$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154956.roa File: AS154956.roa (raw, json) Hash identifier: g1udGEtGLSQ9UblUH4bw5NWiUT3mZp5NG8t1/4Nz7s4= Subject key identifier: 06:AD:C5:53:FE:52:E0:B6:E9:53:67:C3:52:A4:DC:AE:E0:67:19:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6D138BDBB6296A4E369F5BD2058985E670D474C5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154956.roa Signing time: Mon 28 Sep 2026 03:48:08 +0000 ROA not before: Mon 28 Sep 2026 03:43:08 +0000 ROA not after: Mon 27 Sep 2027 03:48:08 +0000 asID: 154956 IP address blocks: 2001:df7:97c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:13:8b:db:b6:29:6a:4e:36:9f:5b:d2:05:89:85:e6:70:d4:74:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 28 03:43:08 2026 GMT Not After : Sep 27 03:48:08 2027 GMT Subject: CN=06ADC553FE52E0B6E95367C352A4DCAEE067199E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ff:36:cc:72:78:22:c0:4a:ab:7e:b4:41:45: 56:b0:78:99:d5:bf:68:93:49:4c:d0:49:28:0d:6c: 0d:7c:72:af:84:98:a5:84:72:f1:92:58:0e:2e:ae: 6b:1a:2b:f6:e6:5d:36:59:62:ea:3b:fc:4c:51:6b: 75:3e:c3:be:bd:00:17:a1:41:c7:13:5c:89:be:57: c1:7d:3e:8b:bf:d1:b7:fc:99:ca:7d:b2:bc:1d:db: 2f:44:6b:2e:d6:96:9e:e5:eb:75:9f:e5:0f:a4:1f: cc:7e:56:83:40:cc:4c:d0:ed:64:71:eb:fb:18:ae: a2:db:1d:84:46:cb:f8:39:e8:16:78:58:bd:82:15: 1a:00:35:fb:05:6c:22:ef:dd:d6:d7:71:84:c1:2a: d0:d3:85:e6:20:b3:5b:35:7d:0d:42:2f:a1:02:90: a7:4d:53:21:11:99:fa:2d:85:46:7d:d6:e5:af:8d: ed:08:a6:c1:a8:4b:dd:de:dd:6c:1b:1d:ea:e7:88: d2:a6:95:3e:9d:5a:48:06:1c:72:ee:09:5c:c8:e3: d4:04:ce:4a:33:4b:6c:46:ab:ca:ff:3d:61:b2:b0: 0d:e3:e4:fd:6d:42:d1:c6:a5:07:10:65:79:15:d6: 5a:32:b8:07:e1:85:d6:75:49:a2:79:a8:4a:77:66: f5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AD:C5:53:FE:52:E0:B6:E9:53:67:C3:52:A4:DC:AE:E0:67:19:9E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154956.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:97c0::/48 Signature Algorithm: sha256WithRSAEncryption 76:45:a0:9e:42:b7:60:05:80:ce:75:77:ec:f5:4d:d1:26:fd: db:e8:7b:34:da:2a:5c:16:c8:46:b8:fb:d1:1a:7b:98:39:ed: 0f:c8:ea:2c:0b:1d:50:39:6b:24:22:e3:b6:a2:5e:44:36:98: 87:2d:40:0d:44:82:7a:67:af:35:e7:ac:48:97:13:57:74:20: a8:1d:64:5c:8b:fe:a0:5f:38:dd:19:26:5a:34:83:0d:6a:9a: 67:fb:30:38:eb:65:28:7e:17:9b:b9:fd:12:6a:02:21:4d:f6: a7:a6:fb:e2:b4:43:91:71:b3:b9:42:3e:ca:07:c0:4a:7a:bf: 1c:99:ea:0d:fa:9d:bd:d2:7b:d9:1b:34:24:4d:43:2e:04:77: c0:e0:ba:06:16:15:d6:5a:c9:33:a5:92:e1:e3:da:70:cc:78: e8:65:6d:7f:71:2b:fa:ac:fb:e4:6f:fa:a0:2f:ff:b6:56:9d: f9:44:92:09:72:0e:e4:90:9c:f1:d1:ef:93:95:4d:6a:a7:3c: 53:94:c0:ec:23:72:2e:01:ef:94:50:fe:3c:87:28:8f:7e:7b: 52:9c:d7:48:51:34:11:19:a4:2b:44:85:72:df:47:fc:a6:77: 21:48:9e:3a:93:41:a9:38:77:4f:89:6c:95:6f:78:f2:c9:df: 07:a4:74:9b -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUbROL27Ypak42n1vSBYmF5nDUdMUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkyODAzNDMwOFoX DTI3MDkyNzAzNDgwOFowMzExMC8GA1UEAxMoMDZBREM1NTNGRTUyRTBCNkU5NTM2 N0MzNTJBNERDQUVFMDY3MTk5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJf/NsxyeCLASqt+tEFFVrB4mdW/aJNJTNBJKA1sDXxyr4SYpYRy8ZJYDi6u axor9uZdNlli6jv8TFFrdT7Dvr0AF6FBxxNcib5XwX0+i7/Rt/yZyn2yvB3bL0Rr LtaWnuXrdZ/lD6QfzH5Wg0DMTNDtZHHr+xiuotsdhEbL+DnoFnhYvYIVGgA1+wVs Iu/d1tdxhMEq0NOF5iCzWzV9DUIvoQKQp01TIRGZ+i2FRn3W5a+N7QimwahL3d7d bBsd6ueI0qaVPp1aSAYccu4JXMjj1ATOSjNLbEaryv89YbKwDePk/W1C0calBxBl eRXWWjK4B+GF1nVJonmoSndm9TcCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQGrcVT /lLgtulTZ8NSpNyu4GcZnjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0OTU2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN95fAMA0GCSqGSIb3DQEBCwUAA4IBAQB2RaCeQrdgBYDOdXfs9U3R Jv3b6Hs02ipcFshGuPvRGnuYOe0PyOosCx1QOWskIuO2ol5ENpiHLUANRIJ6Z681 56xIlxNXdCCoHWRci/6gXzjdGSZaNIMNappn+zA462Uofhebuf0SagIhTfanpvvi tEORcbO5Qj7KB8BKer8cmeoN+p290nvZGzQkTUMuBHfA4LoGFhXWWskzpZLh49pw zHjoZW1/cSv6rPvkb/qgL/+2Vp35RJIJcg7kkJzx0e+TlU1qpzxTlMDsI3IuAe+U UP48hyiPfntSnNdIUTQRGaQrRIVy30f8pnchSJ46k0GpOHdPiWyVb3jyyd8HpHSb -----END CERTIFICATE-----Generated at Sat Oct 24 07:09:56 2026 by rpki-client