$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154889.roa File: AS154889.roa (raw, json) Hash identifier: TqVceZ6wIXb6fGdcLAw9I980E4mHU4OT3yliC+IDl94= Subject key identifier: E3:CC:C4:3E:67:1F:1D:42:9E:27:91:79:06:42:BA:42:97:BF:DD:45 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 75886F58E0E960472E80201595097F1C9D2394EF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154889.roa Signing time: Thu 10 Sep 2026 09:09:35 +0000 ROA not before: Thu 10 Sep 2026 09:04:35 +0000 ROA not after: Thu 09 Sep 2027 09:09:35 +0000 asID: 154889 IP address blocks: 163.52.123.0/24 maxlen: 24 2001:df7:74c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:88:6f:58:e0:e9:60:47:2e:80:20:15:95:09:7f:1c:9d:23:94:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 10 09:04:35 2026 GMT Not After : Sep 9 09:09:35 2027 GMT Subject: CN=E3CCC43E671F1D429E2791790642BA4297BFDD45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fd:8e:47:e8:ba:a9:44:33:30:a3:a0:84:78: 2e:54:11:61:b6:17:17:5b:fe:82:19:d5:74:b0:4d: 9b:c7:2b:00:73:84:58:1e:50:df:a6:60:03:b7:6c: 12:ac:b8:db:38:9c:07:eb:41:6b:3d:ee:5d:69:77: f4:71:ef:fa:14:01:11:76:10:25:6d:88:b0:cc:fa: 7a:b5:a3:76:1f:1b:16:e5:e4:0a:ed:d8:67:6c:c2: 51:81:89:e1:53:4b:06:08:d1:5c:e4:fa:51:3c:be: 33:36:e2:27:61:0d:f0:8a:86:a8:a0:ed:f8:c2:08: a8:6b:f0:2f:95:ab:ce:10:7f:fb:de:d5:e4:01:82: fb:61:b4:48:16:34:32:4a:d6:73:98:bf:de:2a:15: 1f:ac:d2:ac:d6:8c:f7:60:14:32:16:bd:4a:7a:6b: 48:ef:3f:7a:50:f5:64:2d:9b:0b:0c:9e:46:49:65: 0e:4b:1d:5c:32:95:fe:03:2f:c3:13:ec:eb:17:bd: e6:80:b1:3b:b1:02:18:74:ca:a4:23:2b:cc:13:bf: 25:f0:4c:4e:38:a8:31:d9:fe:91:5f:66:d6:ee:14: 07:dc:95:56:2d:fb:5e:cf:76:14:5a:71:7d:38:25: 26:87:48:d3:d4:d3:35:89:03:44:21:3d:a9:f8:dc: c0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CC:C4:3E:67:1F:1D:42:9E:27:91:79:06:42:BA:42:97:BF:DD:45 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154889.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.123.0/24 IPv6: 2001:df7:74c0::/48 Signature Algorithm: sha256WithRSAEncryption 62:fd:e6:9c:64:07:f4:52:7d:01:1c:62:7f:00:bb:8b:3f:f1: 44:c9:ab:26:cd:07:dc:ad:ea:bf:13:4a:2c:58:27:77:d6:1c: a2:ab:55:49:df:24:4e:3b:4f:55:0f:dd:f5:dd:a3:f4:34:9e: 66:5a:15:b1:ec:d8:db:8b:cd:d1:6d:cc:08:33:14:6f:68:38: 12:a6:42:02:63:42:83:e2:44:d3:1f:ee:13:2b:5c:ba:38:f0: 30:bb:62:d7:91:77:cc:67:f9:8b:b1:b5:1c:8b:8e:ba:9c:ea: ff:7b:81:d0:6d:d1:d0:3e:37:7a:c1:66:9c:78:47:ec:3b:fd: 37:93:1b:d5:4f:0c:bc:10:44:bc:21:98:b8:b1:f9:b9:2f:b1: 73:15:e2:af:a3:f3:b6:f7:71:eb:4e:6c:e5:72:58:05:14:db: 07:eb:be:cf:b0:9e:12:62:38:07:c5:c3:8d:d5:c0:ad:8e:1c: ef:c1:a6:70:28:8f:2b:69:e7:22:10:22:f4:1d:26:35:59:d4: 0e:ce:bc:7b:fd:d3:03:4a:46:3e:ac:a4:95:58:e9:d6:ec:55: 0c:aa:b3:b8:b6:f1:9a:c7:66:c6:11:2f:1c:1a:e3:5a:9e:f2: 27:84:36:fc:46:a7:af:11:05:6c:fa:12:31:85:20:ec:2d:bc: 95:22:a5:77 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUdYhvWODpYEcugCAVlQl/HJ0jlO8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkxMDA5MDQzNVoX DTI3MDkwOTA5MDkzNVowMzExMC8GA1UEAxMoRTNDQ0M0M0U2NzFGMUQ0MjlFMjc5 MTc5MDY0MkJBNDI5N0JGREQ0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIr9jkfouqlEMzCjoIR4LlQRYbYXF1v+ghnVdLBNm8crAHOEWB5Q36ZgA7ds Eqy42zicB+tBaz3uXWl39HHv+hQBEXYQJW2IsMz6erWjdh8bFuXkCu3YZ2zCUYGJ 4VNLBgjRXOT6UTy+MzbiJ2EN8IqGqKDt+MIIqGvwL5WrzhB/+97V5AGC+2G0SBY0 MkrWc5i/3ioVH6zSrNaM92AUMha9SnprSO8/elD1ZC2bCwyeRkllDksdXDKV/gMv wxPs6xe95oCxO7ECGHTKpCMrzBO/JfBMTjioMdn+kV9m1u4UB9yVVi37Xs92FFpx fTglJodI09TTNYkDRCE9qfjcwOECAwEAAaOCAd0wggHZMB0GA1UdDgQWBBTjzMQ+ Zx8dQp4nkXkGQrpCl7/dRTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0ODg5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAozR7MA8EAgACMAkDBwAgAQ33dMAwDQYJKoZIhvcNAQELBQADggEBAGL9 5pxkB/RSfQEcYn8Au4s/8UTJqybNB9yt6r8TSixYJ3fWHKKrVUnfJE47T1UP3fXd o/Q0nmZaFbHs2NuLzdFtzAgzFG9oOBKmQgJjQoPiRNMf7hMrXLo48DC7YteRd8xn +YuxtRyLjrqc6v97gdBt0dA+N3rBZpx4R+w7/TeTG9VPDLwQRLwhmLix+bkvsXMV 4q+j87b3cetObOVyWAUU2wfrvs+wnhJiOAfFw43VwK2OHO/BpnAojytp5yIQIvQd JjVZ1A7OvHv90wNKRj6spJVY6dbsVQyqs7i28ZrHZsYRLxwa41qe8ieENvxGp68R BWz6EjGFIOwtvJUipXc= -----END CERTIFICATE-----Generated at Thu Sep 17 04:37:20 2026 by rpki-client