$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154401.roa File: AS154401.roa (raw, json) Hash identifier: tW+xzHIO03VCwoK1DytNbcV321cBbzHF8iwAfo/lcW8= Subject key identifier: C6:78:AB:7A:FF:F8:4D:D3:8C:10:53:53:9C:5C:2F:FC:EA:A6:7D:57 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 09AF1CC26E53596921F3D54AF9DF28C569517C41 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154401.roa Signing time: Fri 13 Feb 2026 04:09:10 +0000 ROA not before: Fri 13 Feb 2026 04:04:10 +0000 ROA not after: Fri 12 Feb 2027 04:09:10 +0000 asID: 154401 IP address blocks: 2001:df6:5dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:af:1c:c2:6e:53:59:69:21:f3:d5:4a:f9:df:28:c5:69:51:7c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 13 04:04:10 2026 GMT Not After : Feb 12 04:09:10 2027 GMT Subject: CN=C678AB7AFFF84DD38C1053539C5C2FFCEAA67D57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bf:f3:c1:4e:e4:2c:7d:1e:98:a0:ce:fa:0a: 12:3b:c1:84:a7:69:98:11:ba:cf:cc:06:42:90:1e: 11:b2:9b:e3:e4:a1:74:f6:18:1c:dd:bb:8d:7f:da: 58:4a:34:6e:e3:1b:02:b9:ab:f4:d1:9d:15:ca:a1: ff:49:3a:95:ef:39:05:d9:e6:bd:e5:c4:40:88:48: 73:05:52:02:4c:3e:bd:db:b9:76:94:64:d0:fb:54: 24:6a:ca:42:b5:b5:4d:6b:a9:5e:76:cf:10:d2:36: 20:74:b6:5e:3e:9d:88:64:f3:e5:47:6f:6c:ce:b1: a5:1f:83:25:c1:7f:51:03:7c:f3:6d:f2:a9:88:18: 95:05:3e:9b:8e:f3:b7:98:1b:c6:84:0e:f6:f7:7a: 8c:37:3a:cd:02:39:0c:78:88:b6:c9:05:ef:3d:76: 12:06:9b:20:0b:b1:27:51:df:fe:55:95:ab:cb:a2: 7f:4f:88:dd:c4:43:34:d5:e5:0f:48:30:8d:a9:03: 3d:17:78:4d:11:31:15:08:e6:fb:b9:31:6c:eb:95: 7e:13:e5:96:f9:a8:df:ca:a2:42:0c:85:04:d9:53: fd:37:aa:7c:1b:f7:c1:63:8c:2a:53:13:b9:d3:ef: 1e:90:29:de:f6:10:b9:66:11:51:5d:df:5f:d2:18: 87:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:78:AB:7A:FF:F8:4D:D3:8C:10:53:53:9C:5C:2F:FC:EA:A6:7D:57 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154401.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:5dc0::/48 Signature Algorithm: sha256WithRSAEncryption 73:f7:bf:57:e8:4e:39:7c:b3:ae:9f:93:83:16:25:26:d0:6d: 6e:99:c0:32:94:01:54:10:16:39:88:61:67:fc:70:65:c5:6e: ed:53:be:ce:e6:13:56:ea:72:53:7e:36:da:9d:0b:ae:2c:d2: 03:47:43:94:e0:e9:e8:b0:69:68:9b:f8:fe:b0:ab:42:2d:00: d6:42:b0:dd:0e:7f:28:e9:dc:c1:5b:e5:04:1d:e5:ea:68:55: 1c:e4:fb:0f:59:e4:49:ac:91:3b:b0:48:57:06:f1:1e:01:a8: b9:a9:d4:6c:91:d2:4f:81:00:ad:8a:5a:38:65:b5:3a:a2:d6: e5:62:78:6a:f7:2c:69:7e:08:61:42:2f:f7:d4:81:40:a5:ef: 00:e3:40:da:21:2b:2b:bf:c9:11:9f:44:4b:e6:1b:c2:a2:10: 0d:3d:45:d5:69:93:bc:6f:3b:90:14:36:1e:19:32:12:95:aa: 9f:e5:c2:6b:42:40:f0:50:d2:dd:48:42:6b:d6:a2:85:07:b1: 53:fb:ab:76:49:25:a0:76:1d:54:2b:8f:6a:4c:37:29:0a:0f: a6:41:72:e4:47:17:d4:75:b5:b5:75:3f:90:ef:5b:4b:0f:4a: 0a:e2:e0:11:b9:eb:f7:ec:5f:d1:a3:e9:08:f7:b8:97:6e:80: 24:99:78:b6 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUCa8cwm5TWWkh89VK+d8oxWlRfEEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIxMzA0MDQxMFoX DTI3MDIxMjA0MDkxMFowMzExMC8GA1UEAxMoQzY3OEFCN0FGRkY4NEREMzhDMTA1 MzUzOUM1QzJGRkNFQUE2N0Q1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMa/88FO5Cx9HpigzvoKEjvBhKdpmBG6z8wGQpAeEbKb4+ShdPYYHN27jX/a WEo0buMbArmr9NGdFcqh/0k6le85BdnmveXEQIhIcwVSAkw+vdu5dpRk0PtUJGrK QrW1TWupXnbPENI2IHS2Xj6diGTz5UdvbM6xpR+DJcF/UQN8823yqYgYlQU+m47z t5gbxoQO9vd6jDc6zQI5DHiItskF7z12EgabIAuxJ1Hf/lWVq8uif0+I3cRDNNXl D0gwjakDPRd4TRExFQjm+7kxbOuVfhPllvmo38qiQgyFBNlT/TeqfBv3wWOMKlMT udPvHpAp3vYQuWYRUV3fX9IYhwUCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBTGeKt6 //hN04wQU1OcXC/86qZ9VzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDQwMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfZdwDANBgkqhkiG9w0BAQsFAAOCAQEAc/e/V+hOOXyzrp+T gxYlJtBtbpnAMpQBVBAWOYhhZ/xwZcVu7VO+zuYTVupyU3422p0LrizSA0dDlODp 6LBpaJv4/rCrQi0A1kKw3Q5/KOncwVvlBB3l6mhVHOT7D1nkSayRO7BIVwbxHgGo uanUbJHST4EArYpaOGW1OqLW5WJ4avcsaX4IYUIv99SBQKXvAONA2iErK7/JEZ9E S+YbwqIQDT1F1WmTvG87kBQ2HhkyEpWqn+XCa0JA8FDS3UhCa9aihQexU/urdkkl oHYdVCuPakw3KQoPpkFy5EcX1HW1tXU/kO9bSw9KCuLgEbnr9+xf0aPpCPe4l26A JJl4tg== -----END CERTIFICATE-----Generated at Mon Mar 2 14:56:39 2026 by rpki-client