
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154480.roa
File: AS154480.roa (raw, json)
Hash identifier: CHre4exF0ZWkVaaEJu6ijOw+7ATscDLY3xl+4d0jkDE=
Subject key identifier: 62:87:0A:43:ED:04:D0:62:DE:F1:E5:44:94:82:DF:0E:53:58:38:C4
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 286CEC4A21784EB3AA3434D642502DBCC2306B45
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154480.roa
Signing time: Mon 30 Mar 2026 02:39:43 +0000
ROA not before: Mon 30 Mar 2026 02:34:43 +0000
ROA not after: Mon 29 Mar 2027 02:39:43 +0000
asID: 154480
IP address blocks: 2001:df6:a7c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 00:44:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:6c:ec:4a:21:78:4e:b3:aa:34:34:d6:42:50:2d:bc:c2:30:6b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 30 02:34:43 2026 GMT
Not After : Mar 29 02:39:43 2027 GMT
Subject: CN=62870A43ED04D062DEF1E5449482DF0E535838C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:08:e1:53:95:ab:6a:81:ff:38:f9:cc:e2:ec:
3e:39:d0:db:51:a6:58:80:af:2f:35:6e:cc:47:e9:
28:97:de:37:33:c5:ea:bb:03:72:90:b8:9b:0f:59:
7c:ba:92:d3:94:7a:f4:29:1b:63:78:ab:13:0d:d6:
0e:cd:7e:77:70:e5:9b:7f:c4:3a:60:8b:ea:74:bb:
d6:4a:21:44:00:c7:12:ac:32:00:38:6d:47:78:b4:
85:b3:66:e0:24:80:03:bc:0b:42:f3:dd:87:14:99:
43:3e:f2:e8:85:07:2e:52:97:ee:cd:cc:df:de:1a:
8b:9e:57:c7:0f:99:d9:44:4d:73:53:3c:6e:1c:0d:
04:0a:e5:20:59:21:1f:fd:12:35:d9:5c:c5:e4:d2:
e2:c2:76:dd:0d:9c:24:d5:41:84:a1:5e:3a:3a:68:
7a:99:70:37:ab:13:9d:16:f4:20:b3:fc:77:fc:a2:
68:5f:e9:19:b5:ef:cf:be:f1:34:45:6d:84:7f:34:
ab:2c:8d:9f:95:3e:01:2c:17:f7:37:c0:32:87:0a:
9a:78:96:06:ed:51:f3:65:07:ce:87:15:5a:ef:90:
26:08:70:5d:f4:46:bb:02:dd:0f:2e:00:45:f9:ff:
60:1a:1a:5a:60:27:2f:40:1e:cd:3c:56:22:0b:a7:
d7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:87:0A:43:ED:04:D0:62:DE:F1:E5:44:94:82:DF:0E:53:58:38:C4
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154480.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:a7c0::/48
Signature Algorithm: sha256WithRSAEncryption
0c:14:40:46:de:d2:f2:40:0b:d9:be:55:2b:32:01:fd:fc:77:
19:ca:c3:1f:9e:fa:e5:8c:ac:c9:32:89:0a:ce:28:2a:fc:9a:
bf:68:96:ee:67:b0:6d:b6:e1:ab:9e:02:b9:a4:d4:85:d2:d1:
64:5e:00:96:97:0f:cf:07:88:37:08:b4:ca:a6:98:59:8d:49:
a1:76:86:04:e4:73:54:1a:51:25:0a:ce:64:f2:06:02:00:f6:
ac:cb:86:9f:65:d4:c8:65:25:8b:76:32:b1:44:47:f9:5f:ff:
24:50:21:6a:a6:8a:4b:7e:fa:02:46:66:e6:6b:ad:b0:39:25:
5b:5d:70:63:00:7a:f2:d5:fe:7a:36:f3:a6:95:81:f1:28:f2:
d6:1f:10:bd:c9:45:5a:64:ee:21:ea:30:b3:bd:2b:15:40:44:
68:23:9e:6f:18:57:80:61:3c:31:5b:aa:84:94:f1:92:2d:a9:
01:64:01:b6:30:51:fa:bf:0e:6c:c5:31:1f:c0:b1:75:85:06:
93:cd:4c:93:23:25:82:40:3a:21:bf:f1:b7:ff:2d:0c:b6:7e:
97:60:a9:4d:cb:b8:98:b4:84:bc:34:44:94:68:30:cb:31:7a:
83:b0:16:26:63:54:e4:29:f2:73:4c:5e:d5:a1:f7:4a:22:85:
5e:4d:80:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:52 2026 by rpki-client