$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154895.roa File: AS154895.roa (raw, json) Hash identifier: f8yMufZsfEmvnr6Lr9/wMkKVxFxffVsiY6jc20uhL3g= Subject key identifier: 0D:DC:C7:F8:80:CE:A8:F5:F4:66:9C:68:5A:7D:CF:7D:61:B2:56:7E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 344B3F4E8911088B5A5069E30DAAE4854E82FBA6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154895.roa Signing time: Mon 28 Sep 2026 03:02:19 +0000 ROA not before: Mon 28 Sep 2026 02:57:19 +0000 ROA not after: Mon 27 Sep 2027 03:02:19 +0000 asID: 154895 IP address blocks: 163.52.158.0/23 maxlen: 24 163.52.158.0/24 maxlen: 24 163.52.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:4b:3f:4e:89:11:08:8b:5a:50:69:e3:0d:aa:e4:85:4e:82:fb:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 28 02:57:19 2026 GMT Not After : Sep 27 03:02:19 2027 GMT Subject: CN=0DDCC7F880CEA8F5F4669C685A7DCF7D61B2567E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3e:47:48:15:e7:68:b3:5d:e2:dc:97:12:32: 5f:4c:bf:53:fd:ee:c5:13:f6:50:b2:7e:0a:0c:55: 11:e9:1c:7c:c1:cf:3b:b5:cd:ce:73:67:65:56:0c: 8c:be:af:ea:af:1b:29:1d:30:50:77:d3:40:81:51: 76:e7:4c:f3:28:ef:dc:4a:c8:13:8c:49:bb:cc:e2: 0e:ca:92:ea:05:ee:d1:21:e9:a9:05:96:09:13:f1: ad:12:69:a5:2c:2f:97:05:7c:09:45:32:60:f7:e3: ea:b1:7e:37:96:da:fb:98:e6:53:53:d9:86:56:82: 84:8a:95:53:b3:1e:e3:50:4e:25:d9:c2:59:45:e0: 58:57:cb:6b:36:7f:78:15:43:46:57:b2:66:40:5e: a4:39:db:51:c3:a9:f3:01:72:b5:d0:69:4b:85:84: db:27:14:fb:2a:b2:8f:27:e3:52:2a:ba:2d:3f:0f: 27:6c:69:3e:46:8b:38:44:7b:b8:ef:a9:6d:29:39: 62:3a:2c:ee:4e:f9:6e:55:34:d6:75:c9:e6:89:1c: e2:19:d8:13:62:a7:10:0b:34:b0:14:ae:45:f1:46: 3a:0b:7e:9d:cc:09:17:f7:52:fd:e5:ad:36:a7:ae: 82:f0:33:30:1d:ea:3a:e5:fd:4f:15:34:d0:00:d1: 45:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DC:C7:F8:80:CE:A8:F5:F4:66:9C:68:5A:7D:CF:7D:61:B2:56:7E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154895.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.158.0/23 Signature Algorithm: sha256WithRSAEncryption 56:f7:27:30:06:30:62:80:36:c2:84:96:0d:3f:7f:8f:42:f2: ab:bc:42:a5:36:b9:cf:74:22:e9:62:aa:46:c8:f2:46:b0:38: 59:26:ef:01:32:7d:16:50:a8:a3:2f:a9:da:08:21:d8:3c:c9: 7e:97:3a:e5:57:21:50:39:37:c9:bc:98:cb:83:1b:98:31:a0: 76:8d:5a:1c:02:57:1c:dd:4f:2d:6d:ab:e8:a6:6c:70:0b:04: d3:d8:86:2b:90:92:d6:d6:c7:ab:86:70:6c:3e:bc:01:5a:78: 40:b3:60:af:c5:06:f4:54:9d:24:e2:b9:e3:8d:7d:aa:33:98: a7:02:cd:9b:ae:22:13:43:58:8b:c1:4a:d9:dd:d0:91:a0:83: c1:c3:89:5c:a0:33:51:8e:82:cd:64:29:a1:59:2a:a9:39:4e: 76:4e:b6:f1:54:13:bc:47:d4:5a:b4:51:ad:68:ed:45:d4:37: 11:a8:ee:9e:cd:87:f6:63:2f:8d:80:3f:73:4c:37:04:75:15: 5d:80:28:4e:1f:cb:48:34:73:c8:82:83:06:ff:b7:60:2d:85: a7:49:02:54:e8:ef:b7:bf:9a:08:73:77:b4:34:72:f2:8f:4f: 87:e9:2c:52:3c:e1:71:d7:42:c2:a1:95:b5:de:50:bb:7c:6e: c3:54:99:26 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUNEs/TokRCItaUGnjDarkhU6C+6YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkyODAyNTcxOVoX DTI3MDkyNzAzMDIxOVowMzExMC8GA1UEAxMoMEREQ0M3Rjg4MENFQThGNUY0NjY5 QzY4NUE3RENGN0Q2MUIyNTY3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKo+R0gV52izXeLclxIyX0y/U/3uxRP2ULJ+CgxVEekcfMHPO7XNznNnZVYM jL6v6q8bKR0wUHfTQIFRdudM8yjv3ErIE4xJu8ziDsqS6gXu0SHpqQWWCRPxrRJp pSwvlwV8CUUyYPfj6rF+N5ba+5jmU1PZhlaChIqVU7Me41BOJdnCWUXgWFfLazZ/ eBVDRleyZkBepDnbUcOp8wFytdBpS4WE2ycU+yqyjyfjUiq6LT8PJ2xpPkaLOER7 uO+pbSk5Yjos7k75blU01nXJ5okc4hnYE2KnEAs0sBSuRfFGOgt+ncwJF/dS/eWt NqeugvAzMB3qOuX9TxU00ADRRVUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQN3Mf4 gM6o9fRmnGhafc99YbJWfjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0ODk1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBozSeMA0GCSqGSIb3DQEBCwUAA4IBAQBW9ycwBjBigDbChJYNP3+PQvKr vEKlNrnPdCLpYqpGyPJGsDhZJu8BMn0WUKijL6naCCHYPMl+lzrlVyFQOTfJvJjL gxuYMaB2jVocAlcc3U8tbavopmxwCwTT2IYrkJLW1serhnBsPrwBWnhAs2CvxQb0 VJ0k4rnjjX2qM5inAs2briITQ1iLwUrZ3dCRoIPBw4lcoDNRjoLNZCmhWSqpOU52 TrbxVBO8R9RatFGtaO1F1DcRqO6ezYf2Yy+NgD9zTDcEdRVdgChOH8tINHPIgoMG /7dgLYWnSQJU6O+3v5oIc3e0NHLyj0+H6SxSPOFx10LCoZW13lC7fG7DVJkm -----END CERTIFICATE-----Generated at Sat Oct 24 07:09:50 2026 by rpki-client