$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154957.roa File: AS154957.roa (raw, json) Hash identifier: xwoJfvQi8/l0AvGuEsjBgwNxbxkku22X8q5HtpFQV1Y= Subject key identifier: 69:3F:74:A0:E0:B8:B8:43:60:E1:EB:D8:62:3D:D7:EB:21:80:B9:D5 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 685AC682C0F57226C163CDE4AAE4C10FA1768B41 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154957.roa Signing time: Mon 28 Sep 2026 04:06:14 +0000 ROA not before: Mon 28 Sep 2026 04:01:14 +0000 ROA not after: Mon 27 Sep 2027 04:06:14 +0000 asID: 154957 IP address blocks: 163.52.148.0/24 maxlen: 24 2001:df7:7bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:5a:c6:82:c0:f5:72:26:c1:63:cd:e4:aa:e4:c1:0f:a1:76:8b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 28 04:01:14 2026 GMT Not After : Sep 27 04:06:14 2027 GMT Subject: CN=693F74A0E0B8B84360E1EBD8623DD7EB2180B9D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5e:6a:6c:c6:49:b9:ae:f1:59:53:01:8f:8a: 28:f5:bb:fc:1c:cf:71:9d:27:95:56:eb:36:1f:35: dd:a5:10:3f:c1:c4:63:08:29:60:ae:49:90:0d:51: 56:44:7d:ff:d5:9b:fa:6d:ed:ac:d6:90:dc:93:f2: 6d:ef:9f:fc:22:b5:3e:57:fc:83:6e:7a:68:f9:51: 29:28:c7:f8:79:ee:2a:d2:1b:63:5e:a9:5f:0e:6b: 51:67:18:99:d0:7e:15:3d:47:4d:f2:e9:bc:47:33: 94:1e:0e:b4:76:ce:7b:1b:06:e0:3b:34:0f:14:e5: df:d9:b2:f7:7d:d4:36:33:2c:1e:fe:45:93:4c:58: d7:9f:5c:48:f6:8d:ca:1e:4e:84:ad:62:2a:b7:60: 21:43:3f:1b:98:fc:50:17:43:7c:26:69:32:69:8d: 55:c4:97:a1:72:aa:5a:89:20:ff:a4:a8:85:2b:84: a1:d4:44:1f:57:ed:1a:09:d9:4c:36:d5:58:83:93: ab:c5:83:28:a7:55:5b:5b:ef:71:28:2c:3d:64:21: 24:58:50:20:f5:41:5b:ad:57:73:67:cd:97:fd:18: d5:e5:e8:84:8a:4a:24:e9:af:42:e6:e2:a8:7c:b7: 1b:aa:08:00:f2:f5:a1:2d:2a:a6:c1:0b:12:cf:2c: f1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:3F:74:A0:E0:B8:B8:43:60:E1:EB:D8:62:3D:D7:EB:21:80:B9:D5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154957.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.148.0/24 IPv6: 2001:df7:7bc0::/48 Signature Algorithm: sha256WithRSAEncryption 1d:66:a9:26:96:19:78:75:c8:85:78:32:38:61:e8:a8:72:a0: b9:29:6d:5f:44:39:93:82:fa:6f:5d:23:b5:aa:3d:f3:f6:5d: ec:23:8b:06:07:d9:f8:17:91:c8:0b:99:eb:07:82:c7:d3:08: 3f:f9:cf:e1:3d:d3:1a:38:97:a8:6d:0e:05:cf:39:a4:8e:95: b2:8d:2e:2e:2f:61:11:7f:42:c3:6b:8a:c4:fb:82:77:e2:51: 80:69:5b:17:ad:83:12:37:65:59:5b:80:93:e3:b5:53:5b:98: 04:dc:50:f4:21:50:25:6a:99:3f:82:0d:ce:b9:81:10:76:c1: b1:95:b0:96:9c:47:57:46:9e:13:6b:c7:e1:a6:9d:86:dc:6f: c3:98:05:08:79:77:ce:62:7e:60:07:02:33:37:2f:c9:26:36: ab:fb:39:6c:ed:ea:12:22:d3:85:c2:54:f5:16:da:20:00:04: 63:3f:29:68:7b:60:af:41:15:ff:6d:d7:5f:de:7c:e5:d9:51: 32:95:67:8e:98:89:4b:23:49:78:16:ea:90:6c:df:34:9f:a5: fb:94:b6:b0:f0:2a:6a:47:35:98:1c:7f:45:92:f7:a2:b4:83: 43:b5:7d:c4:52:42:a4:e0:31:b8:0f:88:44:34:ca:66:42:27: dd:c1:17:98 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUaFrGgsD1cibBY83kquTBD6F2i0EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkyODA0MDExNFoX DTI3MDkyNzA0MDYxNFowMzExMC8GA1UEAxMoNjkzRjc0QTBFMEI4Qjg0MzYwRTFF QkQ4NjIzREQ3RUIyMTgwQjlENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMleamzGSbmu8VlTAY+KKPW7/BzPcZ0nlVbrNh813aUQP8HEYwgpYK5JkA1R VkR9/9Wb+m3trNaQ3JPybe+f/CK1Plf8g256aPlRKSjH+HnuKtIbY16pXw5rUWcY mdB+FT1HTfLpvEczlB4OtHbOexsG4Ds0DxTl39my933UNjMsHv5Fk0xY159cSPaN yh5OhK1iKrdgIUM/G5j8UBdDfCZpMmmNVcSXoXKqWokg/6SohSuEodREH1ftGgnZ TDbVWIOTq8WDKKdVW1vvcSgsPWQhJFhQIPVBW61Xc2fNl/0Y1eXohIpKJOmvQubi qHy3G6oIAPL1oS0qpsELEs8s8W8CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBRpP3Sg 4Li4Q2Dh69hiPdfrIYC51TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0OTU3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAozSUMA8EAgACMAkDBwAgAQ33e8AwDQYJKoZIhvcNAQELBQADggEBAB1m qSaWGXh1yIV4Mjhh6KhyoLkpbV9EOZOC+m9dI7WqPfP2XewjiwYH2fgXkcgLmesH gsfTCD/5z+E90xo4l6htDgXPOaSOlbKNLi4vYRF/QsNrisT7gnfiUYBpWxetgxI3 ZVlbgJPjtVNbmATcUPQhUCVqmT+CDc65gRB2wbGVsJacR1dGnhNrx+GmnYbcb8OY BQh5d85ifmAHAjM3L8kmNqv7OWzt6hIi04XCVPUW2iAABGM/KWh7YK9BFf9t11/e fOXZUTKVZ46YiUsjSXgW6pBs3zSfpfuUtrDwKmpHNZgcf0WS96K0g0O1fcRSQqTg MbgPiEQ0ymZCJ93BF5g= -----END CERTIFICATE-----Generated at Sat Oct 24 07:09:57 2026 by rpki-client