$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154962.roa File: AS154962.roa (raw, json) Hash identifier: b1o17HdzY4fIr79Yb4WzoNcrzfyLUBLJzg/19fa/EAs= Subject key identifier: 2E:1D:6A:61:8B:D0:0D:0E:AA:38:DF:A6:1F:BE:3B:1C:4F:6F:36:D9 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 75465660B11DA3359E038CE8491C34FC789743D2 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154962.roa Signing time: Tue 29 Sep 2026 06:26:16 +0000 ROA not before: Tue 29 Sep 2026 06:21:16 +0000 ROA not after: Tue 28 Sep 2027 06:26:16 +0000 asID: 154962 IP address blocks: 2001:df7:98c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:46:56:60:b1:1d:a3:35:9e:03:8c:e8:49:1c:34:fc:78:97:43:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 29 06:21:16 2026 GMT Not After : Sep 28 06:26:16 2027 GMT Subject: CN=2E1D6A618BD00D0EAA38DFA61FBE3B1C4F6F36D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:39:b3:09:57:5c:c6:8d:e5:96:88:2c:53:1d: bf:85:0f:48:e0:9f:df:17:2e:b8:ff:d8:d3:e9:00: da:79:4f:a9:0f:d1:c5:b3:f5:8b:36:15:10:3a:27: 65:78:ed:a2:8e:4b:2f:f5:66:17:00:af:de:5f:3d: b5:80:e4:f0:a7:2d:c1:c3:b8:71:32:1f:ae:d1:33: eb:0a:1a:39:a3:db:79:49:da:2e:90:ca:74:73:85: 48:90:ea:2e:f6:b2:0a:ba:f2:87:34:2b:ca:ed:4b: 48:d3:31:26:07:42:ea:72:66:8e:ed:5f:17:91:c1: 24:aa:20:93:45:ec:88:00:9b:90:6d:50:12:bc:8a: 06:e6:4e:ad:53:ea:05:7d:63:86:cf:4c:65:5f:cc: df:46:79:72:e3:34:83:b3:74:bb:35:17:92:0e:31: a2:73:5c:46:09:34:1f:04:c7:09:ba:59:26:b0:02: bc:33:0e:1b:8a:74:8c:f7:9d:50:a2:33:6b:9d:95: 92:96:77:bc:ac:9f:ac:eb:e0:f3:f8:52:fa:47:89: 46:1b:55:ff:d6:86:f1:6b:2e:d3:d7:69:40:9d:24: 81:96:1e:36:ea:af:78:77:7a:30:72:91:60:c0:74: 63:43:7a:4a:95:a4:f0:58:30:29:a7:31:c7:91:18: 18:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1D:6A:61:8B:D0:0D:0E:AA:38:DF:A6:1F:BE:3B:1C:4F:6F:36:D9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154962.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:98c0::/48 Signature Algorithm: sha256WithRSAEncryption 05:d5:ec:e1:bb:b1:17:45:3a:cc:f3:2f:c9:02:df:c2:71:e0: 56:e4:a5:f7:93:fa:6e:d5:23:27:03:ae:8c:dc:89:02:de:a6: 62:a3:ee:08:62:f8:01:b6:4a:35:82:fb:8f:38:5a:0e:e5:5d: 60:15:f3:20:52:b3:08:0b:3f:53:2f:3c:d9:7c:32:90:50:85: f6:cd:9b:7d:49:16:5e:41:ec:0e:b1:de:b8:d4:0d:e7:14:3f: 71:3d:46:3c:f2:a2:b4:75:e0:d5:c8:7a:39:38:a5:21:07:a9: a5:1f:ad:9d:24:71:82:a9:13:d5:5e:63:6e:20:5a:93:f7:7c: 98:ec:a6:4a:0c:05:10:8d:e5:dd:94:70:10:5e:64:dc:b3:bd: 05:68:54:49:1d:a8:eb:ca:ef:c8:b2:16:b5:ce:bd:57:6c:5d: bb:90:fc:ad:29:c5:23:84:ff:20:a9:05:c2:06:c7:77:30:d5: 1e:44:b2:e8:df:9b:ac:47:37:d8:97:da:ac:ab:4e:ec:61:89: 7e:37:21:9a:26:7c:12:c5:a3:f2:2c:f1:bf:e9:fd:10:4a:93: 3b:84:11:42:95:0c:ce:0d:88:96:57:d3:14:18:2d:f4:9f:52: 45:c8:e3:19:2d:dc:5c:2b:68:a0:72:ee:b7:1f:0d:10:2d:93: 73:df:b9:91 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUdUZWYLEdozWeA4zoSRw0/HiXQ9IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkyOTA2MjExNloX DTI3MDkyODA2MjYxNlowMzExMC8GA1UEAxMoMkUxRDZBNjE4QkQwMEQwRUFBMzhE RkE2MUZCRTNCMUM0RjZGMzZEOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOw5swlXXMaN5ZaILFMdv4UPSOCf3xcuuP/Y0+kA2nlPqQ/RxbP1izYVEDon ZXjtoo5LL/VmFwCv3l89tYDk8KctwcO4cTIfrtEz6woaOaPbeUnaLpDKdHOFSJDq LvayCrryhzQryu1LSNMxJgdC6nJmju1fF5HBJKogk0XsiACbkG1QEryKBuZOrVPq BX1jhs9MZV/M30Z5cuM0g7N0uzUXkg4xonNcRgk0HwTHCbpZJrACvDMOG4p0jPed UKIza52VkpZ3vKyfrOvg8/hS+keJRhtV/9aG8Wsu09dpQJ0kgZYeNuqveHd6MHKR YMB0Y0N6SpWk8FgwKacxx5EYGJsCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQuHWph i9ANDqo436YfvjscT2822TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0OTYyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN95jAMA0GCSqGSIb3DQEBCwUAA4IBAQAF1ezhu7EXRTrM8y/JAt/C ceBW5KX3k/pu1SMnA66M3IkC3qZio+4IYvgBtko1gvuPOFoO5V1gFfMgUrMICz9T LzzZfDKQUIX2zZt9SRZeQewOsd641A3nFD9xPUY88qK0deDVyHo5OKUhB6mlH62d JHGCqRPVXmNuIFqT93yY7KZKDAUQjeXdlHAQXmTcs70FaFRJHajryu/Isha1zr1X bF27kPytKcUjhP8gqQXCBsd3MNUeRLLo35usRzfYl9qsq07sYYl+NyGaJnwSxaPy LPG/6f0QSpM7hBFClQzODYiWV9MUGC30n1JFyOMZLdxcK2igcu63Hw0QLZNz37mR -----END CERTIFICATE-----Generated at Sat Oct 24 07:09:58 2026 by rpki-client