$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154852.roa File: AS154852.roa (raw, json) Hash identifier: hkWtkErIs9i7XjtrvNMQaJca9RMrWEEP+sF8kkLs3kE= Subject key identifier: 89:7F:D8:00:43:DF:AF:63:5B:7D:53:D3:66:8F:97:3F:D4:59:63:90 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4B8CCC083EAE747B688977B5766E7CD5B4CFB86E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154852.roa Signing time: Thu 20 Aug 2026 03:52:09 +0000 ROA not before: Thu 20 Aug 2026 03:47:09 +0000 ROA not after: Thu 19 Aug 2027 03:52:09 +0000 asID: 154852 IP address blocks: 2001:df7:5fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:8c:cc:08:3e:ae:74:7b:68:89:77:b5:76:6e:7c:d5:b4:cf:b8:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 20 03:47:09 2026 GMT Not After : Aug 19 03:52:09 2027 GMT Subject: CN=897FD80043DFAF635B7D53D3668F973FD4596390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:22:53:4d:7f:fe:be:20:c2:80:5a:38:a7:ed: 2d:16:13:71:91:42:7a:4b:c5:a0:70:b3:fe:7f:e2: a0:51:e5:99:90:49:27:36:8a:ce:2f:48:50:ad:71: dd:fa:ca:45:19:d7:4c:cc:05:fe:2a:64:6a:3e:df: d8:6e:06:b2:00:8a:04:eb:38:54:f5:6b:f9:28:69: 56:fe:6d:9a:cb:d6:0a:90:15:55:b2:53:8c:1e:99: 29:6c:8c:32:44:73:5e:a4:45:e8:eb:44:0b:da:e0: b6:b6:3f:4b:41:41:9c:df:32:95:cf:58:0c:2e:da: ef:d7:e8:e9:3c:b9:2d:20:0d:67:b4:1a:70:b9:c5: dc:2a:87:a5:d0:f4:3a:57:cc:c5:81:57:3d:48:01: 01:45:9d:ac:38:32:78:8a:92:a7:38:b7:2b:70:6f: 48:a2:66:df:4e:63:9d:6e:40:d5:ba:b1:f2:a3:26: e9:0d:63:35:03:80:45:41:25:76:70:d1:f8:9a:6a: 78:d0:9a:ac:51:88:6b:61:08:cc:01:55:b0:79:d9: 6b:4c:0c:6d:7c:40:f2:fb:68:bd:5a:b7:6d:86:31: 94:61:54:09:05:e3:41:ca:49:f2:b1:f8:fa:af:01: 4e:e9:b0:77:64:30:64:46:40:39:5e:44:44:40:1d: 2d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7F:D8:00:43:DF:AF:63:5B:7D:53:D3:66:8F:97:3F:D4:59:63:90 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154852.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:5fc0::/48 Signature Algorithm: sha256WithRSAEncryption 8b:67:3f:bb:79:a4:52:78:fb:54:86:26:71:12:f7:bb:fb:63: 1d:9b:1f:7f:8a:05:e0:60:1d:b5:01:e4:92:c4:9d:14:69:81: f8:b1:57:00:36:86:39:1f:1e:ff:1a:44:e6:dd:1b:72:1d:6d: 0a:7b:7e:1a:77:ad:ea:d8:25:b8:49:ee:95:a2:86:31:61:6b: 0e:54:f6:c3:0c:ad:a4:ca:30:27:7c:05:67:41:ec:84:bc:73: ec:61:c4:31:78:98:07:7c:ee:ab:cc:d7:da:36:4e:e5:45:45: d4:22:23:0a:7d:7c:85:16:99:b2:1e:19:7f:84:eb:ff:67:1f: 38:3d:25:ba:3c:29:80:39:90:60:dd:45:da:39:b4:9f:84:4e: f3:f4:a3:67:fc:00:45:54:14:73:a8:ef:ba:d3:29:09:2a:ab: 31:4e:ec:12:90:ce:8c:3e:59:59:fb:b3:d1:04:15:29:1b:bf: bc:09:dd:de:ed:a8:c1:b6:e6:b4:ca:c5:52:5c:21:3d:31:19: a2:95:34:9d:a6:7c:4a:ea:d2:dc:49:5c:ea:1b:0e:a2:19:85: 83:d1:98:5c:eb:5e:93:a5:a5:19:65:f7:c6:e1:96:c2:4a:7a: 3e:60:84:73:75:30:7a:37:80:24:14:cc:60:da:05:1b:03:8d: 35:8b:76:f7 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUS4zMCD6udHtoiXe1dm581bTPuG4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgyMDAzNDcwOVoX DTI3MDgxOTAzNTIwOVowMzExMC8GA1UEAxMoODk3RkQ4MDA0M0RGQUY2MzVCN0Q1 M0QzNjY4Rjk3M0ZENDU5NjM5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM8iU01//r4gwoBaOKftLRYTcZFCekvFoHCz/n/ioFHlmZBJJzaKzi9IUK1x 3frKRRnXTMwF/ipkaj7f2G4GsgCKBOs4VPVr+ShpVv5tmsvWCpAVVbJTjB6ZKWyM MkRzXqRF6OtEC9rgtrY/S0FBnN8ylc9YDC7a79fo6Ty5LSANZ7QacLnF3CqHpdD0 OlfMxYFXPUgBAUWdrDgyeIqSpzi3K3BvSKJm305jnW5A1bqx8qMm6Q1jNQOARUEl dnDR+JpqeNCarFGIa2EIzAFVsHnZa0wMbXxA8vtovVq3bYYxlGFUCQXjQcpJ8rH4 +q8BTumwd2QwZEZAOV5EREAdLWECAwEAAaOCAc8wggHLMB0GA1UdDgQWBBSJf9gA Q9+vY1t9U9Nmj5c/1FljkDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0ODUyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN91/AMA0GCSqGSIb3DQEBCwUAA4IBAQCLZz+7eaRSePtUhiZxEve7 +2Mdmx9/igXgYB21AeSSxJ0UaYH4sVcANoY5Hx7/GkTm3RtyHW0Ke34ad63q2CW4 Se6VooYxYWsOVPbDDK2kyjAnfAVnQeyEvHPsYcQxeJgHfO6rzNfaNk7lRUXUIiMK fXyFFpmyHhl/hOv/Zx84PSW6PCmAOZBg3UXaObSfhE7z9KNn/ABFVBRzqO+60ykJ KqsxTuwSkM6MPllZ+7PRBBUpG7+8Cd3e7ajBtua0ysVSXCE9MRmilTSdpnxK6tLc SVzqGw6iGYWD0Zhc616TpaUZZffG4ZbCSno+YIRzdTB6N4AkFMxg2gUbA401i3b3 -----END CERTIFICATE-----Generated at Thu Sep 17 05:26:15 2026 by rpki-client