$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS38154.roa File: AS38154.roa (raw, json) Hash identifier: IoLVYXEoRGmSYgKxXki9OlGO/Z/gbwvLa9Lyeutsvx8= Subject key identifier: B5:AD:02:4C:25:A0:BD:0C:BE:A7:2B:96:3C:79:5F:E9:14:5C:CF:8D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3F333B58FB7CD3308CA21122E2315197F7206D00 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38154.roa Signing time: Sat 02 May 2026 21:32:27 +0000 ROA not before: Sat 02 May 2026 21:27:27 +0000 ROA not after: Sat 01 May 2027 21:32:27 +0000 asID: 38154 IP address blocks: 2401:78a0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:33:3b:58:fb:7c:d3:30:8c:a2:11:22:e2:31:51:97:f7:20:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:27:27 2026 GMT Not After : May 1 21:32:27 2027 GMT Subject: CN=B5AD024C25A0BD0CBEA72B963C795FE9145CCF8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:71:f9:ca:07:7b:a8:d8:76:72:8b:c2:c0:21: e8:ac:16:40:8e:8b:cd:be:3a:12:88:3b:9b:d6:bd: 27:a2:9a:c8:d3:fd:30:ee:4d:c9:ae:f8:26:27:e6: 65:35:91:b2:ed:0e:55:13:32:ed:09:c0:12:a1:12: 9d:9a:f9:7e:44:73:bc:eb:a6:fa:a1:88:76:25:98: 23:f8:a9:f7:78:a0:53:a5:d9:00:f5:60:cc:7b:0f: 09:c1:92:27:d5:cf:c9:db:64:6b:87:15:a0:b9:a5: f8:3a:d7:fe:88:df:19:a8:19:cb:a9:f9:2a:ee:00: 3a:38:52:74:3a:cc:06:b8:20:b1:09:f9:bf:a8:54: 9e:01:f3:5b:35:cf:61:ad:fc:66:ce:4b:b4:7d:69: 5d:9d:1c:f2:bf:48:a8:aa:99:05:69:fb:73:0e:b4: 95:9f:fd:6b:49:21:cf:cd:49:00:c2:2e:1e:a8:c3: 2f:67:60:d9:10:6b:df:00:d6:92:cf:d3:99:92:54: d8:7e:24:3e:cd:f7:42:9c:e6:05:50:e5:81:6c:08: 4e:53:8d:5f:15:af:88:a2:ba:fc:f9:f8:1e:c6:11: 75:a3:c3:69:87:8e:a2:6f:65:64:1c:68:1b:d3:a8: ab:0c:91:3e:2c:16:a5:34:9f:7c:86:b1:99:b6:e9: c7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AD:02:4C:25:A0:BD:0C:BE:A7:2B:96:3C:79:5F:E9:14:5C:CF:8D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38154.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:78a0::/32 Signature Algorithm: sha256WithRSAEncryption 7f:69:02:76:b6:44:ae:77:6b:71:21:6f:4a:b6:2e:b2:62:d1: f6:52:58:e9:e8:dd:46:f3:8a:98:d4:ab:1a:a5:49:07:30:38: 39:21:3f:c2:07:72:62:6b:c9:84:27:1b:8d:8c:70:a7:c4:03: 14:80:74:7a:c9:26:da:d2:7e:7a:01:69:69:fd:5b:a2:01:cd: f8:36:ea:49:22:10:49:f0:83:e6:50:66:d0:09:64:ed:66:d4: ed:90:8c:08:c8:e9:a4:f0:b4:90:95:a7:e1:6a:24:9c:3b:19: 57:a5:36:b5:d0:0c:2e:19:0e:22:5e:46:5a:05:c4:6e:b8:e9: fa:3b:f3:c4:39:6d:9f:a0:6e:44:18:cc:03:aa:b0:cc:79:8e: 31:15:11:fd:46:1e:57:46:ea:b6:5e:cd:05:7c:06:19:98:60: 16:9c:be:c8:ae:ae:89:77:5d:3b:32:8b:06:7f:df:01:a5:b3: 7b:2d:1f:5b:c3:04:90:34:22:1a:75:82:ac:0c:7e:6b:0a:00: 90:cd:4e:70:80:9d:ef:93:89:a6:0b:d8:fc:80:b1:bd:3d:a2: 9f:55:e4:d5:c5:13:72:19:c0:4a:79:ea:74:31:48:1a:24:c0: 03:4f:fb:89:85:a3:9b:11:f8:94:cb:19:41:10:5e:8d:30:f8: 8d:b7:2b:7f -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUPzM7WPt80zCMohEi4jFRl/cgbQAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjcyN1oX DTI3MDUwMTIxMzIyN1owMzExMC8GA1UEAxMoQjVBRDAyNEMyNUEwQkQwQ0JFQTcy Qjk2M0M3OTVGRTkxNDVDQ0Y4RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALNx+coHe6jYdnKLwsAh6KwWQI6Lzb46Eog7m9a9J6KayNP9MO5Nya74Jifm ZTWRsu0OVRMy7QnAEqESnZr5fkRzvOum+qGIdiWYI/ip93igU6XZAPVgzHsPCcGS J9XPydtka4cVoLml+DrX/ojfGagZy6n5Ku4AOjhSdDrMBrggsQn5v6hUngHzWzXP Ya38Zs5LtH1pXZ0c8r9IqKqZBWn7cw60lZ/9a0khz81JAMIuHqjDL2dg2RBr3wDW ks/TmZJU2H4kPs33QpzmBVDlgWwITlONXxWviKK6/Pn4HsYRdaPDaYeOom9lZBxo G9OoqwyRPiwWpTSffIaxmbbpxyMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBS1rQJM JaC9DL6nK5Y8eV/pFFzPjTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMzgxNTQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkAXigMA0GCSqGSIb3DQEBCwUAA4IBAQB/aQJ2tkSud2txIW9Kti6yYtH2 Uljp6N1G84qY1KsapUkHMDg5IT/CB3Jia8mEJxuNjHCnxAMUgHR6ySba0n56AWlp /VuiAc34NupJIhBJ8IPmUGbQCWTtZtTtkIwIyOmk8LSQlafhaiScOxlXpTa10Awu GQ4iXkZaBcRuuOn6O/PEOW2foG5EGMwDqrDMeY4xFRH9Rh5XRuq2Xs0FfAYZmGAW nL7Irq6Jd107MosGf98BpbN7LR9bwwSQNCIadYKsDH5rCgCQzU5wgJ3vk4mmC9j8 gLG9PaKfVeTVxRNyGcBKeep0MUgaJMADT/uJhaObEfiUyxlBEF6NMPiNtyt/ -----END CERTIFICATE-----Generated at Sun May 3 00:40:23 2026 by rpki-client