$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154596.roa File: AS154596.roa (raw, json) Hash identifier: YlXh7aHKkWOwz3IXZXI8Y5/x5w4Vd9AAJQSDQVmqu/U= Subject key identifier: F0:E7:EE:79:57:C7:DE:CF:F1:6D:A4:1F:26:BE:81:2C:0A:85:D2:07 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5E8423F18E3E32A66925445C21DCE8D5136B8B6C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154596.roa Signing time: Wed 08 Apr 2026 07:59:47 +0000 ROA not before: Wed 08 Apr 2026 07:54:47 +0000 ROA not after: Wed 07 Apr 2027 07:59:47 +0000 asID: 154596 IP address blocks: 163.128.160.0/23 maxlen: 24 2001:df6:e140::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 00:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:84:23:f1:8e:3e:32:a6:69:25:44:5c:21:dc:e8:d5:13:6b:8b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 8 07:54:47 2026 GMT Not After : Apr 7 07:59:47 2027 GMT Subject: CN=F0E7EE7957C7DECFF16DA41F26BE812C0A85D207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6e:8a:19:70:09:ab:1c:5b:d2:d4:63:a9:43: bd:1b:a1:0e:1e:8b:ec:8f:93:f6:f0:45:8a:6b:d1: d3:96:5f:fb:e5:32:01:0d:95:39:58:7a:8d:f4:14: 23:da:a1:47:26:13:1f:70:38:b1:b9:eb:54:d5:63: 05:f0:47:8e:fc:4e:cf:61:c6:6e:8c:4f:fd:da:ba: 24:bc:44:de:5f:2f:eb:e2:8e:1d:32:0a:51:f4:ab: c3:8a:7d:f0:3f:b4:fd:dc:92:4a:87:4e:77:b8:f9: 79:23:e4:b7:e9:f9:52:0a:77:1f:9a:c2:f9:61:e4: 97:ca:38:bd:47:be:66:19:90:e6:e1:d2:58:35:0a: 52:d8:8c:c7:bf:34:20:9b:0f:06:f8:97:19:7c:71: 36:9c:74:4c:01:d7:91:4d:d6:39:9b:42:3e:dd:cb: d7:9b:d7:2d:0e:9e:83:a1:ce:2d:70:00:86:13:1c: af:44:e2:ec:69:8b:7c:d5:0c:0e:9e:80:da:8a:d2: 10:e4:07:ab:4c:e8:d2:ac:3f:be:89:95:20:7c:ec: 44:47:a8:6f:fb:ed:5e:ff:e7:07:c1:53:4b:28:c7: 42:26:3f:92:5c:3d:6c:e0:2b:97:0a:19:fe:b4:0b: 07:a8:9b:5f:5c:86:37:cd:cd:92:6f:01:ae:d3:2e: 4b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E7:EE:79:57:C7:DE:CF:F1:6D:A4:1F:26:BE:81:2C:0A:85:D2:07 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154596.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.128.160.0/23 IPv6: 2001:df6:e140::/48 Signature Algorithm: sha256WithRSAEncryption 82:58:9c:77:cd:aa:b7:16:3f:82:bf:78:83:98:05:75:6e:1a: 17:1b:02:f5:27:a2:6f:5b:75:b9:9a:62:0c:67:19:c1:f8:ff: 8b:52:be:29:d7:76:fd:82:b5:47:e7:41:6d:d1:2b:f7:3a:bf: 4c:11:d7:25:cc:85:03:aa:d5:64:08:84:85:17:7f:c9:69:c2: d4:b0:88:c1:ee:cb:5d:e2:3e:33:00:37:2c:fb:5e:7b:19:6b: 38:46:b1:00:40:d3:f4:11:d2:aa:15:54:85:d2:51:fb:df:72: 33:e0:af:72:2d:e2:83:6b:a3:74:1d:2b:b9:20:3d:0c:89:44: ff:7c:58:26:36:37:71:f4:fc:1f:d2:9d:51:d3:49:ac:21:5f: df:6d:05:df:fb:95:8a:61:d4:ff:f0:dd:85:55:0e:17:78:14: 4c:84:d0:37:1c:23:c8:82:2c:df:19:ed:15:24:18:42:59:de: a8:38:f0:e6:95:18:a6:57:fb:db:7a:36:72:ba:99:cb:aa:ef: 51:c4:10:72:1d:68:39:4f:a6:14:0e:f6:5b:1e:3f:0f:2f:07: 22:6f:df:01:89:7d:fe:bb:36:00:7e:9a:a3:18:59:03:69:94: dc:72:41:2a:24:65:41:f7:e5:21:6f:9d:03:57:b1:98:e3:b3: 04:4f:b6:24 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUXoQj8Y4+MqZpJURcIdzo1RNri2wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQwODA3NTQ0N1oX DTI3MDQwNzA3NTk0N1owMzExMC8GA1UEAxMoRjBFN0VFNzk1N0M3REVDRkYxNkRB NDFGMjZCRTgxMkMwQTg1RDIwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1uihlwCascW9LUY6lDvRuhDh6L7I+T9vBFimvR05Zf++UyAQ2VOVh6jfQU I9qhRyYTH3A4sbnrVNVjBfBHjvxOz2HGboxP/dq6JLxE3l8v6+KOHTIKUfSrw4p9 8D+0/dySSodOd7j5eSPkt+n5Ugp3H5rC+WHkl8o4vUe+ZhmQ5uHSWDUKUtiMx780 IJsPBviXGXxxNpx0TAHXkU3WOZtCPt3L15vXLQ6eg6HOLXAAhhMcr0Ti7GmLfNUM Dp6A2orSEOQHq0zo0qw/vomVIHzsREeob/vtXv/nB8FTSyjHQiY/klw9bOArlwoZ /rQLB6ibX1yGN83Nkm8BrtMuS48CAwEAAaOCAeEwggHdMB0GA1UdDgQWBBTw5+55 V8fez/FtpB8mvoEsCoXSBzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDU5Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAaOAoDAPBAIAAjAJAwcAIAEN9uFAMA0GCSqGSIb3DQEBCwUAA4IB AQCCWJx3zaq3Fj+Cv3iDmAV1bhoXGwL1J6JvW3W5mmIMZxnB+P+LUr4p13b9grVH 50Ft0Sv3Or9MEdclzIUDqtVkCISFF3/JacLUsIjB7std4j4zADcs+157GWs4RrEA QNP0EdKqFVSF0lH733Iz4K9yLeKDa6N0HSu5ID0MiUT/fFgmNjdx9Pwf0p1R00ms IV/fbQXf+5WKYdT/8N2FVQ4XeBRMhNA3HCPIgizfGe0VJBhCWd6oOPDmlRimV/vb ejZyupnLqu9RxBByHWg5T6YUDvZbHj8PLwcib98BiX3+uzYAfpqjGFkDaZTcckEq JGVB9+Uhb50DV7GY47MET7Yk -----END CERTIFICATE-----Generated at Fri Apr 17 16:02:52 2026 by rpki-client