$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154627.roa File: AS154627.roa (raw, json) Hash identifier: nKMVwUDIWqrhld09pGsEhncb9V8EYGaKZSjNSiEdT5I= Subject key identifier: 27:48:63:8D:96:B4:10:46:15:EE:8C:64:92:4F:22:E3:4B:3A:6A:E2 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4BC5FDCDE3C03E65F1D1F6FBA8062165E7068566 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154627.roa Signing time: Thu 16 Apr 2026 04:01:47 +0000 ROA not before: Thu 16 Apr 2026 03:56:47 +0000 ROA not after: Thu 15 Apr 2027 04:01:47 +0000 asID: 154627 IP address blocks: 163.128.206.0/24 maxlen: 24 2001:df6:e840::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 00:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:c5:fd:cd:e3:c0:3e:65:f1:d1:f6:fb:a8:06:21:65:e7:06:85:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 16 03:56:47 2026 GMT Not After : Apr 15 04:01:47 2027 GMT Subject: CN=2748638D96B4104615EE8C64924F22E34B3A6AE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7b:39:4f:39:07:9b:be:68:04:7b:1b:78:49: d3:d7:91:b7:c9:ee:bd:58:28:67:dd:69:4d:25:a2: d2:6e:4a:c8:ec:4d:4a:84:56:95:8a:e5:26:c3:4c: 92:bc:63:3f:5e:04:35:86:95:6b:c8:45:36:57:30: cc:3f:37:50:aa:71:18:32:9e:7a:4f:b8:b2:b2:89: bc:1e:96:12:49:ed:2b:7e:29:72:30:2c:3e:89:e6: 6f:d4:79:73:a0:ff:1b:58:46:6e:3f:85:a9:3f:b3: 8f:9d:70:a0:6f:06:b3:e7:35:e7:ff:d5:79:ef:68: 5b:b7:2f:da:79:84:82:8b:ff:cf:33:72:a7:cc:92: a6:b9:6f:c1:ca:57:55:59:53:08:0c:dd:4d:e3:01: 9a:c8:4b:88:f0:ec:ad:ec:7a:42:60:eb:0f:78:69: 62:86:97:20:89:e7:a7:e6:29:d0:95:1a:f8:9b:de: 39:6a:11:43:7b:96:37:7e:20:be:b2:9d:ca:81:59: 92:01:da:ec:3f:f1:e1:c3:39:aa:af:e4:af:1a:e5: 4b:e4:53:14:63:06:0e:da:84:17:ec:14:34:0f:72: ab:0f:15:2b:c1:97:42:bf:b8:18:b8:4d:68:79:ef: c7:70:e6:03:3c:29:81:7c:28:b3:9d:8b:77:5e:9d: 62:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:48:63:8D:96:B4:10:46:15:EE:8C:64:92:4F:22:E3:4B:3A:6A:E2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154627.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.128.206.0/24 IPv6: 2001:df6:e840::/48 Signature Algorithm: sha256WithRSAEncryption 5a:e2:ac:31:9c:3b:b8:75:2c:1a:2b:4f:4a:50:48:ed:31:e8: f6:6b:c2:9f:6d:eb:c6:60:13:12:44:51:b4:9f:16:28:f5:ee: b6:51:cf:77:b4:5d:20:9f:3a:ad:c2:ab:39:e6:86:ce:c8:6f: 27:78:d3:18:71:6f:64:05:b5:58:02:69:3f:d1:ae:d0:49:68: 71:49:65:df:99:09:8b:53:e6:91:cf:1b:ad:8b:34:c9:70:83: 28:54:bb:c8:be:cc:e3:12:82:8d:21:e5:a3:31:4c:c8:0c:36: 45:e6:2b:a2:bd:21:10:2d:64:5e:9e:80:d8:a2:a0:a1:ac:25: ec:a5:a5:74:10:96:af:b8:8a:c1:f8:c9:f2:3b:77:f5:1a:b6: 53:68:a7:20:21:e0:00:23:fc:62:16:0d:68:39:1a:ae:cb:6c: 6f:00:09:5e:75:0d:10:3f:bb:4b:ca:fe:41:33:e0:f6:a6:4f: 33:2c:cd:5b:64:61:4d:4b:c1:48:39:3a:15:85:b8:c0:21:07: 50:da:77:4f:45:8e:fc:31:b0:fb:05:53:87:ab:4b:58:98:35: 90:2a:c6:7b:b0:14:3f:47:5a:6c:45:34:d7:56:50:93:b5:ac: bd:3c:34:0c:f5:53:a9:d8:fe:31:6e:9c:d5:ad:c0:5d:6c:13: 02:1e:7d:58 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUS8X9zePAPmXx0fb7qAYhZecGhWYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQxNjAzNTY0N1oX DTI3MDQxNTA0MDE0N1owMzExMC8GA1UEAxMoMjc0ODYzOEQ5NkI0MTA0NjE1RUU4 QzY0OTI0RjIyRTM0QjNBNkFFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ17OU85B5u+aAR7G3hJ09eRt8nuvVgoZ91pTSWi0m5KyOxNSoRWlYrlJsNM krxjP14ENYaVa8hFNlcwzD83UKpxGDKeek+4srKJvB6WEkntK34pcjAsPonmb9R5 c6D/G1hGbj+FqT+zj51woG8Gs+c15//Vee9oW7cv2nmEgov/zzNyp8ySprlvwcpX VVlTCAzdTeMBmshLiPDsrex6QmDrD3hpYoaXIInnp+Yp0JUa+JveOWoRQ3uWN34g vrKdyoFZkgHa7D/x4cM5qq/krxrlS+RTFGMGDtqEF+wUNA9yqw8VK8GXQr+4GLhN aHnvx3DmAzwpgXwos52Ld16dYrECAwEAAaOCAeEwggHdMB0GA1UdDgQWBBQnSGON lrQQRhXujGSSTyLjSzpq4jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1NDYyNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAKOAzjAPBAIAAjAJAwcAIAEN9uhAMA0GCSqGSIb3DQEBCwUAA4IB AQBa4qwxnDu4dSwaK09KUEjtMej2a8KfbevGYBMSRFG0nxYo9e62Uc93tF0gnzqt wqs55obOyG8neNMYcW9kBbVYAmk/0a7QSWhxSWXfmQmLU+aRzxutizTJcIMoVLvI vszjEoKNIeWjMUzIDDZF5iuivSEQLWRenoDYoqChrCXspaV0EJavuIrB+MnyO3f1 GrZTaKcgIeAAI/xiFg1oORquy2xvAAledQ0QP7tLyv5BM+D2pk8zLM1bZGFNS8FI OToVhbjAIQdQ2ndPRY78MbD7BVOHq0tYmDWQKsZ7sBQ/R1psRTTXVlCTtay9PDQM 9VOp2P4xbpzVrcBdbBMCHn1Y -----END CERTIFICATE-----Generated at Fri Apr 17 16:02:51 2026 by rpki-client