$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154901.roa File: AS154901.roa (raw, json) Hash identifier: /y7DBlGPxQ22Xh62PbLJK6Ks40o+uzEMe1UlWXWNWuA= Subject key identifier: 87:C0:CD:98:F1:EA:A4:29:87:7C:F5:AB:9C:26:AB:92:6A:9C:17:8A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 21024C3A733D321FBC5F4171342B66D40C6B999B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154901.roa Signing time: Thu 10 Sep 2026 06:14:01 +0000 ROA not before: Thu 10 Sep 2026 06:09:01 +0000 ROA not after: Thu 09 Sep 2027 06:14:01 +0000 asID: 154901 IP address blocks: 163.52.150.0/23 maxlen: 24 2001:df7:7c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:02:4c:3a:73:3d:32:1f:bc:5f:41:71:34:2b:66:d4:0c:6b:99:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 10 06:09:01 2026 GMT Not After : Sep 9 06:14:01 2027 GMT Subject: CN=87C0CD98F1EAA429877CF5AB9C26AB926A9C178A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c9:4c:33:5e:ed:48:2f:61:87:3e:b9:1a:e9: 44:5e:ee:af:44:01:ae:da:21:61:39:c8:19:b0:15: 80:78:b2:15:9c:5a:46:59:dd:bb:fc:c0:06:f8:27: b7:6b:09:cd:83:a6:6d:84:9d:99:f3:f4:12:68:09: 58:45:0b:16:76:4e:5e:53:a7:f7:05:19:5b:55:db: 59:60:e1:b0:3b:71:0f:9a:ba:61:1c:d4:38:22:26: 6b:6c:4a:07:bf:fa:72:ed:4d:50:e8:b9:07:8c:13: 69:a2:d0:a2:36:74:47:a2:cc:28:ff:7a:6e:f1:11: 0f:c0:96:7c:ea:f4:54:21:76:d9:5f:eb:f1:5b:bc: d3:67:0f:ba:ca:69:9a:76:8d:30:be:88:ad:3d:e4: f0:17:6c:18:cc:43:cd:3f:9f:37:26:81:ca:26:4d: 63:7f:4a:06:10:a2:7d:b7:b8:fb:54:3d:bd:00:fc: a2:33:8c:b5:d0:a2:b1:1a:5f:28:da:36:7a:39:0c: d8:82:fe:2b:bd:5d:75:8b:be:d3:69:e4:cb:4e:c7: 43:81:7c:14:95:ca:39:46:33:9a:d2:30:cc:4f:c0: ea:0a:83:78:b3:63:23:75:1b:ab:db:5d:17:15:09: a9:15:2a:e2:0c:d1:5f:8a:94:2d:4f:66:95:dd:d1: e1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C0:CD:98:F1:EA:A4:29:87:7C:F5:AB:9C:26:AB:92:6A:9C:17:8A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154901.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.150.0/23 IPv6: 2001:df7:7c40::/48 Signature Algorithm: sha256WithRSAEncryption 0b:46:56:81:4f:1b:3e:e9:9b:c1:f2:00:fa:80:d5:9f:5d:61: b2:7f:09:f8:83:4f:d9:7c:28:8a:f9:81:14:13:f5:58:f0:6e: 74:c1:50:2e:35:6d:6f:0f:1f:06:4a:31:36:5c:bd:a0:b8:c1: 8e:58:a2:df:69:bd:23:24:a0:e7:89:81:06:0e:62:32:25:a9: 7d:3c:d6:cc:ff:71:ba:df:7d:5d:15:64:8e:ce:35:62:cc:93: 8b:85:45:5c:4c:36:82:c9:e9:8d:0b:69:9e:a1:0c:5a:3e:d8: 03:ae:8d:b1:fd:36:4d:e1:c7:6d:15:66:f1:c7:cb:15:dc:92: 63:51:0a:2d:8c:72:f5:d2:5c:06:ca:76:01:5d:6e:1f:32:7a: 2e:10:68:51:19:02:2e:01:4f:c7:68:26:b9:e8:58:de:dd:57: 17:3c:ae:3b:53:7f:1e:c6:6c:f5:bf:77:9e:f4:ad:5c:6d:25: dc:97:df:f4:eb:10:e9:de:c0:5e:2e:e9:8d:70:37:63:c1:b9: 62:93:41:b9:07:5d:b2:d9:d8:51:5b:9b:cc:8f:04:2d:41:58: 71:5c:c0:52:35:18:e0:d1:ab:2a:0f:3a:1e:d5:1f:a4:47:8f: 14:81:5e:e4:26:85:82:1f:8d:c4:6e:f6:c2:2b:51:27:9f:2f: 80:94:96:d6 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUIQJMOnM9Mh+8X0FxNCtm1AxrmZswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkxMDA2MDkwMVoX DTI3MDkwOTA2MTQwMVowMzExMC8GA1UEAxMoODdDMENEOThGMUVBQTQyOTg3N0NG NUFCOUMyNkFCOTI2QTlDMTc4QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKXJTDNe7UgvYYc+uRrpRF7ur0QBrtohYTnIGbAVgHiyFZxaRlndu/zABvgn t2sJzYOmbYSdmfP0EmgJWEULFnZOXlOn9wUZW1XbWWDhsDtxD5q6YRzUOCIma2xK B7/6cu1NUOi5B4wTaaLQojZ0R6LMKP96bvERD8CWfOr0VCF22V/r8Vu802cPuspp mnaNML6IrT3k8BdsGMxDzT+fNyaByiZNY39KBhCifbe4+1Q9vQD8ojOMtdCisRpf KNo2ejkM2IL+K71ddYu+02nky07HQ4F8FJXKOUYzmtIwzE/A6gqDeLNjI3Ubq9td FxUJqRUq4gzRX4qULU9mld3R4VMCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBSHwM2Y 8eqkKYd89aucJquSapwXijAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0OTAxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBozSWMA8EAgACMAkDBwAgAQ33fEAwDQYJKoZIhvcNAQELBQADggEBAAtG VoFPGz7pm8HyAPqA1Z9dYbJ/CfiDT9l8KIr5gRQT9VjwbnTBUC41bW8PHwZKMTZc vaC4wY5Yot9pvSMkoOeJgQYOYjIlqX081sz/cbrffV0VZI7ONWLMk4uFRVxMNoLJ 6Y0LaZ6hDFo+2AOujbH9Nk3hx20VZvHHyxXckmNRCi2McvXSXAbKdgFdbh8yei4Q aFEZAi4BT8doJrnoWN7dVxc8rjtTfx7GbPW/d570rVxtJdyX3/TrEOnewF4u6Y1w N2PBuWKTQbkHXbLZ2FFbm8yPBC1BWHFcwFI1GODRqyoPOh7VH6RHjxSBXuQmhYIf jcRu9sIrUSefL4CUltY= -----END CERTIFICATE-----Generated at Thu Sep 17 05:27:34 2026 by rpki-client