$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154523.roa File: AS154523.roa (raw, json) Hash identifier: 28IzJxz7OqhwsFtK65BflyPCgzxCHdtlwKqyOceJ7AM= Subject key identifier: 25:B4:9E:37:D5:11:BC:FB:BB:44:95:05:77:CE:D2:A8:3A:AD:44:59 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 503D284A51ABE5F18AC126DFD65A4B077B1B4580 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154523.roa Signing time: Thu 26 Feb 2026 04:42:55 +0000 ROA not before: Thu 26 Feb 2026 04:37:55 +0000 ROA not after: Thu 25 Feb 2027 04:42:55 +0000 asID: 154523 IP address blocks: 2001:df6:c340::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:3d:28:4a:51:ab:e5:f1:8a:c1:26:df:d6:5a:4b:07:7b:1b:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 26 04:37:55 2026 GMT Not After : Feb 25 04:42:55 2027 GMT Subject: CN=25B49E37D511BCFBBB44950577CED2A83AAD4459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4a:c9:c9:f1:92:0d:7c:45:c0:0f:f2:c7:c8: 28:2f:23:82:58:b9:c0:cf:6e:01:15:ce:f6:24:a6: 41:68:00:10:20:11:f3:05:ff:3b:30:43:64:ab:59: cb:8d:a4:f8:f5:9f:6a:6b:d0:1b:e9:a0:dd:95:ab: 56:9a:c5:8c:ae:c3:2c:a9:75:dc:ab:93:b0:d7:39: 32:74:f2:0c:39:e4:fb:c1:2d:32:68:9f:8f:f8:2c: 09:77:43:65:82:99:10:d7:58:27:c5:65:7d:53:a2: 0e:a0:ba:78:1c:85:32:b6:09:ab:66:2b:2b:ff:00: e0:47:c2:05:16:ed:c9:53:00:57:f3:37:6b:b3:12: 58:ee:97:15:63:99:f4:53:7d:ed:d8:60:d7:39:b3: dd:3c:eb:e4:da:af:a7:b8:bd:b7:9b:ac:f8:8b:5d: 6e:74:a0:f6:d0:bd:d5:67:a7:f1:a0:b4:b0:e0:71: c7:71:e1:a3:06:1a:bd:b4:12:9d:19:b4:b6:6f:99: 1e:e1:f2:53:68:1b:54:92:37:f4:e8:14:71:dc:d7: 21:c5:04:21:a5:23:74:f5:f4:14:a8:29:3f:4d:9f: 78:bf:08:e8:63:6e:2d:01:05:ac:b0:52:56:63:36: ef:29:b0:c1:25:2f:c9:a2:f6:7d:4a:e5:67:a7:8c: e8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B4:9E:37:D5:11:BC:FB:BB:44:95:05:77:CE:D2:A8:3A:AD:44:59 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154523.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:c340::/48 Signature Algorithm: sha256WithRSAEncryption 4b:dd:33:27:d1:2a:d3:ea:9c:f3:ae:7e:0e:87:45:47:4a:d2: 18:9e:e0:71:91:07:11:da:c9:5e:0f:79:17:ca:27:9b:1d:15: 85:74:f9:ca:b0:0d:df:a7:e4:ba:8f:63:f9:99:c4:fa:ca:01: 1e:42:df:44:e4:83:a4:68:ad:30:80:eb:ed:c5:b6:9c:bd:22: d2:53:67:ba:a6:33:20:80:30:26:5f:f6:7f:e0:fb:4b:28:10: 81:8f:b0:97:f8:2e:9b:4f:00:81:b8:19:53:a7:18:09:ce:99: b4:d2:5d:cc:a0:f2:9e:35:ec:0e:8e:49:7c:ae:e4:13:74:d4: b3:12:61:78:45:f6:b2:3b:aa:ea:16:34:3f:ff:22:99:2f:29: ca:5c:a6:db:c8:de:ed:94:01:89:dc:81:c7:27:30:76:f0:e8: fe:c0:a8:5f:0f:ff:ca:f9:8d:e6:c9:72:91:7d:af:4f:67:e1: 25:82:db:b4:5d:db:cc:15:3f:b1:a8:3b:37:c8:f6:94:58:61: 8d:a9:6e:b9:bd:52:ec:9a:ce:27:8b:ff:d3:02:97:42:3f:91: df:33:08:ea:1a:1e:5c:9e:e6:7f:0e:a8:63:24:ee:60:ba:3d: 64:1e:d7:dd:cc:47:5e:fc:21:5f:27:9f:56:cd:bf:bb:48:af: bd:0a:04:af -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUUD0oSlGr5fGKwSbf1lpLB3sbRYAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyNjA0Mzc1NVoX DTI3MDIyNTA0NDI1NVowMzExMC8GA1UEAxMoMjVCNDlFMzdENTExQkNGQkJCNDQ5 NTA1NzdDRUQyQTgzQUFENDQ1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMhKycnxkg18RcAP8sfIKC8jgli5wM9uARXO9iSmQWgAECAR8wX/OzBDZKtZ y42k+PWfamvQG+mg3ZWrVprFjK7DLKl13KuTsNc5MnTyDDnk+8EtMmifj/gsCXdD ZYKZENdYJ8VlfVOiDqC6eByFMrYJq2YrK/8A4EfCBRbtyVMAV/M3a7MSWO6XFWOZ 9FN97dhg1zmz3Tzr5Nqvp7i9t5us+ItdbnSg9tC91Wen8aC0sOBxx3HhowYavbQS nRm0tm+ZHuHyU2gbVJI39OgUcdzXIcUEIaUjdPX0FKgpP02feL8I6GNuLQEFrLBS VmM27ymwwSUvyaL2fUrlZ6eM6IkCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQltJ43 1RG8+7tElQV3ztKoOq1EWTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDUyMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfbDQDANBgkqhkiG9w0BAQsFAAOCAQEAS90zJ9Eq0+qc865+ DodFR0rSGJ7gcZEHEdrJXg95F8onmx0VhXT5yrAN36fkuo9j+ZnE+soBHkLfROSD pGitMIDr7cW2nL0i0lNnuqYzIIAwJl/2f+D7SygQgY+wl/gum08AgbgZU6cYCc6Z tNJdzKDynjXsDo5JfK7kE3TUsxJheEX2sjuq6hY0P/8imS8pylym28je7ZQBidyB xycwdvDo/sCoXw//yvmN5slykX2vT2fhJYLbtF3bzBU/sag7N8j2lFhhjaluub1S 7JrOJ4v/0wKXQj+R3zMI6hoeXJ7mfw6oYyTuYLo9ZB7X3cxHXvwhXyefVs2/u0iv vQoErw== -----END CERTIFICATE-----Generated at Mon Mar 2 14:56:37 2026 by rpki-client