17 04:37:18 2026 by rpki-client