$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154963.roa File: AS154963.roa (raw, json) Hash identifier: snAP4Qs81P6DrUUoB40GiR9x8wdbM9iCvhL7uBV5/dc= Subject key identifier: 89:97:AD:09:02:62:EC:25:03:7F:CE:F6:25:52:6C:D8:FE:59:64:88 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 320A9A76AF9147DEB545331F8DF029DB287ABDA9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154963.roa Signing time: Tue 29 Sep 2026 06:40:06 +0000 ROA not before: Tue 29 Sep 2026 06:35:06 +0000 ROA not after: Tue 28 Sep 2027 06:40:06 +0000 asID: 154963 IP address blocks: 2001:df7:9940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:0a:9a:76:af:91:47:de:b5:45:33:1f:8d:f0:29:db:28:7a:bd:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 29 06:35:06 2026 GMT Not After : Sep 28 06:40:06 2027 GMT Subject: CN=8997AD090262EC25037FCEF625526CD8FE596488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6e:44:9a:1a:fb:2f:76:ce:96:44:c1:e4:c6: 25:f9:55:4b:0d:3e:e9:e9:fe:a4:69:37:b7:13:f9: cc:e7:2d:23:d0:44:9a:86:2c:19:39:1d:d3:ae:63: 98:a1:28:72:8c:39:af:58:f5:35:af:36:95:9f:c2: d3:d4:a9:34:d5:cd:d9:53:1e:98:bf:b2:f0:d6:81: 70:4f:7a:61:47:6d:bc:34:b2:95:db:15:08:c8:1d: 14:ef:d4:aa:1c:8e:66:e4:21:de:b6:4d:aa:2c:3b: 96:41:77:cd:3f:a3:3b:b9:22:d2:e1:17:c6:28:e4: 8f:2c:29:fb:ef:82:50:6b:02:f8:35:56:23:99:c4: ee:ab:ac:db:1a:ea:20:93:c0:2f:cd:a5:4a:71:06: 0d:25:94:db:4f:25:ed:dc:91:77:92:a5:92:68:ef: 17:f6:a4:33:9f:6d:e7:6c:58:90:cc:f6:84:af:b2: 01:7a:ab:8c:6d:1b:46:ff:be:bc:b3:c8:c1:b4:f8: 0c:b5:a0:0d:3c:b6:f0:b9:4d:28:7a:7e:0c:b7:cc: eb:46:32:d2:39:db:37:47:41:94:56:eb:02:a8:1f: 91:4d:8b:fa:2a:55:d2:6d:f4:ea:61:38:d9:d8:e0: 8b:48:38:c7:38:76:27:85:e2:3a:93:03:68:8e:0b: 12:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:97:AD:09:02:62:EC:25:03:7F:CE:F6:25:52:6C:D8:FE:59:64:88 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154963.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:9940::/48 Signature Algorithm: sha256WithRSAEncryption 1c:6f:03:8b:a0:19:b4:7c:cf:e6:e3:3a:4c:f7:6b:be:61:31: 1b:77:c5:42:9e:47:e4:c5:e6:13:3d:2b:17:37:20:25:8a:19: ad:a2:7e:2b:5a:0f:f3:32:4d:5e:6b:d5:31:41:e3:4d:c7:07: aa:6a:e9:92:f9:67:fb:16:19:e0:ba:9c:9c:ca:e7:df:ea:89: 7d:96:2d:f4:b3:b6:20:d9:52:f3:67:1c:b7:a5:dd:e8:53:d2: ff:bd:22:b0:58:78:b4:48:d4:4f:f9:2a:d2:78:af:d7:da:6a: 4a:24:28:d6:27:a5:b0:56:05:0d:58:0c:83:dc:8a:79:54:03: 9b:ef:3f:ca:61:b5:c4:41:4b:5d:ae:90:0b:9a:54:0f:45:8a: e4:41:92:26:72:f3:40:f0:07:60:ab:6d:de:c7:9c:4a:c0:2f: fd:d1:93:bf:3a:86:0f:ef:fa:03:c3:0c:c0:de:6e:03:f6:2b: 68:0e:9d:23:59:c0:95:72:c9:6d:42:43:d6:8b:02:53:f2:1d: 68:9c:c0:c7:50:84:6c:53:46:38:10:b8:92:48:aa:fc:91:2f: f2:99:9c:d4:7d:7c:c3:a2:31:08:ed:6b:89:e5:1b:dd:d9:1f: db:b6:e4:40:0a:07:00:38:e9:f8:71:c7:6c:c5:f5:fa:27:63: 2e:7a:81:60 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUMgqadq+RR961RTMfjfAp2yh6vakwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkyOTA2MzUwNloX DTI3MDkyODA2NDAwNlowMzExMC8GA1UEAxMoODk5N0FEMDkwMjYyRUMyNTAzN0ZD RUY2MjU1MjZDRDhGRTU5NjQ4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9uRJoa+y92zpZEweTGJflVSw0+6en+pGk3txP5zOctI9BEmoYsGTkd065j mKEocow5r1j1Na82lZ/C09SpNNXN2VMemL+y8NaBcE96YUdtvDSyldsVCMgdFO/U qhyOZuQh3rZNqiw7lkF3zT+jO7ki0uEXxijkjywp+++CUGsC+DVWI5nE7qus2xrq IJPAL82lSnEGDSWU208l7dyRd5KlkmjvF/akM59t52xYkMz2hK+yAXqrjG0bRv++ vLPIwbT4DLWgDTy28LlNKHp+DLfM60Yy0jnbN0dBlFbrAqgfkU2L+ipV0m306mE4 2djgi0g4xzh2J4XiOpMDaI4LEncCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBSJl60J AmLsJQN/zvYlUmzY/llkiDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0OTYzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN95lAMA0GCSqGSIb3DQEBCwUAA4IBAQAcbwOLoBm0fM/m4zpM92u+ YTEbd8VCnkfkxeYTPSsXNyAlihmton4rWg/zMk1ea9UxQeNNxweqaumS+Wf7Fhng upycyuff6ol9li30s7Yg2VLzZxy3pd3oU9L/vSKwWHi0SNRP+SrSeK/X2mpKJCjW J6WwVgUNWAyD3Ip5VAOb7z/KYbXEQUtdrpALmlQPRYrkQZImcvNA8Adgq23ex5xK wC/90ZO/OoYP7/oDwwzA3m4D9itoDp0jWcCVcsltQkPWiwJT8h1onMDHUIRsU0Y4 ELiSSKr8kS/ymZzUfXzDojEI7WuJ5Rvd2R/btuRACgcAOOn4ccdsxfX6J2MueoFg -----END CERTIFICATE-----Generated at Sat Oct 24 07:09:53 2026 by rpki-client