$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154912.roa File: AS154912.roa (raw, json) Hash identifier: UH2EVa5ur1wSK0wZ0nBrIaS27bePLHn0Fr1as6RQmpw= Subject key identifier: AD:D7:70:DC:B3:B1:76:D9:73:03:2C:F8:F4:70:C3:3A:62:40:A5:47 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 32AD757D2E09EA5C0F475122C85D02AA34F2B22C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154912.roa Signing time: Mon 14 Sep 2026 05:17:11 +0000 ROA not before: Mon 14 Sep 2026 05:12:11 +0000 ROA not after: Mon 13 Sep 2027 05:17:11 +0000 asID: 154912 IP address blocks: 163.52.157.0/24 maxlen: 24 2001:df7:7f40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ad:75:7d:2e:09:ea:5c:0f:47:51:22:c8:5d:02:aa:34:f2:b2:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 14 05:12:11 2026 GMT Not After : Sep 13 05:17:11 2027 GMT Subject: CN=ADD770DCB3B176D973032CF8F470C33A6240A547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b5:58:2a:eb:b0:c8:8a:bf:e2:b2:60:07:6a: dc:5c:17:8e:94:c2:ae:ed:ce:a7:e7:6c:8c:b8:71: 29:f7:ee:7e:2f:42:c5:31:4c:a7:2f:ef:b4:ae:14: 93:d6:33:d9:68:03:61:1f:9d:f8:c4:6b:28:8b:d0: 7b:0f:92:0b:0e:b5:b5:b4:02:48:63:b7:ae:52:da: dc:8a:66:b7:71:7e:35:56:2d:2b:cd:f9:b6:d5:d3: 9d:d8:18:9c:c0:0c:23:67:2e:6a:2b:c5:83:58:e2: ca:92:b2:f2:68:80:78:c4:a1:45:3d:72:82:69:aa: 00:c5:81:19:bf:9e:f2:c8:19:f2:71:20:bb:86:d1: 50:d2:f7:ac:45:f3:31:3d:54:c2:2e:e4:08:90:90: 5f:41:23:f5:c8:ce:29:8a:fc:c9:06:a5:bb:1d:31: 6b:53:bb:bc:4d:db:55:a9:ed:55:3f:a1:89:3f:75: dd:26:c3:7b:e5:66:fe:3f:7b:0c:11:0e:61:e2:f3: aa:fd:81:a8:ef:e2:1b:1b:f5:2d:66:4c:1a:ce:31: ed:22:1b:3c:26:c1:d9:23:3b:d3:6b:e0:3c:78:24: 6a:45:f4:3f:07:b4:5d:08:47:a1:1f:10:a9:22:5e: 64:aa:28:c0:36:28:1a:1e:7c:42:f8:10:95:34:ec: 55:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D7:70:DC:B3:B1:76:D9:73:03:2C:F8:F4:70:C3:3A:62:40:A5:47 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154912.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.157.0/24 IPv6: 2001:df7:7f40::/48 Signature Algorithm: sha256WithRSAEncryption 36:94:dc:27:1c:e0:b1:36:ed:a8:7a:55:5b:42:b1:01:d5:cf: b9:b2:98:63:cc:4a:ca:07:ac:9b:50:6c:7b:9d:18:0c:e5:1f: 24:75:90:8e:23:8e:cb:59:42:78:5d:8f:af:81:21:48:dc:3f: 62:77:39:03:80:db:d7:a0:50:fc:b8:86:3a:d3:33:8e:ee:19: 36:ae:89:34:fa:f2:38:59:40:d6:b2:fe:a6:af:91:18:71:44: 11:f9:ef:7e:4c:a4:18:e3:34:a3:fc:e0:cd:6c:75:e5:10:63: ea:3c:1b:f2:8e:0a:ec:a6:45:6e:09:53:fb:cd:0b:b4:a1:b3: f5:77:9d:da:c9:16:2c:5f:b9:be:5d:3a:19:d5:a3:b2:4a:05: 8b:8c:4c:55:d3:f9:bc:74:94:36:ed:27:e5:2f:b1:4e:3e:d7: 96:6e:35:c2:1b:75:4e:32:e1:a9:b8:cb:8d:3c:fa:60:57:d8: 61:90:00:ed:ad:b5:18:a2:0c:b6:98:bd:64:44:ae:30:2b:9b: 2d:b7:f3:af:a5:59:8e:c4:81:2f:84:f2:bf:f1:c6:26:f3:19: 23:b5:81:17:dc:87:98:fe:63:cd:e1:d3:47:ab:b9:0c:7a:5a: 18:64:84:2e:25:b5:2a:84:25:26:22:25:fe:2b:c6:71:c1:27: 86:40:a9:a1 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUMq11fS4J6lwPR1EiyF0CqjTysiwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkxNDA1MTIxMVoX DTI3MDkxMzA1MTcxMVowMzExMC8GA1UEAxMoQURENzcwRENCM0IxNzZEOTczMDMy Q0Y4RjQ3MEMzM0E2MjQwQTU0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMK1WCrrsMiKv+KyYAdq3FwXjpTCru3Op+dsjLhxKffufi9CxTFMpy/vtK4U k9Yz2WgDYR+d+MRrKIvQew+SCw61tbQCSGO3rlLa3Ipmt3F+NVYtK835ttXTndgY nMAMI2cuaivFg1jiypKy8miAeMShRT1ygmmqAMWBGb+e8sgZ8nEgu4bRUNL3rEXz MT1Uwi7kCJCQX0Ej9cjOKYr8yQalux0xa1O7vE3bVantVT+hiT913SbDe+Vm/j97 DBEOYeLzqv2BqO/iGxv1LWZMGs4x7SIbPCbB2SM702vgPHgkakX0Pwe0XQhHoR8Q qSJeZKoowDYoGh58QvgQlTTsVTECAwEAAaOCAd0wggHZMB0GA1UdDgQWBBSt13Dc s7F22XMDLPj0cMM6YkClRzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0OTEyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAozSdMA8EAgACMAkDBwAgAQ33f0AwDQYJKoZIhvcNAQELBQADggEBADaU 3Ccc4LE27ah6VVtCsQHVz7mymGPMSsoHrJtQbHudGAzlHyR1kI4jjstZQnhdj6+B IUjcP2J3OQOA29egUPy4hjrTM47uGTauiTT68jhZQNay/qavkRhxRBH5735MpBjj NKP84M1sdeUQY+o8G/KOCuymRW4JU/vNC7Shs/V3ndrJFixfub5dOhnVo7JKBYuM TFXT+bx0lDbtJ+UvsU4+15ZuNcIbdU4y4am4y408+mBX2GGQAO2ttRiiDLaYvWRE rjArmy2386+lWY7EgS+E8r/xxibzGSO1gRfch5j+Y83h00eruQx6WhhkhC4ltSqE JSYiJf4rxnHBJ4ZAqaE= -----END CERTIFICATE-----Generated at Thu Sep 17 05:28:03 2026 by rpki-client