$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154522.roa File: AS154522.roa (raw, json) Hash identifier: 6E7hJsdu4po8gkXMj4w647ozInJqBOuF+Kfq9NLhQiQ= Subject key identifier: A0:AB:E8:85:F7:EC:5C:EE:54:1B:96:CB:A1:83:01:24:23:46:AF:91 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 143102953DD16FC18BF6F6BF9045A435FBD27A4F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154522.roa Signing time: Thu 26 Feb 2026 04:19:53 +0000 ROA not before: Thu 26 Feb 2026 04:14:53 +0000 ROA not after: Thu 25 Feb 2027 04:19:53 +0000 asID: 154522 IP address blocks: 2001:df6:bc40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:31:02:95:3d:d1:6f:c1:8b:f6:f6:bf:90:45:a4:35:fb:d2:7a:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 26 04:14:53 2026 GMT Not After : Feb 25 04:19:53 2027 GMT Subject: CN=A0ABE885F7EC5CEE541B96CBA18301242346AF91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:76:da:6a:82:65:c9:b7:a3:07:ef:16:99:37: 7c:6f:bf:cb:50:e0:d8:2f:2c:92:9b:eb:37:64:26: da:ae:cc:15:13:f1:17:b4:9d:9d:24:0c:d7:22:f4: 6f:48:77:db:88:3c:4d:ea:6b:e8:df:bf:f7:0d:b7: 0a:39:de:43:a7:07:f9:00:70:d3:54:cc:d2:7b:8e: 49:f5:3e:b8:5a:e2:72:d9:90:ff:c8:4f:b9:b3:07: 1f:c9:db:0b:3d:47:0f:cb:30:31:6b:68:92:41:d2: 38:f8:82:92:20:7b:37:89:e7:51:31:d7:27:7a:46: 23:e2:2a:b1:3e:fb:61:10:e5:02:6e:4e:1d:1c:92: 29:d7:5b:4c:ff:fa:bb:37:3b:53:6c:4b:ed:b1:4a: 15:c3:14:b6:9f:eb:42:7a:49:d7:7b:f8:8c:38:8d: ba:d4:86:e0:f7:b0:46:07:64:c3:80:86:b2:05:a7: 05:82:b4:d3:e3:bb:3d:b4:79:09:ca:be:77:64:4a: 6c:5a:a1:b6:60:64:d0:5f:62:f5:bd:0a:a0:01:6a: f0:f7:10:b9:e6:fe:ab:1d:4e:06:62:8d:99:72:3d: 51:db:04:94:fa:4a:b3:44:4c:87:9f:99:cb:17:f6: 6f:bd:7c:32:4b:73:b5:e7:80:8b:e7:a6:4c:93:88: 82:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:AB:E8:85:F7:EC:5C:EE:54:1B:96:CB:A1:83:01:24:23:46:AF:91 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154522.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:bc40::/48 Signature Algorithm: sha256WithRSAEncryption 4b:67:1e:17:3c:0c:47:6c:d8:2b:43:be:44:bf:5f:4e:61:ee: 60:7d:42:81:a7:f2:a8:ad:80:00:22:32:b7:57:09:5c:e2:7d: c5:36:54:fa:9b:b4:21:bf:54:3c:d9:28:b0:c2:dd:ce:30:8c: 32:85:3e:8c:27:ca:34:8f:d0:77:18:05:07:d9:81:62:01:f4: 1c:6c:2f:8f:20:6b:88:e2:1f:8e:89:ef:8b:5c:ed:b8:62:86: 54:90:31:09:8a:ff:4b:45:76:70:51:33:c4:bf:4e:70:a7:de: 8c:7d:b8:13:e2:5d:45:ac:2f:5f:04:a9:0d:2e:55:da:23:c5: d1:68:88:da:cf:33:dc:50:6e:13:f8:36:4c:0f:c2:96:99:8c: ff:28:90:6b:11:35:a6:76:2a:7b:78:06:1f:88:24:d2:d5:b3: 4f:2a:51:76:17:e7:74:31:b7:49:db:2b:c8:ba:96:d6:fa:1e: 46:65:29:1c:f8:fa:de:7d:0e:f4:aa:81:e5:0c:af:02:51:45: 1e:a5:b6:27:9d:9b:12:2c:19:90:91:d7:41:bf:9f:9b:95:4f: 7a:38:ec:8a:61:c8:0a:4f:90:9a:c8:16:a9:2b:91:8c:48:06: 8b:dc:84:4f:52:44:ed:d0:fa:9c:c8:e7:a5:10:1b:fb:f8:f7: 9d:22:87:e1 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUFDEClT3Rb8GL9va/kEWkNfvSek8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyNjA0MTQ1M1oX DTI3MDIyNTA0MTk1M1owMzExMC8GA1UEAxMoQTBBQkU4ODVGN0VDNUNFRTU0MUI5 NkNCQTE4MzAxMjQyMzQ2QUY5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALp22mqCZcm3owfvFpk3fG+/y1Dg2C8skpvrN2Qm2q7MFRPxF7SdnSQM1yL0 b0h324g8Tepr6N+/9w23CjneQ6cH+QBw01TM0nuOSfU+uFrictmQ/8hPubMHH8nb Cz1HD8swMWtokkHSOPiCkiB7N4nnUTHXJ3pGI+IqsT77YRDlAm5OHRySKddbTP/6 uzc7U2xL7bFKFcMUtp/rQnpJ13v4jDiNutSG4PewRgdkw4CGsgWnBYK00+O7PbR5 Ccq+d2RKbFqhtmBk0F9i9b0KoAFq8PcQueb+qx1OBmKNmXI9UdsElPpKs0RMh5+Z yxf2b718MktzteeAi+emTJOIgpcCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBSgq+iF 9+xc7lQblsuhgwEkI0avkTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDUyMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfa8QDANBgkqhkiG9w0BAQsFAAOCAQEAS2ceFzwMR2zYK0O+ RL9fTmHuYH1CgafyqK2AACIyt1cJXOJ9xTZU+pu0Ib9UPNkosMLdzjCMMoU+jCfK NI/QdxgFB9mBYgH0HGwvjyBriOIfjonvi1ztuGKGVJAxCYr/S0V2cFEzxL9OcKfe jH24E+JdRawvXwSpDS5V2iPF0WiI2s8z3FBuE/g2TA/ClpmM/yiQaxE1pnYqe3gG H4gk0tWzTypRdhfndDG3SdsryLqW1voeRmUpHPj63n0O9KqB5QyvAlFFHqW2J52b EiwZkJHXQb+fm5VPejjsimHICk+QmsgWqSuRjEgGi9yET1JE7dD6nMjnpRAb+/j3 nSKH4Q== -----END CERTIFICATE-----Generated at Mon Mar 2 14:56:38 2026 by rpki-client