$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154915.roa File: AS154915.roa (raw, json) Hash identifier: vjEc85UYQbzmsPdbyGGx5Kbhl8m0dU7qPzKtdAges5o= Subject key identifier: B0:C4:7B:4B:45:E8:76:D1:DB:40:9B:D8:B6:E8:AC:CF:32:DC:83:B8 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 37A9080AC7719AE0BAF22E001DF487E6BF832329 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154915.roa Signing time: Mon 14 Sep 2026 07:48:40 +0000 ROA not before: Mon 14 Sep 2026 07:43:40 +0000 ROA not after: Mon 13 Sep 2027 07:48:40 +0000 asID: 154915 IP address blocks: 163.52.160.0/23 maxlen: 24 2001:df7:7fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:a9:08:0a:c7:71:9a:e0:ba:f2:2e:00:1d:f4:87:e6:bf:83:23:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 14 07:43:40 2026 GMT Not After : Sep 13 07:48:40 2027 GMT Subject: CN=B0C47B4B45E876D1DB409BD8B6E8ACCF32DC83B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:00:9d:a6:0c:bb:8a:85:23:c9:bb:dd:ca:30: 70:7f:6e:f6:40:80:fa:c5:3e:ea:16:b3:03:29:47: 8c:12:39:58:d6:f0:61:e0:56:05:db:1f:fc:f2:da: df:db:da:31:c2:b2:94:bf:5e:5b:86:be:b9:f5:42: ab:1f:2c:91:e1:dd:30:96:8e:9b:07:ec:49:28:40: 95:26:d9:3b:1c:c6:73:d3:24:2e:36:c3:b1:21:b1: da:90:df:7c:1c:8c:63:fa:76:61:e3:07:d7:90:5f: 78:d3:7e:7b:d6:22:6c:e7:ed:18:4a:33:8e:8c:4b: 95:29:fc:0a:76:07:eb:c6:4b:56:75:71:51:90:27: 07:b1:08:03:54:b0:61:44:7c:80:f4:46:57:b3:1e: f3:a2:55:38:96:01:b9:0b:a1:22:af:21:18:3f:6d: 42:2c:43:34:d0:9a:40:5c:5c:a1:09:a9:fe:f5:1a: 73:f4:66:30:37:88:46:ca:98:5a:6c:ff:75:20:b4: 04:db:17:44:53:31:bb:ea:3a:6a:40:c3:13:31:64: a2:76:16:a2:65:3a:db:f6:5a:94:08:2b:9c:fa:8e: d3:80:fe:dc:56:df:f4:1a:37:f2:2a:aa:e7:ff:73: 44:a0:64:a1:cd:30:54:dd:8b:f5:e4:8f:08:e4:d5: c6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C4:7B:4B:45:E8:76:D1:DB:40:9B:D8:B6:E8:AC:CF:32:DC:83:B8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154915.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.160.0/23 IPv6: 2001:df7:7fc0::/48 Signature Algorithm: sha256WithRSAEncryption 99:a3:63:cf:fd:01:67:10:6a:11:8c:57:05:56:a0:e1:96:94: 2e:67:e9:57:30:fd:64:b0:d9:ce:ec:0a:49:0f:34:67:28:8b: da:6f:00:7b:78:26:c3:41:f3:7c:00:ac:80:1f:e7:9f:17:f2: 3f:c2:1d:30:d3:22:41:a8:1d:c2:7c:eb:3f:f8:f1:b7:37:53: 77:3e:07:06:f3:4f:c1:1f:4a:4e:4d:ad:f8:fb:e1:8e:3e:ed: c5:62:35:e7:1a:31:c3:5f:f6:ff:b4:f9:45:ab:f0:ed:f8:7d: 48:c7:3a:86:71:74:93:fb:b5:04:04:e4:73:90:29:73:4e:ae: b0:76:74:43:5e:2d:01:c4:bc:e0:d1:45:46:16:e1:e9:52:f0: a9:be:43:b3:d2:b4:e9:11:21:9b:a6:c4:56:1d:fc:b8:ba:92: 45:12:8f:b4:17:5a:cb:d4:c7:0b:e3:ee:ed:9e:3b:a2:9e:d3: 27:c6:62:f2:05:26:fe:66:35:2f:3c:f4:2e:0b:00:69:c3:e9: 0d:e7:ae:f0:24:95:ad:01:48:2e:33:a6:e2:fb:72:38:d7:d7: 0c:62:fb:0a:be:55:dc:da:8b:50:e1:2e:03:d8:6b:10:d3:47: b5:a5:71:08:b2:0c:38:df:37:41:27:80:ef:0f:22:6c:9b:a9: e3:4e:7b:5d -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUN6kICsdxmuC68i4AHfSH5r+DIykwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkxNDA3NDM0MFoX DTI3MDkxMzA3NDg0MFowMzExMC8GA1UEAxMoQjBDNDdCNEI0NUU4NzZEMURCNDA5 QkQ4QjZFOEFDQ0YzMkRDODNCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMMAnaYMu4qFI8m73cowcH9u9kCA+sU+6hazAylHjBI5WNbwYeBWBdsf/PLa 39vaMcKylL9eW4a+ufVCqx8skeHdMJaOmwfsSShAlSbZOxzGc9MkLjbDsSGx2pDf fByMY/p2YeMH15BfeNN+e9YibOftGEozjoxLlSn8CnYH68ZLVnVxUZAnB7EIA1Sw YUR8gPRGV7Me86JVOJYBuQuhIq8hGD9tQixDNNCaQFxcoQmp/vUac/RmMDeIRsqY Wmz/dSC0BNsXRFMxu+o6akDDEzFkonYWomU62/ZalAgrnPqO04D+3Fbf9Bo38iqq 5/9zRKBkoc0wVN2L9eSPCOTVxgMCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBSwxHtL Reh20dtAm9i26KzPMtyDuDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0OTE1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBozSgMA8EAgACMAkDBwAgAQ33f8AwDQYJKoZIhvcNAQELBQADggEBAJmj Y8/9AWcQahGMVwVWoOGWlC5n6Vcw/WSw2c7sCkkPNGcoi9pvAHt4JsNB83wArIAf 558X8j/CHTDTIkGoHcJ86z/48bc3U3c+BwbzT8EfSk5Nrfj74Y4+7cViNecaMcNf 9v+0+UWr8O34fUjHOoZxdJP7tQQE5HOQKXNOrrB2dENeLQHEvODRRUYW4elS8Km+ Q7PStOkRIZumxFYd/Li6kkUSj7QXWsvUxwvj7u2eO6Ke0yfGYvIFJv5mNS889C4L AGnD6Q3nrvAkla0BSC4zpuL7cjjX1wxi+wq+Vdzai1DhLgPYaxDTR7WlcQiyDDjf N0EngO8PImybqeNOe10= -----END CERTIFICATE-----Generated at Thu Sep 17 05:27:57 2026 by rpki-client