$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154583.roa File: AS154583.roa (raw, json) Hash identifier: WQ0ejh+6njBANH0jYHLomiR+WTCFBJI2hIlW1S8VTZw= Subject key identifier: 21:6C:8C:75:9E:33:62:62:34:B2:0F:D0:35:C6:E9:40:89:F9:9D:66 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2739769ABFBCF853DC6D9CBC258BFDBF62058A54 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154583.roa Signing time: Thu 02 Apr 2026 08:54:43 +0000 ROA not before: Thu 02 Apr 2026 08:49:43 +0000 ROA not after: Thu 01 Apr 2027 08:54:43 +0000 asID: 154583 IP address blocks: 163.128.136.0/23 maxlen: 24 2001:df6:dc40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 00:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:39:76:9a:bf:bc:f8:53:dc:6d:9c:bc:25:8b:fd:bf:62:05:8a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 2 08:49:43 2026 GMT Not After : Apr 1 08:54:43 2027 GMT Subject: CN=216C8C759E33626234B20FD035C6E94089F99D66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:14:c5:f4:2a:b4:41:32:fa:56:5a:96:51:65: 80:fd:75:96:2f:28:9e:2c:c5:fb:ab:7a:23:3d:d6: 44:5e:5d:28:4a:8a:5d:e0:d6:1c:65:b8:11:ce:9c: 74:30:40:9e:fb:e1:49:b0:83:d5:ce:49:9d:c3:2e: 08:ef:d1:38:56:87:94:20:00:50:ba:c5:28:8c:14: b5:43:9e:d4:a4:59:19:79:a2:c4:88:0c:9b:b8:83: 2f:e8:8c:f7:23:49:0a:02:7f:eb:90:5d:62:6e:3c: d1:76:fc:eb:a6:8c:5e:d9:d8:f7:bb:88:55:2e:1a: 3a:f5:99:0f:12:e5:3b:c8:7e:84:fb:d6:1b:5d:6f: cb:e1:d0:14:3c:cd:c3:b4:cd:44:91:d4:37:69:00: 7d:85:82:bc:ae:cb:3b:50:ea:f1:7c:43:9d:73:ff: bd:08:97:f8:11:55:73:a4:75:6f:89:0d:36:6e:da: 92:f0:89:85:09:22:05:bb:4b:c0:66:70:c8:d6:f3: 8a:cb:9e:89:92:a5:ba:dd:5c:60:d0:51:c3:d1:a7: c0:6c:b0:dc:db:34:9d:47:0c:5d:b7:8d:9e:ca:4e: e1:f9:6b:8a:d0:83:37:97:0c:cb:0c:80:d6:93:df: 64:50:e1:be:5c:41:09:cf:20:c8:14:d0:ba:5d:05: 78:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6C:8C:75:9E:33:62:62:34:B2:0F:D0:35:C6:E9:40:89:F9:9D:66 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154583.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.128.136.0/23 IPv6: 2001:df6:dc40::/48 Signature Algorithm: sha256WithRSAEncryption 2c:9c:ad:36:bc:b0:19:5f:c4:cd:05:54:4d:12:8f:e4:de:8d: 30:78:32:2e:c4:11:09:a8:94:60:8b:62:db:9e:4a:48:7c:05: 52:18:a3:fa:d2:7e:1e:77:91:8c:14:d9:e3:2e:63:89:e7:28: 7f:fe:e3:96:27:ad:d7:d0:60:e9:03:69:84:0e:58:06:ea:2c: 78:1e:9b:5b:d0:98:18:7d:eb:e2:2e:ae:27:f0:df:4a:c1:93: 07:68:a2:ee:08:bd:91:44:02:89:96:9f:e3:ba:75:b3:d0:54: 20:71:40:6a:05:38:f2:30:9f:43:07:c3:52:81:6d:5d:59:95: 6a:00:04:02:df:0c:57:d0:86:cb:94:77:c8:9c:f5:ea:fc:6f: c3:06:05:b2:da:7d:d7:6c:ed:9b:4a:88:a1:69:10:12:49:64: 71:d9:26:4f:25:d7:39:75:f5:3b:e6:3a:1e:f0:bb:46:50:15: a7:01:b7:41:16:24:fe:53:c0:a6:c2:05:bb:b1:5d:80:ad:76: 3c:b8:13:de:11:fd:7c:86:fe:c4:1f:2a:3e:d4:3a:dd:92:15: b4:f3:f8:b1:dc:51:45:b6:d9:b9:3c:d1:36:08:04:bd:af:7c: 26:72:1c:36:bd:43:d2:0c:36:c3:c7:d5:50:54:b0:6c:32:f3: ee:66:1c:a6 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUJzl2mr+8+FPcbZy8JYv9v2IFilQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQwMjA4NDk0M1oX DTI3MDQwMTA4NTQ0M1owMzExMC8GA1UEAxMoMjE2QzhDNzU5RTMzNjI2MjM0QjIw RkQwMzVDNkU5NDA4OUY5OUQ2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM0UxfQqtEEy+lZallFlgP11li8onizF+6t6Iz3WRF5dKEqKXeDWHGW4Ec6c dDBAnvvhSbCD1c5JncMuCO/ROFaHlCAAULrFKIwUtUOe1KRZGXmixIgMm7iDL+iM 9yNJCgJ/65BdYm480Xb866aMXtnY97uIVS4aOvWZDxLlO8h+hPvWG11vy+HQFDzN w7TNRJHUN2kAfYWCvK7LO1Dq8XxDnXP/vQiX+BFVc6R1b4kNNm7akvCJhQkiBbtL wGZwyNbzisueiZKlut1cYNBRw9GnwGyw3Ns0nUcMXbeNnspO4flritCDN5cMywyA 1pPfZFDhvlxBCc8gyBTQul0FeIUCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBQhbIx1 njNiYjSyD9A1xulAifmdZjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDU4My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAaOAiDAPBAIAAjAJAwcAIAEN9txAMA0GCSqGSIb3DQEBCwUAA4IB AQAsnK02vLAZX8TNBVRNEo/k3o0weDIuxBEJqJRgi2LbnkpIfAVSGKP60n4ed5GM FNnjLmOJ5yh//uOWJ63X0GDpA2mEDlgG6ix4Hptb0JgYfeviLq4n8N9KwZMHaKLu CL2RRAKJlp/junWz0FQgcUBqBTjyMJ9DB8NSgW1dWZVqAAQC3wxX0IbLlHfInPXq /G/DBgWy2n3XbO2bSoihaRASSWRx2SZPJdc5dfU75joe8LtGUBWnAbdBFiT+U8Cm wgW7sV2ArXY8uBPeEf18hv7EHyo+1DrdkhW08/ix3FFFttm5PNE2CAS9r3wmchw2 vUPSDDbDx9VQVLBsMvPuZhym -----END CERTIFICATE-----Generated at Fri Apr 17 16:02:53 2026 by rpki-client