$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154894.roa File: AS154894.roa (raw, json) Hash identifier: 12sVFA0hxPTsejNJBL7IH3Ej1m3SoXqyJTSg1yy2dK0= Subject key identifier: 63:31:D3:ED:84:92:4A:5A:E0:C9:10:65:DF:C3:57:B0:6F:A3:75:E1 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 40E50A86D69EB52DDD50C4FD0D8FBBB068471E44 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154894.roa Signing time: Thu 10 Sep 2026 01:32:06 +0000 ROA not before: Thu 10 Sep 2026 01:27:06 +0000 ROA not after: Thu 09 Sep 2027 01:32:06 +0000 asID: 154894 IP address blocks: 163.52.133.0/24 maxlen: 24 2001:df7:76c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:e5:0a:86:d6:9e:b5:2d:dd:50:c4:fd:0d:8f:bb:b0:68:47:1e:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 10 01:27:06 2026 GMT Not After : Sep 9 01:32:06 2027 GMT Subject: CN=6331D3ED84924A5AE0C91065DFC357B06FA375E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:87:c2:f6:c2:fb:ae:9b:1d:97:9b:c7:cd:8b: 4f:32:79:5e:9a:70:e6:30:e2:e7:01:e8:fa:4e:d1: 21:bc:c8:bd:4b:74:09:37:ed:32:94:91:da:17:b7: 3d:de:31:66:a0:23:35:1c:24:e8:db:14:ca:02:59: 3d:5d:29:ea:01:92:ac:46:bf:ba:28:a5:d6:f5:62: 71:f3:bc:ca:d9:06:80:cd:e5:dc:82:d3:22:64:eb: 3c:a3:fd:fd:ac:ae:ba:d8:b3:46:01:f5:06:57:de: d4:17:37:58:96:d6:51:85:e9:7d:68:fc:26:bc:62: e6:1b:8f:05:a7:f2:e4:53:0d:83:74:cc:70:37:e1: 0c:af:3e:8e:c4:1d:77:43:65:09:e2:64:1e:07:9b: bd:46:47:90:9f:26:ae:da:0f:24:56:97:1e:ee:15: 95:32:f0:6a:20:6b:cc:51:c2:d7:66:4a:58:b5:52: a9:a2:5c:60:ee:e1:ac:b4:c6:9b:42:a5:5e:8a:3f: a8:13:7b:1f:3d:3b:a9:7e:0e:10:9d:f6:46:47:37: f4:58:95:a8:9a:f0:0d:e4:82:5c:92:14:55:b7:66: 03:2d:af:37:53:84:06:ca:8d:f7:0f:db:7b:c5:1a: e2:8b:67:0b:8b:db:21:27:63:e8:27:69:e2:f2:0e: 39:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:31:D3:ED:84:92:4A:5A:E0:C9:10:65:DF:C3:57:B0:6F:A3:75:E1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154894.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.133.0/24 IPv6: 2001:df7:76c0::/48 Signature Algorithm: sha256WithRSAEncryption 18:e4:af:76:5b:98:71:98:79:ca:75:bf:a2:41:94:bc:12:f9: 23:90:aa:89:b1:61:7c:f8:31:9f:e2:92:c0:d2:d1:f5:88:49: 3e:65:e2:a6:f3:da:a4:cb:f2:81:a4:ba:fa:01:d1:56:90:9b: 63:ea:2e:da:b6:8d:f9:42:be:7a:76:8f:dd:31:ff:21:40:cc: 72:95:c5:3d:57:e8:a6:58:fc:13:fe:90:92:46:53:e6:b6:9a: b2:65:c8:64:73:a9:66:4a:bd:bb:fb:c9:f2:22:f6:0a:ab:92: f3:64:b1:b3:17:35:22:6a:47:41:46:cb:51:c7:11:35:3d:6d: 4f:1d:3a:64:8a:73:e6:24:01:a7:c0:c6:db:cc:b4:26:28:59: 80:27:52:f3:eb:78:48:1b:25:9a:b7:6d:fc:d3:e0:17:8e:75: 62:19:88:0e:4d:b3:99:13:2b:5a:46:99:c1:44:b2:7a:e3:c4: 8a:16:89:2b:b0:69:15:43:b3:ff:c0:06:6d:7b:8d:6e:b4:f7: 94:be:f2:5f:32:b1:5b:af:c2:8e:9b:cd:72:4a:db:a8:ae:94: 05:2b:13:e3:12:c1:30:84:01:4a:6c:a3:18:34:e7:d8:ec:af: 3b:53:1e:4e:d3:aa:8d:29:a0:b5:56:46:cb:fb:2e:53:bc:41: 9e:50:d3:3a -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUQOUKhtaetS3dUMT9DY+7sGhHHkQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkxMDAxMjcwNloX DTI3MDkwOTAxMzIwNlowMzExMC8GA1UEAxMoNjMzMUQzRUQ4NDkyNEE1QUUwQzkx MDY1REZDMzU3QjA2RkEzNzVFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKGHwvbC+66bHZebx82LTzJ5Xppw5jDi5wHo+k7RIbzIvUt0CTftMpSR2he3 Pd4xZqAjNRwk6NsUygJZPV0p6gGSrEa/uiil1vVicfO8ytkGgM3l3ILTImTrPKP9 /ayuutizRgH1Blfe1Bc3WJbWUYXpfWj8Jrxi5huPBafy5FMNg3TMcDfhDK8+jsQd d0NlCeJkHgebvUZHkJ8mrtoPJFaXHu4VlTLwaiBrzFHC12ZKWLVSqaJcYO7hrLTG m0KlXoo/qBN7Hz07qX4OEJ32Rkc39FiVqJrwDeSCXJIUVbdmAy2vN1OEBsqN9w/b e8Ua4otnC4vbISdj6Cdp4vIOORcCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBRjMdPt hJJKWuDJEGXfw1ewb6N14TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0ODk0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAozSFMA8EAgACMAkDBwAgAQ33dsAwDQYJKoZIhvcNAQELBQADggEBABjk r3ZbmHGYecp1v6JBlLwS+SOQqomxYXz4MZ/iksDS0fWIST5l4qbz2qTL8oGkuvoB 0VaQm2PqLtq2jflCvnp2j90x/yFAzHKVxT1X6KZY/BP+kJJGU+a2mrJlyGRzqWZK vbv7yfIi9gqrkvNksbMXNSJqR0FGy1HHETU9bU8dOmSKc+YkAafAxtvMtCYoWYAn UvPreEgbJZq3bfzT4BeOdWIZiA5Ns5kTK1pGmcFEsnrjxIoWiSuwaRVDs//ABm17 jW6095S+8l8ysVuvwo6bzXJK26iulAUrE+MSwTCEAUpsoxg059jsrztTHk7Tqo0p oLVWRsv7LlO8QZ5Q0zo= -----END CERTIFICATE-----Generated at Thu Sep 17 05:26:59 2026 by rpki-client