$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154266.roa File: AS154266.roa (raw, json) Hash identifier: pXgzJOJ+wZtgQAAFZv7/e7/3AtIcb0SgARgKuKwOYXM= Subject key identifier: C4:03:B5:71:C4:A9:5B:41:A6:09:8C:2F:C0:A8:F9:59:47:1B:04:A0 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2528BBDEF39CEDE848578D70D3F033D22E527D27 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154266.roa Signing time: Tue 24 Feb 2026 03:23:49 +0000 ROA not before: Tue 24 Feb 2026 03:18:49 +0000 ROA not after: Tue 23 Feb 2027 03:23:49 +0000 asID: 154266 IP address blocks: 2001:df5:9540::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:28:bb:de:f3:9c:ed:e8:48:57:8d:70:d3:f0:33:d2:2e:52:7d:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 24 03:18:49 2026 GMT Not After : Feb 23 03:23:49 2027 GMT Subject: CN=C403B571C4A95B41A6098C2FC0A8F959471B04A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e7:ad:f3:6f:48:24:3a:17:ad:d5:cc:b0:81: 3d:64:86:59:c0:d9:5c:b8:1e:68:f5:5c:5d:d1:c5: 3b:90:89:fc:7e:79:a8:18:54:a0:f3:8e:96:f1:68: 97:cd:bc:99:b9:8c:ae:14:d9:f1:7b:5b:b0:ae:ca: db:ab:6d:3b:c3:b7:31:67:d7:cf:d3:c7:03:f1:77: 7a:26:91:bb:60:d8:f2:23:bb:25:4e:75:c3:77:f1: 88:f8:af:9e:62:4e:84:47:f6:fa:49:c3:09:ff:d3: c9:f4:1b:ed:f8:27:91:92:e3:9c:78:5a:c0:3f:4e: d3:96:85:98:65:a5:79:d7:bf:a8:ab:d2:66:91:40: 6c:8c:9e:00:2d:6c:7d:b8:51:ee:c6:19:bd:ef:be: ff:61:0d:72:0a:d8:4a:ed:fd:8d:d1:a2:75:09:c7: 97:a9:01:42:5b:d9:7c:94:1d:56:d2:c4:62:1a:f7: d4:2f:36:98:54:45:f6:e3:4d:fa:b0:3d:67:e6:d4: b5:f2:1b:a3:3b:c9:90:a7:7b:b4:3c:24:30:34:74: 2a:9a:0f:3b:e3:5c:38:96:ec:38:c6:58:0b:c1:04: 91:26:62:11:21:ba:e0:ba:64:42:31:1a:79:9e:dd: d6:a2:ec:e4:d1:0d:5a:9f:c5:55:97:bf:fc:42:ff: 87:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:03:B5:71:C4:A9:5B:41:A6:09:8C:2F:C0:A8:F9:59:47:1B:04:A0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154266.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:9540::/48 Signature Algorithm: sha256WithRSAEncryption 6d:87:a8:b1:11:3e:86:73:f6:26:86:70:e6:bc:04:65:01:8c: 86:6b:13:49:62:ca:dd:89:1c:15:d1:0c:d3:1c:c3:09:f0:89: a8:e0:f3:44:9c:18:4c:87:59:2e:11:a8:d0:89:94:d3:31:31: 98:ca:28:84:88:3e:f4:da:ed:29:f8:e9:10:7c:ae:59:ce:c6: 9b:31:ed:93:37:20:7c:c9:bb:e1:8a:f0:85:59:8d:84:6b:01: 1e:20:34:84:a1:51:5b:89:69:ab:1f:40:83:91:b2:f7:2a:47: c4:be:9f:ad:dd:08:48:b4:c7:62:70:53:09:15:97:86:33:b8: c8:68:0d:3b:f3:a4:cb:29:fa:15:0a:be:e0:96:c2:22:77:52: 18:f3:f6:1c:a7:fb:97:bc:b2:ef:8b:25:0b:93:a7:88:58:f2: 40:f9:77:00:8c:69:73:6e:9f:89:49:8e:29:55:52:af:ff:cb: 5f:2c:70:09:7a:05:13:30:94:08:e4:2c:65:4a:6c:5e:37:ae: 0a:2b:d2:28:56:79:33:09:03:6e:67:f4:05:d9:1e:6a:11:e0: 8a:e5:a9:d0:31:7a:4e:1d:76:94:f7:78:e8:73:80:6d:77:f7: 5f:51:71:29:e7:b1:1b:b4:cf:7e:38:e3:ef:12:1e:da:b3:3c: 1e:ff:6a:86 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUJSi73vOc7ehIV41w0/Az0i5SfScwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyNDAzMTg0OVoX DTI3MDIyMzAzMjM0OVowMzExMC8GA1UEAxMoQzQwM0I1NzFDNEE5NUI0MUE2MDk4 QzJGQzBBOEY5NTk0NzFCMDRBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPnrfNvSCQ6F63VzLCBPWSGWcDZXLgeaPVcXdHFO5CJ/H55qBhUoPOOlvFo l828mbmMrhTZ8XtbsK7K26ttO8O3MWfXz9PHA/F3eiaRu2DY8iO7JU51w3fxiPiv nmJOhEf2+knDCf/TyfQb7fgnkZLjnHhawD9O05aFmGWlede/qKvSZpFAbIyeAC1s fbhR7sYZve++/2ENcgrYSu39jdGidQnHl6kBQlvZfJQdVtLEYhr31C82mFRF9uNN +rA9Z+bUtfIbozvJkKd7tDwkMDR0KpoPO+NcOJbsOMZYC8EEkSZiESG64LpkQjEa eZ7d1qLs5NENWp/FVZe//EL/h0kCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBTEA7Vx xKlbQaYJjC/AqPlZRxsEoDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDI2Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfWVQDANBgkqhkiG9w0BAQsFAAOCAQEAbYeosRE+hnP2JoZw 5rwEZQGMhmsTSWLK3YkcFdEM0xzDCfCJqODzRJwYTIdZLhGo0ImU0zExmMoohIg+ 9NrtKfjpEHyuWc7GmzHtkzcgfMm74YrwhVmNhGsBHiA0hKFRW4lpqx9Ag5Gy9ypH xL6frd0ISLTHYnBTCRWXhjO4yGgNO/Okyyn6FQq+4JbCIndSGPP2HKf7l7yy74sl C5OniFjyQPl3AIxpc26fiUmOKVVSr//LXyxwCXoFEzCUCOQsZUpsXjeuCivSKFZ5 MwkDbmf0BdkeahHgiuWp0DF6Th12lPd46HOAbXf3X1FxKeexG7TPfjjj7xIe2rM8 Hv9qhg== -----END CERTIFICATE-----Generated at Mon Mar 2 14:56:32 2026 by rpki-client