$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154917.roa File: AS154917.roa (raw, json) Hash identifier: YehM8s4RvORCls2I2gPouWx1QC0r3qFUflsUJNqpczM= Subject key identifier: B4:97:49:E8:A6:1F:59:41:11:7C:46:B0:65:81:D3:B4:AF:9E:6B:1B Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 35927D521A868E2CF5A484345AD61456D2DA465F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154917.roa Signing time: Mon 14 Sep 2026 07:50:07 +0000 ROA not before: Mon 14 Sep 2026 07:45:07 +0000 ROA not after: Mon 13 Sep 2027 07:50:07 +0000 asID: 154917 IP address blocks: 163.52.164.0/23 maxlen: 24 2001:df7:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:92:7d:52:1a:86:8e:2c:f5:a4:84:34:5a:d6:14:56:d2:da:46:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 14 07:45:07 2026 GMT Not After : Sep 13 07:50:07 2027 GMT Subject: CN=B49749E8A61F5941117C46B06581D3B4AF9E6B1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4d:57:85:da:d7:14:93:d4:ca:03:ad:7e:0a: ae:2d:77:86:86:cb:0e:26:9a:b3:af:9e:82:25:d6: 41:95:8e:93:f6:f9:42:07:24:50:2e:24:d9:83:9e: f4:81:91:1d:c8:32:cf:4a:fe:1a:80:ab:3f:9a:0c: 65:3c:7f:62:18:a9:1b:03:69:d3:b7:37:88:09:23: 7b:54:8a:4e:bb:cb:a1:26:c7:53:57:ea:2e:69:5a: 2c:94:18:b5:2b:79:9a:bc:98:d4:20:bd:84:42:0d: ca:c0:1b:6e:fc:12:98:b7:7a:71:f5:8b:73:ac:4c: 5b:b1:bb:01:a3:c4:19:36:e0:39:76:f4:c1:8b:b9: 92:9a:43:60:2c:27:4d:3f:d7:ad:c1:e5:62:49:e4: b2:45:ec:92:d8:45:23:30:54:2c:ca:92:b1:6d:8b: cd:17:cf:af:2b:22:88:84:aa:81:93:2e:d4:03:30: 35:58:38:d7:59:f8:22:8e:50:10:cc:38:7d:9d:21: 3a:61:eb:cd:bc:91:7f:fe:6b:e8:15:94:68:99:ee: 2e:6a:fd:ea:f3:e5:3b:af:ed:69:a9:88:50:b5:89: 49:82:d3:08:c9:e6:ba:93:28:27:91:e8:a0:11:63: ea:e7:0d:25:e3:66:9f:bc:00:13:68:1c:1e:0a:dd: 8d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:97:49:E8:A6:1F:59:41:11:7C:46:B0:65:81:D3:B4:AF:9E:6B:1B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154917.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.164.0/23 IPv6: 2001:df7:80c0::/48 Signature Algorithm: sha256WithRSAEncryption 2e:61:de:19:70:69:0f:ca:85:02:4b:d2:f1:93:ea:58:1b:b6: 22:9d:5d:ef:43:18:c4:79:84:2e:66:a6:75:3c:24:ac:75:92: 77:cc:3b:37:53:14:82:62:de:83:70:e7:63:a7:73:82:dd:49: fb:c4:8e:4c:ec:62:23:75:cd:5f:dc:88:98:76:4b:14:78:23: 1f:f6:4b:16:94:ae:37:d2:f6:6d:26:8f:26:12:ea:93:5c:4e: 6d:1e:72:8f:a1:51:46:f5:21:64:46:ef:a6:45:f0:52:61:94: fc:5c:d3:ae:a8:2e:64:2b:94:ec:de:af:7d:0b:ad:0d:66:ee: a6:dc:4e:61:64:c1:ab:8e:b5:80:89:9a:2d:c5:09:8d:ab:cb: 8c:fb:37:03:39:a3:49:69:67:b3:84:9e:30:a0:2d:97:74:a0: e0:7d:b2:c5:07:99:59:0f:73:a1:32:2a:0e:5f:66:06:ce:13: 6a:93:73:80:30:2f:79:e1:c2:c4:53:70:4f:ed:d1:1a:0c:4f: c3:9f:8a:19:51:fe:9f:70:10:c9:6a:af:95:ee:59:bf:20:c3: e3:4b:66:e7:65:6c:12:54:89:38:89:ce:9f:79:2b:1b:b3:9e: 51:24:e5:d4:20:48:88:53:93:65:aa:ae:fd:b4:9b:40:3e:ba: 99:1f:81:fd -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUNZJ9UhqGjiz1pIQ0WtYUVtLaRl8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkxNDA3NDUwN1oX DTI3MDkxMzA3NTAwN1owMzExMC8GA1UEAxMoQjQ5NzQ5RThBNjFGNTk0MTExN0M0 NkIwNjU4MUQzQjRBRjlFNkIxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMlNV4Xa1xST1MoDrX4Kri13hobLDiaas6+egiXWQZWOk/b5QgckUC4k2YOe 9IGRHcgyz0r+GoCrP5oMZTx/YhipGwNp07c3iAkje1SKTrvLoSbHU1fqLmlaLJQY tSt5mryY1CC9hEINysAbbvwSmLd6cfWLc6xMW7G7AaPEGTbgOXb0wYu5kppDYCwn TT/XrcHlYknkskXskthFIzBULMqSsW2LzRfPrysiiISqgZMu1AMwNVg411n4Io5Q EMw4fZ0hOmHrzbyRf/5r6BWUaJnuLmr96vPlO6/taamIULWJSYLTCMnmupMoJ5Ho oBFj6ucNJeNmn7wAE2gcHgrdjT0CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBS0l0no ph9ZQRF8RrBlgdO0r55rGzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0OTE3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBozSkMA8EAgACMAkDBwAgAQ33gMAwDQYJKoZIhvcNAQELBQADggEBAC5h 3hlwaQ/KhQJL0vGT6lgbtiKdXe9DGMR5hC5mpnU8JKx1knfMOzdTFIJi3oNw52On c4LdSfvEjkzsYiN1zV/ciJh2SxR4Ix/2SxaUrjfS9m0mjyYS6pNcTm0eco+hUUb1 IWRG76ZF8FJhlPxc066oLmQrlOzer30LrQ1m7qbcTmFkwauOtYCJmi3FCY2ry4z7 NwM5o0lpZ7OEnjCgLZd0oOB9ssUHmVkPc6EyKg5fZgbOE2qTc4AwL3nhwsRTcE/t 0RoMT8OfihlR/p9wEMlqr5XuWb8gw+NLZudlbBJUiTiJzp95KxuznlEk5dQgSIhT k2Wqrv20m0A+upkfgf0= -----END CERTIFICATE-----Generated at Thu Sep 17 05:27:56 2026 by rpki-client