$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154833.roa File: AS154833.roa (raw, json) Hash identifier: uYkcSpfZRcrLODywgUEMN2F8fU2MqyaBiPzHlUKI6Eo= Subject key identifier: 92:E1:DF:3B:DC:68:96:FB:6A:17:C5:08:BD:21:03:DD:1E:4E:80:59 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 25C24C1C8099BA1B133F0EA8EF17EF3A59CC2471 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154833.roa Signing time: Fri 14 Aug 2026 04:14:56 +0000 ROA not before: Fri 14 Aug 2026 04:09:56 +0000 ROA not after: Fri 13 Aug 2027 04:14:56 +0000 asID: 154833 IP address blocks: 203.201.190.0/23 maxlen: 24 2001:df7:5a40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c2:4c:1c:80:99:ba:1b:13:3f:0e:a8:ef:17:ef:3a:59:cc:24:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 14 04:09:56 2026 GMT Not After : Aug 13 04:14:56 2027 GMT Subject: CN=92E1DF3BDC6896FB6A17C508BD2103DD1E4E8059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f5:36:cc:6a:37:79:84:42:96:37:7f:d6:8a: 5e:96:70:c7:c1:3e:5b:b7:bc:25:83:d3:2f:8f:41: 09:b1:ee:ed:8e:2c:ec:4c:61:fc:2a:ea:c0:4a:2c: 2e:3b:3d:18:4e:ff:f3:c2:c5:fb:15:c9:9c:d0:1a: 25:95:e6:b6:16:3f:64:cd:5e:6f:4b:17:13:e0:ea: f2:73:84:ab:fd:74:80:54:e4:21:0e:9d:6b:ad:91: 2e:fa:55:3e:61:af:66:7c:cb:41:c4:e4:a9:ec:90: a8:2f:7b:37:96:97:f7:6a:b2:c6:b4:72:84:a6:89: 29:9b:f9:5b:43:35:0c:a1:33:dd:c0:2a:f8:39:03: ce:c0:63:43:fd:90:0d:cb:4b:57:61:0c:32:e9:b2: 2c:e3:3e:bf:e6:34:33:fe:94:5c:88:a7:47:07:42: 93:67:0f:a1:c8:10:17:82:bf:cf:88:12:41:b4:f8: e9:6a:da:46:81:f4:9a:2e:85:3d:86:f0:e1:10:e4: 5e:8c:86:47:73:9d:4f:d6:22:10:5c:f6:65:a4:25: 99:5c:c0:ff:7b:ee:97:f2:45:d5:09:0f:a6:7d:b1: 85:6f:29:ad:d5:a0:e1:21:d8:59:02:ba:45:d3:e2: 0f:ff:62:9c:b6:64:a0:57:6c:76:ea:6f:a9:57:90: 70:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E1:DF:3B:DC:68:96:FB:6A:17:C5:08:BD:21:03:DD:1E:4E:80:59 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.201.190.0/23 IPv6: 2001:df7:5a40::/48 Signature Algorithm: sha256WithRSAEncryption 33:b1:1c:24:f3:70:00:3b:2e:3e:a6:0e:61:60:23:c8:9d:fc: 68:10:52:69:e9:b0:22:88:22:98:f0:7b:0f:47:cf:9c:25:08: 51:a4:7c:8a:bd:59:98:18:98:15:31:3b:87:b4:4c:e9:7c:33: 17:8f:2f:53:61:49:83:04:b6:26:92:b9:af:6d:30:3c:f8:6e: 4c:ed:84:12:8e:25:b1:88:4d:b0:ef:b4:b6:23:0b:6e:00:06: 1e:73:58:c0:4b:e1:51:cf:05:80:de:90:fa:cb:03:2d:20:39: 2e:47:52:0a:e1:08:e8:1e:37:62:df:a1:d1:58:62:43:c4:23: 85:4c:9f:5a:df:84:a8:68:33:e2:84:a9:08:4d:96:ee:1f:6c: 78:00:50:ab:68:e6:a9:58:37:41:89:63:09:22:a2:fe:9d:99: 64:a9:70:03:9b:ac:be:6d:0e:f8:a8:64:5e:68:4f:a4:65:13: 3a:26:13:cd:27:62:11:4f:be:aa:44:0b:e0:05:80:6b:65:32: e2:5b:61:19:be:e8:c9:32:33:39:53:8c:71:24:52:62:9d:da: 1b:30:6e:1b:27:92:3a:31:36:c3:16:90:2b:45:94:24:fc:40: 39:cb:5e:a5:c6:62:cc:8e:92:cb:4a:08:9d:a5:46:cf:c7:6f: 6c:99:a8:91 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUJcJMHICZuhsTPw6o7xfvOlnMJHEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgxNDA0MDk1NloX DTI3MDgxMzA0MTQ1NlowMzExMC8GA1UEAxMoOTJFMURGM0JEQzY4OTZGQjZBMTdD NTA4QkQyMTAzREQxRTRFODA1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALn1NsxqN3mEQpY3f9aKXpZwx8E+W7e8JYPTL49BCbHu7Y4s7Exh/CrqwEos Ljs9GE7/88LF+xXJnNAaJZXmthY/ZM1eb0sXE+Dq8nOEq/10gFTkIQ6da62RLvpV PmGvZnzLQcTkqeyQqC97N5aX92qyxrRyhKaJKZv5W0M1DKEz3cAq+DkDzsBjQ/2Q DctLV2EMMumyLOM+v+Y0M/6UXIinRwdCk2cPocgQF4K/z4gSQbT46WraRoH0mi6F PYbw4RDkXoyGR3OdT9YiEFz2ZaQlmVzA/3vul/JF1QkPpn2xhW8prdWg4SHYWQK6 RdPiD/9inLZkoFdsdupvqVeQcAECAwEAAaOCAd0wggHZMB0GA1UdDgQWBBSS4d87 3GiW+2oXxQi9IQPdHk6AWTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0ODMzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBy8m+MA8EAgACMAkDBwAgAQ33WkAwDQYJKoZIhvcNAQELBQADggEBADOx HCTzcAA7Lj6mDmFgI8id/GgQUmnpsCKIIpjwew9Hz5wlCFGkfIq9WZgYmBUxO4e0 TOl8MxePL1NhSYMEtiaSua9tMDz4bkzthBKOJbGITbDvtLYjC24ABh5zWMBL4VHP BYDekPrLAy0gOS5HUgrhCOgeN2LfodFYYkPEI4VMn1rfhKhoM+KEqQhNlu4fbHgA UKto5qlYN0GJYwkiov6dmWSpcAObrL5tDvioZF5oT6RlEzomE80nYhFPvqpEC+AF gGtlMuJbYRm+6MkyMzlTjHEkUmKd2hswbhsnkjoxNsMWkCtFlCT8QDnLXqXGYsyO kstKCJ2lRs/Hb2yZqJE= -----END CERTIFICATE-----Generated at Thu Sep 17 04:37:27 2026 by rpki-client