$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154681.roa File: AS154681.roa (raw, json) Hash identifier: uHM/JWH+VgETpXd6XdYGs8mWprMv9pYcZA0u5QoT+Sc= Subject key identifier: D3:75:09:F6:12:13:AC:6A:4A:70:A7:55:45:95:DD:27:F7:98:5A:45 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 03DC4FEF9BFCFF0098CF6B7C5E152540EC135CD8 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154681.roa Signing time: Wed 20 May 2026 06:47:31 +0000 ROA not before: Wed 20 May 2026 06:42:31 +0000 ROA not after: Wed 19 May 2027 06:47:31 +0000 asID: 154681 IP address blocks: 162.4.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:dc:4f:ef:9b:fc:ff:00:98:cf:6b:7c:5e:15:25:40:ec:13:5c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 20 06:42:31 2026 GMT Not After : May 19 06:47:31 2027 GMT Subject: CN=D37509F61213AC6A4A70A7554595DD27F7985A45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:fb:f6:fa:0d:fb:e5:37:dc:19:a0:9f:a8:ef: 8b:42:86:0b:86:d3:31:53:83:c7:e1:45:1e:42:26: 27:96:a7:89:8a:07:9b:50:8a:90:87:30:23:64:49: db:57:8f:ab:cc:a3:f7:90:b1:51:bc:dc:4d:20:a9: 93:27:68:4b:fb:c0:1b:c5:75:76:9e:e3:b3:d1:8b: 96:10:93:f7:33:94:c5:da:2a:56:88:ed:4f:a2:d6: 0c:fa:14:15:06:c0:4b:a7:27:ec:b9:85:63:9f:81: ef:b8:7a:26:19:17:0c:1b:4c:91:41:c6:bd:58:fb: 54:88:5e:11:c0:77:e7:c6:09:bd:a4:a7:71:e5:68: 31:7d:7a:b8:e7:b1:33:21:64:a8:41:23:ef:03:a2: 67:91:58:a0:42:8f:4e:81:86:d4:e7:49:1a:73:4e: cd:02:4f:de:51:b1:45:57:44:ca:c4:b9:17:02:da: 04:72:5d:53:d8:a2:bf:1e:b1:ad:ab:24:98:11:2b: 8c:59:60:92:61:1c:fa:81:fe:89:6e:b2:77:0c:0f: 77:76:24:1d:ad:c2:2d:69:fa:ac:91:37:76:fa:32: 82:61:3a:d9:e5:f7:8a:16:07:e8:54:99:b9:ec:b8: 66:e6:44:a0:65:5f:5b:eb:8a:f5:ea:25:f2:86:52: ec:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:75:09:F6:12:13:AC:6A:4A:70:A7:55:45:95:DD:27:F7:98:5A:45 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154681.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.127.0/24 Signature Algorithm: sha256WithRSAEncryption 48:50:b6:c5:c0:a5:48:1f:9a:3a:23:0b:dc:d7:c0:28:78:a1: 3d:f4:b0:ec:91:b8:8a:6d:08:05:5b:30:21:9c:34:97:1e:89: 20:65:a8:3c:1c:5c:42:60:3c:d9:be:35:ff:6d:8c:fb:f1:92: 81:de:48:95:7d:20:b9:10:05:11:1b:a8:a9:c7:18:db:cb:ec: 9a:8b:0d:ef:24:41:89:c7:09:61:27:22:47:27:fe:be:dc:33: aa:32:f4:eb:ca:15:ed:0a:e0:a3:25:be:9b:bc:99:8a:09:33: cd:93:64:d4:a4:eb:86:ee:fc:0b:b4:84:b7:f2:d9:f4:f9:97: 51:53:da:0c:86:17:3a:61:d9:89:bc:7a:eb:63:5a:75:e8:9d: 32:5b:8a:a3:64:9e:d0:a9:19:a7:4f:6c:67:dc:10:8f:67:91: ec:1b:dc:f7:e1:99:58:c4:d3:ac:53:fb:50:46:81:12:4e:ac: 5a:d8:58:59:57:9b:3f:78:2d:2a:a6:5c:f4:92:9a:e0:03:50: d4:a9:50:31:37:63:75:6b:d1:22:84:0b:48:77:f9:68:84:21: 24:10:98:7b:88:0e:78:43:a3:a7:5b:43:72:61:e6:1c:78:22: 9e:0c:bb:bb:dd:5f:72:86:99:94:2b:00:6f:a0:e5:bd:e8:5c: 0f:a1:ee:13 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUA9xP75v8/wCYz2t8XhUlQOwTXNgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUyMDA2NDIzMVoX DTI3MDUxOTA2NDczMVowMzExMC8GA1UEAxMoRDM3NTA5RjYxMjEzQUM2QTRBNzBB NzU1NDU5NUREMjdGNzk4NUE0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOz79voN++U33Bmgn6jvi0KGC4bTMVODx+FFHkImJ5aniYoHm1CKkIcwI2RJ 21ePq8yj95CxUbzcTSCpkydoS/vAG8V1dp7js9GLlhCT9zOUxdoqVojtT6LWDPoU FQbAS6cn7LmFY5+B77h6JhkXDBtMkUHGvVj7VIheEcB358YJvaSnceVoMX16uOex MyFkqEEj7wOiZ5FYoEKPToGG1OdJGnNOzQJP3lGxRVdEysS5FwLaBHJdU9iivx6x raskmBErjFlgkmEc+oH+iW6ydwwPd3YkHa3CLWn6rJE3dvoygmE62eX3ihYH6FSZ uey4ZuZEoGVfW+uK9eol8oZS7IcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTTdQn2 EhOsakpwp1VFld0n95haRTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NjgxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAogR/MA0GCSqGSIb3DQEBCwUAA4IBAQBIULbFwKVIH5o6Iwvc18AoeKE9 9LDskbiKbQgFWzAhnDSXHokgZag8HFxCYDzZvjX/bYz78ZKB3kiVfSC5EAURG6ip xxjby+yaiw3vJEGJxwlhJyJHJ/6+3DOqMvTryhXtCuCjJb6bvJmKCTPNk2TUpOuG 7vwLtIS38tn0+ZdRU9oMhhc6YdmJvHrrY1p16J0yW4qjZJ7QqRmnT2xn3BCPZ5Hs G9z34ZlYxNOsU/tQRoESTqxa2FhZV5s/eC0qplz0kprgA1DUqVAxN2N1a9EihAtI d/lohCEkEJh7iA54Q6OnW0NyYeYceCKeDLu73V9yhpmUKwBvoOW96FwPoe4T -----END CERTIFICATE-----Generated at Wed Jun 17 08:48:29 2026 by rpki-client