$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154802.roa File: AS154802.roa (raw, json) Hash identifier: Rc9dEV5dzjkBT1L8xC+fCage+GOR7ihFapmqiY9NHKY= Subject key identifier: FE:EC:3F:47:07:0C:EA:B1:AE:76:B9:D6:B5:2B:62:23:3F:73:E5:95 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1985D759F050F39AB23F767A4D356B5002EBA88D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154802.roa Signing time: Fri 14 Aug 2026 08:17:20 +0000 ROA not before: Fri 14 Aug 2026 08:12:20 +0000 ROA not after: Fri 13 Aug 2027 08:17:20 +0000 asID: 154802 IP address blocks: 2001:df7:52c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:85:d7:59:f0:50:f3:9a:b2:3f:76:7a:4d:35:6b:50:02:eb:a8:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 14 08:12:20 2026 GMT Not After : Aug 13 08:17:20 2027 GMT Subject: CN=FEEC3F47070CEAB1AE76B9D6B52B62233F73E595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ae:1f:a6:27:6b:14:45:5b:00:b8:9e:7d:f1: 71:5a:df:c4:76:a2:c5:d5:ae:0a:63:fa:5f:0e:c7: de:1b:c9:45:40:11:4e:0b:4e:9f:cc:78:86:b6:ff: 62:01:49:db:a4:7b:a0:2f:73:2a:f8:10:91:31:5c: 04:ae:33:c4:90:15:ca:c3:25:55:79:15:4c:a9:1d: 44:05:85:82:47:ca:60:a1:4f:09:43:0b:62:2f:33: 29:59:51:0e:ff:11:10:4b:26:0f:0a:14:72:9f:8d: 0c:e2:21:16:69:25:f7:b4:71:69:19:b2:b2:7c:37: 55:71:f5:ad:0b:f8:f4:10:4a:76:61:42:e9:45:77: b1:3e:39:ce:8f:2e:61:35:1e:53:51:32:c7:d8:19: 8c:ae:41:5d:8a:6e:c4:d0:43:47:b0:2f:2a:49:fe: 54:0e:4a:af:4f:d0:2f:c4:c6:d5:bd:c8:fc:99:a5: 6e:2a:b3:5a:15:4b:de:9a:1b:e4:01:75:75:88:83: 40:b0:a2:ad:e9:07:7e:84:c0:99:e2:c6:72:d2:4e: 5d:23:b2:6f:66:08:c7:55:e5:e3:40:69:df:46:2e: 0c:83:63:3b:c6:93:89:7d:89:82:ba:d4:b1:34:39: 80:73:95:3a:dc:43:2d:03:37:6e:1b:e3:eb:57:58: 06:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:EC:3F:47:07:0C:EA:B1:AE:76:B9:D6:B5:2B:62:23:3F:73:E5:95 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154802.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:52c0::/48 Signature Algorithm: sha256WithRSAEncryption 75:16:ce:4f:fe:1c:d8:08:08:15:10:f1:78:60:68:12:72:a4: c4:d8:1a:53:40:7c:07:13:8e:1c:03:cc:46:fd:92:7d:d8:9a: b5:b7:1c:f9:01:5d:f4:12:d4:4c:6e:7a:ea:bb:3b:04:db:d1: 5a:fb:78:b9:bb:7c:ae:d7:6e:b7:f7:22:85:8d:5d:95:08:9d: 93:e6:8d:ee:9f:8d:6b:db:01:6e:53:dd:1c:68:61:8e:cd:8c: b1:31:39:2b:79:d5:aa:fa:e2:27:1e:ca:42:d9:92:c1:d0:1a: 58:41:26:48:fa:c2:1d:d0:83:fb:b4:c2:ca:89:b5:37:bd:03: c6:45:28:b8:7b:5b:a9:23:ed:13:8b:86:fb:23:41:7f:d6:f3: 1a:0b:86:09:20:87:71:17:2c:f0:82:80:21:52:16:0d:1b:72: 5c:cb:43:10:09:91:b4:be:92:71:1a:c9:d7:41:57:14:5d:2f: b5:f5:88:4c:47:7a:ed:4f:29:19:85:99:23:8d:a0:70:63:c5: cb:71:f2:4c:3c:be:b3:6a:fc:46:ab:9a:b9:92:5b:11:44:47: 0c:5c:2e:aa:d3:21:ba:b8:9a:c0:7d:4d:45:f7:51:bd:c4:fb: ea:b5:80:28:a2:ea:00:00:a8:ce:1f:68:76:e3:61:ca:10:76: 7e:ca:a1:2a -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUGYXXWfBQ85qyP3Z6TTVrUALrqI0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgxNDA4MTIyMFoX DTI3MDgxMzA4MTcyMFowMzExMC8GA1UEAxMoRkVFQzNGNDcwNzBDRUFCMUFFNzZC OUQ2QjUyQjYyMjMzRjczRTU5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJGuH6YnaxRFWwC4nn3xcVrfxHaixdWuCmP6Xw7H3hvJRUARTgtOn8x4hrb/ YgFJ26R7oC9zKvgQkTFcBK4zxJAVysMlVXkVTKkdRAWFgkfKYKFPCUMLYi8zKVlR Dv8REEsmDwoUcp+NDOIhFmkl97RxaRmysnw3VXH1rQv49BBKdmFC6UV3sT45zo8u YTUeU1Eyx9gZjK5BXYpuxNBDR7AvKkn+VA5Kr0/QL8TG1b3I/JmlbiqzWhVL3pob 5AF1dYiDQLCirekHfoTAmeLGctJOXSOyb2YIx1Xl40Bp30YuDINjO8aTiX2JgrrU sTQ5gHOVOtxDLQM3bhvj61dYBnsCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBT+7D9H Bwzqsa52uda1K2IjP3PllTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0ODAyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN91LAMA0GCSqGSIb3DQEBCwUAA4IBAQB1Fs5P/hzYCAgVEPF4YGgS cqTE2BpTQHwHE44cA8xG/ZJ92Jq1txz5AV30EtRMbnrquzsE29Fa+3i5u3yu1263 9yKFjV2VCJ2T5o3un41r2wFuU90caGGOzYyxMTkredWq+uInHspC2ZLB0BpYQSZI +sId0IP7tMLKibU3vQPGRSi4e1upI+0Ti4b7I0F/1vMaC4YJIIdxFyzwgoAhUhYN G3Jcy0MQCZG0vpJxGsnXQVcUXS+19YhMR3rtTykZhZkjjaBwY8XLcfJMPL6zavxG q5q5klsRREcMXC6q0yG6uJrAfU1F91G9xPvqtYAoouoAAKjOH2h242HKEHZ+yqEq -----END CERTIFICATE-----Generated at Thu Sep 17 05:26:56 2026 by rpki-client