$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154817.roa File: AS154817.roa (raw, json) Hash identifier: HFVij5TJ33mqfSm9fBu99VSdPDQbkwe+Ixuo6Lz2Aok= Subject key identifier: 57:5A:8E:9A:26:0C:9B:44:28:A8:1B:AE:E4:E3:0E:A4:7D:91:E1:42 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1831441D9C6FB580F424CA2DDCF5AF80A68B0A21 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154817.roa Signing time: Fri 14 Aug 2026 08:30:07 +0000 ROA not before: Fri 14 Aug 2026 08:25:07 +0000 ROA not after: Fri 13 Aug 2027 08:30:07 +0000 asID: 154817 IP address blocks: 2001:df7:57c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:31:44:1d:9c:6f:b5:80:f4:24:ca:2d:dc:f5:af:80:a6:8b:0a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 14 08:25:07 2026 GMT Not After : Aug 13 08:30:07 2027 GMT Subject: CN=575A8E9A260C9B4428A81BAEE4E30EA47D91E142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:88:78:82:83:e7:33:7d:06:ef:79:2c:70:62: 05:46:ed:44:a8:a7:c6:45:fe:de:47:83:ed:52:55: eb:43:28:82:99:63:92:00:00:db:4b:57:1c:b6:a2: 3f:e5:83:95:12:d3:12:bb:fc:5f:25:ef:21:61:c8: 4f:87:ed:b1:4d:40:f6:66:7c:f4:f2:64:ca:92:e3: 5b:a8:91:28:8f:cf:5e:6b:4c:9e:87:c3:4e:a4:b5: c5:e5:d8:e8:85:60:72:75:ad:51:9d:f5:f6:4f:57: 0a:4a:b0:a6:84:30:6a:b0:0b:84:de:8b:d7:24:35: 11:14:5b:bc:d3:46:39:7d:67:63:14:22:ae:0a:47: e4:c6:d2:a1:96:1f:13:cb:68:76:88:67:ed:b4:f4: f0:87:53:dd:c4:58:58:7f:0a:78:7f:de:1e:80:95: 7a:d4:44:4f:f6:94:b3:af:96:23:ce:f7:70:68:09: 0b:99:cd:0b:cf:a7:0f:e3:05:d7:1f:b5:83:03:1b: a5:09:ed:1f:a5:99:cf:22:2e:9a:d9:10:cb:ab:9f: 04:d1:d1:75:a2:94:7e:3e:76:85:e6:2e:63:82:3a: 25:1e:db:6a:39:7a:1e:2b:ed:be:d7:11:c9:43:8c: 9b:e8:73:71:64:51:59:af:e4:04:10:0a:5f:b3:ef: 14:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5A:8E:9A:26:0C:9B:44:28:A8:1B:AE:E4:E3:0E:A4:7D:91:E1:42 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154817.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:57c0::/48 Signature Algorithm: sha256WithRSAEncryption 03:5d:ba:9a:a8:66:19:8f:d4:15:1c:19:74:0e:f1:41:68:6b: 7a:1f:d1:b9:50:45:94:89:cd:4c:02:83:96:5e:bc:ce:d2:5d: d4:97:73:9e:7e:63:03:76:ae:fe:e9:49:7f:9d:80:62:eb:60: f6:1f:dc:a7:87:77:1b:bd:46:6e:3d:ba:8b:fb:7a:04:bc:f9: c8:61:19:06:e6:29:fe:b5:0b:8c:14:9c:90:6c:05:9e:c1:55: a2:62:94:8e:fe:dd:87:8a:39:22:b5:3a:1b:34:18:d2:32:18: 83:1a:5f:58:ed:7d:22:4b:55:99:d4:de:84:9f:1c:ff:4b:52: 5f:18:5f:db:1e:ce:af:7c:83:0c:97:60:c4:4d:dc:5a:da:d2: 98:46:92:77:0e:be:d9:83:30:a5:fe:73:2b:3f:25:c6:da:29: f7:d7:27:50:81:04:41:42:b7:91:12:29:6d:3c:7a:e3:d0:f6: 6b:07:76:27:ae:81:8c:02:bb:4d:25:88:30:a7:bd:d8:10:87: ee:c9:4e:e0:6e:1f:5e:a6:92:92:db:e3:cc:7f:c1:81:eb:71: 85:68:00:74:32:e4:ad:db:db:c5:f2:99:88:14:b7:61:0d:c2: b5:36:94:5f:58:fd:42:97:49:07:2d:b2:ac:81:3a:51:39:ac: d8:32:07:bd -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUGDFEHZxvtYD0JMot3PWvgKaLCiEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgxNDA4MjUwN1oX DTI3MDgxMzA4MzAwN1owMzExMC8GA1UEAxMoNTc1QThFOUEyNjBDOUI0NDI4QTgx QkFFRTRFMzBFQTQ3RDkxRTE0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANuIeIKD5zN9Bu95LHBiBUbtRKinxkX+3keD7VJV60MogpljkgAA20tXHLai P+WDlRLTErv8XyXvIWHIT4ftsU1A9mZ89PJkypLjW6iRKI/PXmtMnofDTqS1xeXY 6IVgcnWtUZ319k9XCkqwpoQwarALhN6L1yQ1ERRbvNNGOX1nYxQirgpH5MbSoZYf E8todohn7bT08IdT3cRYWH8KeH/eHoCVetRET/aUs6+WI873cGgJC5nNC8+nD+MF 1x+1gwMbpQntH6WZzyIumtkQy6ufBNHRdaKUfj52heYuY4I6JR7bajl6HivtvtcR yUOMm+hzcWRRWa/kBBAKX7PvFAsCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRXWo6a JgybRCioG67k4w6kfZHhQjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0ODE3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN91fAMA0GCSqGSIb3DQEBCwUAA4IBAQADXbqaqGYZj9QVHBl0DvFB aGt6H9G5UEWUic1MAoOWXrzO0l3Ul3OefmMDdq7+6Ul/nYBi62D2H9ynh3cbvUZu PbqL+3oEvPnIYRkG5in+tQuMFJyQbAWewVWiYpSO/t2HijkitTobNBjSMhiDGl9Y 7X0iS1WZ1N6Enxz/S1JfGF/bHs6vfIMMl2DETdxa2tKYRpJ3Dr7ZgzCl/nMrPyXG 2in31ydQgQRBQreREiltPHrj0PZrB3YnroGMArtNJYgwp73YEIfuyU7gbh9eppKS 2+PMf8GB63GFaAB0MuSt29vF8pmIFLdhDcK1NpRfWP1Cl0kHLbKsgTpROazYMge9 -----END CERTIFICATE-----Generated at Thu Sep 17 05:27:02 2026 by rpki-client