$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154851.roa File: AS154851.roa (raw, json) Hash identifier: PAb6WGkcdjtn54DWZZM20Bf99ZhFsgzX/el9/tKlFg0= Subject key identifier: 7B:9D:6B:D7:87:E4:EF:44:FB:B5:45:47:AF:F0:C8:85:37:45:46:04 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3CD0E5BC704D254CC8ED8BFF8E205E7D443AA35C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154851.roa Signing time: Thu 27 Aug 2026 01:39:26 +0000 ROA not before: Thu 27 Aug 2026 01:34:26 +0000 ROA not after: Thu 26 Aug 2027 01:39:26 +0000 asID: 154851 IP address blocks: 163.52.35.0/24 maxlen: 24 2001:df7:6340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d0:e5:bc:70:4d:25:4c:c8:ed:8b:ff:8e:20:5e:7d:44:3a:a3:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 27 01:34:26 2026 GMT Not After : Aug 26 01:39:26 2027 GMT Subject: CN=7B9D6BD787E4EF44FBB54547AFF0C88537454604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:34:58:a2:b3:de:a6:65:5a:13:ad:74:5c:68: c6:73:9d:59:65:43:a0:68:45:f8:73:40:01:06:79: 63:fe:a5:0e:10:a0:b8:48:cb:20:2a:6b:d5:bf:64: 2e:d4:76:b9:37:74:8c:a6:2c:5e:9f:9e:19:09:15: ab:53:fa:29:26:01:6c:49:19:c1:2d:54:27:61:bb: 91:95:49:28:50:d4:d8:bf:0c:76:40:78:a8:7f:9e: 11:eb:26:78:00:1e:88:d0:87:32:8b:3f:78:59:3b: 30:29:2f:14:5c:76:0c:1f:e6:cb:f8:87:13:c6:5a: 64:55:5a:51:da:78:59:c1:96:eb:3b:e6:e2:a9:ff: 41:10:08:88:da:54:ab:b2:29:63:2f:bb:38:93:70: 0d:d6:bc:43:34:0d:c7:63:37:e8:89:34:d2:19:0b: 6f:38:54:ed:4c:0e:d4:5c:28:fb:32:86:b5:5c:70: 5c:32:34:b7:43:89:d0:01:b2:ff:70:b0:52:13:4e: 5e:e3:07:85:de:f3:d1:29:73:b7:91:f8:39:4a:c5: 5f:19:83:9e:27:ce:66:90:55:e7:47:e4:0a:33:d0: c4:57:ae:b4:12:9d:b0:d6:86:66:50:95:6f:f6:b6: 82:fe:89:73:d2:9b:d8:b3:e2:81:1a:22:1d:2a:54: 8a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:9D:6B:D7:87:E4:EF:44:FB:B5:45:47:AF:F0:C8:85:37:45:46:04 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154851.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.35.0/24 IPv6: 2001:df7:6340::/48 Signature Algorithm: sha256WithRSAEncryption 21:07:9e:ee:34:d0:00:26:82:73:67:5f:cd:04:2a:7a:0c:89: 4a:b7:c6:d1:14:19:b9:48:79:b0:33:9f:ad:3a:f8:ec:e5:1f: 85:b5:2d:05:93:a2:45:98:97:40:6d:a0:aa:91:28:ce:13:32: 97:e4:4e:19:0b:2b:5d:53:cf:d1:c7:88:62:bd:72:20:6d:2b: 4a:97:05:dd:39:e2:ca:13:0f:12:5b:29:e6:70:45:5f:a9:40: 05:6f:4c:84:ca:49:64:6e:82:e7:4c:f4:17:af:00:95:4e:2e: a5:24:97:1c:88:04:52:48:9d:4c:9f:a3:d9:08:a7:de:ab:47: 79:c2:74:73:cf:76:37:aa:6f:bc:15:17:0a:6e:a6:05:59:f3: 8a:40:e1:21:87:10:14:f3:70:47:56:c7:aa:d7:77:c0:1d:79: d7:79:76:79:ae:aa:b4:2b:16:65:bc:46:3f:c9:6d:ce:8c:74: 46:8e:7f:db:54:30:33:32:80:11:48:28:6f:e2:0c:e4:e0:5a: 3c:49:b4:92:f6:25:65:2f:a2:e8:c5:b8:2a:99:81:d5:13:c5: 61:69:af:72:76:4b:7d:6d:08:09:2a:51:37:bf:02:ea:72:52: 8b:1d:ad:5b:cd:be:65:f7:4d:b6:32:5f:cc:a5:37:d3:5c:6b: 22:62:6a:f0 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUPNDlvHBNJUzI7Yv/jiBefUQ6o1wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgyNzAxMzQyNloX DTI3MDgyNjAxMzkyNlowMzExMC8GA1UEAxMoN0I5RDZCRDc4N0U0RUY0NEZCQjU0 NTQ3QUZGMEM4ODUzNzQ1NDYwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN00WKKz3qZlWhOtdFxoxnOdWWVDoGhF+HNAAQZ5Y/6lDhCguEjLICpr1b9k LtR2uTd0jKYsXp+eGQkVq1P6KSYBbEkZwS1UJ2G7kZVJKFDU2L8MdkB4qH+eEesm eAAeiNCHMos/eFk7MCkvFFx2DB/my/iHE8ZaZFVaUdp4WcGW6zvm4qn/QRAIiNpU q7IpYy+7OJNwDda8QzQNx2M36Ik00hkLbzhU7UwO1Fwo+zKGtVxwXDI0t0OJ0AGy /3CwUhNOXuMHhd7z0Slzt5H4OUrFXxmDnifOZpBV50fkCjPQxFeutBKdsNaGZlCV b/a2gv6Jc9Kb2LPigRoiHSpUin8CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBR7nWvX h+TvRPu1RUev8MiFN0VGBDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0ODUxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAozQjMA8EAgACMAkDBwAgAQ33Y0AwDQYJKoZIhvcNAQELBQADggEBACEH nu400AAmgnNnX80EKnoMiUq3xtEUGblIebAzn606+OzlH4W1LQWTokWYl0BtoKqR KM4TMpfkThkLK11Tz9HHiGK9ciBtK0qXBd054soTDxJbKeZwRV+pQAVvTITKSWRu gudM9BevAJVOLqUklxyIBFJInUyfo9kIp96rR3nCdHPPdjeqb7wVFwpupgVZ84pA 4SGHEBTzcEdWx6rXd8Adedd5dnmuqrQrFmW8Rj/Jbc6MdEaOf9tUMDMygBFIKG/i DOTgWjxJtJL2JWUvoujFuCqZgdUTxWFpr3J2S31tCAkqUTe/AupyUosdrVvNvmX3 TbYyX8ylN9NcayJiavA= -----END CERTIFICATE-----Generated at Thu Sep 17 06:28:20 2026 by rpki-client