$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154896.roa File: AS154896.roa (raw, json) Hash identifier: 5SOCMhLx2WpQSrbPFPBHcXZUYvheFFyNhmVIjJI8Wfk= Subject key identifier: 02:62:51:9F:AB:D8:91:CD:00:DA:18:72:76:D2:A7:31:F1:0B:92:09 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 35B920C2BA4ED7C419E948AD2FE14F71D6B034FF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154896.roa Signing time: Wed 09 Sep 2026 02:28:37 +0000 ROA not before: Wed 09 Sep 2026 02:23:37 +0000 ROA not after: Wed 08 Sep 2027 02:28:37 +0000 asID: 154896 IP address blocks: 163.52.135.0/24 maxlen: 24 2001:df7:77c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:b9:20:c2:ba:4e:d7:c4:19:e9:48:ad:2f:e1:4f:71:d6:b0:34:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 9 02:23:37 2026 GMT Not After : Sep 8 02:28:37 2027 GMT Subject: CN=0262519FABD891CD00DA187276D2A731F10B9209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ee:a8:0b:29:54:87:45:b4:f0:13:2e:a1:56: 5d:53:45:f4:2a:18:d1:dd:1c:3b:cd:d0:b7:2b:c0: 3e:ee:3a:08:a7:89:22:8e:1a:08:82:a1:98:f3:d1: 26:53:1e:4f:79:b5:15:da:9a:57:7e:65:65:fe:03: 93:71:c3:5b:6b:5d:16:77:a6:37:b8:76:11:53:60: 53:b3:cc:c4:ac:e0:32:13:b9:df:47:f9:7e:8a:8a: ae:61:c2:e3:3c:44:11:3f:3b:ca:20:56:36:a5:7e: e9:bb:ec:d0:24:bc:a7:54:94:33:94:03:cf:5a:23: a1:50:5c:66:80:8b:40:34:38:97:d8:65:52:ac:84: 7c:0c:24:07:1d:d5:18:d3:05:fd:c6:30:24:c8:2c: 0c:f9:67:c6:a7:2e:19:46:84:84:8e:7a:4c:49:9d: 3a:23:aa:28:eb:0f:65:20:d5:0d:cf:83:e1:1b:d6: f2:0e:89:a9:6a:34:6a:b9:36:ad:1d:a1:ab:5e:93: 88:16:bf:ff:ba:64:02:31:34:4a:95:4b:2c:a8:b3: 98:17:66:61:1c:3f:33:af:8c:cd:d5:21:f3:14:ea: 2d:3e:1b:2a:f0:e3:21:78:b6:1c:28:c6:5a:52:a0: a9:1c:98:38:96:52:c7:fe:a3:08:81:e3:7e:d9:d4: de:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:62:51:9F:AB:D8:91:CD:00:DA:18:72:76:D2:A7:31:F1:0B:92:09 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154896.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.135.0/24 IPv6: 2001:df7:77c0::/48 Signature Algorithm: sha256WithRSAEncryption 92:18:31:66:41:bd:05:09:13:f5:1c:08:a7:6b:d1:95:4b:12: 67:d6:ef:4b:c6:8a:17:f4:e1:a5:e1:14:b2:e0:55:91:3e:d6: 36:4e:50:b2:da:f7:e4:6f:06:fc:f8:02:5e:3a:a1:e9:4c:21: 79:15:6c:3f:b9:81:bc:eb:58:2c:f5:30:4e:9a:82:e8:db:3d: 4b:80:c6:02:18:ed:1e:ec:a0:11:d1:12:ef:cd:3f:a7:05:61: e7:fc:a2:bb:29:46:35:f4:bd:8a:87:ee:44:07:cb:e6:1d:02: d3:f0:cf:14:58:f2:69:02:4d:3e:15:ea:cc:03:63:d6:0c:12: ef:0d:18:d5:0c:cf:a1:3b:31:d0:b9:ea:f4:e7:01:a1:9f:4b: 74:e4:8a:b6:15:89:cb:a2:2d:6d:4c:ef:c1:ad:2d:c8:c4:8f: e7:29:de:f7:9f:93:a9:04:72:31:bd:1c:70:e6:d7:20:44:cf: 2c:d1:4b:da:ad:8e:22:cf:ea:85:98:9d:66:4b:b4:07:1e:3f: a4:43:83:12:4a:4e:21:97:2c:c6:6e:ea:bf:10:41:84:79:7c: b1:1a:b2:9d:9f:3c:98:93:c4:c6:95:e7:88:98:ab:0e:45:50: cb:24:e4:92:44:e3:17:e9:08:54:87:9d:a8:3e:c0:eb:2d:3c: b3:48:54:ba -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUNbkgwrpO18QZ6UitL+FPcdawNP8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkwOTAyMjMzN1oX DTI3MDkwODAyMjgzN1owMzExMC8GA1UEAxMoMDI2MjUxOUZBQkQ4OTFDRDAwREEx ODcyNzZEMkE3MzFGMTBCOTIwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOPuqAspVIdFtPATLqFWXVNF9CoY0d0cO83QtyvAPu46CKeJIo4aCIKhmPPR JlMeT3m1FdqaV35lZf4Dk3HDW2tdFnemN7h2EVNgU7PMxKzgMhO530f5foqKrmHC 4zxEET87yiBWNqV+6bvs0CS8p1SUM5QDz1ojoVBcZoCLQDQ4l9hlUqyEfAwkBx3V GNMF/cYwJMgsDPlnxqcuGUaEhI56TEmdOiOqKOsPZSDVDc+D4RvW8g6JqWo0ark2 rR2hq16TiBa//7pkAjE0SpVLLKizmBdmYRw/M6+MzdUh8xTqLT4bKvDjIXi2HCjG WlKgqRyYOJZSx/6jCIHjftnU3r8CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQCYlGf q9iRzQDaGHJ20qcx8QuSCTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0ODk2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAozSHMA8EAgACMAkDBwAgAQ33d8AwDQYJKoZIhvcNAQELBQADggEBAJIY MWZBvQUJE/UcCKdr0ZVLEmfW70vGihf04aXhFLLgVZE+1jZOULLa9+RvBvz4Al46 oelMIXkVbD+5gbzrWCz1ME6agujbPUuAxgIY7R7soBHREu/NP6cFYef8orspRjX0 vYqH7kQHy+YdAtPwzxRY8mkCTT4V6swDY9YMEu8NGNUMz6E7MdC56vTnAaGfS3Tk irYVicuiLW1M78GtLcjEj+cp3vefk6kEcjG9HHDm1yBEzyzRS9qtjiLP6oWYnWZL tAceP6RDgxJKTiGXLMZu6r8QQYR5fLEasp2fPJiTxMaV54iYqw5FUMsk5JJE4xfp CFSHnag+wOstPLNIVLo= -----END CERTIFICATE-----Generated at Thu Sep 17 05:26:19 2026 by rpki-client