$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154916.roa File: AS154916.roa (raw, json) Hash identifier: xHR0o9G7D2uKmxAAsveaEYpSa2sHWnxehVgzSNqVfEw= Subject key identifier: 25:39:13:E9:5B:33:72:DB:7F:44:E0:95:18:65:60:27:18:3C:CD:08 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1BC1FCCAD761C1658166EB4D7FAD60B7743C3415 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154916.roa Signing time: Mon 14 Sep 2026 07:49:25 +0000 ROA not before: Mon 14 Sep 2026 07:44:25 +0000 ROA not after: Mon 13 Sep 2027 07:49:25 +0000 asID: 154916 IP address blocks: 163.52.162.0/23 maxlen: 24 2001:df7:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c1:fc:ca:d7:61:c1:65:81:66:eb:4d:7f:ad:60:b7:74:3c:34:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 14 07:44:25 2026 GMT Not After : Sep 13 07:49:25 2027 GMT Subject: CN=253913E95B3372DB7F44E09518656027183CCD08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5a:33:d6:30:38:54:e4:e0:24:79:47:93:81: 20:08:d4:05:5b:4d:ce:1e:a6:68:59:67:5a:ad:52: 47:4d:5a:34:36:ea:d9:56:b5:c6:f9:6f:86:7f:39: 91:06:3d:c3:a8:93:41:c6:c8:7f:e5:c1:4b:0c:4f: d4:bf:06:f8:e5:54:5e:71:c4:e6:23:80:42:ae:8e: 24:a9:e3:c0:ea:35:47:2f:c5:94:e0:10:39:48:49: e6:72:a5:2d:1e:a3:e5:f0:94:9d:dc:c9:55:25:52: 74:08:c7:35:26:41:11:6f:db:64:09:92:f5:f7:62: e5:6d:cf:61:95:36:26:df:e3:61:8d:f7:dd:63:2e: 16:c2:59:a8:77:6f:6b:d8:e9:42:4c:1d:df:a2:6b: 7a:e3:2b:c2:f0:49:67:f2:2f:bc:4c:ed:6e:45:53: d7:4d:6c:f5:36:64:ea:f4:9a:0e:a0:6a:df:10:8c: be:5a:97:a0:6d:45:8c:03:e5:b9:82:69:5d:f0:0e: 70:de:28:2a:10:ae:75:af:09:0c:5a:15:2d:e4:c5: 9b:d4:bd:85:68:95:f0:3c:ef:d6:62:2b:d9:15:5e: 3a:ad:77:95:0c:a9:13:7f:f7:48:67:81:eb:f1:5d: ac:ff:66:e7:99:e6:48:4e:81:2a:0a:58:9b:87:de: c6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:39:13:E9:5B:33:72:DB:7F:44:E0:95:18:65:60:27:18:3C:CD:08 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154916.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.162.0/23 IPv6: 2001:df7:8040::/48 Signature Algorithm: sha256WithRSAEncryption 64:ca:b2:4c:1d:9b:ec:fd:d5:02:e9:7d:05:40:37:81:64:52: f0:2b:0c:e9:96:ed:3e:71:47:b0:1b:1a:ff:30:8a:05:24:54: 18:10:20:0c:6e:8e:85:cc:bf:8c:d3:71:f4:e0:f3:42:9b:20: 5b:c5:77:5a:b5:ad:b0:a9:0e:2f:74:dd:8e:33:c0:e1:71:1a: 63:d0:7f:99:e2:be:d5:02:2b:1e:d5:f9:47:a3:e6:d3:67:d3: 36:08:76:07:1e:45:1c:85:78:a7:51:45:01:e8:2e:1e:42:17: 33:25:48:8a:e2:a6:ce:69:98:b3:c6:6d:c5:f4:89:b9:30:a2: 2e:d6:81:b4:21:c9:f1:f4:30:d9:09:36:d1:f7:8d:2e:66:df: fe:85:8d:3c:47:1f:d1:56:60:a8:ea:34:b5:8c:84:78:96:40: 8e:c2:37:c0:f2:0b:cb:10:5d:32:63:20:3d:59:b5:76:3a:87: c9:51:45:7f:fb:b7:d6:9e:31:37:70:7d:19:66:78:64:bd:04: c1:c9:80:38:6e:61:b6:2b:4e:25:2e:be:1c:ab:35:29:ca:c5: a8:fc:01:ad:07:77:a2:e5:20:1b:50:cf:db:1e:aa:5a:6e:97: 5d:a2:1f:1a:07:18:d3:f6:dd:ee:41:bb:52:b4:c8:e6:2a:a7: 13:44:1f:cd -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUG8H8ytdhwWWBZutNf61gt3Q8NBUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkxNDA3NDQyNVoX DTI3MDkxMzA3NDkyNVowMzExMC8GA1UEAxMoMjUzOTEzRTk1QjMzNzJEQjdGNDRF MDk1MTg2NTYwMjcxODNDQ0QwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1aM9YwOFTk4CR5R5OBIAjUBVtNzh6maFlnWq1SR01aNDbq2Va1xvlvhn85 kQY9w6iTQcbIf+XBSwxP1L8G+OVUXnHE5iOAQq6OJKnjwOo1Ry/FlOAQOUhJ5nKl LR6j5fCUndzJVSVSdAjHNSZBEW/bZAmS9fdi5W3PYZU2Jt/jYY333WMuFsJZqHdv a9jpQkwd36JreuMrwvBJZ/IvvEztbkVT101s9TZk6vSaDqBq3xCMvlqXoG1FjAPl uYJpXfAOcN4oKhCuda8JDFoVLeTFm9S9hWiV8Dzv1mIr2RVeOq13lQypE3/3SGeB 6/FdrP9m55nmSE6BKgpYm4fexlECAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQlORPp WzNy239E4JUYZWAnGDzNCDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0OTE2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBozSiMA8EAgACMAkDBwAgAQ33gEAwDQYJKoZIhvcNAQELBQADggEBAGTK skwdm+z91QLpfQVAN4FkUvArDOmW7T5xR7AbGv8wigUkVBgQIAxujoXMv4zTcfTg 80KbIFvFd1q1rbCpDi903Y4zwOFxGmPQf5nivtUCKx7V+Uej5tNn0zYIdgceRRyF eKdRRQHoLh5CFzMlSIrips5pmLPGbcX0ibkwoi7WgbQhyfH0MNkJNtH3jS5m3/6F jTxHH9FWYKjqNLWMhHiWQI7CN8DyC8sQXTJjID1ZtXY6h8lRRX/7t9aeMTdwfRlm eGS9BMHJgDhuYbYrTiUuvhyrNSnKxaj8Aa0Hd6LlIBtQz9seqlpul12iHxoHGNP2 3e5Bu1K0yOYqpxNEH80= -----END CERTIFICATE-----Generated at Thu Sep 17 06:28:21 2026 by rpki-client