$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154208.roa File: AS154208.roa (raw, json) Hash identifier: cw2pHdmk7KZRxTlJEm9gfwjdix46KP4NhkpV6UH/JGo= Subject key identifier: 4B:88:A6:7A:C5:6C:2D:BB:51:D7:15:0F:EB:57:58:3C:03:81:5C:90 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 425692CCC433DE3020109D3790FEE953412C104A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154208.roa Signing time: Mon 02 Feb 2026 04:21:28 +0000 ROA not before: Mon 02 Feb 2026 04:16:28 +0000 ROA not after: Mon 01 Feb 2027 04:21:28 +0000 asID: 154208 IP address blocks: 202.136.82.0/23 maxlen: 24 2001:df6:14c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:56:92:cc:c4:33:de:30:20:10:9d:37:90:fe:e9:53:41:2c:10:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 2 04:16:28 2026 GMT Not After : Feb 1 04:21:28 2027 GMT Subject: CN=4B88A67AC56C2DBB51D7150FEB57583C03815C90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9e:e2:8d:80:6f:17:97:45:d1:30:a7:64:3e: 72:ad:b6:b1:a2:07:9e:a9:e8:59:4f:46:59:f4:1d: a6:3f:ad:2d:5e:a4:ac:a9:66:0a:b2:f8:ab:68:90: e5:a0:07:53:75:98:90:31:76:fb:47:88:47:2d:63: 34:17:b9:ce:af:47:41:93:4d:e0:8b:bb:1d:ae:c2: 22:6f:0d:d3:d1:95:dd:1e:a6:e6:58:ec:d9:7e:e0: cc:9e:01:bf:15:68:99:7e:28:a1:ef:56:33:31:ea: a4:04:53:e5:ae:33:f0:3a:41:0c:25:32:41:dc:56: de:00:8d:32:c3:04:6a:79:42:62:2c:f4:e1:33:42: f7:58:65:6c:42:19:5a:35:22:38:43:25:99:b6:f2: 5d:e5:db:36:90:87:4b:e6:65:1b:48:67:d4:26:26: a6:79:fd:83:12:a1:01:7c:32:11:fe:8c:b2:55:d1: b8:02:42:8b:73:a5:83:48:99:27:ca:02:fd:98:bb: d8:a9:9d:56:07:0c:2c:58:a2:b3:5d:f6:93:65:91: b2:1a:44:a6:c7:34:3b:aa:4c:49:29:8b:97:c5:cf: 35:3f:38:5d:bd:15:fe:c0:a7:ff:14:52:bc:08:2e: ea:db:2f:a8:8e:9d:9b:ed:2b:2c:5b:df:5f:a5:c2: e7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:88:A6:7A:C5:6C:2D:BB:51:D7:15:0F:EB:57:58:3C:03:81:5C:90 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154208.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.136.82.0/23 IPv6: 2001:df6:14c0::/48 Signature Algorithm: sha256WithRSAEncryption 67:38:0a:d9:bb:84:08:2e:d2:3b:5a:00:96:44:d9:35:8e:90: 6a:49:7f:d9:bb:d8:16:4d:45:ba:ec:ce:0d:c0:d6:8e:ed:14: 70:26:4a:b4:1b:7d:70:87:e1:51:e2:cf:e7:d5:ec:8f:89:c3: b1:9b:53:03:ee:ea:3b:c5:77:43:8a:99:9f:43:54:11:4e:df: fa:0f:e6:94:4c:c7:e7:71:ab:3b:36:0c:dd:67:21:e9:18:0d: 88:3c:6f:e1:3d:4b:3f:1f:59:a1:a1:42:cb:22:56:79:1d:2c: 12:73:dd:1b:1a:2f:07:33:c7:8a:40:63:e1:80:e5:22:73:91: 56:61:63:53:4e:9d:57:7b:b0:7f:6f:9c:83:a0:f3:fa:ac:b3: 61:9e:7b:7c:e5:d9:25:30:23:2e:84:12:f5:b0:e2:0e:55:18: 7a:4d:cf:ed:90:da:0d:10:6b:58:24:32:6d:ca:1c:e6:7e:7e: 44:6c:a7:11:5b:5d:4e:cf:19:16:9c:05:90:c9:c0:90:1e:95: 83:6f:7c:3e:76:45:68:18:84:a0:0e:93:4b:47:6d:b9:dd:13: 07:d2:54:4c:c4:d4:ea:4d:ab:2a:74:08:21:20:9f:a8:01:41: c1:0b:26:49:5b:4b:0c:4f:68:85:12:30:9d:a4:27:de:56:56: 6d:68:68:de -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUQlaSzMQz3jAgEJ03kP7pU0EsEEowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIwMjA0MTYyOFoX DTI3MDIwMTA0MjEyOFowMzExMC8GA1UEAxMoNEI4OEE2N0FDNTZDMkRCQjUxRDcx NTBGRUI1NzU4M0MwMzgxNUM5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMSe4o2AbxeXRdEwp2Q+cq22saIHnqnoWU9GWfQdpj+tLV6krKlmCrL4q2iQ 5aAHU3WYkDF2+0eIRy1jNBe5zq9HQZNN4Iu7Ha7CIm8N09GV3R6m5ljs2X7gzJ4B vxVomX4ooe9WMzHqpART5a4z8DpBDCUyQdxW3gCNMsMEanlCYiz04TNC91hlbEIZ WjUiOEMlmbbyXeXbNpCHS+ZlG0hn1CYmpnn9gxKhAXwyEf6MslXRuAJCi3Olg0iZ J8oC/Zi72KmdVgcMLFiis132k2WRshpEpsc0O6pMSSmLl8XPNT84Xb0V/sCn/xRS vAgu6tsvqI6dm+0rLFvfX6XC5zECAwEAAaOCAeEwggHdMB0GA1UdDgQWBBRLiKZ6 xWwtu1HXFQ/rV1g8A4FckDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDIwOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAcqIUjAPBAIAAjAJAwcAIAEN9hTAMA0GCSqGSIb3DQEBCwUAA4IB AQBnOArZu4QILtI7WgCWRNk1jpBqSX/Zu9gWTUW67M4NwNaO7RRwJkq0G31wh+FR 4s/n1eyPicOxm1MD7uo7xXdDipmfQ1QRTt/6D+aUTMfncas7NgzdZyHpGA2IPG/h PUs/H1mhoULLIlZ5HSwSc90bGi8HM8eKQGPhgOUic5FWYWNTTp1Xe7B/b5yDoPP6 rLNhnnt85dklMCMuhBL1sOIOVRh6Tc/tkNoNEGtYJDJtyhzmfn5EbKcRW11OzxkW nAWQycCQHpWDb3w+dkVoGISgDpNLR2253RMH0lRMxNTqTasqdAghIJ+oAUHBCyZJ W0sMT2iFEjCdpCfeVlZtaGje -----END CERTIFICATE-----Generated at Mon Mar 2 14:56:32 2026 by rpki-client