$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154538.roa File: AS154538.roa (raw, json) Hash identifier: XFIzsaXXGXF3GNKrFIeyMc13g7bfHYO/DmTBVIVvaWY= Subject key identifier: 41:10:E8:19:50:BD:FD:83:FD:6E:C5:C0:AE:1C:4F:07:E9:61:59:59 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7C8A853D9ED60CC7BFEE307873D7DA981DF74F4B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154538.roa Signing time: Mon 06 Apr 2026 02:49:57 +0000 ROA not before: Mon 06 Apr 2026 02:44:57 +0000 ROA not after: Mon 05 Apr 2027 02:49:57 +0000 asID: 154538 IP address blocks: 163.128.32.0/23 maxlen: 24 2001:df6:cdc0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 00:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:8a:85:3d:9e:d6:0c:c7:bf:ee:30:78:73:d7:da:98:1d:f7:4f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 6 02:44:57 2026 GMT Not After : Apr 5 02:49:57 2027 GMT Subject: CN=4110E81950BDFD83FD6EC5C0AE1C4F07E9615959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ac:2e:45:89:37:aa:76:7e:83:a4:4e:8f:64: 02:70:54:0b:d9:db:6b:31:07:79:73:b6:1b:05:02: bd:cb:77:e0:6f:5b:2c:4a:d0:76:0b:9d:62:9b:7f: 4e:0a:ff:70:f6:e2:50:ae:42:6c:1e:c7:42:99:45: 07:17:90:d6:6b:22:10:05:57:07:f0:42:01:b5:8e: d0:4d:89:5d:9c:e5:c9:f2:6f:18:74:7f:9d:7a:d3: 1e:a2:71:4b:74:67:d3:fa:9b:37:1b:23:82:a0:1d: 42:d5:4c:38:5e:3b:45:1b:1a:33:b9:44:e2:6d:a9: e8:d1:bf:f5:5a:0a:53:62:c2:c2:c6:90:98:ca:b8: ac:ac:fc:7e:8f:18:6c:b8:ad:af:b1:d6:af:39:53: bc:a4:4d:2d:f8:9f:89:ba:72:2a:6d:4b:28:ee:c8: 22:69:56:c0:56:3a:51:a4:99:07:09:8c:68:d9:48: 64:78:ed:c9:89:38:3e:20:bb:af:36:75:64:d5:e2: 1f:f4:42:a0:a3:c0:0b:23:ad:60:63:c9:99:1d:8c: 95:e2:2f:3f:e9:bd:e5:4e:91:e9:f2:40:a0:84:80: 63:9d:78:28:a2:0a:73:02:53:4f:91:32:d2:a9:3c: ff:7e:98:f4:16:54:ef:6e:53:5f:df:2b:fd:a1:38: 90:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:10:E8:19:50:BD:FD:83:FD:6E:C5:C0:AE:1C:4F:07:E9:61:59:59 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.128.32.0/23 IPv6: 2001:df6:cdc0::/48 Signature Algorithm: sha256WithRSAEncryption 14:83:2e:e7:b6:c2:62:f5:ee:0a:2b:a5:4a:8a:69:3e:c9:c9: 6d:9e:54:12:62:90:82:c1:80:e1:42:67:e2:8c:04:12:78:73: ff:1f:9f:83:5f:18:9c:f0:d9:28:6e:60:b7:94:c1:e8:56:5e: ed:88:a2:6b:28:6e:20:fd:eb:c1:3a:14:eb:d4:e4:7c:3b:64: 8a:5d:5b:50:73:20:8c:82:97:36:16:28:e8:50:11:df:84:e2: d8:f7:af:37:03:a0:e8:35:43:eb:a8:b8:ef:98:42:c4:59:3b: 5f:12:b3:92:33:a3:bc:fb:76:49:5d:30:51:dd:63:bb:51:dc: d6:55:65:ae:12:3b:7a:90:21:b1:c7:58:28:09:ad:e9:f7:cf: 25:a5:ed:c3:61:48:e3:c0:73:be:07:bf:59:4f:a6:cd:c6:15: 93:f7:d3:33:d0:14:28:cf:5e:a9:6e:3f:b9:53:79:dc:5e:ee: 0a:e0:18:00:45:77:ba:f9:39:62:ce:d1:ab:7a:14:59:93:d6: a8:cd:e5:02:e9:bf:62:8a:cc:50:55:d2:0c:51:f9:e0:34:51: 55:7a:c6:0b:ff:9c:18:71:e6:9f:19:c9:37:63:10:bd:51:51: 29:7e:ef:02:a0:19:26:30:d5:c4:d1:7a:33:69:9f:90:43:2b: 74:48:db:d4 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUfIqFPZ7WDMe/7jB4c9famB33T0swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQwNjAyNDQ1N1oX DTI3MDQwNTAyNDk1N1owMzExMC8GA1UEAxMoNDExMEU4MTk1MEJERkQ4M0ZENkVD NUMwQUUxQzRGMDdFOTYxNTk1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ+sLkWJN6p2foOkTo9kAnBUC9nbazEHeXO2GwUCvct34G9bLErQdgudYpt/ Tgr/cPbiUK5CbB7HQplFBxeQ1msiEAVXB/BCAbWO0E2JXZzlyfJvGHR/nXrTHqJx S3Rn0/qbNxsjgqAdQtVMOF47RRsaM7lE4m2p6NG/9VoKU2LCwsaQmMq4rKz8fo8Y bLitr7HWrzlTvKRNLfifibpyKm1LKO7IImlWwFY6UaSZBwmMaNlIZHjtyYk4PiC7 rzZ1ZNXiH/RCoKPACyOtYGPJmR2MleIvP+m95U6R6fJAoISAY514KKIKcwJTT5Ey 0qk8/36Y9BZU725TX98r/aE4kBcCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBRBEOgZ UL39g/1uxcCuHE8H6WFZWTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDUzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAaOAIDAPBAIAAjAJAwcAIAEN9s3AMA0GCSqGSIb3DQEBCwUAA4IB AQAUgy7ntsJi9e4KK6VKimk+ycltnlQSYpCCwYDhQmfijAQSeHP/H5+DXxic8Nko bmC3lMHoVl7tiKJrKG4g/evBOhTr1OR8O2SKXVtQcyCMgpc2FijoUBHfhOLY9683 A6DoNUPrqLjvmELEWTtfErOSM6O8+3ZJXTBR3WO7UdzWVWWuEjt6kCGxx1goCa3p 988lpe3DYUjjwHO+B79ZT6bNxhWT99Mz0BQoz16pbj+5U3ncXu4K4BgARXe6+Tli ztGrehRZk9aozeUC6b9iisxQVdIMUfngNFFVesYL/5wYceafGck3YxC9UVEpfu8C oBkmMNXE0XozaZ+QQyt0SNvU -----END CERTIFICATE-----Generated at Fri Apr 17 16:02:50 2026 by rpki-client