$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154555.roa File: AS154555.roa (raw, json) Hash identifier: zEXtR6Z8wqygbRCfOlNBP29SOkjEjyNcQ/dcsA+GwPY= Subject key identifier: C2:35:3E:13:22:82:6F:41:8F:0B:07:31:48:A2:F8:22:63:E6:E6:02 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1BA3C9C06E6EF370872C6D08299D6A225D4E9500 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154555.roa Signing time: Tue 07 Apr 2026 07:09:32 +0000 ROA not before: Tue 07 Apr 2026 07:04:32 +0000 ROA not after: Tue 06 Apr 2027 07:09:32 +0000 asID: 154555 IP address blocks: 163.128.11.0/24 maxlen: 24 2001:df6:c8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 00:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a3:c9:c0:6e:6e:f3:70:87:2c:6d:08:29:9d:6a:22:5d:4e:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 7 07:04:32 2026 GMT Not After : Apr 6 07:09:32 2027 GMT Subject: CN=C2353E1322826F418F0B073148A2F82263E6E602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:11:d5:16:78:10:8a:7f:90:f4:b0:59:3c:fb: 67:3d:5d:a3:8e:20:3e:87:23:bc:99:1c:ce:98:3c: 00:10:1e:cf:06:60:16:d2:a2:e3:b8:fb:bb:c9:3f: 25:a2:a0:db:33:57:16:87:c2:b9:e1:76:d3:f3:19: 63:06:7e:bb:44:44:ed:f1:57:fb:00:bc:ff:56:b2: 7c:94:ff:f8:c3:b8:4a:03:97:50:85:5f:b2:34:09: 42:5e:2c:70:1f:0d:e9:df:b1:e4:06:7f:2a:05:66: e4:12:a4:46:b6:06:95:d7:b8:d8:a6:b6:f1:5f:05: 38:21:f9:a9:c4:d7:70:a3:85:81:bc:82:4b:6a:a9: 67:4a:b5:cc:10:bc:b4:57:40:b2:e6:15:98:dc:1e: 13:62:65:c1:0a:d2:ab:dc:a3:50:e3:83:62:e0:cb: 7a:7e:fc:5f:d1:be:0f:c2:9d:be:6f:08:b4:43:fb: aa:e8:f4:81:d1:21:92:28:7e:17:c9:a9:3d:b8:b5: 56:5d:08:86:42:fe:fa:63:c8:c8:23:8c:3e:e2:f5: 49:e4:2b:b9:30:8c:53:3a:35:bb:68:b5:90:2d:f7: 74:c6:dc:96:c8:df:09:ee:e1:a6:04:8e:42:b3:8a: ab:fb:74:6c:96:b7:42:b8:4b:33:a2:75:96:96:ee: 9d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:35:3E:13:22:82:6F:41:8F:0B:07:31:48:A2:F8:22:63:E6:E6:02 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154555.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.128.11.0/24 IPv6: 2001:df6:c8c0::/48 Signature Algorithm: sha256WithRSAEncryption 25:c8:c2:e2:5f:37:ed:58:13:20:e2:e4:24:cc:e2:7d:27:88: 54:5e:6b:43:b7:d8:4a:ec:d9:f2:04:9a:f1:a1:ea:76:72:a0: 6a:c4:d0:97:8f:51:55:a7:e0:56:a9:1e:b1:78:2b:29:4f:9e: c3:35:81:36:48:3c:3e:08:63:d6:58:1d:4e:44:45:97:da:66: 98:32:5e:62:05:48:3b:18:18:46:26:f1:bd:6b:85:a6:2e:c4: 53:7d:be:eb:e3:f4:6d:26:b9:ea:ce:8b:68:69:31:41:b7:9b: 8f:87:41:cc:67:f8:b4:e2:39:a1:6e:59:87:28:a8:32:48:13: 64:f4:2a:17:71:51:a7:73:85:94:17:b5:8a:d1:72:30:b3:09: e1:5f:46:82:0c:09:4c:ff:24:c3:f5:f8:ce:58:24:f4:04:c0: 2a:26:c4:b9:6c:40:01:8d:91:f6:74:f3:17:8a:92:c5:7e:4f: a3:a5:d0:7b:63:40:1b:0d:dc:6c:f8:d5:88:31:20:b1:f1:2c: b2:8f:76:32:cc:4c:d0:dc:98:7f:74:8d:09:38:65:32:9b:41: bf:46:e3:46:95:ec:45:2e:22:ea:01:b0:80:8f:67:2f:c8:dc: 2e:dc:dd:83:d1:22:59:86:0f:ab:55:9e:0e:ee:fc:16:6c:38: f0:a5:a7:ea -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUG6PJwG5u83CHLG0IKZ1qIl1OlQAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQwNzA3MDQzMloX DTI3MDQwNjA3MDkzMlowMzExMC8GA1UEAxMoQzIzNTNFMTMyMjgyNkY0MThGMEIw NzMxNDhBMkY4MjI2M0U2RTYwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALQR1RZ4EIp/kPSwWTz7Zz1do44gPocjvJkczpg8ABAezwZgFtKi47j7u8k/ JaKg2zNXFofCueF20/MZYwZ+u0RE7fFX+wC8/1ayfJT/+MO4SgOXUIVfsjQJQl4s cB8N6d+x5AZ/KgVm5BKkRrYGlde42Ka28V8FOCH5qcTXcKOFgbyCS2qpZ0q1zBC8 tFdAsuYVmNweE2JlwQrSq9yjUOODYuDLen78X9G+D8Kdvm8ItEP7quj0gdEhkih+ F8mpPbi1Vl0IhkL++mPIyCOMPuL1SeQruTCMUzo1u2i1kC33dMbclsjfCe7hpgSO QrOKq/t0bJa3QrhLM6J1lpbunfsCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBTCNT4T IoJvQY8LBzFIovgiY+bmAjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDU1NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAKOACzAPBAIAAjAJAwcAIAEN9sjAMA0GCSqGSIb3DQEBCwUAA4IB AQAlyMLiXzftWBMg4uQkzOJ9J4hUXmtDt9hK7NnyBJrxoep2cqBqxNCXj1FVp+BW qR6xeCspT57DNYE2SDw+CGPWWB1OREWX2maYMl5iBUg7GBhGJvG9a4WmLsRTfb7r 4/RtJrnqzotoaTFBt5uPh0HMZ/i04jmhblmHKKgySBNk9CoXcVGnc4WUF7WK0XIw swnhX0aCDAlM/yTD9fjOWCT0BMAqJsS5bEABjZH2dPMXipLFfk+jpdB7Y0AbDdxs +NWIMSCx8Syyj3YyzEzQ3Jh/dI0JOGUym0G/RuNGlexFLiLqAbCAj2cvyNwu3N2D 0SJZhg+rVZ4O7vwWbDjwpafq -----END CERTIFICATE-----Generated at Fri Apr 17 16:02:52 2026 by rpki-client