$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154818.roa File: AS154818.roa (raw, json) Hash identifier: EZkhJ6GyJNj3pAF1JkQdUkcSRzBBLzdywtSON/elp2w= Subject key identifier: 2C:4B:1B:5B:65:37:7A:84:46:C5:07:F0:62:37:CE:EB:A1:4B:9B:03 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 70D822BCCCA15A1E7ED0A68420B1981B537E1861 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154818.roa Signing time: Wed 12 Aug 2026 04:36:56 +0000 ROA not before: Wed 12 Aug 2026 04:31:56 +0000 ROA not after: Wed 11 Aug 2027 04:36:56 +0000 asID: 154818 IP address blocks: 2001:df7:5840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:d8:22:bc:cc:a1:5a:1e:7e:d0:a6:84:20:b1:98:1b:53:7e:18:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 12 04:31:56 2026 GMT Not After : Aug 11 04:36:56 2027 GMT Subject: CN=2C4B1B5B65377A8446C507F06237CEEBA14B9B03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:14:f5:f2:b7:f6:6b:ff:41:bc:f7:ff:4e:93: 5e:60:c1:8e:bc:3a:59:35:b3:c6:63:40:14:dc:c2: dc:1e:08:e6:3f:f0:9a:96:62:47:0a:a7:64:7d:7d: 67:91:e2:73:f2:71:59:78:05:90:b5:f0:84:98:1e: 7d:74:e6:fe:57:21:44:63:76:dd:f0:c8:7c:80:09: 75:05:30:ab:be:93:0b:68:3f:1e:d7:6d:58:1c:3d: ee:37:61:ca:a7:53:9e:d5:ad:67:dd:3f:4c:0c:14: 82:ac:6e:d2:5b:18:82:0a:4c:19:2f:2f:9b:41:6c: f0:e7:56:18:04:60:da:2b:7b:3c:21:02:fb:04:32: 90:c9:df:3a:54:62:c6:c0:d4:42:cf:e0:01:d8:ea: 33:df:e7:b1:1c:e2:fc:c0:2d:9f:76:f4:db:b6:f1: c1:b0:be:ad:66:d4:f4:f4:32:6e:c3:c7:43:4f:8d: 8c:a1:28:0a:2b:88:9b:b7:32:e3:bd:6d:fc:35:cd: 76:ab:a0:1f:24:dc:e6:5c:35:8e:cf:b7:13:cc:57: 33:af:e0:33:b1:9b:b2:b6:43:14:cf:c9:e0:04:89: 2b:98:e7:50:d4:4e:b2:65:f5:9f:ab:1a:79:18:f2: 87:35:4c:7a:31:bd:a4:2c:a8:d0:88:05:01:80:a9: b7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4B:1B:5B:65:37:7A:84:46:C5:07:F0:62:37:CE:EB:A1:4B:9B:03 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154818.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:5840::/48 Signature Algorithm: sha256WithRSAEncryption 01:f5:8b:7c:78:67:ef:08:58:a2:a1:29:1b:1b:4c:a9:e6:4d: 79:7e:03:bf:df:36:5b:94:3f:f4:b3:77:5f:b7:8a:12:d4:3a: 32:30:e2:a0:5e:a7:28:9b:98:c9:17:69:ec:02:ca:f7:1e:27: 3d:31:d1:27:35:f7:f2:32:25:40:ed:1e:60:cb:da:8a:3d:e5: 08:06:ae:d5:c3:4d:ad:22:6e:e1:cb:44:68:e8:89:ad:15:a8: 3c:be:5a:71:cd:34:65:fa:ba:d2:0b:03:5d:29:f0:50:eb:c0: a6:f5:88:86:ac:24:9d:93:93:aa:ed:05:4b:4f:52:94:f9:cf: fb:9f:d0:a3:b7:a4:de:ee:1f:24:fa:64:4e:c6:09:2c:0d:b6: 19:b0:e7:ff:a0:8c:6b:a0:db:49:86:6b:60:7a:72:a0:f0:01: 52:a0:8b:83:98:87:9b:e8:11:8f:18:ce:9c:9e:ab:3a:b1:ab: 34:be:4e:91:bb:fc:41:7a:28:d2:a8:b9:85:14:56:a0:5b:6e: fd:b5:59:28:f3:b6:ad:fd:1d:04:2f:0b:e5:45:5b:27:16:9d: 38:f3:ee:73:87:7f:bb:0d:01:2b:5c:6e:f4:7d:62:5b:d3:52: b8:a8:1e:f5:b6:f2:de:a8:52:7a:d2:04:9e:75:67:23:c8:e8: e7:d9:eb:7c -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUcNgivMyhWh5+0KaEILGYG1N+GGEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgxMjA0MzE1NloX DTI3MDgxMTA0MzY1NlowMzExMC8GA1UEAxMoMkM0QjFCNUI2NTM3N0E4NDQ2QzUw N0YwNjIzN0NFRUJBMTRCOUIwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4U9fK39mv/Qbz3/06TXmDBjrw6WTWzxmNAFNzC3B4I5j/wmpZiRwqnZH19 Z5Hic/JxWXgFkLXwhJgefXTm/lchRGN23fDIfIAJdQUwq76TC2g/HtdtWBw97jdh yqdTntWtZ90/TAwUgqxu0lsYggpMGS8vm0Fs8OdWGARg2it7PCEC+wQykMnfOlRi xsDUQs/gAdjqM9/nsRzi/MAtn3b027bxwbC+rWbU9PQybsPHQ0+NjKEoCiuIm7cy 471t/DXNdqugHyTc5lw1js+3E8xXM6/gM7GbsrZDFM/J4ASJK5jnUNROsmX1n6sa eRjyhzVMejG9pCyo0IgFAYCpt9kCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQsSxtb ZTd6hEbFB/BiN87roUubAzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0ODE4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN91hAMA0GCSqGSIb3DQEBCwUAA4IBAQAB9Yt8eGfvCFiioSkbG0yp 5k15fgO/3zZblD/0s3dft4oS1DoyMOKgXqcom5jJF2nsAsr3Hic9MdEnNffyMiVA 7R5gy9qKPeUIBq7Vw02tIm7hy0Ro6ImtFag8vlpxzTRl+rrSCwNdKfBQ68Cm9YiG rCSdk5Oq7QVLT1KU+c/7n9Cjt6Te7h8k+mROxgksDbYZsOf/oIxroNtJhmtgenKg 8AFSoIuDmIeb6BGPGM6cnqs6sas0vk6Ru/xBeijSqLmFFFagW279tVko87at/R0E LwvlRVsnFp048+5zh3+7DQErXG70fWJb01K4qB71tvLeqFJ60gSedWcjyOjn2et8 -----END CERTIFICATE-----Generated at Thu Sep 17 05:26:54 2026 by rpki-client