$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154790.roa File: AS154790.roa (raw, json) Hash identifier: vfrmtmei64ou3aTHHL5aKW2PORqWhE+B6WEbxXAca/Y= Subject key identifier: 3B:D0:69:6A:DD:31:29:FC:C7:D0:B0:73:B7:8D:43:A4:A7:14:A8:26 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4D8CE00C6D6BFBC676DD72F92CB4E9A510D1D541 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154790.roa Signing time: Wed 09 Sep 2026 04:35:11 +0000 ROA not before: Wed 09 Sep 2026 04:30:11 +0000 ROA not after: Wed 08 Sep 2027 04:35:11 +0000 asID: 154790 IP address blocks: 2001:df7:4b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:8c:e0:0c:6d:6b:fb:c6:76:dd:72:f9:2c:b4:e9:a5:10:d1:d5:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 9 04:30:11 2026 GMT Not After : Sep 8 04:35:11 2027 GMT Subject: CN=3BD0696ADD3129FCC7D0B073B78D43A4A714A826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fd:e2:70:fb:63:bd:3d:2f:1b:cb:ed:1f:70: 46:7d:90:a6:c3:a9:0f:72:b1:86:08:95:e4:c1:72: 68:c9:fa:0c:64:d9:03:0b:5e:01:b6:63:ab:a5:1f: e6:0f:6c:4d:cf:26:f7:9b:84:89:d5:52:48:0a:bd: 8f:42:ff:40:5c:48:63:d2:a8:47:87:6f:9e:3a:c6: 5f:25:3b:ad:0c:b1:0e:dc:30:26:d8:06:52:01:b5: 7f:7d:fb:b3:76:26:16:63:7f:ac:e6:d6:1f:02:d3: 1d:88:53:d4:27:2b:9b:7b:fa:20:bd:8c:96:c5:33: 53:d0:89:bf:57:be:0b:25:69:a9:cf:c7:70:ca:3f: 5d:ac:3f:59:0c:52:34:c5:3b:1d:aa:5a:19:7e:c6: 66:3e:70:5f:41:cb:cd:dc:4e:e4:18:ff:39:ad:02: 5d:5c:4c:32:56:3f:2d:e3:d2:0f:a5:a4:22:2a:c9: 34:82:2e:c8:6f:f5:cb:b3:a2:9b:32:a6:e8:b7:14: cc:08:6d:9d:bc:7e:c0:7c:d8:7d:a9:68:87:27:d3: 58:0f:87:77:55:1d:88:d1:3a:91:36:32:8e:88:93: f1:8b:39:d2:1d:65:7d:63:1f:33:88:f6:eb:be:da: 38:f7:41:0a:24:d8:c0:75:53:87:67:f4:f3:21:bb: 5a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D0:69:6A:DD:31:29:FC:C7:D0:B0:73:B7:8D:43:A4:A7:14:A8:26 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154790.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:4b40::/48 Signature Algorithm: sha256WithRSAEncryption 88:4f:98:97:b2:c1:64:40:67:c9:fa:75:60:51:5d:04:7f:15: 55:48:4c:e9:99:cb:9b:1d:6a:16:9e:db:10:f2:21:91:19:5c: 73:72:31:b0:1c:25:c5:82:d9:4d:7f:2e:1e:11:a9:e4:cb:21: 58:50:60:51:ac:7a:16:84:87:4d:90:46:0e:3f:6d:81:ed:ba: 78:e6:5a:ef:6d:3c:c7:11:82:26:84:93:a7:0a:68:5d:d7:c4: 3b:25:c8:29:52:82:1a:15:11:8b:a1:cc:74:b1:a6:00:1f:31: f6:44:38:69:7e:5f:6c:4b:59:85:5a:6c:fe:29:2d:f1:78:9f: 30:58:ce:7b:18:8d:ab:02:a2:9b:08:9b:ff:fa:f7:a9:30:3f: ce:d9:10:d7:69:d2:26:8a:b1:7a:73:07:a4:1f:d9:41:a5:76: df:c3:72:ff:87:fa:62:a1:57:53:4c:a8:3e:ad:4e:ac:c6:ea: ae:1b:e5:e8:d1:cb:8f:99:90:da:16:8c:f1:82:3c:21:24:95: cd:d0:be:f7:74:1f:07:55:36:26:bb:8d:d4:9a:7a:d4:45:21: cb:43:58:9d:8d:bf:5f:fa:ca:a2:01:4a:88:fa:fa:fc:89:0f: 54:c5:4a:6f:3f:89:1b:e6:26:f9:6f:23:0e:3d:87:1c:a6:de: 37:eb:a6:31 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUTYzgDG1r+8Z23XL5LLTppRDR1UEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkwOTA0MzAxMVoX DTI3MDkwODA0MzUxMVowMzExMC8GA1UEAxMoM0JEMDY5NkFERDMxMjlGQ0M3RDBC MDczQjc4RDQzQTRBNzE0QTgyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK794nD7Y709LxvL7R9wRn2QpsOpD3KxhgiV5MFyaMn6DGTZAwteAbZjq6Uf 5g9sTc8m95uEidVSSAq9j0L/QFxIY9KoR4dvnjrGXyU7rQyxDtwwJtgGUgG1f337 s3YmFmN/rObWHwLTHYhT1Ccrm3v6IL2MlsUzU9CJv1e+CyVpqc/HcMo/Xaw/WQxS NMU7HapaGX7GZj5wX0HLzdxO5Bj/Oa0CXVxMMlY/LePSD6WkIirJNIIuyG/1y7Oi mzKm6LcUzAhtnbx+wHzYfalohyfTWA+Hd1UdiNE6kTYyjoiT8Ys50h1lfWMfM4j2 677aOPdBCiTYwHVTh2f08yG7Wi8CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQ70Glq 3TEp/MfQsHO3jUOkpxSoJjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0NzkwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN90tAMA0GCSqGSIb3DQEBCwUAA4IBAQCIT5iXssFkQGfJ+nVgUV0E fxVVSEzpmcubHWoWntsQ8iGRGVxzcjGwHCXFgtlNfy4eEankyyFYUGBRrHoWhIdN kEYOP22B7bp45lrvbTzHEYImhJOnCmhd18Q7JcgpUoIaFRGLocx0saYAHzH2RDhp fl9sS1mFWmz+KS3xeJ8wWM57GI2rAqKbCJv/+vepMD/O2RDXadImirF6cwekH9lB pXbfw3L/h/pioVdTTKg+rU6sxuquG+Xo0cuPmZDaFozxgjwhJJXN0L73dB8HVTYm u43UmnrURSHLQ1idjb9f+sqiAUqI+vr8iQ9UxUpvP4kb5ib5byMOPYccpt4366Yx -----END CERTIFICATE-----Generated at Thu Sep 17 05:26:22 2026 by rpki-client