$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154477.roa File: AS154477.roa (raw, json) Hash identifier: zaUpGaatggnrqjDGii4qwHsJnZMyh6QR7rDyRc5XnsI= Subject key identifier: 9C:14:01:00:46:F6:CC:AA:92:87:98:40:F7:D8:F6:DB:37:36:FD:AA Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 774D4F59AA0D6A3D80DFC49446EBAC38D7839D6A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154477.roa Signing time: Thu 05 Feb 2026 07:48:41 +0000 ROA not before: Thu 05 Feb 2026 07:43:41 +0000 ROA not after: Thu 04 Feb 2027 07:48:41 +0000 asID: 154477 IP address blocks: 2001:df6:a240::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:4d:4f:59:aa:0d:6a:3d:80:df:c4:94:46:eb:ac:38:d7:83:9d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 5 07:43:41 2026 GMT Not After : Feb 4 07:48:41 2027 GMT Subject: CN=9C14010046F6CCAA92879840F7D8F6DB3736FDAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c9:cd:e8:fc:f6:e0:a1:36:77:08:2b:5d:74: ac:8b:3c:8b:60:d8:8c:e9:62:eb:40:50:84:5b:ca: b1:fa:d6:10:a4:8d:82:44:ad:fe:f5:4f:a2:e8:e1: 02:7f:0c:fc:d0:a6:74:c6:3c:66:ed:e2:97:f1:de: 5c:0e:67:67:88:4f:8a:50:7e:cf:92:0b:66:13:66: 5f:19:bd:5d:46:28:62:e7:53:9a:78:55:ae:5a:01: 59:15:23:30:57:6a:2c:40:56:92:d1:fe:e2:3c:2e: d0:24:31:44:c3:c4:d0:ce:83:7b:87:7f:b3:df:68: 6b:7f:25:c4:a2:49:db:01:c1:f7:c9:72:b3:b8:55: 72:1a:50:b9:b3:39:dc:37:b5:75:f0:cc:ef:cd:23: eb:cb:1f:9c:ab:5e:48:34:2c:bc:2b:6e:1f:3c:5a: 0e:28:a6:8b:ee:c8:ec:bc:c3:40:59:9b:2a:f2:81: 65:a0:0c:4d:13:1e:b2:04:a3:8b:95:d7:07:66:9c: 8e:f2:fd:5a:eb:c5:0f:a8:47:a3:81:0c:6e:80:0d: 26:f6:a6:5a:c2:84:8b:56:63:00:d7:f5:9a:55:76: 0c:36:0b:6d:f3:39:d5:18:eb:cf:a3:be:84:2b:91: 13:a0:48:e8:d7:f0:c5:79:2c:2c:7b:9f:08:1f:3e: 64:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:14:01:00:46:F6:CC:AA:92:87:98:40:F7:D8:F6:DB:37:36:FD:AA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154477.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:a240::/48 Signature Algorithm: sha256WithRSAEncryption 6f:4f:4d:10:6e:56:0f:48:88:6d:10:02:40:16:c2:9f:06:6c: b3:90:b6:92:0b:6b:30:e3:89:df:e8:7f:41:76:39:3e:df:11: a2:25:c9:af:c6:7b:80:ef:1c:61:0c:ca:ab:02:9e:38:8c:20: 9e:94:9c:d3:8f:19:49:e2:6a:cf:a9:18:80:db:c3:0a:56:62: 54:46:db:5e:4d:58:47:3e:af:20:47:47:49:32:aa:ce:7f:83: df:b2:c2:3f:34:8e:9d:10:ca:42:20:14:95:8a:c4:f6:30:d9: 79:0f:b8:86:c6:fe:d9:83:3f:32:f6:cf:2a:a1:dc:99:d0:d5: 57:f1:c1:5c:54:87:c1:90:57:be:90:f1:93:68:53:3f:ae:e5: d3:eb:6f:67:2c:b1:01:72:ef:63:4b:15:ee:ee:f2:d5:5f:c6: 64:c8:41:e1:d4:8f:35:93:06:e0:f7:8c:81:80:37:53:5a:b0: db:b6:86:fd:7d:4d:f3:9c:50:fb:b2:53:11:84:f4:73:c8:c8: 36:65:ae:9d:ae:df:3c:86:21:75:91:40:32:4c:82:37:39:ee: e4:23:4a:e1:91:0f:53:b0:b3:4d:81:52:a8:f4:da:48:45:91: 98:5c:99:18:17:b5:fd:7f:5d:8c:ce:07:fd:c5:c3:8c:fa:a1: bb:2e:e5:7a -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUd01PWaoNaj2A38SURuusONeDnWowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIwNTA3NDM0MVoX DTI3MDIwNDA3NDg0MVowMzExMC8GA1UEAxMoOUMxNDAxMDA0NkY2Q0NBQTkyODc5 ODQwRjdEOEY2REIzNzM2RkRBQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKvJzej89uChNncIK110rIs8i2DYjOli60BQhFvKsfrWEKSNgkSt/vVPoujh An8M/NCmdMY8Zu3il/HeXA5nZ4hPilB+z5ILZhNmXxm9XUYoYudTmnhVrloBWRUj MFdqLEBWktH+4jwu0CQxRMPE0M6De4d/s99oa38lxKJJ2wHB98lys7hVchpQubM5 3De1dfDM780j68sfnKteSDQsvCtuHzxaDiimi+7I7LzDQFmbKvKBZaAMTRMesgSj i5XXB2acjvL9WuvFD6hHo4EMboANJvamWsKEi1ZjANf1mlV2DDYLbfM51Rjrz6O+ hCuRE6BI6NfwxXksLHufCB8+ZJsCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBScFAEA RvbMqpKHmED32PbbNzb9qjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDQ3Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfaiQDANBgkqhkiG9w0BAQsFAAOCAQEAb09NEG5WD0iIbRAC QBbCnwZss5C2kgtrMOOJ3+h/QXY5Pt8RoiXJr8Z7gO8cYQzKqwKeOIwgnpSc048Z SeJqz6kYgNvDClZiVEbbXk1YRz6vIEdHSTKqzn+D37LCPzSOnRDKQiAUlYrE9jDZ eQ+4hsb+2YM/MvbPKqHcmdDVV/HBXFSHwZBXvpDxk2hTP67l0+tvZyyxAXLvY0sV 7u7y1V/GZMhB4dSPNZMG4PeMgYA3U1qw27aG/X1N85xQ+7JTEYT0c8jINmWuna7f PIYhdZFAMkyCNznu5CNK4ZEPU7CzTYFSqPTaSEWRmFyZGBe1/X9djM4H/cXDjPqh uy7leg== -----END CERTIFICATE-----Generated at Mon Mar 2 14:56:39 2026 by rpki-client