$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154941.roa File: AS154941.roa (raw, json) Hash identifier: F1XktzFouqfW0IDUWQfZzKpp4csH2SCOGxNBV8RGyCE= Subject key identifier: 03:1D:48:21:5D:78:07:AF:8F:50:3B:DE:FF:57:0E:4B:59:94:BC:CF Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 095AF30B726D017B3B18C42921917DCC42EEB962 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154941.roa Signing time: Fri 25 Sep 2026 04:26:41 +0000 ROA not before: Fri 25 Sep 2026 04:21:41 +0000 ROA not after: Fri 24 Sep 2027 04:26:41 +0000 asID: 154941 IP address blocks: 163.52.228.0/24 maxlen: 24 2001:df7:8fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:5a:f3:0b:72:6d:01:7b:3b:18:c4:29:21:91:7d:cc:42:ee:b9:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 25 04:21:41 2026 GMT Not After : Sep 24 04:26:41 2027 GMT Subject: CN=031D48215D7807AF8F503BDEFF570E4B5994BCCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:7c:96:28:92:7a:03:f7:25:84:aa:89:09:a1: 9a:d5:4b:24:1d:0b:c9:01:5e:e2:58:ac:89:ae:88: 36:11:19:4d:73:f1:1e:cf:de:02:19:08:85:af:e8: 60:97:d5:23:c6:43:58:d7:0d:f9:c7:14:f8:f4:61: 5f:43:b0:85:44:f5:95:d4:b6:18:ca:50:5e:9b:c6: 74:04:54:53:29:3e:15:b8:0c:15:23:69:3a:8e:09: 58:59:f1:71:57:cc:f5:66:ee:e2:39:76:db:e3:58: c8:b6:1e:64:16:85:d8:5d:8c:6a:f0:02:52:64:c6: f4:4b:0f:2c:75:07:66:21:b8:43:20:2c:44:d0:3e: 6f:f5:1f:a5:7c:da:aa:69:f4:43:41:80:cf:13:cc: 2e:5d:47:8d:d1:1f:d4:e7:bc:ad:1d:dc:d8:fe:28: 0e:01:c0:1d:e9:35:80:b8:1e:a4:e5:6c:d6:92:e8: e5:0b:22:07:d5:39:cf:97:0e:e9:c3:2c:2c:e7:67: 2c:ed:34:46:82:b8:a9:98:05:cf:9c:5b:ff:2d:27: 78:bf:0c:f9:7a:eb:72:b4:c0:d3:24:a0:c5:8a:29: b0:36:06:be:ae:89:69:73:f7:1a:7a:a7:dd:33:06: fc:0c:ec:7c:8d:ec:1b:e1:06:34:f0:b2:82:71:42: 54:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1D:48:21:5D:78:07:AF:8F:50:3B:DE:FF:57:0E:4B:59:94:BC:CF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154941.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.228.0/24 IPv6: 2001:df7:8fc0::/48 Signature Algorithm: sha256WithRSAEncryption 03:f9:6f:98:91:50:4b:fc:a2:8d:37:b7:05:eb:ca:cb:c3:5c: cc:32:e7:03:72:0f:b7:2d:30:af:89:bb:06:6c:bb:b1:be:7e: 65:5e:59:74:93:a8:fd:ab:98:5a:5e:a7:39:88:9a:53:45:22: 09:e3:22:dc:1f:10:aa:1e:49:89:1a:ec:2e:28:79:82:c7:e1: 04:fb:d1:0c:f1:34:12:b8:a9:95:73:ac:a7:41:b5:47:25:21: db:ac:0b:0d:f9:0c:d3:ad:c6:ff:ba:e1:c6:3f:16:25:5f:17: 13:74:4b:6f:92:9b:e9:5e:c2:46:e9:b3:cd:90:20:92:a2:47: 54:69:d1:76:9f:3c:7b:c4:62:9f:39:9b:18:6e:d1:f9:19:b8: 13:97:3b:e3:fd:16:34:44:55:a5:3f:8f:42:74:23:13:df:dc: 33:2f:da:92:b2:d5:d3:aa:97:6d:71:f9:83:20:b1:90:28:45: 94:84:d7:d2:52:ac:69:11:4f:86:b5:b0:0c:8d:d5:fd:e4:66: 31:22:a9:6d:69:2e:d3:12:20:44:d9:7e:65:43:f0:21:8b:5e: b9:61:15:3b:b3:50:9a:52:1d:05:f7:61:a2:33:5f:91:d6:e3: 30:0d:a4:f0:a3:4b:4a:95:46:11:b7:67:4f:5b:ff:76:3e:21: 9a:f3:0e:91 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUCVrzC3JtAXs7GMQpIZF9zELuuWIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkyNTA0MjE0MVoX DTI3MDkyNDA0MjY0MVowMzExMC8GA1UEAxMoMDMxRDQ4MjE1RDc4MDdBRjhGNTAz QkRFRkY1NzBFNEI1OTk0QkNDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO98liiSegP3JYSqiQmhmtVLJB0LyQFe4lisia6INhEZTXPxHs/eAhkIha/o YJfVI8ZDWNcN+ccU+PRhX0OwhUT1ldS2GMpQXpvGdARUUyk+FbgMFSNpOo4JWFnx cVfM9Wbu4jl22+NYyLYeZBaF2F2MavACUmTG9EsPLHUHZiG4QyAsRNA+b/UfpXza qmn0Q0GAzxPMLl1HjdEf1Oe8rR3c2P4oDgHAHek1gLgepOVs1pLo5QsiB9U5z5cO 6cMsLOdnLO00RoK4qZgFz5xb/y0neL8M+XrrcrTA0ySgxYopsDYGvq6JaXP3Gnqn 3TMG/AzsfI3sG+EGNPCygnFCVHUCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQDHUgh XXgHr49QO97/Vw5LWZS8zzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0OTQxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAozTkMA8EAgACMAkDBwAgAQ33j8AwDQYJKoZIhvcNAQELBQADggEBAAP5 b5iRUEv8oo03twXrysvDXMwy5wNyD7ctMK+JuwZsu7G+fmVeWXSTqP2rmFpepzmI mlNFIgnjItwfEKoeSYka7C4oeYLH4QT70QzxNBK4qZVzrKdBtUclIdusCw35DNOt xv+64cY/FiVfFxN0S2+Sm+lewkbps82QIJKiR1Rp0XafPHvEYp85mxhu0fkZuBOX O+P9FjREVaU/j0J0IxPf3DMv2pKy1dOql21x+YMgsZAoRZSE19JSrGkRT4a1sAyN 1f3kZjEiqW1pLtMSIETZfmVD8CGLXrlhFTuzUJpSHQX3YaIzX5HW4zANpPCjS0qV RhG3Z09b/3Y+IZrzDpE= -----END CERTIFICATE-----Generated at Sat Oct 24 07:09:53 2026 by rpki-client