$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154865.roa File: AS154865.roa (raw, json) Hash identifier: aXdViNtz9gcTOeuV/VUF5+hfSyhqsZiifp5UxUINKoA= Subject key identifier: 43:A3:91:0D:A7:B0:70:9E:CE:83:2A:26:C3:4D:01:9C:48:D0:27:C6 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 38EE43A79B525A61D37EA2A3A3A8D76F4D50ACDC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154865.roa Signing time: Thu 10 Sep 2026 03:35:00 +0000 ROA not before: Thu 10 Sep 2026 03:30:00 +0000 ROA not after: Thu 09 Sep 2027 03:35:00 +0000 asID: 154865 IP address blocks: 163.52.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ee:43:a7:9b:52:5a:61:d3:7e:a2:a3:a3:a8:d7:6f:4d:50:ac:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 10 03:30:00 2026 GMT Not After : Sep 9 03:35:00 2027 GMT Subject: CN=43A3910DA7B0709ECE832A26C34D019C48D027C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e0:7a:05:e4:1b:d9:37:0e:73:54:d8:f0:f4: 80:4c:68:18:fb:3e:c9:d7:7a:cb:74:9b:a3:11:1e: a3:c9:ee:34:13:7d:18:4b:cd:ba:98:8a:60:a2:94: b2:03:b4:35:fb:27:63:e0:5f:ff:3f:7e:ea:6d:65: 62:c5:1e:0d:40:b6:97:dc:6b:fe:4d:f6:3b:9e:f9: 45:80:b4:50:a4:69:71:77:bd:e1:6f:33:b0:5a:d8: 9e:b1:9f:5a:51:af:88:50:37:ff:e1:e6:e1:c8:1b: ab:4a:cf:8f:3e:b7:be:b3:e3:22:1b:42:9e:8f:df: 68:94:2e:87:87:02:ac:96:4b:b0:19:ce:80:d5:79: 16:06:7a:f3:15:0e:12:4b:22:57:3d:a0:78:1d:81: 80:ce:d3:bf:59:99:ed:cf:50:ad:dc:07:e1:a5:4d: c6:b9:91:f1:be:fe:fc:44:f6:60:20:f8:17:a8:91: 1c:27:f0:51:c5:78:40:58:dc:68:31:ff:50:d7:d3: ba:ac:25:0b:47:6b:8f:41:c5:2d:ac:29:3b:7c:a0: f6:15:5c:e4:9c:e3:aa:f2:29:3c:6d:01:01:4a:33: 56:f7:ef:61:62:65:3d:a7:62:96:4c:77:46:e3:5c: a8:d2:cd:01:11:a9:0e:bb:d8:11:4b:d6:be:dc:d2: 44:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A3:91:0D:A7:B0:70:9E:CE:83:2A:26:C3:4D:01:9C:48:D0:27:C6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154865.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.82.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:0c:56:ee:e7:98:ef:10:ad:82:a2:ed:de:45:8d:78:8e:80: 6f:67:62:71:14:9d:a1:03:a4:48:ab:d4:87:7b:70:7d:9e:b0: 18:78:51:a1:0b:ef:73:12:da:59:1c:03:15:01:9f:6d:8d:cd: 04:e0:79:e0:db:0e:55:06:46:de:4e:04:52:1c:f8:b2:08:0d: 08:c9:4f:2f:c9:96:56:2b:7d:03:45:1b:8b:38:a8:bc:5f:34: 06:7b:5a:ca:c0:74:44:c7:3a:a0:ec:b3:db:03:c6:3c:c1:c8: 37:37:3c:c8:c0:b8:56:8d:d9:76:63:7f:61:9d:fa:47:5d:90: a3:d9:c2:bf:e2:62:6c:fa:82:b2:81:3f:48:7c:d6:8a:1f:a4: 62:74:f5:31:c2:5b:34:14:69:1e:fb:64:62:f5:93:1d:32:3e: 76:25:33:8f:74:e9:84:5c:24:44:a5:f1:54:cf:2d:a5:e9:b1: da:ab:4d:ce:a6:28:4d:b4:59:f4:cb:bb:d4:2c:2a:47:5c:67: d4:7f:b6:dd:c4:fa:fe:c1:dc:ce:ac:2f:36:20:1d:f9:3c:f3: 1d:b0:25:28:88:4f:0c:2e:a4:ef:45:da:9d:b0:96:39:d3:42: 25:a3:3e:27:b3:e0:36:ce:60:8d:91:c3:3f:64:ed:00:42:89: 89:cd:6a:f5 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUOO5Dp5tSWmHTfqKjo6jXb01QrNwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkxMDAzMzAwMFoX DTI3MDkwOTAzMzUwMFowMzExMC8GA1UEAxMoNDNBMzkxMERBN0IwNzA5RUNFODMy QTI2QzM0RDAxOUM0OEQwMjdDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJPgegXkG9k3DnNU2PD0gExoGPs+ydd6y3SboxEeo8nuNBN9GEvNupiKYKKU sgO0NfsnY+Bf/z9+6m1lYsUeDUC2l9xr/k32O575RYC0UKRpcXe94W8zsFrYnrGf WlGviFA3/+Hm4cgbq0rPjz63vrPjIhtCno/faJQuh4cCrJZLsBnOgNV5FgZ68xUO EksiVz2geB2BgM7Tv1mZ7c9QrdwH4aVNxrmR8b7+/ET2YCD4F6iRHCfwUcV4QFjc aDH/UNfTuqwlC0drj0HFLawpO3yg9hVc5JzjqvIpPG0BAUozVvfvYWJlPadilkx3 RuNcqNLNARGpDrvYEUvWvtzSRJMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRDo5EN p7Bwns6DKibDTQGcSNAnxjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0ODY1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAozRSMA0GCSqGSIb3DQEBCwUAA4IBAQAaDFbu55jvEK2Cou3eRY14joBv Z2JxFJ2hA6RIq9SHe3B9nrAYeFGhC+9zEtpZHAMVAZ9tjc0E4Hng2w5VBkbeTgRS HPiyCA0IyU8vyZZWK30DRRuLOKi8XzQGe1rKwHRExzqg7LPbA8Y8wcg3NzzIwLhW jdl2Y39hnfpHXZCj2cK/4mJs+oKygT9IfNaKH6RidPUxwls0FGke+2Ri9ZMdMj52 JTOPdOmEXCREpfFUzy2l6bHaq03OpihNtFn0y7vULCpHXGfUf7bdxPr+wdzOrC82 IB35PPMdsCUoiE8MLqTvRdqdsJY500Iloz4ns+A2zmCNkcM/ZO0AQomJzWr1 -----END CERTIFICATE-----Generated at Thu Sep 17 05:29:23 2026 by rpki-client