$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154503.roa File: AS154503.roa (raw, json) Hash identifier: 2XTApKL9aU9zE94e6DHkG/v61UeM6BCwuz/W5iDFJHg= Subject key identifier: 33:DA:59:71:44:A6:5A:6F:33:FB:AE:45:89:48:A3:0F:44:5C:46:35 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 249FDE4B4FBA8B8AA1D5952A7E5ADF3FE3BC562D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154503.roa Signing time: Thu 19 Feb 2026 02:35:39 +0000 ROA not before: Thu 19 Feb 2026 02:30:39 +0000 ROA not after: Thu 18 Feb 2027 02:35:39 +0000 asID: 154503 IP address blocks: 2001:df6:afc0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:9f:de:4b:4f:ba:8b:8a:a1:d5:95:2a:7e:5a:df:3f:e3:bc:56:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 19 02:30:39 2026 GMT Not After : Feb 18 02:35:39 2027 GMT Subject: CN=33DA597144A65A6F33FBAE458948A30F445C4635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fe:4d:3e:35:d8:6c:2a:34:1b:ff:15:ff:18: 31:02:29:4b:5f:a3:80:50:9e:e4:47:53:5a:40:ec: da:84:36:b0:c5:04:2e:a0:32:0a:50:90:ed:d4:2a: 31:98:14:8b:21:23:59:c6:1b:1e:01:2f:dc:e9:3b: 82:72:7e:9e:7c:b8:e4:c1:6d:c5:e5:d8:9f:b5:1f: a7:85:21:65:20:3c:32:8f:3b:b4:28:9c:ea:3c:e5: 18:36:6b:da:75:90:af:b7:0a:ce:a6:4b:b8:06:56: 41:6a:cf:ec:0f:55:8e:51:de:de:15:89:b6:49:6c: 47:5b:83:1f:59:84:25:68:0a:8f:f1:5a:e2:33:60: 36:82:e5:83:ca:01:62:00:4d:a8:25:72:f8:9b:06: 51:b7:d4:0a:63:22:4f:0c:ae:9b:31:d6:45:9c:c5: b8:da:54:dc:0b:0f:5a:b3:bb:31:d1:8d:e9:38:e7: 9e:8e:e4:e6:c2:7c:ce:50:0d:db:7b:89:5c:64:6f: 73:ba:85:d2:02:d8:4e:ae:c7:da:fd:da:3a:20:75: 63:07:b3:2f:ae:28:25:a0:42:a7:0d:01:01:ec:cd: 48:7d:19:a4:2c:b5:f5:2c:eb:16:b7:96:d1:e0:d1: 95:c2:a9:5e:43:ad:4b:e7:9b:4d:51:4c:1d:7f:90: 6e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DA:59:71:44:A6:5A:6F:33:FB:AE:45:89:48:A3:0F:44:5C:46:35 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154503.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:afc0::/48 Signature Algorithm: sha256WithRSAEncryption 5e:3f:e4:99:6a:b9:21:d6:8d:2e:52:1d:b3:9c:7d:28:bd:cf: b8:e7:2e:64:ef:fa:07:c3:0d:fd:8d:1a:ea:54:d1:33:60:9b: 30:cc:3f:29:95:68:cf:37:e1:ff:09:a2:8f:02:ef:7b:da:05: d5:ef:86:f5:71:fd:44:c4:14:4a:bd:7e:bd:70:04:9a:5e:9e: a7:5e:f6:bb:21:21:ce:9e:53:d2:9c:73:f1:91:34:de:26:94: 7c:82:e3:8b:62:01:86:f2:cc:ec:fb:24:10:cf:b7:b1:a3:c6: 3e:fc:c0:53:c3:b1:03:99:ea:29:d2:f9:82:3a:4e:4f:43:3a: 28:36:fd:14:ba:86:13:2b:0b:e7:dc:41:f2:25:e7:26:02:28: 5a:4f:76:5f:13:14:25:68:b5:56:51:f0:62:f9:98:73:be:f5: 55:17:41:20:53:de:8d:ff:25:81:d0:4f:ac:91:d1:4a:9b:da: 0e:18:b2:60:ef:93:55:23:13:40:6b:6e:1d:f1:f6:04:19:4a: cb:9c:51:9c:99:5e:89:fc:06:ad:02:b4:92:d8:f6:10:d6:a5: 33:46:b2:85:81:cf:d1:4a:7d:5b:bc:3e:44:a4:54:41:e6:97: 4b:11:5b:bd:35:b9:c9:59:f3:6b:b6:9d:a5:0a:28:9c:54:9b: 6c:40:34:65 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUJJ/eS0+6i4qh1ZUqflrfP+O8Vi0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIxOTAyMzAzOVoX DTI3MDIxODAyMzUzOVowMzExMC8GA1UEAxMoMzNEQTU5NzE0NEE2NUE2RjMzRkJB RTQ1ODk0OEEzMEY0NDVDNDYzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANr+TT412GwqNBv/Ff8YMQIpS1+jgFCe5EdTWkDs2oQ2sMUELqAyClCQ7dQq MZgUiyEjWcYbHgEv3Ok7gnJ+nny45MFtxeXYn7Ufp4UhZSA8Mo87tCic6jzlGDZr 2nWQr7cKzqZLuAZWQWrP7A9VjlHe3hWJtklsR1uDH1mEJWgKj/Fa4jNgNoLlg8oB YgBNqCVy+JsGUbfUCmMiTwyumzHWRZzFuNpU3AsPWrO7MdGN6Tjnno7k5sJ8zlAN 23uJXGRvc7qF0gLYTq7H2v3aOiB1YwezL64oJaBCpw0BAezNSH0ZpCy19SzrFreW 0eDRlcKpXkOtS+ebTVFMHX+QbtkCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQz2llx RKZabzP7rkWJSKMPRFxGNTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDUwMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfavwDANBgkqhkiG9w0BAQsFAAOCAQEAXj/kmWq5IdaNLlId s5x9KL3PuOcuZO/6B8MN/Y0a6lTRM2CbMMw/KZVozzfh/wmijwLve9oF1e+G9XH9 RMQUSr1+vXAEml6ep172uyEhzp5T0pxz8ZE03iaUfILji2IBhvLM7PskEM+3saPG PvzAU8OxA5nqKdL5gjpOT0M6KDb9FLqGEysL59xB8iXnJgIoWk92XxMUJWi1VlHw YvmYc771VRdBIFPejf8lgdBPrJHRSpvaDhiyYO+TVSMTQGtuHfH2BBlKy5xRnJle ifwGrQK0ktj2ENalM0ayhYHP0Up9W7w+RKRUQeaXSxFbvTW5yVnza7adpQoonFSb bEA0ZQ== -----END CERTIFICATE-----Generated at Mon Mar 2 14:56:37 2026 by rpki-client