$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154841.roa File: AS154841.roa (raw, json) Hash identifier: IJfdoR20lrK2ILyMW92XoGdL8QkNvEq/7TFfTwHJgMo= Subject key identifier: 78:12:4F:2F:4A:E3:61:5A:43:FB:93:94:AB:E4:FD:40:39:22:EC:66 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 67E02F2102882138707D43A672507A7CEBC35BCE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154841.roa Signing time: Tue 18 Aug 2026 04:12:11 +0000 ROA not before: Tue 18 Aug 2026 04:07:11 +0000 ROA not after: Tue 17 Aug 2027 04:12:11 +0000 asID: 154841 IP address blocks: 163.52.2.0/23 maxlen: 24 2001:df7:5cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e0:2f:21:02:88:21:38:70:7d:43:a6:72:50:7a:7c:eb:c3:5b:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 18 04:07:11 2026 GMT Not After : Aug 17 04:12:11 2027 GMT Subject: CN=78124F2F4AE3615A43FB9394ABE4FD403922EC66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:28:5d:da:a2:ce:d8:12:7f:e8:a4:6b:43:74: b6:54:97:fb:82:1d:f0:5e:f1:52:33:20:d6:c0:8e: f7:4d:f4:e3:1d:8f:61:04:56:5a:2a:c5:74:35:27: 04:1c:db:85:71:44:43:d5:5e:13:8c:5c:89:bf:6a: 4a:82:64:bb:9e:e5:25:6f:18:2e:b9:ba:3f:85:e5: 8e:21:1a:e7:d4:41:87:d7:cc:6d:90:fe:4a:6b:1f: a0:5a:29:02:c9:2f:4d:ad:f1:73:40:17:0d:6f:38: ec:ce:38:d1:e0:08:03:b5:32:96:37:4a:f2:8e:d6: 44:12:84:a1:49:f0:0a:af:2f:d1:e6:8d:44:75:aa: 66:c6:92:f4:d0:d4:e5:49:f7:4c:86:fd:1a:35:ff: e2:ae:92:6d:00:65:51:f4:52:ea:b0:73:e2:2a:8c: d0:41:bf:09:c7:c5:bf:1e:04:b1:4f:1b:1f:74:1b: 1d:b2:f8:5e:07:77:fd:03:92:e4:e5:ce:64:cc:eb: 9a:25:19:d4:0c:7e:fe:ee:1b:4a:69:52:10:75:47: 73:85:0d:7f:38:7d:09:b5:0f:7d:d9:80:39:93:78: 9a:1f:85:03:6e:ea:dd:d5:01:b1:9f:26:b5:ae:2c: 92:dd:aa:3b:f1:a9:86:48:19:96:8d:bc:10:3f:f8: d7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:12:4F:2F:4A:E3:61:5A:43:FB:93:94:AB:E4:FD:40:39:22:EC:66 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154841.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.2.0/23 IPv6: 2001:df7:5cc0::/48 Signature Algorithm: sha256WithRSAEncryption 35:38:a2:e4:15:eb:e4:8f:1f:e7:3e:de:48:1b:39:8f:43:50: f3:73:ab:ce:78:be:6c:33:ca:92:1d:5e:e4:60:33:6c:00:34: 04:f2:20:cb:ae:60:e0:9f:03:54:e2:90:6d:95:91:90:d9:5a: 2f:5f:78:de:95:43:da:51:06:8c:46:58:c2:bb:f5:ca:e5:32: b2:42:17:73:e4:51:5f:63:54:5a:58:8f:c2:af:65:bb:71:8a: e1:83:d1:25:c4:ff:01:99:81:56:ac:8e:37:2c:d1:31:e8:10: 94:e9:dd:9e:a2:0a:da:db:d9:d1:20:ac:fc:74:8d:6b:e7:56: d5:56:55:da:93:ef:48:a3:13:b0:fe:d5:d8:12:84:2e:e7:b1: d6:de:94:63:23:e8:46:07:6b:1e:3f:80:11:ff:22:74:30:43: d3:64:bc:1e:6c:42:5d:be:f5:47:e1:dd:0b:68:35:a3:64:43: 44:81:58:07:69:58:9b:93:21:4d:b1:66:0f:dc:31:db:c6:92: 70:02:80:c5:d6:9b:f9:1e:38:b7:76:66:f7:6d:67:c9:23:93: cb:d6:f6:94:54:2a:5c:64:5b:ae:6b:c2:54:2b:1d:e4:ae:a1: d3:e1:c0:cd:8a:93:bb:9f:09:19:39:e9:79:e1:7c:59:b5:c7: e6:1c:45:14 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUZ+AvIQKIIThwfUOmclB6fOvDW84wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgxODA0MDcxMVoX DTI3MDgxNzA0MTIxMVowMzExMC8GA1UEAxMoNzgxMjRGMkY0QUUzNjE1QTQzRkI5 Mzk0QUJFNEZENDAzOTIyRUM2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKcoXdqiztgSf+ika0N0tlSX+4Id8F7xUjMg1sCO90304x2PYQRWWirFdDUn BBzbhXFEQ9VeE4xcib9qSoJku57lJW8YLrm6P4XljiEa59RBh9fMbZD+SmsfoFop AskvTa3xc0AXDW847M440eAIA7UyljdK8o7WRBKEoUnwCq8v0eaNRHWqZsaS9NDU 5Un3TIb9GjX/4q6SbQBlUfRS6rBz4iqM0EG/CcfFvx4EsU8bH3QbHbL4Xgd3/QOS 5OXOZMzrmiUZ1Ax+/u4bSmlSEHVHc4UNfzh9CbUPfdmAOZN4mh+FA27q3dUBsZ8m ta4skt2qO/GphkgZlo28ED/41/cCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBR4Ek8v SuNhWkP7k5Sr5P1AOSLsZjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0ODQxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBozQCMA8EAgACMAkDBwAgAQ33XMAwDQYJKoZIhvcNAQELBQADggEBADU4 ouQV6+SPH+c+3kgbOY9DUPNzq854vmwzypIdXuRgM2wANATyIMuuYOCfA1TikG2V kZDZWi9feN6VQ9pRBoxGWMK79crlMrJCF3PkUV9jVFpYj8KvZbtxiuGD0SXE/wGZ gVasjjcs0THoEJTp3Z6iCtrb2dEgrPx0jWvnVtVWVdqT70ijE7D+1dgShC7nsdbe lGMj6EYHax4/gBH/InQwQ9NkvB5sQl2+9Ufh3QtoNaNkQ0SBWAdpWJuTIU2xZg/c MdvGknACgMXWm/keOLd2ZvdtZ8kjk8vW9pRUKlxkW65rwlQrHeSuodPhwM2Kk7uf CRk56XnhfFm1x+YcRRQ= -----END CERTIFICATE-----Generated at Thu Sep 17 04:37:03 2026 by rpki-client