$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154958.roa File: AS154958.roa (raw, json) Hash identifier: S+XGasK0hrS9qC6RxGCAyjEsDoqVs2QPcBM3u6iP3pY= Subject key identifier: 1E:69:CB:30:55:1D:37:89:EF:71:BE:86:48:7B:CC:A8:A1:21:A3:0B Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3B265BD2A96DC5835307C3D572D35DEEDBAC7251 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154958.roa Signing time: Wed 07 Oct 2026 06:59:59 +0000 ROA not before: Wed 07 Oct 2026 06:54:59 +0000 ROA not after: Wed 06 Oct 2027 06:59:59 +0000 asID: 154958 IP address blocks: 2001:df7:9a40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:26:5b:d2:a9:6d:c5:83:53:07:c3:d5:72:d3:5d:ee:db:ac:72:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 7 06:54:59 2026 GMT Not After : Oct 6 06:59:59 2027 GMT Subject: CN=1E69CB30551D3789EF71BE86487BCCA8A121A30B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:90:c4:54:23:80:49:a6:46:a4:c4:f6:59:a4: d5:2f:95:f3:c9:bd:b8:51:6b:12:59:d1:68:e4:74: 8d:11:60:2c:67:fb:9a:58:41:24:8d:12:ca:7f:f7: ed:5d:ff:69:07:05:c0:31:34:b5:bd:04:8a:56:b0: 5d:d8:08:64:bf:c2:27:aa:28:1c:95:19:e7:80:dd: 64:92:03:3d:47:09:eb:2d:04:79:d2:5a:d9:a6:d8: ed:ce:df:df:fb:a7:12:99:37:e9:4b:40:c8:2c:bf: c0:3c:bb:a4:5f:0f:de:60:1b:a9:3b:65:e0:09:f1: 52:c9:ff:ca:6d:fb:4e:d2:43:f0:ef:b9:e4:86:05: a5:0a:bc:04:d6:8d:f0:ee:c9:d0:7e:7a:ea:bd:83: a2:e1:7a:45:20:c0:3a:aa:ef:6b:0c:1d:fd:88:90: 31:93:99:aa:82:b1:27:4c:f6:ba:81:b4:05:79:6b: 74:e0:dc:27:2d:0a:ff:dd:d8:1c:a1:0d:47:a3:31: 90:48:87:b8:41:38:29:9a:54:ef:42:63:8a:6c:4a: ec:fa:b7:b2:23:62:6f:51:15:f1:c3:f5:00:b6:0c: 92:5d:59:82:4c:9f:ab:39:45:26:02:16:00:27:0e: 02:e9:ad:38:68:c9:7e:eb:27:ca:2e:df:64:9c:04: 4e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:69:CB:30:55:1D:37:89:EF:71:BE:86:48:7B:CC:A8:A1:21:A3:0B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154958.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:9a40::/48 Signature Algorithm: sha256WithRSAEncryption 11:84:fa:b9:20:bb:e5:09:27:9e:d2:02:3e:85:75:9b:a6:ca: 18:c1:3c:ec:e9:83:ef:fb:9d:3c:aa:4b:ee:67:5c:dc:eb:f7: 95:09:3f:73:6b:8f:3a:6f:46:e9:e9:f1:79:d5:58:96:42:ee: 52:bd:3f:7d:88:d1:89:0d:d9:c4:bd:d9:d1:9e:d2:d7:a9:40: 63:ef:ba:a7:52:ee:ba:70:cf:25:da:ad:e9:13:eb:7f:8b:41: 53:11:cb:81:3c:82:aa:86:db:5f:94:ff:3d:33:29:2c:94:05: ff:ab:10:c4:f5:4d:64:c1:eb:88:1e:44:0c:4c:50:db:b3:6f: 42:62:6c:aa:4c:e0:72:48:0d:b2:52:69:dd:13:8a:d5:82:7c: 99:97:16:5b:f4:f0:ea:d6:9c:4f:94:e9:0f:eb:b5:75:3d:02: ea:ab:a3:c7:56:29:9e:3b:7a:d8:20:bf:28:8d:bd:19:54:14: 72:17:17:00:19:15:2b:89:5f:bb:62:26:fa:95:7d:a1:e9:b5: 3c:46:6d:56:c9:2c:e5:b4:41:d4:e8:21:79:f1:6e:e2:89:18: 65:1d:af:af:7e:0c:af:39:87:41:6d:21:b5:9b:07:a3:9f:15: 2c:dd:c5:3c:b2:42:b0:3c:47:5a:dd:68:a8:3e:a1:20:ac:7a: be:0c:cb:32 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUOyZb0qltxYNTB8PVctNd7tusclEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAwNzA2NTQ1OVoX DTI3MTAwNjA2NTk1OVowMzExMC8GA1UEAxMoMUU2OUNCMzA1NTFEMzc4OUVGNzFC RTg2NDg3QkNDQThBMTIxQTMwQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWQxFQjgEmmRqTE9lmk1S+V88m9uFFrElnRaOR0jRFgLGf7mlhBJI0Syn/3 7V3/aQcFwDE0tb0EilawXdgIZL/CJ6ooHJUZ54DdZJIDPUcJ6y0EedJa2abY7c7f 3/unEpk36UtAyCy/wDy7pF8P3mAbqTtl4AnxUsn/ym37TtJD8O+55IYFpQq8BNaN 8O7J0H566r2DouF6RSDAOqrvawwd/YiQMZOZqoKxJ0z2uoG0BXlrdODcJy0K/93Y HKENR6MxkEiHuEE4KZpU70JjimxK7Pq3siNib1EV8cP1ALYMkl1ZgkyfqzlFJgIW ACcOAumtOGjJfusnyi7fZJwETgMCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQeacsw VR03ie9xvoZIe8yooSGjCzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0OTU4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN95pAMA0GCSqGSIb3DQEBCwUAA4IBAQARhPq5ILvlCSee0gI+hXWb psoYwTzs6YPv+508qkvuZ1zc6/eVCT9za486b0bp6fF51ViWQu5SvT99iNGJDdnE vdnRntLXqUBj77qnUu66cM8l2q3pE+t/i0FTEcuBPIKqhttflP89MykslAX/qxDE 9U1kweuIHkQMTFDbs29CYmyqTOBySA2yUmndE4rVgnyZlxZb9PDq1pxPlOkP67V1 PQLqq6PHVimeO3rYIL8ojb0ZVBRyFxcAGRUriV+7Yib6lX2h6bU8Rm1WySzltEHU 6CF58W7iiRhlHa+vfgyvOYdBbSG1mwejnxUs3cU8skKwPEda3WioPqEgrHq+DMsy -----END CERTIFICATE-----Generated at Sat Oct 24 07:09:56 2026 by rpki-client