$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154888.roa File: AS154888.roa (raw, json) Hash identifier: YCoEeBXgDJU5BdCom0Pqg+bP+VjKMu/rIYJxlCe55hY= Subject key identifier: 22:56:3E:92:A8:30:A5:F8:4C:1B:FF:08:6D:3E:39:67:BB:32:6F:97 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0A2C7E71EB8DB248FBCB946C017566A83EF76C9B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154888.roa Signing time: Thu 10 Sep 2026 07:21:54 +0000 ROA not before: Thu 10 Sep 2026 07:16:54 +0000 ROA not after: Thu 09 Sep 2027 07:21:54 +0000 asID: 154888 IP address blocks: 163.52.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:2c:7e:71:eb:8d:b2:48:fb:cb:94:6c:01:75:66:a8:3e:f7:6c:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 10 07:16:54 2026 GMT Not After : Sep 9 07:21:54 2027 GMT Subject: CN=22563E92A830A5F84C1BFF086D3E3967BB326F97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6b:ea:b4:2f:32:89:0b:de:3c:5f:76:ce:46: 51:40:77:f7:ee:d2:f0:4d:23:8d:f0:49:c8:a1:f0: a7:22:1f:ca:c0:75:59:9e:80:75:53:62:f3:8d:00: 46:64:ed:8a:23:65:ea:c1:90:45:fd:b3:bb:c0:a0: 54:ee:ae:d7:d5:aa:0e:a5:f1:e5:71:97:2d:dc:0b: 50:59:7d:8f:dc:60:bd:c9:56:d3:13:88:36:ab:53: 2d:2c:06:62:34:a9:83:d2:62:df:f6:2e:9d:f7:4a: ee:d4:64:0d:59:07:59:ed:13:30:dc:48:5b:f4:5b: c3:33:8b:e2:48:b7:ff:08:b8:e6:f6:9c:b4:0b:0a: 41:b4:55:4c:2b:1e:39:47:37:02:fc:e2:f0:02:77: 9d:c2:2d:1d:89:7b:81:6d:fb:e9:70:7e:cd:c1:ff: e9:96:46:f4:c8:ed:3f:eb:97:4d:f9:c6:76:87:f7: 77:9a:b0:ce:e2:0d:20:04:ab:70:dd:bf:8e:d1:a2: f6:ab:ef:29:a5:7f:99:17:8a:fc:ac:05:4d:96:ec: b3:a7:64:79:c4:85:f9:c3:a5:93:d5:e1:54:66:b3: 5b:33:3e:df:8d:ae:d0:8c:76:35:bf:dd:43:20:54: 38:d2:cb:b4:89:da:3a:cd:a7:61:9a:be:53:bc:07: da:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:56:3E:92:A8:30:A5:F8:4C:1B:FF:08:6D:3E:39:67:BB:32:6F:97 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154888.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.122.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:66:2b:23:15:63:8f:59:fc:95:9b:81:ed:0f:cd:e8:5e:ca: c8:d4:f5:13:44:f2:cb:35:cb:db:00:95:a1:25:42:8e:cd:98: a0:85:e2:27:55:57:9a:5d:24:40:50:6e:9c:1b:dd:77:d8:09: b9:7b:a0:56:1c:00:75:21:69:0b:8d:2e:fd:f6:5c:70:81:5d: f0:f7:a8:ff:da:04:2c:a4:03:00:68:41:79:54:c6:37:ca:16: 4a:4a:02:77:66:6a:fe:a7:b5:27:b0:af:db:be:6a:6c:89:2e: ef:cc:b1:ec:76:69:aa:71:ed:e6:d1:5a:1e:84:5b:d8:05:ef: 36:3d:b6:9e:95:aa:78:0e:5b:87:32:23:23:ae:92:7e:0c:71: eb:41:9b:39:4e:52:5e:94:82:26:72:ae:ff:df:f9:75:1a:09: e5:14:82:cb:5d:26:89:15:f6:0c:87:cc:a4:e4:61:40:c6:aa: 90:d7:a3:7e:ff:dc:c7:41:0d:ab:e5:6a:b5:e0:4e:1c:0c:93: 48:18:a2:11:e8:49:cb:7f:e6:e5:1d:7f:1a:fd:f1:23:95:3e: 0b:89:47:24:b3:bf:58:10:1a:0d:19:05:7c:6a:f0:87:26:1f: 32:9b:f1:1f:a8:29:c2:6c:f8:9a:c0:19:fd:0f:cf:7d:ac:19: 91:c4:93:df -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUCix+ceuNskj7y5RsAXVmqD73bJswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkxMDA3MTY1NFoX DTI3MDkwOTA3MjE1NFowMzExMC8GA1UEAxMoMjI1NjNFOTJBODMwQTVGODRDMUJG RjA4NkQzRTM5NjdCQjMyNkY5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOZr6rQvMokL3jxfds5GUUB39+7S8E0jjfBJyKHwpyIfysB1WZ6AdVNi840A RmTtiiNl6sGQRf2zu8CgVO6u19WqDqXx5XGXLdwLUFl9j9xgvclW0xOINqtTLSwG YjSpg9Ji3/YunfdK7tRkDVkHWe0TMNxIW/RbwzOL4ki3/wi45vactAsKQbRVTCse OUc3Avzi8AJ3ncItHYl7gW376XB+zcH/6ZZG9MjtP+uXTfnGdof3d5qwzuINIASr cN2/jtGi9qvvKaV/mReK/KwFTZbss6dkecSF+cOlk9XhVGazWzM+342u0Ix2Nb/d QyBUONLLtInaOs2nYZq+U7wH2mcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQiVj6S qDCl+Ewb/whtPjlnuzJvlzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0ODg4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAozR6MA0GCSqGSIb3DQEBCwUAA4IBAQB7ZisjFWOPWfyVm4HtD83oXsrI 1PUTRPLLNcvbAJWhJUKOzZigheInVVeaXSRAUG6cG9132Am5e6BWHAB1IWkLjS79 9lxwgV3w96j/2gQspAMAaEF5VMY3yhZKSgJ3Zmr+p7UnsK/bvmpsiS7vzLHsdmmq ce3m0VoehFvYBe82Pbaelap4DluHMiMjrpJ+DHHrQZs5TlJelIImcq7/3/l1Ggnl FILLXSaJFfYMh8yk5GFAxqqQ16N+/9zHQQ2r5Wq14E4cDJNIGKIR6EnLf+blHX8a /fEjlT4LiUcks79YEBoNGQV8avCHJh8ym/EfqCnCbPiawBn9D899rBmRxJPf -----END CERTIFICATE-----Generated at Thu Sep 17 05:27:30 2026 by rpki-client