
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154483.roa
File: AS154483.roa (raw, json)
Hash identifier: 1dzXRVjlhbzBLas/4CrqDsak6/jkuJnPMkqhpql3f2U=
Subject key identifier: 24:66:EC:8C:3A:CB:0F:B7:68:7E:F2:97:3F:72:AF:32:D4:9B:90:D1
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 12544212D12D09A2E3671EACBD4E61B4B0B8EBE3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154483.roa
Signing time: Thu 16 Apr 2026 01:37:56 +0000
ROA not before: Thu 16 Apr 2026 01:32:56 +0000
ROA not after: Thu 15 Apr 2027 01:37:56 +0000
asID: 154483
IP address blocks: 2001:df6:a340::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 00:44:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:54:42:12:d1:2d:09:a2:e3:67:1e:ac:bd:4e:61:b4:b0:b8:eb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 16 01:32:56 2026 GMT
Not After : Apr 15 01:37:56 2027 GMT
Subject: CN=2466EC8C3ACB0FB7687EF2973F72AF32D49B90D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9f:17:ac:86:77:56:71:82:29:3d:1a:bc:e0:
3c:f5:26:0b:59:49:e0:5a:6e:74:16:2f:49:b4:15:
b7:a6:7b:97:50:e7:6b:f1:d2:78:af:5d:04:25:eb:
39:52:12:18:59:a6:15:df:06:f7:57:50:2e:0a:12:
f9:bf:1c:7b:08:cd:2f:76:45:7a:f5:a5:8e:55:d7:
a8:6b:67:20:cb:34:bb:6e:a2:0c:96:d4:c4:ee:06:
9c:1c:e4:cd:38:63:bc:b1:25:00:5c:02:16:02:dd:
af:e6:38:9e:e1:76:8d:9d:88:46:b4:97:fc:71:25:
3f:ac:56:64:e9:41:a9:16:57:6f:98:a9:b0:eb:59:
ff:a4:a2:64:c5:cc:0d:2b:96:b2:30:03:25:9f:6e:
14:89:67:28:ff:d5:45:f9:63:7c:82:9c:c3:04:d2:
80:8c:75:65:e9:41:3d:dc:60:64:f4:03:e6:da:fd:
22:89:99:32:e9:95:8d:96:2e:8b:3f:05:c2:c3:c7:
6a:95:7d:79:0a:44:c0:ba:b2:05:18:ba:cb:6e:c9:
21:59:d5:03:80:91:81:b3:4d:6f:d4:7d:a2:ef:61:
c3:3b:4d:c8:2f:43:e9:65:82:10:69:35:f4:d1:d2:
99:45:1c:49:62:50:82:f6:cb:a2:4f:83:86:8c:84:
08:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:66:EC:8C:3A:CB:0F:B7:68:7E:F2:97:3F:72:AF:32:D4:9B:90:D1
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:a340::/48
Signature Algorithm: sha256WithRSAEncryption
98:bd:db:0c:d2:f6:74:35:e6:6f:ed:10:77:ae:8e:f3:90:6f:
e1:81:f2:cb:cf:da:80:a5:5a:de:fb:86:61:b9:1f:35:08:58:
4a:53:9b:e0:e0:ee:4f:cc:75:bd:7f:c1:09:1e:de:26:91:fc:
e4:e5:52:f5:0c:86:fd:3d:b2:67:b1:0f:31:7d:40:af:a8:70:
ca:ea:46:68:35:3f:0a:4f:7f:6a:69:f6:d8:23:cb:a0:04:03:
c9:55:b0:19:4c:4d:5a:39:e3:d7:14:a3:dc:d5:94:82:c2:11:
f5:a3:07:c2:db:44:06:4f:71:10:91:47:9f:b1:78:65:d1:89:
ed:96:52:b1:6e:63:82:3f:d9:e5:b1:fc:8a:5f:86:df:31:b5:
8d:51:e6:5a:23:9f:c0:c7:8a:f7:15:8b:96:02:aa:2e:4c:c4:
b4:48:60:5d:50:d5:fd:b2:a4:61:ca:c2:9b:2e:12:00:58:d8:
6c:d9:3e:e6:4e:60:01:6c:06:2e:28:5d:f4:2c:9b:ce:5a:5e:
ca:97:01:b9:6e:81:b2:a9:a5:88:e3:5b:3d:b0:f6:e1:96:2d:
51:1c:c0:4d:68:21:54:f3:d3:5e:e8:c2:63:ee:81:b5:43:9d:
85:2d:33:4a:83:ec:35:26:9b:59:c8:84:33:c3:93:d6:21:02:
3d:5a:b7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:52 2026 by rpki-client