$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154210.roa File: AS154210.roa (raw, json) Hash identifier: IVm8TqkNGLTlxJkW7ozFtcenHpYIurJx1p7MzC8ojmk= Subject key identifier: 67:81:85:87:4D:D8:F0:28:EE:49:EA:D9:73:84:B0:00:1E:D4:39:17 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0C66E3C0612C7D4F0DA957B97B09D29F88AD0463 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154210.roa Signing time: Wed 08 Apr 2026 06:38:36 +0000 ROA not before: Wed 08 Apr 2026 06:33:36 +0000 ROA not after: Wed 07 Apr 2027 06:38:36 +0000 asID: 154210 IP address blocks: 163.128.53.0/24 maxlen: 24 203.16.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 05:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:66:e3:c0:61:2c:7d:4f:0d:a9:57:b9:7b:09:d2:9f:88:ad:04:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 8 06:33:36 2026 GMT Not After : Apr 7 06:38:36 2027 GMT Subject: CN=678185874DD8F028EE49EAD97384B0001ED43917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bc:e0:00:dc:78:9a:f7:1e:de:df:61:c3:ad: 73:0a:b1:51:bb:5e:8a:96:07:10:4b:10:84:ba:f0: f9:96:3c:2c:e9:a7:2c:e7:be:a8:c8:c8:72:c8:d1: 5a:8b:96:02:c3:89:1e:e0:ed:e2:8c:c7:47:ba:0f: 17:27:25:c0:f4:78:e3:95:14:9f:8d:08:06:4d:65: 07:4b:8b:6f:14:f6:53:9f:1a:af:11:34:bd:f6:22: ed:8d:73:0b:d1:c4:25:97:32:27:93:48:cd:18:06: e2:28:60:9c:21:41:68:43:74:12:a7:b1:e8:2f:16: dd:33:d1:24:4d:f3:db:f1:d6:fe:4f:7e:fc:c2:7e: a6:63:95:51:7b:fc:05:9c:f5:4e:b8:a8:ee:ed:f0: 6e:ac:59:c3:cd:6b:4f:97:08:2f:15:a0:aa:3c:cc: 5f:02:05:7f:ee:86:8f:39:04:56:9c:83:a1:ac:ad: cb:bf:33:45:b0:fb:a7:28:ff:9c:86:07:70:0c:77: d6:4c:46:01:c9:3f:28:e1:1d:b1:20:6e:c3:91:9c: 94:62:16:e0:bf:ac:9c:e1:28:e6:31:27:13:45:14: 69:50:da:07:e5:3f:66:d9:45:3f:4d:d3:b3:0c:d8: 27:cb:10:41:d9:a9:76:ec:fb:07:16:60:d3:0e:c2: 4a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:81:85:87:4D:D8:F0:28:EE:49:EA:D9:73:84:B0:00:1E:D4:39:17 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154210.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.128.53.0/24 203.16.11.0/24 Signature Algorithm: sha256WithRSAEncryption 16:90:67:c0:42:02:97:70:79:c1:74:28:ba:0b:ea:21:45:d3: 9b:9e:7e:09:b6:3d:f9:9a:9d:0b:b6:c3:2e:d6:23:e6:e0:ec: a6:7c:31:34:18:56:e6:c0:6d:e2:cb:f3:54:be:06:3c:a0:3d: cc:f2:b8:e0:85:68:4b:e2:c1:c3:59:7f:9a:f1:eb:6d:47:1e: a6:28:78:e8:1a:aa:b1:b0:9a:b0:1f:28:bb:ff:d1:52:9a:68: 7a:ac:99:b4:b6:d8:72:5d:26:75:ec:28:96:91:66:ee:e4:80: f8:1e:44:c1:61:47:d1:65:8f:c1:ee:cd:2c:f1:49:84:21:73: 2d:d2:e1:43:61:bc:bb:3d:ca:0c:25:66:b1:84:b6:8d:61:2f: 10:55:df:f6:5f:c9:e1:ee:72:29:5b:70:a9:a4:a4:00:d1:62: f0:f8:09:f0:51:44:0e:da:f1:f0:b1:fe:da:61:6b:53:71:f5: a8:a8:1a:e3:5c:37:fc:84:50:7d:69:a1:4b:29:61:a9:c6:e2: b7:18:e9:32:de:d6:27:ba:34:bb:98:5c:58:83:28:ff:4e:c9: 6d:c8:5c:95:b0:82:24:88:71:a2:9c:88:8b:f8:d8:ff:bf:0b: 4e:96:8f:0a:10:53:84:64:e8:ce:3c:e6:fc:5c:9d:9b:2d:f2: b1:77:9c:13 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUDGbjwGEsfU8NqVe5ewnSn4itBGMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQwODA2MzMzNloX DTI3MDQwNzA2MzgzNlowMzExMC8GA1UEAxMoNjc4MTg1ODc0REQ4RjAyOEVFNDlF QUQ5NzM4NEIwMDAxRUQ0MzkxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJu84ADceJr3Ht7fYcOtcwqxUbteipYHEEsQhLrw+ZY8LOmnLOe+qMjIcsjR WouWAsOJHuDt4ozHR7oPFyclwPR445UUn40IBk1lB0uLbxT2U58arxE0vfYi7Y1z C9HEJZcyJ5NIzRgG4ihgnCFBaEN0Eqex6C8W3TPRJE3z2/HW/k9+/MJ+pmOVUXv8 BZz1Trio7u3wbqxZw81rT5cILxWgqjzMXwIFf+6GjzkEVpyDoayty78zRbD7pyj/ nIYHcAx31kxGAck/KOEdsSBuw5GclGIW4L+snOEo5jEnE0UUaVDaB+U/ZtlFP03T swzYJ8sQQdmpduz7BxZg0w7CSgMCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBRngYWH TdjwKO5J6tlzhLAAHtQ5FzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDIxMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAKOANQMEAMsQCzANBgkqhkiG9w0BAQsFAAOCAQEAFpBnwEICl3B5 wXQougvqIUXTm55+CbY9+ZqdC7bDLtYj5uDspnwxNBhW5sBt4svzVL4GPKA9zPK4 4IVoS+LBw1l/mvHrbUcepih46BqqsbCasB8ou//RUppoeqyZtLbYcl0mdewolpFm 7uSA+B5EwWFH0WWPwe7NLPFJhCFzLdLhQ2G8uz3KDCVmsYS2jWEvEFXf9l/J4e5y KVtwqaSkANFi8PgJ8FFEDtrx8LH+2mFrU3H1qKga41w3/IRQfWmhSylhqcbitxjp Mt7WJ7o0u5hcWIMo/07JbchclbCCJIhxopyIi/jY/78LTpaPChBThGTozjzm/Fyd my3ysXecEw== -----END CERTIFICATE-----Generated at Fri Apr 17 08:16:39 2026 by rpki-client