$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154797.roa File: AS154797.roa (raw, json) Hash identifier: f7ZPZ8vcHT65XTL2Ut17F/UpHKzQdtRj3YRU8r8ZmZw= Subject key identifier: 26:A1:AC:63:99:C8:FC:F0:0F:0F:2F:8D:E8:17:8F:F6:83:67:AC:19 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 770C3330331B3D0767522C63594FD6FD6C66F202 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154797.roa Signing time: Mon 28 Sep 2026 02:46:38 +0000 ROA not before: Mon 28 Sep 2026 02:41:38 +0000 ROA not after: Mon 27 Sep 2027 02:46:38 +0000 asID: 154797 IP address blocks: 2001:df7:4e40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:0c:33:30:33:1b:3d:07:67:52:2c:63:59:4f:d6:fd:6c:66:f2:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 28 02:41:38 2026 GMT Not After : Sep 27 02:46:38 2027 GMT Subject: CN=26A1AC6399C8FCF00F0F2F8DE8178FF68367AC19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a3:69:fd:be:4e:f0:a1:55:22:72:16:f7:bc: 30:56:45:e5:da:e2:48:37:e5:8a:18:c8:53:ab:14: b7:5b:3e:92:89:af:d7:5e:43:98:37:f2:48:cb:e0: 32:f8:10:67:1c:e1:32:11:9a:4e:f7:96:b8:ce:89: 1b:a6:7f:b9:1f:83:bb:ea:6b:dc:69:b2:1c:09:27: 44:95:a7:3d:d5:52:c5:cd:26:0a:08:04:9d:57:d5: 78:68:f3:bf:29:c2:b2:94:b6:3a:d6:c3:22:5d:e8: 36:8b:5e:82:87:8c:9e:d0:47:7c:dc:75:3a:fc:db: 32:d9:4e:0d:94:5c:73:ad:1e:01:65:91:71:88:d5: 45:c5:ab:16:e3:94:b2:30:7b:01:f8:6c:25:da:21: b4:95:f4:1e:31:ed:5d:9e:d4:81:68:49:f0:dc:38: ca:b5:40:a4:57:a3:ef:38:a2:ee:c8:cd:ac:af:ee: fc:c3:71:d2:34:c3:9e:33:72:7c:35:23:7b:3a:6a: ba:cd:cb:20:d2:24:d1:bb:a6:64:17:b4:91:55:c9: df:11:4b:ab:89:c4:31:4d:41:ff:f2:d7:3c:46:62: ca:1a:6f:b2:37:c5:48:1a:ea:68:73:69:d8:96:13: c7:32:10:89:17:19:a0:35:be:ee:6d:f9:0f:ac:ca: 4f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A1:AC:63:99:C8:FC:F0:0F:0F:2F:8D:E8:17:8F:F6:83:67:AC:19 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154797.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:4e40::/48 Signature Algorithm: sha256WithRSAEncryption 46:7a:a3:be:76:68:35:3c:68:3e:ef:a6:3c:4f:83:a0:c8:c8: 09:0f:3b:d8:87:73:b7:ca:95:2c:71:a6:e0:b1:df:b2:10:9a: 14:ab:64:cb:d6:e7:1c:4d:2d:21:2e:b6:18:0e:cb:58:17:5a: b6:8b:1a:6e:d3:44:0c:b1:c1:c6:60:fc:9b:4a:84:fb:7d:27: 59:bf:92:c7:a6:35:7e:d7:a3:5b:32:93:95:24:a8:1a:a6:19: f1:69:53:1d:6b:13:54:7a:67:d7:a0:35:e8:42:e1:91:f5:d5: 70:ca:7c:9d:60:6b:4a:c1:c8:aa:c6:7c:41:70:03:87:75:3b: 24:2e:9d:70:f0:84:59:a2:5f:c1:65:f4:2d:34:28:d9:6a:fe: 69:73:f4:48:00:e4:e0:4c:e1:dd:47:62:78:50:c4:cb:3b:20: ce:6c:64:05:7a:ca:5f:3b:cc:0a:66:4d:58:e4:a2:5d:01:04: b0:ba:a3:67:8f:a9:e2:8a:a7:0d:80:88:f1:ff:de:e4:f2:a7: 74:74:65:5d:a4:38:ee:23:14:f3:f6:06:de:07:e1:a6:2e:3e: e9:8b:c7:b3:2c:3b:46:13:06:d4:fe:30:26:fa:e2:66:6b:23: f9:29:6c:ea:11:97:4e:3c:91:c9:7d:50:03:3c:6d:74:7b:7f: 2d:50:30:f2 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUdwwzMDMbPQdnUixjWU/W/Wxm8gIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkyODAyNDEzOFoX DTI3MDkyNzAyNDYzOFowMzExMC8GA1UEAxMoMjZBMUFDNjM5OUM4RkNGMDBGMEYy RjhERTgxNzhGRjY4MzY3QUMxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANCjaf2+TvChVSJyFve8MFZF5driSDflihjIU6sUt1s+komv115DmDfySMvg MvgQZxzhMhGaTveWuM6JG6Z/uR+Du+pr3GmyHAknRJWnPdVSxc0mCggEnVfVeGjz vynCspS2OtbDIl3oNotegoeMntBHfNx1OvzbMtlODZRcc60eAWWRcYjVRcWrFuOU sjB7AfhsJdohtJX0HjHtXZ7UgWhJ8Nw4yrVApFej7zii7sjNrK/u/MNx0jTDnjNy fDUjezpqus3LINIk0bumZBe0kVXJ3xFLq4nEMU1B//LXPEZiyhpvsjfFSBrqaHNp 2JYTxzIQiRcZoDW+7m35D6zKT4MCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQmoaxj mcj88A8PL43oF4/2g2esGTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0Nzk3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN905AMA0GCSqGSIb3DQEBCwUAA4IBAQBGeqO+dmg1PGg+76Y8T4Og yMgJDzvYh3O3ypUscabgsd+yEJoUq2TL1uccTS0hLrYYDstYF1q2ixpu00QMscHG YPybSoT7fSdZv5LHpjV+16NbMpOVJKgaphnxaVMdaxNUemfXoDXoQuGR9dVwynyd YGtKwciqxnxBcAOHdTskLp1w8IRZol/BZfQtNCjZav5pc/RIAOTgTOHdR2J4UMTL OyDObGQFespfO8wKZk1Y5KJdAQSwuqNnj6niiqcNgIjx/97k8qd0dGVdpDjuIxTz 9gbeB+GmLj7pi8ezLDtGEwbU/jAm+uJmayP5KWzqEZdOPJHJfVADPG10e38tUDDy -----END CERTIFICATE-----Generated at Sat Oct 24 07:09:49 2026 by rpki-client