$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154798.roa File: AS154798.roa (raw, json) Hash identifier: ump6qjDJI20jcJuRkmb7JEkgtlo/MVhxKHHGHYtYQO8= Subject key identifier: D0:B0:9D:4D:73:DD:E5:39:8A:39:F4:8C:E4:47:EB:57:48:B3:C9:F0 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 078E70BA3041F8CC45EEA7A36D4BF15BDD7207F2 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154798.roa Signing time: Wed 05 Aug 2026 04:03:04 +0000 ROA not before: Wed 05 Aug 2026 03:58:04 +0000 ROA not after: Wed 04 Aug 2027 04:03:04 +0000 asID: 154798 IP address blocks: 2001:df7:4ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:8e:70:ba:30:41:f8:cc:45:ee:a7:a3:6d:4b:f1:5b:dd:72:07:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 5 03:58:04 2026 GMT Not After : Aug 4 04:03:04 2027 GMT Subject: CN=D0B09D4D73DDE5398A39F48CE447EB5748B3C9F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e5:00:f2:7c:c2:fe:55:e3:f8:0f:fb:46:47: 1f:b2:c3:1a:7b:fc:01:23:55:41:d7:53:68:af:26: da:52:af:7a:14:e7:ab:80:80:78:84:5c:49:7a:43: 01:b0:6b:03:db:bd:8f:83:20:0f:20:99:c8:23:7f: 5f:dc:5b:51:9a:2b:3f:db:69:0c:64:bb:e5:eb:7b: 55:dc:20:76:b5:b1:ea:c2:93:f9:e4:78:8f:a9:d9: d6:81:fa:da:e0:2b:5e:8b:ef:64:2d:f1:e2:04:c3: 28:3e:16:f9:5e:fa:70:37:c2:24:cc:cb:27:ad:7f: 62:50:58:4b:05:aa:17:cf:4f:72:45:76:c5:e2:36: ad:42:7a:d2:65:48:7b:27:18:19:6a:21:59:92:78: 66:16:78:64:d8:90:1b:9e:10:e6:57:5b:ea:2d:df: af:1d:b3:1a:aa:12:6b:c1:52:79:73:ad:9f:57:8b: ac:ca:16:34:35:33:e0:ca:32:be:28:b6:84:c3:73: e1:c0:20:2e:5e:7b:e1:56:9a:42:7b:99:92:84:91: 51:b2:92:96:09:01:47:03:81:ff:9d:81:62:06:1c: ce:e0:8d:e8:48:b1:76:52:71:47:96:cc:52:40:98: 9b:f6:75:c2:da:21:6d:27:54:17:77:87:c9:92:83: c5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B0:9D:4D:73:DD:E5:39:8A:39:F4:8C:E4:47:EB:57:48:B3:C9:F0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154798.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:4ec0::/48 Signature Algorithm: sha256WithRSAEncryption 9d:b1:94:63:cc:0c:7c:f5:a1:d9:25:28:5c:4d:3c:46:48:2f: 82:fc:d9:a5:d5:17:7d:b1:50:88:c9:e9:d1:60:50:9a:b7:46: ba:f6:92:8e:20:82:a2:d4:e9:8c:28:bc:c3:8b:20:d5:b6:73: cc:51:dc:8f:55:0a:e6:cc:b6:a7:48:25:9e:2a:8e:fe:0d:47: 71:6c:17:8f:fc:1c:20:88:56:2e:51:63:0c:8f:35:28:3d:03: 12:aa:6c:31:4f:6c:e8:a0:3c:b8:c9:29:b0:3a:52:c2:aa:d1: 4f:11:20:2a:22:20:05:55:56:6b:51:ba:25:29:34:dc:0c:95: 4a:9e:eb:29:2c:f5:36:3b:13:10:43:e3:68:08:d1:e6:50:6c: 01:b2:5c:b4:af:be:67:62:3e:63:16:63:78:61:74:21:ec:02: 08:85:85:68:1c:82:00:bf:9d:f6:31:f7:1c:b4:51:26:95:71: 31:5e:a8:fa:b3:c5:10:00:3e:d3:57:d2:1a:18:b5:28:0f:6c: 9e:77:3e:04:1b:8f:a4:fa:39:aa:41:4a:cb:c2:82:47:95:46: 65:21:04:1d:50:76:ba:a8:14:c3:43:36:32:b4:b3:39:54:0a: 83:14:d6:d9:42:2a:85:59:29:53:48:56:fd:f7:9b:01:56:46: 2b:57:38:2a -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUB45wujBB+MxF7qejbUvxW91yB/IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgwNTAzNTgwNFoX DTI3MDgwNDA0MDMwNFowMzExMC8GA1UEAxMoRDBCMDlENEQ3M0RERTUzOThBMzlG NDhDRTQ0N0VCNTc0OEIzQzlGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALjlAPJ8wv5V4/gP+0ZHH7LDGnv8ASNVQddTaK8m2lKvehTnq4CAeIRcSXpD AbBrA9u9j4MgDyCZyCN/X9xbUZorP9tpDGS75et7VdwgdrWx6sKT+eR4j6nZ1oH6 2uArXovvZC3x4gTDKD4W+V76cDfCJMzLJ61/YlBYSwWqF89PckV2xeI2rUJ60mVI eycYGWohWZJ4ZhZ4ZNiQG54Q5ldb6i3frx2zGqoSa8FSeXOtn1eLrMoWNDUz4Moy vii2hMNz4cAgLl574VaaQnuZkoSRUbKSlgkBRwOB/52BYgYczuCN6EixdlJxR5bM UkCYm/Z1wtohbSdUF3eHyZKDxZECAwEAAaOCAc8wggHLMB0GA1UdDgQWBBTQsJ1N c93lOYo59IzkR+tXSLPJ8DAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0Nzk4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN907AMA0GCSqGSIb3DQEBCwUAA4IBAQCdsZRjzAx89aHZJShcTTxG SC+C/Nml1Rd9sVCIyenRYFCat0a69pKOIIKi1OmMKLzDiyDVtnPMUdyPVQrmzLan SCWeKo7+DUdxbBeP/BwgiFYuUWMMjzUoPQMSqmwxT2zooDy4ySmwOlLCqtFPESAq IiAFVVZrUbolKTTcDJVKnuspLPU2OxMQQ+NoCNHmUGwBsly0r75nYj5jFmN4YXQh 7AIIhYVoHIIAv532MfcctFEmlXExXqj6s8UQAD7TV9IaGLUoD2yedz4EG4+k+jmq QUrLwoJHlUZlIQQdUHa6qBTDQzYytLM5VAqDFNbZQiqFWSlTSFb995sBVkYrVzgq -----END CERTIFICATE-----Generated at Thu Sep 17 05:27:20 2026 by rpki-client