$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154078.roa File: AS154078.roa (raw, json) Hash identifier: zhsK9Omkrcu6X6BCWJ78nAHcF+6oRj2DtdySQ5rnm8Q= Subject key identifier: EC:9F:4C:4E:AF:F2:DF:8D:9C:E1:C0:B0:4E:C8:F3:42:A7:76:E1:9B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5A53D1EEFE657B613D3EFC8C096C50CFE514DF92 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154078.roa Signing time: Sat 28 Mar 2026 07:03:51 +0000 ROA not before: Sat 28 Mar 2026 06:58:51 +0000 ROA not after: Sat 27 Mar 2027 07:03:51 +0000 asID: 154078 IP address blocks: 2001:df5:e640::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 00:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:53:d1:ee:fe:65:7b:61:3d:3e:fc:8c:09:6c:50:cf:e5:14:df:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 28 06:58:51 2026 GMT Not After : Mar 27 07:03:51 2027 GMT Subject: CN=EC9F4C4EAFF2DF8D9CE1C0B04EC8F342A776E19B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:37:b5:09:2d:a2:40:fe:e7:cb:60:b1:87:f2: 77:cc:b4:56:a7:4b:4d:26:c6:d3:05:99:aa:29:78: 6e:f9:13:02:01:c5:43:54:b5:6b:d0:71:73:8f:33: b2:5c:f8:70:96:e7:2f:a0:10:f7:1f:4c:2c:92:fe: 2c:e1:41:8f:8d:cd:37:48:be:ff:11:09:21:20:15: 7f:40:af:e1:8e:82:fa:0f:35:bd:d7:03:64:9f:d2: a9:27:64:b6:14:41:92:52:6a:1e:ac:e3:c5:57:4f: 9f:ac:74:02:9f:b0:15:71:b0:fa:2b:74:c9:1d:7a: 0c:03:81:bd:75:fc:76:9f:93:0b:ff:a2:91:ab:bb: f6:3d:91:0c:51:80:b8:0e:ab:7f:5b:08:81:3d:95: 20:12:e8:85:3a:41:3c:38:7f:51:f6:f6:58:07:f4: e6:3d:a1:2e:3c:23:3b:cb:16:99:fb:94:af:92:c1: 5f:fe:8e:7d:9a:22:0b:fe:f6:da:d0:57:bb:61:06: f3:b3:29:f0:c6:7b:69:fe:00:c0:1f:0c:fc:62:f1: 56:32:ba:cf:50:68:be:3a:e0:31:96:b9:43:e1:fe: 34:7e:7b:a4:38:98:3b:00:d7:78:f7:7b:22:62:83: 2b:cb:ca:ff:aa:bc:05:8e:53:bb:40:4f:9b:89:86: c2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9F:4C:4E:AF:F2:DF:8D:9C:E1:C0:B0:4E:C8:F3:42:A7:76:E1:9B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154078.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:e640::/48 Signature Algorithm: sha256WithRSAEncryption 44:a7:d1:55:44:d0:58:cd:bd:d0:ee:35:7b:c6:9b:dd:cc:05: de:f4:4a:d5:cd:c1:d6:c4:40:03:b3:3d:45:ed:26:91:dc:4f: 64:b8:56:0c:91:ba:0d:18:a2:2b:7d:d3:97:2e:a5:4e:fc:90: 92:38:42:f2:f0:b9:73:6f:29:43:f9:8f:47:16:c9:81:50:22: 0f:a2:84:2a:b5:46:e4:5d:9a:65:f8:09:98:c5:98:4b:76:32: f9:7e:95:2f:f3:e1:10:51:23:6c:50:56:72:94:9c:48:29:ec: fe:73:ec:d4:3b:c3:e0:d7:fa:1c:7e:bb:5c:48:45:61:53:2a: b7:9c:c2:05:38:4d:ad:ed:fc:13:f9:e3:4a:5e:43:0c:0e:5a: bc:82:76:9b:12:c4:99:7f:61:14:4f:19:9a:fb:8a:e2:a3:5d: 3f:ef:bc:aa:93:a6:67:07:0c:d8:23:85:02:3d:9d:0c:06:2b: 5f:5d:13:40:92:1d:9a:97:4a:43:32:06:17:b6:29:1f:05:39: 5b:94:99:86:6b:9f:74:4b:d1:69:81:8d:f8:10:32:6a:8c:1e: f9:e1:84:38:e8:0d:31:db:f1:66:d9:33:c9:df:a5:c9:85:74: 03:3c:93:a2:11:95:7b:48:10:a8:cf:20:ac:f9:67:00:51:48: 8a:1d:64:12 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUWlPR7v5le2E9PvyMCWxQz+UU35IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMyODA2NTg1MVoX DTI3MDMyNzA3MDM1MVowMzExMC8GA1UEAxMoRUM5RjRDNEVBRkYyREY4RDlDRTFD MEIwNEVDOEYzNDJBNzc2RTE5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALU3tQktokD+58tgsYfyd8y0VqdLTSbG0wWZqil4bvkTAgHFQ1S1a9Bxc48z slz4cJbnL6AQ9x9MLJL+LOFBj43NN0i+/xEJISAVf0Cv4Y6C+g81vdcDZJ/SqSdk thRBklJqHqzjxVdPn6x0Ap+wFXGw+it0yR16DAOBvXX8dp+TC/+ikau79j2RDFGA uA6rf1sIgT2VIBLohTpBPDh/Ufb2WAf05j2hLjwjO8sWmfuUr5LBX/6OfZoiC/72 2tBXu2EG87Mp8MZ7af4AwB8M/GLxVjK6z1BovjrgMZa5Q+H+NH57pDiYOwDXePd7 ImKDK8vK/6q8BY5Tu0BPm4mGwnMCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBTsn0xO r/LfjZzhwLBOyPNCp3bhmzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDA3OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfXmQDANBgkqhkiG9w0BAQsFAAOCAQEARKfRVUTQWM290O41 e8ab3cwF3vRK1c3B1sRAA7M9Re0mkdxPZLhWDJG6DRiiK33Tly6lTvyQkjhC8vC5 c28pQ/mPRxbJgVAiD6KEKrVG5F2aZfgJmMWYS3Yy+X6VL/PhEFEjbFBWcpScSCns /nPs1DvD4Nf6HH67XEhFYVMqt5zCBThNre38E/njSl5DDA5avIJ2mxLEmX9hFE8Z mvuK4qNdP++8qpOmZwcM2COFAj2dDAYrX10TQJIdmpdKQzIGF7YpHwU5W5SZhmuf dEvRaYGN+BAyaowe+eGEOOgNMdvxZtkzyd+lyYV0AzyTohGVe0gQqM8grPlnAFFI ih1kEg== -----END CERTIFICATE-----Generated at Fri Apr 17 16:02:50 2026 by rpki-client