$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154793.roa File: AS154793.roa (raw, json) Hash identifier: cj8BtCCs5rNV9A4WA/yrs/vuQW7UB59pkIZniDOL3+Q= Subject key identifier: 74:12:94:6F:D6:70:A4:E0:B4:8E:B5:20:1B:52:83:9E:30:6D:30:6F Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 36017477377639FC49EC006F8DE7E3F17D532C6C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154793.roa Signing time: Tue 04 Aug 2026 09:48:57 +0000 ROA not before: Tue 04 Aug 2026 09:43:57 +0000 ROA not after: Tue 03 Aug 2027 09:48:57 +0000 asID: 154793 IP address blocks: 2001:df7:4c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:01:74:77:37:76:39:fc:49:ec:00:6f:8d:e7:e3:f1:7d:53:2c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 4 09:43:57 2026 GMT Not After : Aug 3 09:48:57 2027 GMT Subject: CN=7412946FD670A4E0B48EB5201B52839E306D306F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5a:01:28:47:26:41:fa:5c:c5:f1:68:90:ed: d7:cb:33:40:84:d3:40:f2:9b:90:39:fd:8c:3e:eb: 0a:df:11:33:9d:bb:a0:48:27:6d:f6:b9:05:11:6c: 59:4f:02:d5:a1:db:94:fc:ae:a3:aa:46:d2:f7:86: 89:84:6e:bf:70:5e:69:4c:91:f0:b0:cd:f5:ac:4a: a8:f1:5a:92:6e:7a:c1:ed:42:87:26:6e:de:f6:2f: e5:77:cf:e8:db:a6:d0:0f:7b:94:28:91:6d:cb:46: d1:ba:3c:f3:f9:5e:30:9f:27:1f:3c:a4:a5:fb:e9: c6:43:1b:f9:13:17:50:80:d3:14:ad:96:07:f9:60: 21:5d:bc:dc:ad:25:ba:94:5c:28:61:63:fd:1e:95: 64:c2:70:84:7d:f5:10:51:7c:70:0b:4a:92:2d:9d: 1f:86:9c:48:36:08:0c:01:87:8b:b5:4c:f1:70:3d: e6:50:78:08:2f:99:9e:f8:73:db:4c:a0:2f:2c:61: 5a:7e:14:e9:ac:3a:84:7b:07:a3:33:97:d3:67:8d: c1:86:96:f3:46:80:1d:84:36:5a:2f:e1:7a:f0:a6: c6:00:49:2f:2b:cd:17:29:c4:83:26:86:16:52:32: 02:45:bb:a5:4b:cd:f2:f5:28:d1:2f:96:39:f4:d1: 45:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:12:94:6F:D6:70:A4:E0:B4:8E:B5:20:1B:52:83:9E:30:6D:30:6F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154793.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:4c40::/48 Signature Algorithm: sha256WithRSAEncryption 8f:c5:cf:9f:e7:ec:c9:46:fc:b7:79:ea:ed:a7:d9:78:ef:22: 7f:e8:e6:22:83:58:45:ab:fa:e7:e1:f8:e0:a6:38:1b:73:cd: 6d:34:c8:a3:ca:28:1a:62:46:35:12:c7:56:21:c5:c6:08:41: b9:7b:45:80:9f:de:3f:f0:7d:cc:5c:4b:37:32:2e:45:80:74: e0:4d:6c:61:bd:f8:f7:ae:be:15:0f:6a:64:c4:da:f7:49:aa: 6c:35:96:cf:d4:6a:d7:ba:ea:fa:5d:ca:09:13:bb:af:3d:94: 48:e6:ad:88:1a:bb:37:8a:39:6c:a6:19:5b:10:bd:88:67:6e: c0:b2:94:ff:87:6d:96:4f:c6:e0:a9:46:a7:62:ed:de:41:9f: 12:35:0d:12:8c:7b:5e:c9:fb:ad:9a:67:f4:7f:c8:e1:b8:7b: ec:48:3d:b6:06:7a:35:8f:ad:24:0a:0b:8e:ec:c7:0b:a3:f5: 86:0e:43:21:fc:97:9a:d2:0f:ce:84:1b:17:00:74:2d:ac:ba: 36:7e:84:b5:4c:e0:21:3a:d1:2b:52:96:af:3f:a2:64:63:9d: 20:8b:72:3c:5b:b1:63:a0:7c:fa:9f:f3:89:68:80:66:e9:c7: 69:f1:5b:03:4c:db:2c:29:6b:ae:e3:98:6f:a6:02:f4:d3:9a: 23:ba:9d:b5 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUNgF0dzd2OfxJ7ABvjefj8X1TLGwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgwNDA5NDM1N1oX DTI3MDgwMzA5NDg1N1owMzExMC8GA1UEAxMoNzQxMjk0NkZENjcwQTRFMEI0OEVC NTIwMUI1MjgzOUUzMDZEMzA2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALdaAShHJkH6XMXxaJDt18szQITTQPKbkDn9jD7rCt8RM527oEgnbfa5BRFs WU8C1aHblPyuo6pG0veGiYRuv3BeaUyR8LDN9axKqPFakm56we1ChyZu3vYv5XfP 6Num0A97lCiRbctG0bo88/leMJ8nHzykpfvpxkMb+RMXUIDTFK2WB/lgIV283K0l upRcKGFj/R6VZMJwhH31EFF8cAtKki2dH4acSDYIDAGHi7VM8XA95lB4CC+Znvhz 20ygLyxhWn4U6aw6hHsHozOX02eNwYaW80aAHYQ2Wi/hevCmxgBJLyvNFynEgyaG FlIyAkW7pUvN8vUo0S+WOfTRRdECAwEAAaOCAc8wggHLMB0GA1UdDgQWBBR0EpRv 1nCk4LSOtSAbUoOeMG0wbzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0NzkzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN90xAMA0GCSqGSIb3DQEBCwUAA4IBAQCPxc+f5+zJRvy3eertp9l4 7yJ/6OYig1hFq/rn4fjgpjgbc81tNMijyigaYkY1EsdWIcXGCEG5e0WAn94/8H3M XEs3Mi5FgHTgTWxhvfj3rr4VD2pkxNr3SapsNZbP1GrXuur6XcoJE7uvPZRI5q2I Grs3ijlsphlbEL2IZ27AspT/h22WT8bgqUanYu3eQZ8SNQ0SjHteyfutmmf0f8jh uHvsSD22Bno1j60kCguO7McLo/WGDkMh/Jea0g/OhBsXAHQtrLo2foS1TOAhOtEr UpavP6JkY50gi3I8W7FjoHz6n/OJaIBm6cdp8VsDTNssKWuu45hvpgL005ojup21 -----END CERTIFICATE-----Generated at Thu Sep 17 05:27:00 2026 by rpki-client